Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/w8vjCf4MhWSno6arrBizV8hRGB0.roa
File: w8vjCf4MhWSno6arrBizV8hRGB0.roa (raw, json)
Hash identifier: u0VlJI61dIeh8T7++/kZccPzyKi9DwtmR02dU9ACLS8=
Subject key identifier: C3:CB:E3:09:FE:0C:85:64:A7:A3:A6:AB:AC:18:B3:57:C8:51:18:1D
Certificate issuer: /CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Certificate serial: 0194266C1B50C78CDE80028D7EA13F468446
Authority key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/w8vjCf4MhWSno6arrBizV8hRGB0.roa
Signing time: Thu 02 Jan 2025 09:50:06 +0000
ROA not before: Thu 02 Jan 2025 09:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47835
IP address blocks: 91.206.198.0/23 maxlen: 23
91.230.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1b:50:c7:8c:de:80:02:8d:7e:a1:3f:46:84:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Validity
Not Before: Jan 2 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3cbe309fe0c8564a7a3a6abac18b357c851181d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:39:03:ec:54:90:c9:0b:ef:83:ae:57:4c:8c:
90:42:c0:01:75:0d:60:c5:23:61:3a:96:60:a5:a2:
54:fa:f0:51:37:0a:cc:ec:4f:d1:f1:c2:bc:ce:5e:
d0:50:fd:73:08:e4:cc:6b:24:ae:dd:c8:f4:6d:96:
31:7e:55:3d:db:33:73:b7:30:0d:74:ef:73:83:6f:
94:5c:54:a0:0b:8a:db:8c:e1:8f:a3:0b:29:4d:90:
1b:27:a4:72:90:b8:70:64:f5:2d:d6:07:b9:ae:f7:
49:7c:dc:ca:ab:5a:c7:44:9c:69:6a:74:82:34:b0:
29:98:55:ea:a9:0b:aa:96:d4:3b:11:1e:c8:7c:7c:
51:57:b0:a4:5b:d3:94:81:86:a2:62:b0:06:a3:f4:
c1:53:ee:a8:2d:e7:db:f3:f4:85:c5:45:5d:09:1f:
14:cf:b3:88:e6:6e:22:5b:a5:98:4d:dd:8c:1e:40:
dc:77:ef:be:c1:3e:94:c2:20:31:ce:8a:a6:2d:69:
d9:ce:a6:8f:05:0b:22:12:c2:b2:b9:ba:4c:0e:11:
a7:75:1c:23:cb:cd:66:a1:cb:35:0b:ed:2d:8c:7c:
01:cc:af:6c:f3:65:f7:2b:a3:94:12:cf:86:1a:71:
92:72:06:de:43:11:23:4c:22:62:c2:8d:dd:5b:f5:
5d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CB:E3:09:FE:0C:85:64:A7:A3:A6:AB:AC:18:B3:57:C8:51:18:1D
X509v3 Authority Key Identifier:
keyid:89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/w8vjCf4MhWSno6arrBizV8hRGB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.198.0/23
91.230.235.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b7:b7:34:17:55:97:76:5b:09:7b:a7:97:e3:33:4c:f8:af:
23:e5:1c:0a:ef:61:26:d5:90:52:69:98:50:67:10:e0:08:28:
bb:1e:2d:cf:80:ba:05:55:7f:78:36:ec:3e:21:54:44:bd:54:
f6:5a:e6:14:1f:82:43:1f:0b:46:c9:2d:9d:d9:ee:be:64:e7:
3a:49:21:e6:af:a1:98:66:63:72:2b:06:fc:d9:1e:26:69:2e:
0c:14:02:6f:ee:a0:dc:ef:bd:e7:0f:01:81:26:1d:8a:c9:cf:
d5:d4:4e:d3:d2:51:bc:99:93:57:22:c5:b2:48:7d:2b:2f:15:
75:9c:d2:7a:40:78:14:e0:00:73:d0:14:85:12:64:e5:9f:ed:
f9:bd:56:6f:e6:a5:ee:e3:60:4b:39:4b:25:42:9b:9e:25:25:
46:a1:2d:89:74:6f:52:a3:fe:7a:b3:c5:ef:2b:45:1d:45:9b:
00:d8:7b:05:9a:0e:22:c9:52:28:24:c7:06:1c:5c:1d:47:72:
d0:87:a7:e3:32:ab:49:47:e7:3e:23:3a:d2:60:58:8b:0f:93:
32:a4:1c:f8:55:5a:d1:44:c7:36:21:83:3f:3c:5e:aa:96:e7:
cd:97:06:1e:70:a4:ed:ab:64:4d:03:d7:b2:8b:60:1b:4f:e5:
f0:41:9a:3c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQmbBtQx4zegAKNfqE/RoRGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NTlhZTNmNDE3N2EzY2RkOTY2OGQwYzViOGE4OWY5MTg2
YjViZmMwHhcNMjUwMTAyMDk1MDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2NiZTMwOWZlMGM4NTY0YTdhM2E2YWJhYzE4YjM1N2M4NTExODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TkD7FSQyQvvg65XTIyQQsABdQ1g
xSNhOpZgpaJU+vBRNwrM7E/R8cK8zl7QUP1zCOTMaySu3cj0bZYxflU92zNztzAN
dO9zg2+UXFSgC4rbjOGPowspTZAbJ6RykLhwZPUt1ge5rvdJfNzKq1rHRJxpanSC
NLApmFXqqQuqltQ7ER7IfHxRV7CkW9OUgYaiYrAGo/TBU+6oLefb8/SFxUVdCR8U
z7OI5m4iW6WYTd2MHkDcd+++wT6UwiAxzoqmLWnZzqaPBQsiEsKyubpMDhGndRwj
y81mocs1C+0tjHwBzK9s82X3K6OUEs+GGnGScgbeQxEjTCJiwo3dW/VdkQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMPL4wn+DIVkp6Omq6wYs1fIURgdMB8GA1UdIwQY
MBaAFIlZrj9Bd6PN2WaNDFuKifkYa1v8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVZtdVAwRjNvODNaWm8wTVc0cUotUmhyV193LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNGJhMjYtZjFiOS00Mjg1LWI3ZmEt
ZWU5ODJhNTEyZjQzLzEvdzh2akNmNE1oV1NubzZhcnJCaXpWOGhSR0IwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wNGJhMjYtZjFiOS00Mjg1LWI3ZmEtZWU5ODJhNTEyZjQz
LzEvaVZtdVAwRjNvODNaWm8wTVc0cUotUmhyV193LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW87GAwQA
W+brMA0GCSqGSIb3DQEBCwUAA4IBAQCCt7c0F1WXdlsJe6eX4zNM+K8j5RwK72Em
1ZBSaZhQZxDgCCi7Hi3PgLoFVX94Nuw+IVREvVT2WuYUH4JDHwtGyS2d2e6+ZOc6
SSHmr6GYZmNyKwb82R4maS4MFAJv7qDc773nDwGBJh2Kyc/V1E7T0lG8mZNXIsWy
SH0rLxV1nNJ6QHgU4ABz0BSFEmTln+35vVZv5qXu42BLOUslQpueJSVGoS2JdG9S
o/56s8XvK0UdRZsA2HsFmg4iyVIoJMcGHFwdR3LQh6fjMqtJR+c+IzrSYFiLD5My
pBz4VVrRRMc2IYM/PF6qlufNlwYecKTtq2RNA9eyi2AbT+XwQZo8
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:37 2025 by rpki-client