Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/w6m4oMJeiLn2T3m3LP8pqzAnTQw.roa
File: w6m4oMJeiLn2T3m3LP8pqzAnTQw.roa (raw, json)
Hash identifier: 8lTNAlZen7HjuRJ2IbBbtSJoygdDSQvxjXXFZis+Axs=
Subject key identifier: C3:A9:B8:A0:C2:5E:88:B9:F6:4F:79:B7:2C:FF:29:AB:30:27:4D:0C
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B671CF32592A2F3BCB193C84DE2D7F
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/w6m4oMJeiLn2T3m3LP8pqzAnTQw.roa
Signing time: Thu 02 Jan 2025 15:50:55 +0000
ROA not before: Thu 02 Jan 2025 15:50:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 852
IP address blocks: 2.22.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:71:cf:32:59:2a:2f:3b:cb:19:3c:84:de:2d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:50:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3a9b8a0c25e88b9f64f79b72cff29ab30274d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c8:b8:2c:0a:48:55:d4:71:30:85:86:dd:90:
1e:9c:ff:d3:bf:4b:c3:4d:27:b7:cc:11:40:7f:50:
55:4f:b4:23:e3:21:54:5e:0f:ed:57:d3:bc:e5:51:
dc:e1:9e:aa:45:8e:24:45:54:1b:ff:9c:e8:de:62:
b2:02:00:23:4d:ea:07:2b:7f:0c:35:01:ab:ef:86:
d4:fe:58:17:e7:8d:e0:57:d5:88:89:78:6d:ed:20:
3f:c1:c0:bc:d7:71:f1:e1:3b:aa:9d:17:c7:9e:f7:
03:fb:d7:3b:d1:2b:de:c8:98:a6:31:12:14:82:4a:
72:33:6c:17:0e:f9:eb:7f:92:e1:e0:8f:9f:1e:f0:
d8:d9:fa:3e:15:4c:01:af:68:b9:d7:de:73:37:d0:
80:c1:3b:68:97:da:b5:36:3a:ab:be:84:a1:ac:2d:
48:48:1a:0b:f3:c2:a7:eb:8d:78:c4:cf:9f:37:2d:
55:14:5f:94:60:85:4b:bf:75:af:82:0c:78:e1:c1:
21:89:72:87:e4:f6:43:5a:cd:7c:99:bd:74:f0:f4:
7d:05:6e:ba:8c:cf:05:92:a1:36:99:e8:61:67:d8:
3b:95:9d:34:01:4e:03:b5:bd:92:2c:a9:e4:4a:fd:
86:f4:7d:d3:b2:e2:42:98:39:ac:d2:d6:88:32:1a:
be:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A9:B8:A0:C2:5E:88:B9:F6:4F:79:B7:2C:FF:29:AB:30:27:4D:0C
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/w6m4oMJeiLn2T3m3LP8pqzAnTQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.22.72.0/22
Signature Algorithm: sha256WithRSAEncryption
01:ce:c6:84:e7:d0:02:75:a1:8b:37:14:2c:18:30:1d:49:9e:
eb:0c:d3:0a:9b:63:2d:fb:89:f5:08:f5:28:13:4d:1a:60:f3:
0e:3c:84:2c:1e:3e:b9:71:b9:b3:d7:16:6e:df:e1:f1:ba:f3:
b3:c4:f6:73:f3:ad:57:de:ad:a2:09:2a:e9:68:22:82:a0:ec:
1b:8b:d3:6d:75:25:57:5b:27:66:1f:ab:ed:40:4d:54:2e:a2:
e6:50:46:b0:27:30:89:ec:24:15:6a:48:e3:f5:da:0b:23:7c:
dd:ca:87:f7:73:5a:b4:9d:2e:d9:4d:0c:f5:28:29:a5:d2:e0:
4c:bf:3c:3e:01:18:c0:56:39:24:85:60:74:76:06:db:73:aa:
74:12:f1:7f:21:3d:55:9b:02:85:eb:b9:12:7b:3a:ca:e8:07:
c8:da:65:95:22:cf:3c:3f:58:39:a7:40:4f:76:ed:e8:52:4a:
20:6c:76:81:ba:3b:e9:54:d3:b2:73:6e:92:56:09:8a:b1:d5:
58:20:70:c8:54:f1:67:5b:69:24:62:96:ad:f5:7d:b5:b3:cb:
fd:74:ac:f7:f7:02:6f:ef:bc:68:2b:6e:3e:44:19:ea:92:28:
79:51:69:f7:b6:cf:0a:f6:6c:ce:c2:5b:66:a9:5e:fa:71:a4:
09:3d:8d:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntnHPMlkqLzvLGTyE3i1/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjUwMTAyMTU1MDU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2E5YjhhMGMyNWU4OGI5ZjY0Zjc5YjcyY2ZmMjlhYjMwMjc0ZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsi4LApIVdRxMIWG3ZAenP/Tv0vD
TSe3zBFAf1BVT7Qj4yFUXg/tV9O85VHc4Z6qRY4kRVQb/5zo3mKyAgAjTeoHK38M
NQGr74bU/lgX543gV9WIiXht7SA/wcC813Hx4TuqnRfHnvcD+9c70SveyJimMRIU
gkpyM2wXDvnrf5Lh4I+fHvDY2fo+FUwBr2i5195zN9CAwTtol9q1NjqrvoShrC1I
SBoL88Kn6414xM+fNy1VFF+UYIVLv3Wvggx44cEhiXKH5PZDWs18mb108PR9BW66
jM8FkqE2mehhZ9g7lZ00AU4Dtb2SLKnkSv2G9H3TsuJCmDms0taIMhq+qQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMOpuKDCXoi59k95tyz/KaswJ00MMB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvdzZtNG9NSmVpTG4yVDNtM0xQOHBxekFuVFF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCAhZIMA0G
CSqGSIb3DQEBCwUAA4IBAQABzsaE59ACdaGLNxQsGDAdSZ7rDNMKm2Mt+4n1CPUo
E00aYPMOPIQsHj65cbmz1xZu3+HxuvOzxPZz861X3q2iCSrpaCKCoOwbi9NtdSVX
WydmH6vtQE1ULqLmUEawJzCJ7CQVakjj9doLI3zdyof3c1q0nS7ZTQz1KCml0uBM
vzw+ARjAVjkkhWB0dgbbc6p0EvF/IT1VmwKF67kSezrK6AfI2mWVIs88P1g5p0BP
du3oUkogbHaBujvpVNOyc26SVgmKsdVYIHDIVPFnW2kkYpat9X21s8v9dKz39wJv
77xoK24+RBnqkih5UWn3ts8K9mzOwltmqV76caQJPY2h
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:56 2025 by rpki-client