Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/1-WEPQJU49LIdnQqH8-jmDUugLDI.roa
File: 1-WEPQJU49LIdnQqH8-jmDUugLDI.roa (raw, json)
Hash identifier: ElhqypKM88+avaQ1MsZXq4NSpX/GlPIoxObAyngwVx8=
Subject key identifier: F9:61:0F:40:95:38:F4:B2:1D:9D:0A:87:F3:E8:E6:0D:4B:A0:2C:32
Certificate issuer: /CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Certificate serial: 018570306C4BD2A3D849D96823A8DFDC358E
Authority key identifier: 2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/1-WEPQJU49LIdnQqH8-jmDUugLDI.roa
Signing time: Mon 02 Jan 2023 01:54:59 +0000
ROA not before: Mon 02 Jan 2023 01:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43278
IP address blocks: 195.18.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:6c:4b:d2:a3:d8:49:d9:68:23:a8:df:dc:35:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Validity
Not Before: Jan 2 01:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9610f409538f4b21d9d0a87f3e8e60d4ba02c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3d:d7:53:34:f4:88:0c:e6:5d:74:d2:4a:c3:
64:b8:30:c8:3f:ea:af:ff:5a:71:01:5e:9c:92:67:
b8:74:0f:59:7a:b7:5a:b9:d6:59:6c:16:6c:d5:8f:
6b:d7:0a:52:9a:f3:f5:cf:da:8e:9c:99:8f:9b:95:
d4:55:4a:73:f1:ad:80:f3:22:5a:cc:6f:11:1f:32:
1d:49:5d:01:19:f1:cc:2f:0a:40:b4:c7:0a:41:8a:
08:79:17:8f:8c:ee:9f:6c:41:2e:aa:37:b6:48:40:
89:81:0f:79:5f:e1:1e:99:78:dd:84:ee:c7:f5:12:
91:62:2b:44:62:0a:fc:12:d7:e8:df:84:02:b3:0f:
96:40:22:15:bc:17:5f:f1:6e:65:2f:84:24:81:c4:
52:24:83:5c:83:e0:04:33:e5:db:12:e7:51:d8:d0:
1f:58:d8:97:41:e8:93:1e:f0:f1:79:80:2e:41:23:
10:d0:4d:78:1f:1f:48:10:84:42:e6:e1:be:10:fb:
87:a4:08:74:09:80:9e:af:1a:4b:f9:e2:c7:b6:07:
01:39:93:ff:02:79:1c:34:81:91:b3:00:4a:b0:36:
3b:b7:07:55:96:61:ed:34:15:59:23:cb:3a:c5:58:
d7:0c:bf:8d:16:f2:33:50:61:d8:1f:fa:2b:fc:b0:
ad:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:61:0F:40:95:38:F4:B2:1D:9D:0A:87:F3:E8:E6:0D:4B:A0:2C:32
X509v3 Authority Key Identifier:
keyid:2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/1-WEPQJU49LIdnQqH8-jmDUugLDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.18.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:66:49:23:08:d7:71:db:e1:df:1a:de:a0:a9:7f:b3:ad:31:
0d:05:e8:6c:fc:9f:4c:9f:6f:30:25:06:d6:31:77:b0:8c:0e:
87:5d:36:6a:9f:2a:b9:d1:30:f5:59:2c:e4:96:1a:c8:0f:5b:
0d:d3:3e:05:76:71:94:1e:4a:2a:0b:09:44:d2:bf:4e:5e:6b:
bc:27:e8:88:26:c1:e7:0b:1d:47:f9:50:8a:12:52:70:05:b4:
69:cd:c9:cd:ba:29:9a:84:1f:c5:8f:3e:c8:ec:f6:db:49:5e:
0a:47:10:ab:96:0a:b9:07:10:4d:9c:ad:ec:7d:54:b6:9f:34:
a7:ff:77:bb:66:f8:2a:49:5e:f5:12:79:d6:16:d2:ee:01:d7:
31:b6:b4:c5:93:10:67:c0:6f:ff:8f:5e:37:c1:5c:19:44:43:
64:71:9a:44:f4:74:92:77:a8:e4:81:25:0a:2b:93:16:a8:2c:
ce:3e:4b:cc:86:79:6f:fd:6e:0b:ab:9d:d0:d4:29:fb:78:6a:
cd:2d:10:2b:99:03:7d:79:65:33:ff:fb:a5:21:ea:24:23:f2:
e3:34:7b:cd:13:4c:bd:d3:ee:16:84:de:02:43:bb:75:0b:1e:
3e:51:d0:0a:f2:d5:45:d6:e1:89:c6:7d:86:52:61:8f:da:58:
68:c6:19:17
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVwMGxL0qPYSdloI6jf3DWOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZDk1MTZkYjk0MTc5NTJkZWRkOTI1MmZlNWQ4M2YwOWEz
ZDk5ZjUwHhcNMjMwMTAyMDE1NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTYxMGY0MDk1MzhmNGIyMWQ5ZDBhODdmM2U4ZTYwZDRiYTAyYzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz3XUzT0iAzmXXTSSsNkuDDIP+qv
/1pxAV6ckme4dA9ZerdaudZZbBZs1Y9r1wpSmvP1z9qOnJmPm5XUVUpz8a2A8yJa
zG8RHzIdSV0BGfHMLwpAtMcKQYoIeRePjO6fbEEuqje2SECJgQ95X+EemXjdhO7H
9RKRYitEYgr8Etfo34QCsw+WQCIVvBdf8W5lL4QkgcRSJINcg+AEM+XbEudR2NAf
WNiXQeiTHvDxeYAuQSMQ0E14Hx9IEIRC5uG+EPuHpAh0CYCerxpL+eLHtgcBOZP/
AnkcNIGRswBKsDY7twdVlmHtNBVZI8s6xVjXDL+NFvIzUGHYH/or/LCtOwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPlhD0CVOPSyHZ0Kh/Po5g1LoCwyMB8GA1UdIwQY
MBaAFCzZUW25QXlS3t2SUv5dg/CaPZn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE5sUmJibEJlVkxlM1pKU19sMkQ4Sm85bWZVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iYWI1M2ItMzExNS00MWM1LTg3ZWEt
YzAwNDU0ZTBiMTJhLzEvMS1XRVBRSlU0OUxJZG5RcUg4LWptRFV1Z0xESS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOWYvYmFiNTNiLTMxMTUtNDFjNS04N2VhLWMwMDQ1NGUwYjEy
YS8xL0xObFJiYmxCZVZMZTNaSlNfbDJEOEpvOW1mVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMMSGzAN
BgkqhkiG9w0BAQsFAAOCAQEAqGZJIwjXcdvh3xreoKl/s60xDQXobPyfTJ9vMCUG
1jF3sIwOh102ap8qudEw9Vks5JYayA9bDdM+BXZxlB5KKgsJRNK/Tl5rvCfoiCbB
5wsdR/lQihJScAW0ac3JzbopmoQfxY8+yOz220leCkcQq5YKuQcQTZyt7H1Utp80
p/93u2b4Kkle9RJ51hbS7gHXMba0xZMQZ8Bv/49eN8FcGURDZHGaRPR0kneo5IEl
CiuTFqgszj5LzIZ5b/1uC6ud0NQp+3hqzS0QK5kDfXllM//7pSHqJCPy4zR7zRNM
vdPuFoTeAkO7dQsePlHQCvLVRdbhicZ9hlJhj9pYaMYZFw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:56:07 2025 by rpki-client