Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/wxI5PYnsJV_pw-ZAaHHG4istOuM.roa
File: wxI5PYnsJV_pw-ZAaHHG4istOuM.roa (raw, json)
Hash identifier: MuOSU2DUhtvwHObwNbqVRHZsUbztYSCYXG4GZ/vH3/I=
Subject key identifier: C3:12:39:3D:89:EC:25:5F:E9:C3:E6:40:68:71:C6:E2:2B:2D:3A:E3
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 01941F8C0E1D0875A0109AD5C05D6C113CE5
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/wxI5PYnsJV_pw-ZAaHHG4istOuM.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214105
IP address blocks: 194.26.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0e:1d:08:75:a0:10:9a:d5:c0:5d:6c:11:3c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c312393d89ec255fe9c3e6406871c6e22b2d3ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:b4:11:8f:22:93:52:25:73:c4:42:fd:6a:
05:da:db:e8:af:59:93:eb:19:1f:f1:80:73:1e:d4:
98:8d:7a:d8:7e:e1:0a:a1:9c:c5:05:51:36:dc:88:
11:72:08:3a:2d:11:f3:11:1c:41:1a:67:c3:6e:3f:
19:7b:eb:52:00:fe:09:30:09:70:97:c4:d4:21:13:
4b:e8:ff:e4:ee:48:a9:f4:ac:6c:65:cc:55:63:4b:
1f:b1:3c:4e:95:ce:46:17:38:46:98:ee:76:0f:ae:
2d:b9:a6:7c:82:fd:31:6a:8d:1f:3d:c7:07:ed:c4:
46:60:41:51:b6:cc:ad:ba:ee:f3:2b:df:9c:2c:2c:
6b:c5:6b:ee:4e:65:81:ab:6e:28:eb:d9:78:e9:c3:
d0:d3:52:28:ec:ac:c8:37:e9:1c:93:a4:97:6d:bf:
d5:ef:61:9b:6d:ed:ec:fb:0f:75:5f:c5:1b:df:4c:
3b:42:96:0c:30:9c:03:1e:41:4b:a1:2d:65:13:67:
59:e0:fe:78:10:81:1b:b6:f9:2d:f3:81:e9:19:d5:
10:a7:9d:71:4f:6f:ae:0b:65:cf:37:ce:10:13:da:
98:ba:66:ea:41:9b:fa:13:be:a3:8d:d0:71:34:8d:
98:dc:e2:b5:1a:42:f2:d9:54:6a:5b:3a:25:b6:1e:
82:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:12:39:3D:89:EC:25:5F:E9:C3:E6:40:68:71:C6:E2:2B:2D:3A:E3
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/wxI5PYnsJV_pw-ZAaHHG4istOuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.195.0/24
Signature Algorithm: sha256WithRSAEncryption
72:e4:f5:0f:02:5c:48:f8:63:2b:66:bb:cd:f9:6f:14:80:73:
27:a7:02:df:40:f5:9e:73:70:1e:ca:54:35:39:18:49:99:ff:
e1:95:76:02:62:96:17:04:c9:1d:c3:3f:08:ce:ae:1a:f6:9e:
32:48:0f:f8:ba:fc:77:a0:c4:8f:19:23:ee:db:d7:17:86:e8:
b3:25:07:9f:47:13:ed:63:b5:81:65:e5:72:02:e7:fc:b6:a6:
3a:31:cf:a5:c0:62:f3:f9:10:89:21:26:65:e2:56:4e:34:db:
55:e9:8e:d2:22:d7:0d:9f:a2:09:97:cd:8d:3c:fe:fd:e5:46:
1e:df:1d:a4:b0:4b:e8:24:2c:77:65:d4:92:2b:47:39:9e:3b:
44:7c:ec:27:a1:8b:51:64:5d:d0:5e:f2:d2:d8:f7:52:7a:31:
90:0e:80:f4:de:33:33:5b:11:f9:bd:3e:9b:13:4b:2c:54:da:
3f:96:09:60:1e:da:49:4d:ad:55:fa:7e:08:4e:0f:1c:10:b7:
41:d7:64:62:14:16:f4:f1:1c:5a:2a:d7:d1:23:bd:8f:93:c4:
24:86:4c:ea:e1:86:07:fe:79:47:bb:88:6e:14:49:46:64:ba:
80:89:fd:d1:0d:6a:87:90:b1:42:f6:69:0a:c2:12:98:d0:c3:
88:de:ad:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjA4dCHWgEJrVwF1sETzlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNTI2NjQzNTYxN2ZhMGYxZmQyODM3ZWM4MGM2ZDgzYjBi
OWQ2MDgwHhcNMjUwMTAxMDE0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzEyMzkzZDg5ZWMyNTVmZTljM2U2NDA2ODcxYzZlMjJiMmQzYWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFO0EY8ik1Ilc8RC/WoF2tvor1mT
6xkf8YBzHtSYjXrYfuEKoZzFBVE23IgRcgg6LRHzERxBGmfDbj8Ze+tSAP4JMAlw
l8TUIRNL6P/k7kip9KxsZcxVY0sfsTxOlc5GFzhGmO52D64tuaZ8gv0xao0fPccH
7cRGYEFRtsytuu7zK9+cLCxrxWvuTmWBq24o69l46cPQ01Io7KzIN+kck6SXbb/V
72Gbbe3s+w91X8Ub30w7QpYMMJwDHkFLoS1lE2dZ4P54EIEbtvkt84HpGdUQp51x
T2+uC2XPN84QE9qYumbqQZv6E76jjdBxNI2Y3OK1GkLy2VRqWzolth6CMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMMSOT2J7CVf6cPmQGhxxuIrLTrjMB8GA1UdIwQY
MBaAFCFSZkNWF/oPH9KDfsgMbYOwudYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzIt
YmM5M2NhNjc5ZTFmLzEvd3hJNVBZbnNKVl9wdy1aQWFISEc0aXN0T3VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzItYmM5M2NhNjc5ZTFm
LzEvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhrDMA0G
CSqGSIb3DQEBCwUAA4IBAQBy5PUPAlxI+GMrZrvN+W8UgHMnpwLfQPWec3AeylQ1
ORhJmf/hlXYCYpYXBMkdwz8Izq4a9p4ySA/4uvx3oMSPGSPu29cXhuizJQefRxPt
Y7WBZeVyAuf8tqY6Mc+lwGLz+RCJISZl4lZONNtV6Y7SItcNn6IJl82NPP795UYe
3x2ksEvoJCx3ZdSSK0c5njtEfOwnoYtRZF3QXvLS2PdSejGQDoD03jMzWxH5vT6b
E0ssVNo/lglgHtpJTa1V+n4ITg8cELdB12RiFBb08RxaKtfRI72Pk8Qkhkzq4YYH
/nlHu4huFElGZLqAif3RDWqHkLFC9mkKwhKY0MOI3q3m
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:50:17 2025 by rpki-client