Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/PkwWwJkvXsUEh6Cv0L7IgIGfFS8.roa
File: PkwWwJkvXsUEh6Cv0L7IgIGfFS8.roa (raw, json)
Hash identifier: ldaxlOWxdPdxsizqAkQ8NMKwi+hD26UCyicpS3F4O+A=
Subject key identifier: 3E:4C:16:C0:99:2F:5E:C5:04:87:A0:AF:D0:BE:C8:80:81:9F:15:2F
Certificate issuer: /CN=582ac3589fc539ab852690f85d9f3f7f234ec39b
Certificate serial: 0194228D4593F3C759B58863C1A0F1BD7D5F
Authority key identifier: 58:2A:C3:58:9F:C5:39:AB:85:26:90:F8:5D:9F:3F:7F:23:4E:C3:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/PkwWwJkvXsUEh6Cv0L7IgIGfFS8.roa
Signing time: Wed 01 Jan 2025 15:47:51 +0000
ROA not before: Wed 01 Jan 2025 15:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5610
IP address blocks: 91.191.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:45:93:f3:c7:59:b5:88:63:c1:a0:f1:bd:7d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582ac3589fc539ab852690f85d9f3f7f234ec39b
Validity
Not Before: Jan 1 15:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e4c16c0992f5ec50487a0afd0bec880819f152f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9f:d4:5c:6c:11:f8:e4:ac:6e:58:a5:00:7e:
90:03:21:c3:d0:f8:ef:03:14:fe:b0:51:41:2c:79:
01:44:ab:cd:d8:05:c9:da:d6:46:45:c8:74:eb:2a:
bf:e5:8c:91:54:e3:f0:31:1e:f0:f5:e2:fd:3d:77:
7e:82:a8:ff:89:ed:de:ca:ac:f6:d4:4d:94:cb:40:
f3:2d:3a:34:ca:91:70:67:3e:c7:23:06:0d:43:83:
be:d4:59:21:9d:4d:cd:86:58:3e:9f:79:b1:3f:ee:
49:8e:1b:77:6f:8b:a4:9f:62:b6:f3:be:5c:85:f3:
86:98:1c:76:0f:c2:cf:e6:89:92:3f:90:0c:74:c4:
bf:1a:5f:a0:eb:f1:6b:7b:69:df:aa:ef:ef:84:a1:
7c:03:a3:c1:fd:99:b5:10:19:80:59:09:aa:1f:02:
3d:66:fc:33:ad:7a:71:31:dc:86:ff:c0:0e:da:63:
84:8c:21:f6:a1:14:98:8e:b8:10:ad:a6:39:1a:41:
91:63:98:ad:0c:3c:c6:c6:fb:59:34:ee:a0:dc:81:
4f:71:6c:d8:ad:81:94:25:c6:81:0d:ac:5f:03:58:
75:37:2c:c6:60:f0:4b:39:a1:2b:69:9d:ad:26:46:
c2:20:59:a6:e1:e2:11:7b:7e:db:fd:45:60:c5:31:
0e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4C:16:C0:99:2F:5E:C5:04:87:A0:AF:D0:BE:C8:80:81:9F:15:2F
X509v3 Authority Key Identifier:
keyid:58:2A:C3:58:9F:C5:39:AB:85:26:90:F8:5D:9F:3F:7F:23:4E:C3:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/PkwWwJkvXsUEh6Cv0L7IgIGfFS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.191.64.0/18
Signature Algorithm: sha256WithRSAEncryption
95:27:58:cc:b0:9f:1c:76:ba:b4:f6:68:29:76:60:43:58:50:
6a:7b:63:00:ae:67:02:59:ba:01:cf:6e:75:43:fd:9f:d7:7b:
d1:d4:4e:ef:a2:28:a6:e0:70:1e:56:4d:9b:86:68:ff:0e:a8:
7a:39:e4:e9:47:37:91:ab:d6:2a:9e:6c:82:8e:53:17:29:a9:
9d:ec:49:23:4d:ad:97:ea:c9:96:ef:82:78:5d:03:91:1c:2f:
6d:e6:51:6b:0e:25:81:29:4c:38:f0:87:76:f9:d5:b3:b6:a8:
dd:5a:56:67:48:d4:0a:2d:26:66:65:61:2c:8d:60:19:41:39:
a6:e2:3b:4e:c5:9a:e0:9e:9d:22:aa:5d:2a:ab:cd:4f:cf:87:
b6:58:11:06:c7:11:47:cf:da:12:98:d1:bb:91:ab:57:9b:1d:
85:4d:46:80:92:3a:c4:4c:03:51:2c:68:31:29:23:fb:b6:b6:
3b:af:82:1a:0e:f3:1d:29:5c:7d:b3:2f:70:75:0e:07:ac:1e:
b7:89:c0:a2:4d:68:93:d8:b1:96:8f:1f:8f:16:cd:32:7b:56:
54:1c:e8:a1:7b:cb:15:35:d8:bf:56:97:d7:eb:ee:e5:2f:a5:
33:d7:92:36:e4:88:e9:2d:5d:04:f0:04:81:a9:28:39:34:81:
e6:28:ca:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijUWT88dZtYhjwaDxvX1fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MmFjMzU4OWZjNTM5YWI4NTI2OTBmODVkOWYzZjdmMjM0
ZWMzOWIwHhcNMjUwMTAxMTU0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTRjMTZjMDk5MmY1ZWM1MDQ4N2EwYWZkMGJlYzg4MDgxOWYxNTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5/UXGwR+OSsblilAH6QAyHD0Pjv
AxT+sFFBLHkBRKvN2AXJ2tZGRch06yq/5YyRVOPwMR7w9eL9PXd+gqj/ie3eyqz2
1E2Uy0DzLTo0ypFwZz7HIwYNQ4O+1FkhnU3Nhlg+n3mxP+5Jjht3b4ukn2K2875c
hfOGmBx2D8LP5omSP5AMdMS/Gl+g6/Fre2nfqu/vhKF8A6PB/Zm1EBmAWQmqHwI9
ZvwzrXpxMdyG/8AO2mOEjCH2oRSYjrgQraY5GkGRY5itDDzGxvtZNO6g3IFPcWzY
rYGUJcaBDaxfA1h1NyzGYPBLOaEraZ2tJkbCIFmm4eIRe37b/UVgxTEOlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD5MFsCZL17FBIegr9C+yICBnxUvMB8GA1UdIwQY
MBaAFFgqw1ifxTmrhSaQ+F2fP38jTsObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0NyRFdKX0ZPYXVGSnBENFhaOF9meU5PdzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wMDE1ZDMtMWIyMS00ZTU1LTg1MGIt
Njc0MzI4ZDUyYmQ3LzEvUGt3V3dKa3ZYc1VFaDZDdjBMN0lnSUdmRlM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8wMDE1ZDMtMWIyMS00ZTU1LTg1MGItNjc0MzI4ZDUyYmQ3
LzEvV0NyRFdKX0ZPYXVGSnBENFhaOF9meU5PdzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGW79AMA0G
CSqGSIb3DQEBCwUAA4IBAQCVJ1jMsJ8cdrq09mgpdmBDWFBqe2MArmcCWboBz251
Q/2f13vR1E7voiim4HAeVk2bhmj/Dqh6OeTpRzeRq9YqnmyCjlMXKamd7EkjTa2X
6smW74J4XQORHC9t5lFrDiWBKUw48Id2+dWztqjdWlZnSNQKLSZmZWEsjWAZQTmm
4jtOxZrgnp0iql0qq81Pz4e2WBEGxxFHz9oSmNG7katXmx2FTUaAkjrETANRLGgx
KSP7trY7r4IaDvMdKVx9sy9wdQ4HrB63icCiTWiT2LGWjx+PFs0ye1ZUHOihe8sV
Ndi/VpfX6+7lL6Uz15I25IjpLV0E8ASBqSg5NIHmKMqi
-----END CERTIFICATE-----
Generated at Tue Apr 8 20:44:09 2025 by rpki-client