Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/wA335v0tN6j8TOVCya6MJB0vGZE.roa
File: wA335v0tN6j8TOVCya6MJB0vGZE.roa (raw, json)
Hash identifier: Wv3IFbmlxvLR5yW5Px59rxWtiozQA3QTcuT4bqFgTbE=
Subject key identifier: C0:0D:F7:E6:FD:2D:37:A8:FC:4C:E5:42:C9:AE:8C:24:1D:2F:19:91
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 01941FFAB84173D45FE1D99D49D91ECDDD0B
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/wA335v0tN6j8TOVCya6MJB0vGZE.roa
Signing time: Wed 01 Jan 2025 03:48:32 +0000
ROA not before: Wed 01 Jan 2025 03:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34078
IP address blocks: 109.95.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b8:41:73:d4:5f:e1:d9:9d:49:d9:1e:cd:dd:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Jan 1 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c00df7e6fd2d37a8fc4ce542c9ae8c241d2f1991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6d:ad:db:62:61:02:d0:24:51:65:5c:cf:eb:
6f:f8:e0:f7:7a:da:c9:39:1e:e8:e7:75:da:b3:86:
69:9a:e3:77:f1:42:12:99:39:cb:e3:c4:9c:91:bc:
9a:e7:3b:71:45:55:25:ab:43:7e:39:17:39:03:a7:
88:28:26:4c:b2:b6:35:ba:1c:82:7f:ea:77:30:33:
b6:c1:31:95:38:6b:52:c8:f0:e8:d9:90:d5:a9:0b:
0d:08:d5:92:19:52:a3:79:f1:8c:8f:d3:cd:80:e4:
21:6a:9e:9e:bd:a1:33:d5:c9:b8:03:94:6a:3b:0a:
f8:9f:90:0a:59:31:0e:83:e9:c1:d8:bc:a4:15:5e:
fc:cc:4d:e0:04:9c:ac:f0:bf:22:cf:1f:fa:21:48:
59:99:26:74:06:88:ba:34:55:78:74:db:7b:40:c4:
d9:62:5b:32:62:45:ce:d7:1c:c9:a3:25:e1:28:7c:
5c:cf:77:78:de:f7:df:91:69:17:38:51:fe:f7:06:
96:e4:6e:53:8a:ed:93:5b:f1:2b:52:56:fb:47:72:
f2:69:d4:ae:aa:1b:a9:48:21:ba:e9:59:58:0a:c7:
d9:81:9e:ce:7f:8c:d9:42:77:e4:1d:99:15:49:df:
cd:29:05:84:4c:28:9a:d7:bb:4b:24:3d:6a:90:7c:
f5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0D:F7:E6:FD:2D:37:A8:FC:4C:E5:42:C9:AE:8C:24:1D:2F:19:91
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/wA335v0tN6j8TOVCya6MJB0vGZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.66.0/24
Signature Algorithm: sha256WithRSAEncryption
23:dd:24:a0:30:2a:dd:c2:67:01:8a:7f:bc:ce:83:81:58:89:
4c:10:74:2b:70:58:49:74:3a:2b:04:40:91:c0:17:42:0b:e9:
b8:4d:4d:f6:8b:61:ce:5e:78:d3:62:1b:45:86:c7:a8:0a:9b:
6c:7f:ed:d3:bb:9b:c6:51:05:f9:39:62:6e:3d:c3:36:47:8c:
c6:e3:84:3a:98:22:2f:4c:05:55:00:86:9d:08:cf:1e:c5:2a:
10:f8:73:32:d1:b6:b7:47:2e:e0:b7:11:43:4b:9b:da:b2:33:
75:59:9f:b3:cd:68:67:d0:91:39:bd:48:ea:7d:81:6e:2f:80:
af:62:b1:da:60:ba:2b:3c:fb:e6:61:c9:e3:35:c7:e1:50:9e:
30:0a:12:12:4f:19:1c:1b:bb:eb:3a:07:49:74:a5:49:63:e2:
61:73:e9:88:68:63:14:4d:77:73:82:62:ad:bd:e2:61:5f:53:
f7:63:c3:d4:09:4b:8e:6c:c9:bf:c4:1a:96:5d:25:19:2a:91:
23:cb:fb:6f:f5:6d:7c:e6:3a:e9:1a:5f:b6:3b:c9:16:a3:1a:
49:60:df:23:ff:cb:75:b4:03:af:be:18:72:bc:74:99:ed:7c:
f1:e3:c8:79:12:49:f9:7d:a6:91:6c:6c:40:8f:6a:aa:d0:6f:
ff:e3:df:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+rhBc9Rf4dmdSdkezd0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZWJkNGY3YWMzZDI0OTIwZGUxYzFmZjExODVkOTUwN2U5
YWQwNzgwHhcNMjUwMTAxMDM0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDBkZjdlNmZkMmQzN2E4ZmM0Y2U1NDJjOWFlOGMyNDFkMmYxOTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW2t22JhAtAkUWVcz+tv+OD3etrJ
OR7o53Xas4ZpmuN38UISmTnL48Sckbya5ztxRVUlq0N+ORc5A6eIKCZMsrY1uhyC
f+p3MDO2wTGVOGtSyPDo2ZDVqQsNCNWSGVKjefGMj9PNgOQhap6evaEz1cm4A5Rq
Owr4n5AKWTEOg+nB2LykFV78zE3gBJys8L8izx/6IUhZmSZ0Boi6NFV4dNt7QMTZ
YlsyYkXO1xzJoyXhKHxcz3d43vffkWkXOFH+9waW5G5Tiu2TW/ErUlb7R3LyadSu
qhupSCG66VlYCsfZgZ7Of4zZQnfkHZkVSd/NKQWETCia17tLJD1qkHz1QwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMAN9+b9LTeo/EzlQsmujCQdLxmRMB8GA1UdIwQY
MBaAFGDr1PesPSSSDeHB/xGF2VB+mtB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85MDUzNzgtMjI4YS00MWI0LWJjZTgt
ODdkM2IwMjNkOTE5LzEvd0EzMzV2MHRONmo4VE9WQ3lhNk1KQjB2R1pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi85MDUzNzgtMjI4YS00MWI0LWJjZTgtODdkM2IwMjNkOTE5
LzEvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbV9CMA0G
CSqGSIb3DQEBCwUAA4IBAQAj3SSgMCrdwmcBin+8zoOBWIlMEHQrcFhJdDorBECR
wBdCC+m4TU32i2HOXnjTYhtFhseoCptsf+3Tu5vGUQX5OWJuPcM2R4zG44Q6mCIv
TAVVAIadCM8exSoQ+HMy0ba3Ry7gtxFDS5vasjN1WZ+zzWhn0JE5vUjqfYFuL4Cv
YrHaYLorPPvmYcnjNcfhUJ4wChISTxkcG7vrOgdJdKVJY+Jhc+mIaGMUTXdzgmKt
veJhX1P3Y8PUCUuObMm/xBqWXSUZKpEjy/tv9W185jrpGl+2O8kWoxpJYN8j/8t1
tAOvvhhyvHSZ7Xzx48h5Ekn5faaRbGxAj2qq0G//499G
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:17:47 2025 by rpki-client