Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/W0tavrjJSSiPuQlULsDp4KDy2W4.roa
File: W0tavrjJSSiPuQlULsDp4KDy2W4.roa (raw, json)
Hash identifier: t/YLBngwq/zvwgwACF50uiu831rnT/Xxzg6t8YeTWtM=
Subject key identifier: 5B:4B:5A:BE:B8:C9:49:28:8F:B9:09:54:2E:C0:E9:E0:A0:F2:D9:6E
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 01942825625F2BA534A57CDA35D76401FFDB
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/W0tavrjJSSiPuQlULsDp4KDy2W4.roa
Signing time: Thu 02 Jan 2025 17:52:06 +0000
ROA not before: Thu 02 Jan 2025 17:52:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211859
IP address blocks: 185.237.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:62:5f:2b:a5:34:a5:7c:da:35:d7:64:01:ff:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Jan 2 17:52:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b4b5abeb8c949288fb909542ec0e9e0a0f2d96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:db:ad:ca:ca:46:9c:4f:ec:1c:a1:9e:4b:
5d:e4:8c:6d:5a:eb:5e:36:8f:d3:3e:b3:5b:f6:0c:
09:b4:b8:a7:5f:ac:98:27:c3:3f:a5:49:1d:c3:49:
72:5c:21:29:a5:40:4b:71:e7:3d:3d:6a:cf:5e:7b:
e8:85:a2:8a:88:fb:49:39:1c:60:1a:ec:c9:ba:8b:
c9:b2:6d:cd:32:50:a5:87:b1:6e:2e:6c:75:c7:5a:
02:48:76:0d:e8:e3:8d:71:9b:8d:1e:de:3a:7d:3c:
2b:93:84:9b:ea:75:4f:d2:00:d4:b9:53:cb:6a:41:
79:2c:7b:93:1e:28:79:70:e1:66:8e:02:cf:09:fa:
97:eb:1a:49:35:bb:76:05:d7:eb:33:42:05:9a:b7:
7b:9d:01:12:b2:d2:f7:ed:60:fd:d7:51:ba:8d:2c:
de:e9:03:2d:4c:f9:f2:35:71:37:65:f2:08:82:67:
47:e5:13:a2:4c:bd:5d:9e:55:5f:7f:98:fa:db:11:
d8:c2:7f:23:91:a9:5f:ee:5f:63:a3:6a:8f:77:6f:
67:67:29:21:e1:d2:e2:fa:b1:8c:72:55:0a:e0:cd:
30:ea:45:e6:82:b9:8f:44:af:ae:c7:15:ac:c8:f1:
e5:8b:aa:21:c6:59:3f:12:7a:ed:c7:94:76:af:a6:
1b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4B:5A:BE:B8:C9:49:28:8F:B9:09:54:2E:C0:E9:E0:A0:F2:D9:6E
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/W0tavrjJSSiPuQlULsDp4KDy2W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.83.0/24
Signature Algorithm: sha256WithRSAEncryption
36:41:0b:f8:c5:41:aa:a8:f8:e2:6d:fe:b7:6c:f4:9c:22:96:
3f:d6:5d:f8:e8:69:48:4c:06:a0:6d:7d:14:95:ed:8f:2e:94:
63:c5:d1:6f:b4:eb:ea:21:c8:df:32:45:ba:70:e0:c6:15:f4:
0e:71:28:b6:72:09:cd:3f:5b:7a:c4:3b:73:6f:23:a1:d6:f6:
e4:ab:aa:4f:ce:c6:22:07:a3:a5:52:fc:af:7b:86:1a:64:21:
5e:05:77:f0:f9:30:04:b3:61:01:e7:c6:be:11:ae:f8:86:06:
5d:d3:5d:bf:c5:95:64:b7:30:51:66:10:5c:49:fa:ca:52:de:
88:08:a0:ee:86:85:aa:ef:f0:f3:f1:63:98:f4:1a:1b:24:73:
66:1c:e7:a8:dc:e9:13:95:72:69:5d:4e:be:72:85:52:33:6c:
e0:45:df:6c:41:f6:a2:9b:44:02:74:5c:6c:4b:a4:76:56:aa:
f4:fb:27:48:7e:57:03:12:12:50:04:fa:1d:17:89:56:6e:7d:
c3:40:50:7e:27:55:80:69:d1:db:51:4d:81:4c:0b:11:bd:51:
e0:44:05:28:c1:83:fb:26:1c:e4:6f:7f:f6:94:ac:7f:80:87:
7b:c2:26:e1:14:11:35:9e:ab:6d:e3:ec:bc:26:4b:a3:45:ee:
81:0f:06:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJWJfK6U0pXzaNddkAf/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi
ZDBhNWYwHhcNMjUwMTAyMTc1MjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjRiNWFiZWI4Yzk0OTI4OGZiOTA5NTQyZWMwZTllMGEwZjJkOTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUnbrcrKRpxP7Byhnktd5IxtWute
No/TPrNb9gwJtLinX6yYJ8M/pUkdw0lyXCEppUBLcec9PWrPXnvohaKKiPtJORxg
GuzJuovJsm3NMlClh7FuLmx1x1oCSHYN6OONcZuNHt46fTwrk4Sb6nVP0gDUuVPL
akF5LHuTHih5cOFmjgLPCfqX6xpJNbt2BdfrM0IFmrd7nQESstL37WD911G6jSze
6QMtTPnyNXE3ZfIIgmdH5ROiTL1dnlVff5j62xHYwn8jkalf7l9jo2qPd29nZykh
4dLi+rGMclUK4M0w6kXmgrmPRK+uxxWsyPHli6ohxlk/Enrtx5R2r6YbkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFtLWr64yUkoj7kJVC7A6eCg8tluMB8GA1UdIwQY
MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt
N2JiZDI4Y2U0YTc1LzEvVzB0YXZyakpTU2lQdVFsVUxzRHA0S0R5Mlc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1
LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue1TMA0G
CSqGSIb3DQEBCwUAA4IBAQA2QQv4xUGqqPjibf63bPScIpY/1l346GlITAagbX0U
le2PLpRjxdFvtOvqIcjfMkW6cODGFfQOcSi2cgnNP1t6xDtzbyOh1vbkq6pPzsYi
B6OlUvyve4YaZCFeBXfw+TAEs2EB58a+Ea74hgZd012/xZVktzBRZhBcSfrKUt6I
CKDuhoWq7/Dz8WOY9BobJHNmHOeo3OkTlXJpXU6+coVSM2zgRd9sQfaim0QCdFxs
S6R2Vqr0+ydIflcDEhJQBPodF4lWbn3DQFB+J1WAadHbUU2BTAsRvVHgRAUowYP7
Jhzkb3/2lKx/gId7wibhFBE1nqtt4+y8JkujRe6BDwb9
-----END CERTIFICATE-----
Generated at Wed Apr 9 04:11:27 2025 by rpki-client