Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/WuDnpTvgkuPklOHnfrP3r5bErfk.roa
File: WuDnpTvgkuPklOHnfrP3r5bErfk.roa (raw, json)
Hash identifier: TCCAUPiIKzJ/hzLcQ0uOloKFv6fWv5xOupwAp3obJxA=
Subject key identifier: 5A:E0:E7:A5:3B:E0:92:E3:E4:94:E1:E7:7E:B3:F7:AF:96:C4:AD:F9
Certificate issuer: /CN=7edd7c8d69327f0b5651c5bff187428e8b2f3c94
Certificate serial: E2A4C5
Authority key identifier: 7E:DD:7C:8D:69:32:7F:0B:56:51:C5:BF:F1:87:42:8E:8B:2F:3C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ft18jWkyfwtWUcW_8YdCjosvPJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/WuDnpTvgkuPklOHnfrP3r5bErfk.roa
Signing time: Thu 05 May 2022 13:27:39 +0000
ROA not before: Thu 05 May 2022 13:27:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 195.64.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14853317 (0xe2a4c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7edd7c8d69327f0b5651c5bff187428e8b2f3c94
Validity
Not Before: May 5 13:27:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ae0e7a53be092e3e494e1e77eb3f7af96c4adf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:67:87:57:87:ea:ff:62:1e:48:ba:26:80:
97:60:48:61:1e:f9:41:6e:57:f4:8b:cc:14:e1:29:
1c:b9:72:c9:75:37:88:01:d1:fa:fb:76:5f:d2:da:
a3:6d:c3:5d:18:36:78:4a:ad:62:22:e4:58:23:d7:
43:3a:f9:81:e9:7a:83:8b:e1:1f:f3:1e:bb:71:d1:
a1:28:5e:ff:75:13:de:ff:92:c6:c8:ca:00:91:6e:
42:75:71:d2:1c:d3:31:71:ff:0a:86:7c:d2:1c:5d:
50:ff:6a:a7:98:b0:ec:3a:19:6b:c7:0f:0e:0c:f6:
e5:cc:7a:99:f9:b0:af:3a:c5:43:51:15:32:d9:dd:
a1:a2:84:d5:91:7c:85:e6:6e:3c:98:07:65:8a:af:
57:00:fc:6a:3e:f5:1f:a1:b7:29:65:4c:a3:cd:f2:
fb:64:1b:5a:63:f1:cd:3a:b0:6e:48:d6:de:53:c4:
a8:a0:3f:ed:08:ad:1d:3c:2e:67:11:91:34:0d:48:
ff:6e:6d:11:ab:93:a8:9c:14:93:37:56:1b:d2:a2:
ab:9f:9f:1e:2f:ce:3f:db:3d:fd:69:2a:bc:ab:16:
4f:f6:e6:15:c1:4e:95:06:d2:c8:66:ac:57:8b:3a:
5e:40:e4:9c:8c:95:18:26:16:2b:d8:90:14:f7:b2:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E0:E7:A5:3B:E0:92:E3:E4:94:E1:E7:7E:B3:F7:AF:96:C4:AD:F9
X509v3 Authority Key Identifier:
keyid:7E:DD:7C:8D:69:32:7F:0B:56:51:C5:BF:F1:87:42:8E:8B:2F:3C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ft18jWkyfwtWUcW_8YdCjosvPJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/WuDnpTvgkuPklOHnfrP3r5bErfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/ft18jWkyfwtWUcW_8YdCjosvPJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.106.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:0d:03:06:d2:b0:d3:d4:be:3e:41:50:c2:f6:03:ce:73:a7:
c4:bc:7b:ff:74:b1:5a:a9:12:08:ca:2c:27:f0:5f:62:cd:b6:
29:a0:2d:c6:21:ab:c7:0c:7d:0b:ec:cd:62:4e:bb:b1:1a:58:
79:c4:64:fd:10:23:66:30:0a:fd:2b:13:be:f5:5e:0b:0b:dd:
9f:9f:93:2e:4a:e9:24:ba:c7:12:19:d4:e8:11:04:78:69:79:
ab:37:ec:6e:32:a9:a3:4a:9d:5b:b0:de:81:c1:38:49:0e:5c:
f1:ca:71:79:8d:49:c2:c2:70:2d:84:74:e7:73:7c:e7:fb:83:
a0:9e:11:01:4c:35:ee:ae:04:37:c9:38:00:56:b7:1c:02:24:
cf:1d:f7:4d:7d:ed:35:2a:a4:de:51:61:bd:23:cc:60:45:c9:
66:e3:d0:ed:65:45:3f:d1:35:2e:66:84:71:09:f3:c6:59:ec:
7b:20:57:19:b2:65:93:a3:0a:7a:c9:61:be:53:78:4c:b4:5e:
73:82:b9:42:18:cc:63:85:b9:28:2d:b2:f7:cc:58:22:2b:b2:
b5:ff:f3:2c:70:5b:57:2a:0e:af:3d:a8:89:48:3c:2a:30:e7:
51:e3:aa:ba:94:af:89:bd:31:41:5f:2a:d5:44:ae:16:5f:b8:
6e:c2:97:db
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAOKkxTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZWRkN2M4ZDY5MzI3ZjBiNTY1MWM1YmZmMTg3NDI4ZThiMmYzYzk0MB4XDTIyMDUw
NTEzMjczOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWFlMGU3YTUzYmUw
OTJlM2U0OTRlMWU3N2ViM2Y3YWY5NmM0YWRmOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMY8Z4dXh+r/Yh5IuiaAl2BIYR75QW5X9IvMFOEpHLlyyXU3
iAHR+vt2X9Lao23DXRg2eEqtYiLkWCPXQzr5gel6g4vhH/Meu3HRoShe/3UT3v+S
xsjKAJFuQnVx0hzTMXH/CoZ80hxdUP9qp5iw7DoZa8cPDgz25cx6mfmwrzrFQ1EV
MtndoaKE1ZF8heZuPJgHZYqvVwD8aj71H6G3KWVMo83y+2QbWmPxzTqwbkjW3lPE
qKA/7QitHTwuZxGRNA1I/25tEauTqJwUkzdWG9Kiq5+fHi/OP9s9/WkqvKsWT/bm
FcFOlQbSyGasV4s6XkDknIyVGCYWK9iQFPeySh8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRa4OelO+CS4+SU4ed+s/evlsSt+TAfBgNVHSMEGDAWgBR+3XyNaTJ/C1ZR
xb/xh0KOiy88lDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Z0MThqV2t5Znd0V1VjV184WWRDam9zdlBKUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWEvNTM0MjUyLWQ1MGEtNDA5YS05YjE0LTljNDU1YTYzNjc1Ni8x
L1d1RG5wVHZna3VQa2xPSG5mclAzcjViRXJmay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEv
NTM0MjUyLWQ1MGEtNDA5YS05YjE0LTljNDU1YTYzNjc1Ni8xL2Z0MThqV2t5Znd0
V1VjV184WWRDam9zdlBKUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMNAajANBgkqhkiG9w0BAQsFAAOC
AQEAPw0DBtKw09S+PkFQwvYDznOnxLx7/3SxWqkSCMosJ/BfYs22KaAtxiGrxwx9
C+zNYk67sRpYecRk/RAjZjAK/SsTvvVeCwvdn5+TLkrpJLrHEhnU6BEEeGl5qzfs
bjKpo0qdW7DegcE4SQ5c8cpxeY1JwsJwLYR053N85/uDoJ4RAUw17q4EN8k4AFa3
HAIkzx33TX3tNSqk3lFhvSPMYEXJZuPQ7WVFP9E1LmaEcQnzxlnseyBXGbJlk6MK
eslhvlN4TLRec4K5QhjMY4W5KC2y98xYIiuytf/zLHBbVyoOrz2oiUg8KjDnUeOq
upSvib0xQV8q1USuFl+4bsKX2w==
-----END CERTIFICATE-----
Generated at Tue Apr 22 14:08:57 2025 by rpki-client