Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/WreWuZJfkWBxwDB7sw_Z_TY4XYw.roa
File: WreWuZJfkWBxwDB7sw_Z_TY4XYw.roa (raw, json)
Hash identifier: n68x6zDIsG/pxNn1FrRFr/BzmrPlsUzqhmjkdIhRgK4=
Subject key identifier: 5A:B7:96:B9:92:5F:91:60:71:C0:30:7B:B3:0F:D9:FD:36:38:5D:8C
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 018CC80187F4B564C41F7A6399B95D0428D9
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/WreWuZJfkWBxwDB7sw_Z_TY4XYw.roa
Signing time: Tue 02 Jan 2024 02:29:52 +0000
ROA not before: Tue 02 Jan 2024 02:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207442
IP address blocks: 94.231.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:87:f4:b5:64:c4:1f:7a:63:99:b9:5d:04:28:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: Jan 2 02:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ab796b9925f916071c0307bb30fd9fd36385d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:91:22:dc:7d:d9:d3:86:9b:42:14:c9:8d:5c:
6e:5a:0c:2c:b8:0c:cb:89:98:17:98:a8:54:78:b5:
ed:29:ea:15:9f:1c:b0:82:8d:2a:91:fb:4d:b4:8e:
c3:c3:37:c0:94:24:e9:b7:b2:5b:59:91:22:ec:ac:
21:d5:80:4c:12:72:a0:13:80:aa:ec:9a:cc:b0:c2:
22:2b:c2:91:04:82:ee:d3:a2:e6:97:f5:2c:a7:72:
ce:d7:c2:d3:40:af:ac:ce:a5:7d:6b:0c:39:86:56:
e3:24:ac:0b:56:2d:11:fb:fd:66:6f:a9:a5:77:6a:
55:30:84:a4:57:1c:71:97:e8:76:2d:db:ad:33:0e:
88:ef:05:47:d5:d0:73:34:e7:32:cd:80:86:9a:54:
41:6e:88:45:91:b6:9c:17:07:90:17:7e:fd:ef:35:
80:25:c5:82:e5:2b:f9:49:b0:ee:e9:cc:e5:08:62:
15:4a:c7:4e:be:c7:84:ce:99:56:1f:cf:81:de:45:
70:bb:b8:a8:5e:9e:4c:e2:95:58:0e:3a:4f:e2:f0:
9c:e2:58:39:b7:3a:35:1d:8a:8b:29:b0:9e:ae:63:
d9:b3:3b:94:16:da:47:b5:e2:09:40:e5:7f:65:ed:
33:3c:70:d7:23:67:e5:8b:65:34:c1:58:af:b2:40:
2c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B7:96:B9:92:5F:91:60:71:C0:30:7B:B3:0F:D9:FD:36:38:5D:8C
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/WreWuZJfkWBxwDB7sw_Z_TY4XYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.199.0/24
Signature Algorithm: sha256WithRSAEncryption
15:bf:e9:66:a0:5a:ed:5f:67:ca:5c:1f:43:f3:9e:c7:56:db:
02:4a:6b:2a:7a:c6:67:71:e7:5b:c8:1e:61:e6:3e:a9:bf:a2:
44:2f:aa:97:eb:65:b0:75:22:cb:80:69:33:d1:01:25:c5:c8:
a0:07:8a:07:70:a6:bb:cc:35:07:54:69:5a:c1:5d:1a:be:c4:
05:25:48:04:c1:42:5c:2d:91:28:e8:1f:53:8c:af:b6:27:31:
1f:af:c6:f4:59:bf:52:df:2d:ba:f6:5f:03:8d:c3:a3:d1:ae:
65:fa:79:42:c1:99:b6:19:98:7d:3b:14:0b:dd:46:c9:16:2b:
7b:98:83:35:be:7f:d9:31:23:8d:0d:97:ee:00:3f:87:78:03:
82:c1:3e:3e:d2:bf:d3:8d:23:93:6b:ae:c4:fa:9d:32:7d:e0:
f2:02:d1:80:61:84:4a:e4:db:57:52:e2:0b:e5:e4:b3:b5:be:
62:ba:35:54:2f:b2:fd:67:cc:43:5c:3c:50:31:13:c2:dc:90:
4d:91:0e:53:9d:10:a8:88:7f:f5:88:fe:d4:02:ec:69:06:b9:
bf:48:ef:4a:0a:72:a7:82:76:96:23:61:9c:e4:19:93:6c:29:
8f:31:b4:7f:83:2f:8e:6b:1c:18:1b:44:24:ae:0d:75:62:6e:
74:eb:46:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAYf0tWTEH3pjmbldBCjZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkM2Q2MjdjMjk3ZmU1NDJkODM1OWE4NmQ4ZTJmOWViZDk1
NjVhODEwHhcNMjQwMTAyMDIyOTUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWI3OTZiOTkyNWY5MTYwNzFjMDMwN2JiMzBmZDlmZDM2Mzg1ZDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZEi3H3Z04abQhTJjVxuWgwsuAzL
iZgXmKhUeLXtKeoVnxywgo0qkftNtI7DwzfAlCTpt7JbWZEi7Kwh1YBMEnKgE4Cq
7JrMsMIiK8KRBILu06Lml/Usp3LO18LTQK+szqV9aww5hlbjJKwLVi0R+/1mb6ml
d2pVMISkVxxxl+h2LdutMw6I7wVH1dBzNOcyzYCGmlRBbohFkbacFweQF3797zWA
JcWC5Sv5SbDu6czlCGIVSsdOvseEzplWH8+B3kVwu7ioXp5M4pVYDjpP4vCc4lg5
tzo1HYqLKbCermPZszuUFtpHteIJQOV/Ze0zPHDXI2fli2U0wVivskAs3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFq3lrmSX5FgccAwe7MP2f02OF2MMB8GA1UdIwQY
MBaAFJ09Ynwpf+VC2DWahtji+evZVlqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgt
MTVlYTMzN2E3ODQwLzEvV3JlV3VaSmZrV0J4d0RCN3N3X1pfVFk0WFl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgtMTVlYTMzN2E3ODQw
LzEvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXufHMA0G
CSqGSIb3DQEBCwUAA4IBAQAVv+lmoFrtX2fKXB9D857HVtsCSmsqesZncedbyB5h
5j6pv6JEL6qX62WwdSLLgGkz0QElxcigB4oHcKa7zDUHVGlawV0avsQFJUgEwUJc
LZEo6B9TjK+2JzEfr8b0Wb9S3y269l8DjcOj0a5l+nlCwZm2GZh9OxQL3UbJFit7
mIM1vn/ZMSONDZfuAD+HeAOCwT4+0r/TjSOTa67E+p0yfeDyAtGAYYRK5NtXUuIL
5eSztb5iujVUL7L9Z8xDXDxQMRPC3JBNkQ5TnRCoiH/1iP7UAuxpBrm/SO9KCnKn
gnaWI2Gc5BmTbCmPMbR/gy+OaxwYG0Qkrg11Ym5060a+
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:55 2025 by rpki-client