Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d09fd4-a01b-4e85-b344-c849a99eaea9/1/wf5iQAqrFM6jbLqKUH2Pit10jcE.roa
File: wf5iQAqrFM6jbLqKUH2Pit10jcE.roa (raw, json)
Hash identifier: u7ooHglSAjRoyIV39lYR5l2p7/io0KtiajYhou8uGCM=
Subject key identifier: C1:FE:62:40:0A:AB:14:CE:A3:6C:BA:8A:50:7D:8F:8A:DD:74:8D:C1
Certificate issuer: /CN=27ed8db4f101e1524266a1078e7cd82d7c612843
Certificate serial: 018CC492FB3E561D01E639762D37741C3D1D
Authority key identifier: 27:ED:8D:B4:F1:01:E1:52:42:66:A1:07:8E:7C:D8:2D:7C:61:28:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-2NtPEB4VJCZqEHjnzYLXxhKEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d09fd4-a01b-4e85-b344-c849a99eaea9/1/wf5iQAqrFM6jbLqKUH2Pit10jcE.roa
Signing time: Mon 01 Jan 2024 10:30:15 +0000
ROA not before: Mon 01 Jan 2024 10:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 80.91.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:fb:3e:56:1d:01:e6:39:76:2d:37:74:1c:3d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ed8db4f101e1524266a1078e7cd82d7c612843
Validity
Not Before: Jan 1 10:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1fe62400aab14cea36cba8a507d8f8add748dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:d3:e7:b4:22:86:36:ff:e2:9e:d9:e5:0d:
19:22:bf:dd:90:8a:31:5c:12:76:91:46:95:d2:7a:
7f:dd:95:8a:db:b0:f0:0c:75:b8:3e:74:c0:24:45:
91:5a:10:82:f7:76:ef:38:dc:9d:dd:17:52:b8:a4:
ee:3b:03:88:7f:96:30:05:31:96:5c:41:6d:f5:aa:
75:38:03:70:96:89:a3:30:e3:6d:54:6b:64:ec:ab:
a1:57:a5:3d:92:19:06:2e:85:c1:b8:d1:40:61:9c:
01:e5:c6:68:53:f8:2f:c7:e0:4a:42:a4:56:78:1e:
f7:4e:c4:e1:c0:00:5e:22:f5:b1:ba:35:50:62:ff:
85:e3:5b:ba:f4:2e:76:b7:6e:25:6a:18:ec:6e:83:
6a:eb:b0:71:2f:92:a4:4e:9e:23:d9:5f:00:44:21:
fd:2b:0c:ee:3e:bb:fa:e3:49:36:ad:da:5f:1e:a7:
70:b5:d0:c0:9c:b3:80:73:4c:63:5e:09:e9:45:24:
8d:b5:ff:a3:55:f4:42:7f:83:cb:4a:24:36:7f:81:
0a:2b:76:04:66:03:00:66:5a:d2:a6:a6:2d:c9:e8:
f3:61:56:22:b7:08:5c:f2:67:71:1f:d4:d8:29:c3:
8f:6e:d7:ac:fa:ab:a3:57:22:5b:d7:fd:5d:c8:dc:
ed:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FE:62:40:0A:AB:14:CE:A3:6C:BA:8A:50:7D:8F:8A:DD:74:8D:C1
X509v3 Authority Key Identifier:
keyid:27:ED:8D:B4:F1:01:E1:52:42:66:A1:07:8E:7C:D8:2D:7C:61:28:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-2NtPEB4VJCZqEHjnzYLXxhKEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d09fd4-a01b-4e85-b344-c849a99eaea9/1/wf5iQAqrFM6jbLqKUH2Pit10jcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d09fd4-a01b-4e85-b344-c849a99eaea9/1/J-2NtPEB4VJCZqEHjnzYLXxhKEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.212.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:69:c8:6d:74:5e:99:ae:30:50:57:a9:75:2a:fa:21:e2:61:
22:cb:95:48:93:27:48:2d:36:18:f8:56:92:af:e1:1c:a6:e2:
7c:31:6d:d2:bd:7a:d1:cc:5f:f4:85:54:19:ce:db:77:05:40:
ee:93:d3:06:4c:cd:be:0b:e7:57:e0:ed:05:66:36:a3:20:33:
4b:80:a5:eb:bd:d9:36:4b:1f:16:18:0b:2c:35:64:4f:2b:ea:
c8:30:9f:d8:15:c0:e2:71:16:37:c2:00:55:76:b8:73:b5:cf:
61:24:13:98:db:22:71:56:f4:53:c1:60:b4:59:b6:39:93:d7:
ae:15:87:96:cb:26:d4:7a:97:84:59:2f:2c:ce:87:b4:80:d0:
3a:07:f0:d5:b4:a6:b8:9c:e8:21:b7:d8:64:df:b8:d5:85:68:
e6:ac:a2:23:bc:0d:b6:c7:15:a7:2a:4c:4c:46:61:22:36:d5:
e1:f2:84:e5:e2:71:7c:3b:be:36:61:42:a4:77:8b:12:17:25:
91:81:c6:4e:62:ae:2c:b6:96:bc:42:22:68:39:aa:74:ef:da:
75:1e:a5:5a:bb:a7:fa:a8:78:e0:47:7a:b4:a2:73:24:ed:4c:
3d:55:9c:ba:81:0c:63:c8:7d:56:cb:c3:fc:24:4d:ef:9d:f3:
06:b9:ae:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkvs+Vh0B5jl2LTd0HD0dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZWQ4ZGI0ZjEwMWUxNTI0MjY2YTEwNzhlN2NkODJkN2M2
MTI4NDMwHhcNMjQwMTAxMTAzMDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWZlNjI0MDBhYWIxNGNlYTM2Y2JhOGE1MDdkOGY4YWRkNzQ4ZGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubvT57Qihjb/4p7Z5Q0ZIr/dkIox
XBJ2kUaV0np/3ZWK27DwDHW4PnTAJEWRWhCC93bvONyd3RdSuKTuOwOIf5YwBTGW
XEFt9ap1OANwlomjMONtVGtk7KuhV6U9khkGLoXBuNFAYZwB5cZoU/gvx+BKQqRW
eB73TsThwABeIvWxujVQYv+F41u69C52t24lahjsboNq67BxL5KkTp4j2V8ARCH9
KwzuPrv640k2rdpfHqdwtdDAnLOAc0xjXgnpRSSNtf+jVfRCf4PLSiQ2f4EKK3YE
ZgMAZlrSpqYtyejzYVYitwhc8mdxH9TYKcOPbtes+qujVyJb1/1dyNzt1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMH+YkAKqxTOo2y6ilB9j4rddI3BMB8GA1UdIwQY
MBaAFCftjbTxAeFSQmahB4582C18YShDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSi0yTnRQRUI0VkpDWnFFSGpuellMWHhoS0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9kMDlmZDQtYTAxYi00ZTg1LWIzNDQt
Yzg0OWE5OWVhZWE5LzEvd2Y1aVFBcXJGTTZqYkxxS1VIMlBpdDEwamNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9kMDlmZDQtYTAxYi00ZTg1LWIzNDQtYzg0OWE5OWVhZWE5
LzEvSi0yTnRQRUI0VkpDWnFFSGpuellMWHhoS0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFvUMA0G
CSqGSIb3DQEBCwUAA4IBAQBtachtdF6ZrjBQV6l1Kvoh4mEiy5VIkydILTYY+FaS
r+EcpuJ8MW3SvXrRzF/0hVQZztt3BUDuk9MGTM2+C+dX4O0FZjajIDNLgKXrvdk2
Sx8WGAssNWRPK+rIMJ/YFcDicRY3wgBVdrhztc9hJBOY2yJxVvRTwWC0WbY5k9eu
FYeWyybUepeEWS8szoe0gNA6B/DVtKa4nOght9hk37jVhWjmrKIjvA22xxWnKkxM
RmEiNtXh8oTl4nF8O742YUKkd4sSFyWRgcZOYq4stpa8QiJoOap079p1HqVau6f6
qHjgR3q0onMk7Uw9VZy6gQxjyH1Wy8P8JE3vnfMGua5e
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:22 2025 by rpki-client