Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/wcVHNrkbhZ1OLGPcmEy3EALkc9Y.roa
File: wcVHNrkbhZ1OLGPcmEy3EALkc9Y.roa (raw, json)
Hash identifier: HdduppraKMbdN3fgj8TTiKr0BeBOvEfgXB12pZLJIQo=
Subject key identifier: C1:C5:47:36:B9:1B:85:9D:4E:2C:63:DC:98:4C:B7:10:02:E4:73:D6
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 0194266BCDAA71623619A7388BDCB37C5C4E
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/wcVHNrkbhZ1OLGPcmEy3EALkc9Y.roa
Signing time: Thu 02 Jan 2025 09:49:46 +0000
ROA not before: Thu 02 Jan 2025 09:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205003
IP address blocks: 212.183.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:cd:aa:71:62:36:19:a7:38:8b:dc:b3:7c:5c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 2 09:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1c54736b91b859d4e2c63dc984cb71002e473d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d7:3b:13:a9:93:be:b2:2d:a9:a5:21:84:53:
7d:53:ce:1c:ca:91:2a:d2:87:32:98:01:50:94:81:
1a:42:ce:be:0f:7d:48:c0:6f:06:f8:eb:9b:d6:0c:
e2:0f:86:82:ee:40:97:74:53:7f:b5:33:d1:87:f9:
8e:34:bb:8c:73:36:78:ec:ee:6f:1e:f7:61:55:e5:
cd:19:03:79:d5:de:1f:96:c2:4c:01:9a:56:b0:d2:
e1:6a:a2:ed:63:55:7c:3e:3b:b1:f5:b3:1f:c3:71:
75:6b:2a:c7:f5:c3:57:38:56:43:dd:83:de:ce:6c:
40:1f:8b:3d:26:c7:ee:c1:f2:57:70:ae:32:0e:e1:
c3:50:59:82:c4:86:e3:06:6e:65:0d:79:1f:62:f0:
e9:a0:83:85:5b:1f:01:13:3c:5d:ba:2d:3e:57:0c:
a8:bf:46:1b:83:5f:68:f6:13:4f:c2:63:a8:37:1c:
cd:76:59:55:89:f6:6e:ca:63:06:3a:0d:3e:b1:f6:
e0:db:67:9c:06:82:93:25:48:2e:9c:cf:da:f4:2a:
b6:5b:4b:7b:f0:94:7e:88:1e:b7:ec:cc:3c:f2:7e:
8f:0d:30:e2:c5:e2:3c:5a:ec:ee:0b:ce:f0:17:4f:
36:15:30:6d:d6:71:6f:61:f9:44:3e:6a:a0:fc:01:
d5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C5:47:36:B9:1B:85:9D:4E:2C:63:DC:98:4C:B7:10:02:E4:73:D6
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/wcVHNrkbhZ1OLGPcmEy3EALkc9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.183.28.0/24
Signature Algorithm: sha256WithRSAEncryption
09:dd:a2:35:be:bc:05:5a:31:9f:69:8d:71:72:9a:aa:e3:b5:
3a:b7:e3:d5:d0:b6:52:a4:3a:c9:5f:55:6a:12:e2:d5:fa:38:
3b:ea:41:b2:4e:38:6a:67:f2:35:bf:83:19:73:f5:c5:2c:b6:
a3:53:d3:2f:83:64:bc:06:37:53:a7:a4:b5:bb:6c:f1:08:a8:
e2:98:12:c8:8c:5c:0a:9e:b5:0d:bc:36:7d:6d:75:f7:ba:19:
cd:26:0a:cb:55:78:b8:8f:69:40:24:1c:1e:ad:4b:ea:fc:31:
f6:c4:a0:eb:04:b2:0f:83:e6:a3:ba:aa:a1:e6:f8:24:67:36:
8d:bd:73:50:ee:77:89:57:50:d2:b5:5a:1c:a1:02:53:53:7e:
e7:d4:81:97:96:7d:40:3d:7b:59:3f:0c:68:24:19:a4:09:8b:
f4:5e:bc:ab:fe:e0:2b:e9:0a:5f:7f:37:0e:31:f6:f9:8f:d9:
38:a8:4a:81:25:93:98:ec:db:d1:25:c6:d6:53:ba:f4:85:83:
fb:ce:19:f5:4c:77:88:73:a8:61:ee:b7:04:a4:e7:8d:9f:bd:
43:1b:5f:e0:7f:4b:25:58:cf:57:f0:a9:76:6a:17:b8:b6:c4:
15:43:0d:2d:f5:09:fe:8f:cb:15:cf:58:da:38:f7:37:9f:99:
fc:3a:26:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma82qcWI2Gac4i9yzfFxOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4
NzE3MjUwHhcNMjUwMTAyMDk0OTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWM1NDczNmI5MWI4NTlkNGUyYzYzZGM5ODRjYjcxMDAyZTQ3M2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9c7E6mTvrItqaUhhFN9U84cypEq
0ocymAFQlIEaQs6+D31IwG8G+Oub1gziD4aC7kCXdFN/tTPRh/mONLuMczZ47O5v
HvdhVeXNGQN51d4flsJMAZpWsNLhaqLtY1V8Pjux9bMfw3F1ayrH9cNXOFZD3YPe
zmxAH4s9JsfuwfJXcK4yDuHDUFmCxIbjBm5lDXkfYvDpoIOFWx8BEzxdui0+Vwyo
v0Ybg19o9hNPwmOoNxzNdllVifZuymMGOg0+sfbg22ecBoKTJUgunM/a9Cq2W0t7
8JR+iB637Mw88n6PDTDixeI8WuzuC87wF082FTBt1nFvYflEPmqg/AHVWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMHFRza5G4WdTixj3JhMtxAC5HPWMB8GA1UdIwQY
MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt
ODQ5ZDNhNmI5YzJkLzEvd2NWSE5ya2JoWjFPTEdQY21FeTNFQUxrYzlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk
LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1LccMA0G
CSqGSIb3DQEBCwUAA4IBAQAJ3aI1vrwFWjGfaY1xcpqq47U6t+PV0LZSpDrJX1Vq
EuLV+jg76kGyTjhqZ/I1v4MZc/XFLLajU9Mvg2S8BjdTp6S1u2zxCKjimBLIjFwK
nrUNvDZ9bXX3uhnNJgrLVXi4j2lAJBwerUvq/DH2xKDrBLIPg+ajuqqh5vgkZzaN
vXNQ7neJV1DStVocoQJTU37n1IGXln1APXtZPwxoJBmkCYv0Xryr/uAr6QpffzcO
Mfb5j9k4qEqBJZOY7NvRJcbWU7r0hYP7zhn1THeIc6hh7rcEpOeNn71DG1/gf0sl
WM9X8Kl2ahe4tsQVQw0t9Qn+j8sVz1jaOPc3n5n8OiaQ
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:08 2025 by rpki-client