Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/wkbm61J6JI58DzdO7MCd9o4dj-o.roa
File: wkbm61J6JI58DzdO7MCd9o4dj-o.roa (raw, json)
Hash identifier: hSaua0y3ny5hOslQkyLJESOAWMtyf0RUHAd8EHcHySo=
Subject key identifier: C2:46:E6:EB:52:7A:24:8E:7C:0F:37:4E:EC:C0:9D:F6:8E:1D:8F:EA
Certificate issuer: /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Certificate serial: 019423D6AD2639A4A28C55E42446E0DCA845
Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/wkbm61J6JI58DzdO7MCd9o4dj-o.roa
Signing time: Wed 01 Jan 2025 21:47:39 +0000
ROA not before: Wed 01 Jan 2025 21:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21362
IP address blocks: 193.109.232.0/24 maxlen: 24
194.187.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ad:26:39:a4:a2:8c:55:e4:24:46:e0:dc:a8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Validity
Not Before: Jan 1 21:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c246e6eb527a248e7c0f374eecc09df68e1d8fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:11:c3:a4:5e:e4:88:b6:95:65:d2:73:4e:86:
d8:d6:5e:41:85:68:af:67:a3:e1:37:fa:2d:af:7f:
d8:74:41:44:04:00:93:55:6c:d1:6a:cf:04:43:91:
f9:6a:4f:55:4a:d5:ac:b9:a4:98:cb:d1:01:46:5a:
05:c6:9a:5c:b8:7e:fe:b6:ea:d5:21:f2:72:fb:dc:
37:a8:a8:f3:b5:17:23:61:88:f7:74:aa:11:bb:a0:
2a:63:f5:17:50:33:ea:d0:84:91:8f:32:e0:04:f8:
65:47:63:7f:a4:02:8b:ee:83:81:66:93:97:4d:d7:
61:71:da:f6:54:07:a4:19:40:89:e4:ed:a1:13:47:
14:43:bb:70:c4:99:84:1a:49:96:29:fe:e7:09:6b:
6f:56:8a:a8:9f:b3:ad:7d:b0:c5:75:04:ed:de:a8:
c3:b0:b3:43:c1:ec:91:1f:4b:be:25:b4:68:9c:85:
fa:b3:01:65:29:ee:bc:b9:a6:5b:43:1f:83:27:98:
9f:14:e8:74:ab:24:32:ed:f2:30:ec:93:1c:a4:1a:
61:7c:b6:fb:be:45:b8:01:07:a2:6b:d2:25:26:2b:
41:d6:ef:a8:de:da:32:2d:fb:0d:4d:66:8f:de:fb:
02:0d:bb:99:7c:7d:e1:2b:1c:f3:14:ef:ee:1f:a0:
6e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:46:E6:EB:52:7A:24:8E:7C:0F:37:4E:EC:C0:9D:F6:8E:1D:8F:EA
X509v3 Authority Key Identifier:
keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/wkbm61J6JI58DzdO7MCd9o4dj-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.232.0/24
194.187.92.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:dc:65:a3:04:42:4b:1c:48:c5:14:1d:74:56:4e:18:ce:de:
44:ed:6f:0d:f6:5c:d7:fe:d4:c2:68:39:16:29:39:b1:6b:5e:
64:e1:0d:1d:0e:81:0c:83:9a:32:57:67:19:d3:ee:8a:4d:04:
cc:bf:d8:d4:ac:3d:5a:89:f3:82:5f:03:70:4e:7a:1c:5a:dc:
66:7b:07:c1:2b:51:bf:b8:15:f0:af:f7:b1:0c:59:58:c2:a1:
74:d9:a5:8c:cb:85:9f:42:38:86:b2:d4:0a:73:91:de:e9:1e:
c4:d8:aa:04:38:27:f4:25:b3:59:0d:5c:e7:32:57:0c:5f:96:
f7:65:f3:63:ab:26:08:b3:3b:79:b3:0c:74:51:61:02:98:6c:
69:8d:ef:4d:62:34:64:3c:e9:1e:0f:2e:af:3c:03:6b:8a:91:
01:5e:d9:03:49:d7:83:58:a0:01:d8:af:1e:7c:83:05:a5:4e:
d0:a6:63:c9:39:c8:b8:b8:bf:f0:7b:07:83:43:fb:89:a9:4a:
86:05:b4:29:97:c6:4b:5a:ea:d6:46:af:cb:65:d8:83:79:db:
41:58:7e:25:3a:51:4b:f4:b5:fc:89:0b:19:f3:1f:6f:66:1b:
a1:d9:72:f5:8c:82:5a:d8:17:0b:50:2b:96:bb:4e:2c:22:a9:
6f:2c:16:88
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj1q0mOaSijFXkJEbg3KhFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZDlmYzgxNWU5MGNhODc5Mjc5MDdjNWVhYjNmZTc5Y2Ey
MTVlYWEwHhcNMjUwMTAxMjE0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjQ2ZTZlYjUyN2EyNDhlN2MwZjM3NGVlY2MwOWRmNjhlMWQ4ZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RHDpF7kiLaVZdJzTobY1l5BhWiv
Z6PhN/otr3/YdEFEBACTVWzRas8EQ5H5ak9VStWsuaSYy9EBRloFxppcuH7+turV
IfJy+9w3qKjztRcjYYj3dKoRu6AqY/UXUDPq0ISRjzLgBPhlR2N/pAKL7oOBZpOX
Tddhcdr2VAekGUCJ5O2hE0cUQ7twxJmEGkmWKf7nCWtvVoqon7OtfbDFdQTt3qjD
sLNDweyRH0u+JbRonIX6swFlKe68uaZbQx+DJ5ifFOh0qyQy7fIw7JMcpBphfLb7
vkW4AQeia9IlJitB1u+o3toyLfsNTWaP3vsCDbuZfH3hKxzzFO/uH6BubwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMJG5utSeiSOfA83TuzAnfaOHY/qMB8GA1UdIwQY
MBaAFJXZ/IFekMqHknkHxeqz/nnKIV6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGRuOGdWNlF5b2VTZVFmRjZyUC1lY29oWHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85Y2FhNTAtYTUxMC00MTdhLWI1ODkt
OGNlNDE3OTIzMmM4LzEvd2tibTYxSjZKSTU4RHpkTzdNQ2Q5bzRkai1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85Y2FhNTAtYTUxMC00MTdhLWI1ODktOGNlNDE3OTIzMmM4
LzEvbGRuOGdWNlF5b2VTZVFmRjZyUC1lY29oWHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwW3oAwQC
wrtcMA0GCSqGSIb3DQEBCwUAA4IBAQAK3GWjBEJLHEjFFB10Vk4Yzt5E7W8N9lzX
/tTCaDkWKTmxa15k4Q0dDoEMg5oyV2cZ0+6KTQTMv9jUrD1aifOCXwNwTnocWtxm
ewfBK1G/uBXwr/exDFlYwqF02aWMy4WfQjiGstQKc5He6R7E2KoEOCf0JbNZDVzn
MlcMX5b3ZfNjqyYIszt5swx0UWECmGxpje9NYjRkPOkeDy6vPANripEBXtkDSdeD
WKAB2K8efIMFpU7QpmPJOci4uL/weweDQ/uJqUqGBbQpl8ZLWurWRq/LZdiDedtB
WH4lOlFL9LX8iQsZ8x9vZhuh2XL1jIJa2BcLUCuWu04sIqlvLBaI
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:39 2025 by rpki-client