Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/wMyjLOgWza8MLMZCt_GDmRvtb-g.roa
File: wMyjLOgWza8MLMZCt_GDmRvtb-g.roa (raw, json)
Hash identifier: dLOXSzRovdIImBdeUt2cN/TfriVM7Y6eHA/JyGJylMA=
Subject key identifier: C0:CC:A3:2C:E8:16:CD:AF:0C:2C:C6:42:B7:F1:83:99:1B:ED:6F:E8
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019424B3E11BCD87FEEC8E19A95103F3FB23
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/wMyjLOgWza8MLMZCt_GDmRvtb-g.roa
Signing time: Thu 02 Jan 2025 01:49:15 +0000
ROA not before: Thu 02 Jan 2025 01:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 88.218.172.0/22 maxlen: 22
185.121.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e1:1b:cd:87:fe:ec:8e:19:a9:51:03:f3:fb:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jan 2 01:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0cca32ce816cdaf0c2cc642b7f183991bed6fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f6:37:7c:7e:85:77:1d:47:ec:86:29:f9:b6:
21:71:50:8e:dd:85:20:64:2b:c5:56:4d:4a:2e:02:
6c:bf:e2:22:99:37:44:f1:d7:cf:d0:94:cb:2f:94:
ce:a1:6a:c6:be:c6:58:aa:16:c6:ee:86:5e:6b:ba:
1e:5e:04:9b:17:46:3f:38:f3:b1:98:11:cc:3a:1c:
5a:5a:23:26:37:8b:3c:ba:c7:35:4b:8b:d3:7f:83:
bf:67:c3:73:1b:b0:a7:a7:61:e4:d8:8a:d5:f7:6d:
48:51:27:17:05:bf:56:f9:32:81:43:f0:db:9f:c3:
f4:0b:42:9d:ab:2a:ad:97:d6:23:d3:fa:20:54:70:
33:eb:bb:f8:a9:f2:b3:c7:9b:76:ea:d0:c8:72:d5:
e8:3b:e9:ff:bc:e7:51:4a:a8:c8:19:8d:13:76:57:
e2:be:16:05:53:c0:cf:5b:42:96:ca:41:94:50:42:
fb:32:6a:93:fc:a4:9b:bb:1a:64:3a:af:2a:16:56:
81:c6:6d:69:e9:e7:2f:6b:9e:89:50:c4:cd:e4:5d:
39:34:ff:85:15:b5:5d:3c:6d:f6:09:5e:89:14:31:
81:dd:f6:db:3e:a8:5b:02:8d:e6:1f:9f:2a:9a:0d:
a5:6f:5e:fe:de:a0:84:c9:ce:04:92:d0:33:dc:b3:
b7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CC:A3:2C:E8:16:CD:AF:0C:2C:C6:42:B7:F1:83:99:1B:ED:6F:E8
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/wMyjLOgWza8MLMZCt_GDmRvtb-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.172.0/22
185.121.108.0/24
Signature Algorithm: sha256WithRSAEncryption
30:a5:0d:a9:0f:22:22:07:58:21:ee:f3:32:26:f9:f6:1f:dd:
1b:c5:2b:69:82:48:b5:b6:fb:c8:cf:1b:03:a9:7c:9b:fa:ca:
7a:67:6e:6d:b8:94:c9:05:b3:de:16:38:75:26:b8:c8:77:e6:
f1:b5:19:e8:a7:6d:4f:5a:d9:64:be:5f:fa:5c:dc:12:63:44:
ea:bf:51:a2:f4:15:2f:02:b7:a7:c1:d4:28:f1:0d:cf:2d:f1:
d2:ad:f0:13:e1:dd:98:38:ce:75:23:b0:dc:dc:78:c0:2c:f9:
6d:7d:43:08:86:d2:3d:c1:41:66:4a:44:e0:5a:12:c7:09:eb:
c6:4e:a9:40:c2:5f:53:0d:1a:f8:c7:4e:9a:22:d5:2f:59:96:
c3:b4:09:cd:1c:2e:d4:57:7e:ac:62:5d:8c:55:67:7f:f1:ff:
e6:53:17:ab:4a:26:1a:e1:d6:37:ed:73:4a:3c:9a:12:54:86:
d7:d6:87:e9:c9:4a:2a:b5:7a:4a:8e:14:ee:33:02:1f:69:74:
68:04:ce:2a:4a:9a:e7:92:c9:44:07:ea:5d:22:3c:84:7b:4c:
cd:b6:11:74:1f:0d:33:be:5a:9c:d6:c9:1d:1b:87:54:cb:44:
ea:71:22:36:1d:4c:6b:2d:82:df:a5:14:7a:0c:db:5a:33:fa:
51:94:c3:6f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQks+EbzYf+7I4ZqVED8/sjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4
ODE3ZmMwHhcNMjUwMTAyMDE0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGNjYTMyY2U4MTZjZGFmMGMyY2M2NDJiN2YxODM5OTFiZWQ2ZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PY3fH6Fdx1H7IYp+bYhcVCO3YUg
ZCvFVk1KLgJsv+IimTdE8dfP0JTLL5TOoWrGvsZYqhbG7oZea7oeXgSbF0Y/OPOx
mBHMOhxaWiMmN4s8usc1S4vTf4O/Z8NzG7Cnp2Hk2IrV921IUScXBb9W+TKBQ/Db
n8P0C0Kdqyqtl9Yj0/ogVHAz67v4qfKzx5t26tDIctXoO+n/vOdRSqjIGY0Tdlfi
vhYFU8DPW0KWykGUUEL7MmqT/KSbuxpkOq8qFlaBxm1p6ecva56JUMTN5F05NP+F
FbVdPG32CV6JFDGB3fbbPqhbAo3mH58qmg2lb17+3qCEyc4EktAz3LO3yQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMDMoyzoFs2vDCzGQrfxg5kb7W/oMB8GA1UdIwQY
MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt
NDZiOTQ5MDkyY2JlLzEvd015akxPZ1d6YThNTE1aQ3RfR0RtUnZ0Yi1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl
LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCWNqsAwQA
uXlsMA0GCSqGSIb3DQEBCwUAA4IBAQAwpQ2pDyIiB1gh7vMyJvn2H90bxStpgki1
tvvIzxsDqXyb+sp6Z25tuJTJBbPeFjh1JrjId+bxtRnop21PWtlkvl/6XNwSY0Tq
v1Gi9BUvArenwdQo8Q3PLfHSrfAT4d2YOM51I7Dc3HjALPltfUMIhtI9wUFmSkTg
WhLHCevGTqlAwl9TDRr4x06aItUvWZbDtAnNHC7UV36sYl2MVWd/8f/mUxerSiYa
4dY37XNKPJoSVIbX1ofpyUoqtXpKjhTuMwIfaXRoBM4qSprnkslEB+pdIjyEe0zN
thF0Hw0zvlqc1skdG4dUy0TqcSI2HUxrLYLfpRR6DNtaM/pRlMNv
-----END CERTIFICATE-----
Generated at Fri Apr 11 07:40:09 2025 by rpki-client