Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/W5pOqAkgjpYDOeHPc58PpPg4eC8.roa
File: W5pOqAkgjpYDOeHPc58PpPg4eC8.roa (raw, json)
Hash identifier: yL5+pJ+Yw2Ubc1IA7l2rXuOrE0qVTT2bXY3YTNagTw0=
Subject key identifier: 5B:9A:4E:A8:09:20:8E:96:03:39:E1:CF:73:9F:0F:A4:F8:38:78:2F
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 0194282646E83F87EFCBFC2CA5FA9D505850
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/W5pOqAkgjpYDOeHPc58PpPg4eC8.roa
Signing time: Thu 02 Jan 2025 17:53:04 +0000
ROA not before: Thu 02 Jan 2025 17:53:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211439
IP address blocks: 91.202.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:46:e8:3f:87:ef:cb:fc:2c:a5:fa:9d:50:58:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jan 2 17:53:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b9a4ea809208e960339e1cf739f0fa4f838782f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:a3:57:f6:21:cf:63:d8:1e:eb:8c:71:7d:
64:98:00:3b:96:0d:07:04:5b:d2:42:e0:1e:30:1b:
b0:62:14:d1:68:3a:4d:fe:b9:fa:c5:51:7e:97:2f:
73:29:03:6a:b4:d7:e1:ae:ac:4d:3e:21:e4:8c:85:
23:fd:13:f3:f4:c1:e9:fd:e6:40:87:d7:6b:cb:fc:
e2:c4:9e:55:85:51:65:7d:c7:6d:b6:5c:01:b3:53:
ef:79:05:89:31:3c:c0:10:34:a2:1a:c4:f8:04:54:
5c:70:db:25:87:97:77:84:16:4b:19:c2:fa:bb:63:
f3:03:97:68:ec:d3:80:05:45:a5:c5:b0:29:85:55:
60:95:65:6f:95:b5:e8:55:13:0a:d9:a2:f3:87:e9:
04:31:5e:0e:87:04:0d:13:b6:2e:ee:ec:84:0f:aa:
91:dd:20:38:ee:86:84:bb:c4:58:6f:c9:81:da:d3:
3a:0b:87:79:85:fc:81:65:56:af:aa:22:fe:2c:27:
bd:c2:6a:65:53:d7:f8:d9:5d:d6:a2:70:24:55:5b:
6c:f1:50:b7:97:70:a0:11:ea:79:e6:8c:52:c3:f4:
b7:76:33:91:2b:3e:06:77:1f:a6:65:b1:16:fe:56:
40:bc:0e:e7:47:a9:c7:e0:10:37:53:b8:0e:85:20:
c2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9A:4E:A8:09:20:8E:96:03:39:E1:CF:73:9F:0F:A4:F8:38:78:2F
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/W5pOqAkgjpYDOeHPc58PpPg4eC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.209.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:47:06:e9:54:ea:3f:98:56:f8:fa:4c:67:0d:83:db:0b:d0:
86:a5:6a:e9:5c:de:85:49:ef:78:f7:28:36:e5:ff:7f:84:8e:
6f:8f:d2:ce:21:b8:f7:84:75:c3:88:d0:ab:09:86:65:24:40:
3b:7e:f8:42:3b:22:12:0c:dd:b4:e2:ab:e9:c4:f7:ee:b1:5c:
dc:49:4f:03:47:8c:6a:46:c6:b9:49:7f:f9:8e:3a:ed:3f:9b:
a9:ec:38:6e:64:3a:a7:b3:2b:ae:9f:bf:84:02:19:73:d3:2f:
d8:80:e9:62:77:40:6c:4b:a0:fd:78:5f:47:72:a0:19:81:95:
22:a2:ac:47:4c:88:f7:08:43:22:a4:a0:3a:3d:69:b5:79:dc:
0d:cb:f1:60:aa:29:84:b3:a5:1f:1f:8a:82:2d:58:88:2b:19:
39:41:99:f8:4b:39:4f:8d:c4:c3:0c:9c:19:63:01:fd:b6:d4:
78:a4:01:1a:78:46:66:d5:19:91:d7:8f:9c:2b:a4:17:1b:74:
d8:56:8a:66:3b:f6:81:a7:f9:17:5f:d7:62:9b:38:19:9e:34:
e7:83:0d:6d:1b:30:2f:1e:79:15:f0:c6:89:7a:97:a1:75:ca:
2b:19:5e:2e:ec:c5:20:c4:24:eb:4b:7d:0d:3d:6b:03:4c:62:
8a:a0:8f:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJkboP4fvy/wspfqdUFhQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjUwMTAyMTc1MzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjlhNGVhODA5MjA4ZTk2MDMzOWUxY2Y3MzlmMGZhNGY4Mzg3ODJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRKjV/Yhz2PYHuuMcX1kmAA7lg0H
BFvSQuAeMBuwYhTRaDpN/rn6xVF+ly9zKQNqtNfhrqxNPiHkjIUj/RPz9MHp/eZA
h9dry/zixJ5VhVFlfcdttlwBs1PveQWJMTzAEDSiGsT4BFRccNslh5d3hBZLGcL6
u2PzA5do7NOABUWlxbAphVVglWVvlbXoVRMK2aLzh+kEMV4OhwQNE7Yu7uyED6qR
3SA47oaEu8RYb8mB2tM6C4d5hfyBZVavqiL+LCe9wmplU9f42V3WonAkVVts8VC3
l3CgEep55oxSw/S3djORKz4Gdx+mZbEW/lZAvA7nR6nH4BA3U7gOhSDCSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFuaTqgJII6WAznhz3OfD6T4OHgvMB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvVzVwT3FBa2dqcFlET2VIUGM1OFBwUGc0ZUM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8rRMA0G
CSqGSIb3DQEBCwUAA4IBAQCgRwbpVOo/mFb4+kxnDYPbC9CGpWrpXN6FSe949yg2
5f9/hI5vj9LOIbj3hHXDiNCrCYZlJEA7fvhCOyISDN204qvpxPfusVzcSU8DR4xq
Rsa5SX/5jjrtP5up7DhuZDqnsyuun7+EAhlz0y/YgOlid0BsS6D9eF9HcqAZgZUi
oqxHTIj3CEMipKA6PWm1edwNy/FgqimEs6UfH4qCLViIKxk5QZn4SzlPjcTDDJwZ
YwH9ttR4pAEaeEZm1RmR14+cK6QXG3TYVopmO/aBp/kXX9dimzgZnjTngw1tGzAv
HnkV8MaJepehdcorGV4u7MUgxCTrS30NPWsDTGKKoI/0
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:20:40 2025 by rpki-client