Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/wQ9s7ZCNSMwgNT8z2CTKme5VowY.roa
File: wQ9s7ZCNSMwgNT8z2CTKme5VowY.roa (raw, json)
Hash identifier: DvxarlyQ3L7NaIPzVWxQXEvfGNCzxYk8/dico+SF/u0=
Subject key identifier: C1:0F:6C:ED:90:8D:48:CC:20:35:3F:33:D8:24:CA:99:EE:55:A3:06
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D5AB18A8E589936B8A42719414C329
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/wQ9s7ZCNSMwgNT8z2CTKme5VowY.roa
Signing time: Wed 01 Jan 2025 07:47:41 +0000
ROA not before: Wed 01 Jan 2025 07:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 27822
IP address blocks: 194.2.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ab:18:a8:e5:89:93:6b:8a:42:71:94:14:c3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c10f6ced908d48cc20353f33d824ca99ee55a306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:4b:cd:82:e5:12:76:34:8c:c4:74:d3:51:
11:4c:49:65:28:34:90:69:db:75:9c:7e:56:1b:b2:
41:0e:d4:3d:e6:f5:f1:a3:e2:d7:1d:88:bf:ab:77:
ba:33:cf:81:01:1c:28:01:44:b1:8a:48:3a:68:5c:
ba:c1:2c:9f:cc:65:29:00:50:47:b2:c3:43:3e:d8:
75:a1:76:4e:30:72:12:ae:85:58:b6:68:ff:f5:96:
e1:63:15:6b:96:5b:86:30:20:ec:b0:ee:ab:f8:cc:
80:e1:15:aa:9e:d3:1a:f2:cc:7d:d6:b6:ba:cd:91:
b9:30:58:25:1e:93:b0:bf:40:c7:eb:58:4d:5e:87:
d3:ad:e9:90:5d:a4:37:60:5f:76:3f:69:97:ab:ac:
ce:ed:b7:b3:2e:15:e7:ed:20:d5:73:d7:de:d8:70:
42:4a:f1:81:b5:1a:4d:f5:e3:d0:e5:03:58:b0:18:
ca:2d:2b:f0:b9:9e:97:2d:40:c5:cb:ba:50:bc:46:
4e:e8:4f:3b:bc:a3:f4:f9:38:86:1e:ba:1d:6b:29:
ac:42:8f:23:6e:b3:f4:30:c2:ba:94:ea:e8:ed:6a:
be:ee:ea:81:6c:db:4b:a1:08:78:6e:f2:78:e4:bb:
40:c3:9e:2b:cc:0f:ad:a8:83:13:30:0c:14:33:27:
22:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0F:6C:ED:90:8D:48:CC:20:35:3F:33:D8:24:CA:99:EE:55:A3:06
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/wQ9s7ZCNSMwgNT8z2CTKme5VowY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.2.69.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ea:4a:0c:4d:dc:19:49:65:b5:bb:4e:f2:07:61:0c:77:fb:
b3:0b:89:5d:8d:ec:28:85:eb:35:e4:fa:79:55:98:25:be:c9:
52:cb:9b:f2:d9:22:23:1a:9e:58:ef:44:53:ca:04:72:c1:40:
a4:61:06:c3:13:d3:ba:1f:f9:a4:55:16:5b:30:6e:5d:ed:ab:
3b:65:6c:7a:04:4c:01:6e:08:d6:cc:f1:f8:4f:88:e1:3b:6d:
f5:10:7a:2a:66:be:a4:e6:00:a2:28:31:c8:94:73:af:b0:48:
1f:a5:de:3a:f5:e5:0c:6c:23:fa:4a:65:40:2c:28:d7:d2:cc:
99:d3:b4:56:de:4b:4e:f8:16:6b:bb:cb:12:ba:5a:44:be:50:
d6:7c:a5:f6:5b:54:e8:02:2b:6a:ef:92:20:a8:74:92:09:f9:
e1:62:78:7b:de:99:db:7e:ee:54:21:4f:47:b9:f2:a7:f0:10:
e1:9d:74:f6:6b:b5:64:cd:86:c3:84:65:67:f6:85:a0:0b:9c:
19:ce:b8:8c:8a:e4:a0:9b:89:6a:a1:de:3b:36:d7:74:df:b3:
ff:da:a7:60:32:16:6f:f7:36:12:95:7c:ab:06:3c:6d:78:44:
53:12:14:8d:eb:16:15:77:2e:af:92:88:ef:b4:d1:51:d3:4d:
52:e7:66:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1asYqOWJk2uKQnGUFMMpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjUwMTAxMDc0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTBmNmNlZDkwOGQ0OGNjMjAzNTNmMzNkODI0Y2E5OWVlNTVhMzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR9LzYLlEnY0jMR001ERTEllKDSQ
adt1nH5WG7JBDtQ95vXxo+LXHYi/q3e6M8+BARwoAUSxikg6aFy6wSyfzGUpAFBH
ssNDPth1oXZOMHISroVYtmj/9ZbhYxVrlluGMCDssO6r+MyA4RWqntMa8sx91ra6
zZG5MFglHpOwv0DH61hNXofTremQXaQ3YF92P2mXq6zO7bezLhXn7SDVc9fe2HBC
SvGBtRpN9ePQ5QNYsBjKLSvwuZ6XLUDFy7pQvEZO6E87vKP0+TiGHrodaymsQo8j
brP0MMK6lOro7Wq+7uqBbNtLoQh4bvJ45LtAw54rzA+tqIMTMAwUMyciFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMEPbO2QjUjMIDU/M9gkypnuVaMGMB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvd1E5czdaQ05TTXdnTlQ4ejJDVEttZTVWb3dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgJFMA0G
CSqGSIb3DQEBCwUAA4IBAQBX6koMTdwZSWW1u07yB2EMd/uzC4ldjewohes15Pp5
VZglvslSy5vy2SIjGp5Y70RTygRywUCkYQbDE9O6H/mkVRZbMG5d7as7ZWx6BEwB
bgjWzPH4T4jhO231EHoqZr6k5gCiKDHIlHOvsEgfpd469eUMbCP6SmVALCjX0syZ
07RW3ktO+BZru8sSulpEvlDWfKX2W1ToAitq75IgqHSSCfnhYnh73pnbfu5UIU9H
ufKn8BDhnXT2a7VkzYbDhGVn9oWgC5wZzriMiuSgm4lqod47Ntd037P/2qdgMhZv
9zYSlXyrBjxteERTEhSN6xYVdy6vkojvtNFR001S52YD
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:52:57 2025 by rpki-client