Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/wwk7jEvd5L4YZES1E9puWxeNbgI.roa
File: wwk7jEvd5L4YZES1E9puWxeNbgI.roa (raw, json)
Hash identifier: lBMJB934mzmC5MKmNtcjd0YdBXtrbY3Uex1I8nAQBqM=
Subject key identifier: C3:09:3B:8C:4B:DD:E4:BE:18:64:44:B5:13:DA:6E:5B:17:8D:6E:02
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01942823D1EC6C75189641DBC69DF4C9C0A9
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/wwk7jEvd5L4YZES1E9puWxeNbgI.roa
Signing time: Thu 02 Jan 2025 17:50:23 +0000
ROA not before: Thu 02 Jan 2025 17:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43698
IP address blocks: 78.159.0.0/19 maxlen: 19
82.151.0.0/19 maxlen: 19
95.168.0.0/19 maxlen: 19
2a00:8d80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:d1:ec:6c:75:18:96:41:db:c6:9d:f4:c9:c0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 17:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3093b8c4bdde4be186444b513da6e5b178d6e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:1d:d2:07:16:96:fd:cf:98:7c:5a:55:91:
cd:d3:7c:23:5f:75:f3:e2:cd:ed:6e:93:90:2e:b1:
73:7b:bf:f5:0d:fa:67:4e:9d:d1:ce:a0:d7:74:8d:
ff:04:87:b6:f6:53:a1:a9:e1:98:5e:0e:14:fe:ff:
b2:ee:a6:8d:c4:27:e4:ec:79:ad:86:05:1a:b8:d2:
06:bd:fb:31:8a:99:dd:38:d3:b4:54:98:5f:4d:28:
27:35:14:4f:52:38:d3:7c:09:50:45:34:96:0c:b2:
95:b9:b8:60:50:5f:6a:2e:7c:69:6c:07:0a:36:1c:
5e:67:72:75:81:ac:2e:e2:d0:e5:9d:35:23:a6:4a:
84:8a:45:a0:8c:dc:cb:f8:f4:47:8c:ca:05:cd:94:
0e:b3:1c:4f:19:8e:28:97:5c:f3:5a:e0:39:40:0c:
99:3c:6f:e7:de:d9:2e:ea:1a:72:e7:9c:ec:aa:d4:
f0:41:28:94:d6:00:01:da:96:75:7e:ec:7f:4f:4d:
3e:b8:2b:7f:4a:8d:c9:95:ae:e5:2d:05:5a:aa:91:
d6:62:be:ac:04:e3:60:f6:70:8c:90:57:5d:24:0f:
73:3f:56:25:1a:4a:b0:08:d9:c8:1e:cb:d9:10:f5:
cc:a7:b4:81:cc:05:6d:62:de:29:1b:e3:9d:9d:5f:
a1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:09:3B:8C:4B:DD:E4:BE:18:64:44:B5:13:DA:6E:5B:17:8D:6E:02
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/wwk7jEvd5L4YZES1E9puWxeNbgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.0.0/19
82.151.0.0/19
95.168.0.0/19
IPv6:
2a00:8d80::/32
Signature Algorithm: sha256WithRSAEncryption
19:f1:c0:82:3f:b3:2d:8e:1c:51:34:c4:b6:e5:09:5c:88:48:
93:11:d6:f6:2a:2f:2a:aa:7f:06:df:a7:7a:d5:20:ee:17:b6:
49:43:97:c0:b2:68:96:a5:ec:68:69:b9:e6:45:40:c5:dc:98:
d6:75:b8:b7:7f:45:90:ca:05:50:49:44:db:78:96:7e:5e:7c:
9f:15:f7:fd:3e:ab:0a:3c:c5:b9:07:fc:79:01:2c:d9:0d:ce:
64:91:05:8a:53:f6:16:ed:25:dc:a1:fd:3d:ae:41:81:06:6d:
cb:b0:0b:27:98:fb:b4:a5:3e:7d:0e:ba:27:4d:48:2e:27:87:
fb:43:0f:fa:17:68:16:29:20:18:cf:d4:f6:d0:47:0f:10:b7:
76:65:1b:08:85:30:c7:d4:8d:4a:07:84:a9:20:2c:9f:a4:f5:
d2:6f:15:8a:71:3d:7b:b5:c0:e8:ce:53:44:fd:4b:5f:36:ed:
88:0c:ff:13:b1:7e:c4:d8:20:ec:04:af:8f:01:ed:52:0f:32:
54:0e:1c:72:a6:3d:56:e4:dd:5f:cc:fa:15:b8:29:68:cb:9f:
72:80:f1:22:5b:5e:ed:d1:55:c0:f6:20:84:4d:c5:0b:a6:50:
ce:6d:ed:61:df:07:96:e9:8f:51:2b:06:66:03:a8:c4:f2:51:
a0:2f:01:cb
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQoI9HsbHUYlkHbxp30ycCpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz
YzQwM2UwHhcNMjUwMTAyMTc1MDIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzA5M2I4YzRiZGRlNGJlMTg2NDQ0YjUxM2RhNmU1YjE3OGQ2ZTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEEd0gcWlv3PmHxaVZHN03wjX3Xz
4s3tbpOQLrFze7/1DfpnTp3RzqDXdI3/BIe29lOhqeGYXg4U/v+y7qaNxCfk7Hmt
hgUauNIGvfsxipndONO0VJhfTSgnNRRPUjjTfAlQRTSWDLKVubhgUF9qLnxpbAcK
NhxeZ3J1gawu4tDlnTUjpkqEikWgjNzL+PRHjMoFzZQOsxxPGY4ol1zzWuA5QAyZ
PG/n3tku6hpy55zsqtTwQSiU1gAB2pZ1fux/T00+uCt/So3Jla7lLQVaqpHWYr6s
BONg9nCMkFddJA9zP1YlGkqwCNnIHsvZEPXMp7SBzAVtYt4pG+OdnV+hbwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFMMJO4xL3eS+GGREtRPablsXjW4CMB8GA1UdIwQY
MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvd3drN2pFdmQ1TDRZWkVTMUU5cHVXeGVOYmdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFTp8AAwQF
UpcAAwQFX6gAMA0EAgACMAcDBQAqAI2AMA0GCSqGSIb3DQEBCwUAA4IBAQAZ8cCC
P7MtjhxRNMS25QlciEiTEdb2Ki8qqn8G36d61SDuF7ZJQ5fAsmiWpexoabnmRUDF
3JjWdbi3f0WQygVQSUTbeJZ+XnyfFff9PqsKPMW5B/x5ASzZDc5kkQWKU/YW7SXc
of09rkGBBm3LsAsnmPu0pT59DronTUguJ4f7Qw/6F2gWKSAYz9T20EcPELd2ZRsI
hTDH1I1KB4SpICyfpPXSbxWKcT17tcDozlNE/UtfNu2IDP8TsX7E2CDsBK+PAe1S
DzJUDhxypj1W5N1fzPoVuCloy59ygPEiW17t0VXA9iCETcULplDObe1h3weW6Y9R
KwZmA6jE8lGgLwHL
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:23:21 2025 by rpki-client