Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/wSXzcXJzuACGC-1sc_buBgyD2ZE.roa
File: wSXzcXJzuACGC-1sc_buBgyD2ZE.roa (raw, json)
Hash identifier: izj5nMHqLgQiaOAY5SB/IJqW8tZ+Nc50OAxWGAa2cnQ=
Subject key identifier: C1:25:F3:71:72:73:B8:00:86:0B:ED:6C:73:F6:EE:06:0C:83:D9:91
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019585869D074AA04EE72DDA9B67FC87C793
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/wSXzcXJzuACGC-1sc_buBgyD2ZE.roa
Signing time: Tue 11 Mar 2025 14:05:46 +0000
ROA not before: Tue 11 Mar 2025 14:05:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31715
IP address blocks: 144.56.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:86:9d:07:4a:a0:4e:e7:2d:da:9b:67:fc:87:c7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Mar 11 14:05:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c125f3717273b800860bed6c73f6ee060c83d991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:51:68:97:99:6a:ba:19:be:19:23:6e:8d:85:
ff:00:4d:fc:6d:fd:1a:7a:35:91:b6:2f:2c:56:9b:
35:a4:07:03:1d:0d:20:5f:ec:1f:76:88:5b:0d:e9:
dc:8e:c1:74:90:12:54:e0:86:5b:10:24:27:2e:1b:
a6:63:bb:e4:64:b1:e3:49:e7:58:a3:a9:67:16:c7:
bd:07:fd:7c:01:e3:90:b7:00:b6:23:6c:5f:c2:23:
84:8c:0b:91:f8:27:64:af:b5:d3:f0:73:70:62:cd:
27:72:65:1f:2c:ee:3e:e0:fe:30:a7:d8:33:ce:c7:
7e:38:d1:33:8c:6f:e8:0b:c6:a2:24:43:17:55:9d:
38:0f:e7:49:21:d7:3b:f3:b9:42:4d:08:63:69:31:
91:8e:f2:ec:d1:92:86:d6:a8:51:b4:8d:9d:91:a9:
29:75:9e:f2:a4:41:d2:34:66:f3:d9:0b:78:d1:a5:
04:5b:1b:93:dc:a4:92:1d:40:41:eb:06:4c:0f:c4:
2e:a5:56:72:d9:06:e7:94:f2:34:c4:0c:b8:dc:9b:
dd:3f:5d:01:85:32:ea:ca:09:60:df:fc:86:c2:93:
b7:0c:a4:7c:da:54:c1:09:0d:9b:15:e6:4d:04:47:
56:28:a4:ee:1b:36:ca:d2:f0:c9:76:a6:31:61:15:
d4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:25:F3:71:72:73:B8:00:86:0B:ED:6C:73:F6:EE:06:0C:83:D9:91
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/wSXzcXJzuACGC-1sc_buBgyD2ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.17.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:27:aa:ee:d2:c8:e6:8f:47:48:48:99:3b:b7:08:2c:12:e9:
54:6e:18:b8:3f:70:db:b0:11:c3:f1:cd:22:2e:31:12:62:9c:
ba:a9:f5:94:4b:c7:f5:9f:a4:26:d3:44:75:5f:c1:12:c9:0d:
98:74:dd:82:b0:1c:e8:1b:4d:f4:0e:ae:80:80:0e:64:ac:d7:
9b:44:90:64:27:b3:72:e5:3d:1b:56:94:ae:d5:40:78:60:4e:
af:ab:fb:1f:5a:1d:23:9e:24:3b:e8:13:6f:19:15:99:e6:81:
78:01:b5:fb:64:60:74:14:e0:0f:7a:d2:e3:24:60:79:86:00:
9f:40:bf:d4:85:d6:8d:79:b3:5f:b4:cf:64:bc:5c:0e:e8:92:
c8:e9:a8:d2:cc:2a:5b:1a:a4:e9:e5:b8:a7:11:88:c7:0d:05:
ed:4c:79:34:c5:ed:90:5f:1e:9f:d3:f1:af:a3:fe:f0:19:f5:
94:6e:21:e9:03:ac:a6:0d:ae:4d:0c:ce:4f:91:1f:2e:97:fd:
0d:f2:8e:82:6a:28:72:c1:88:80:df:ec:c9:16:df:4d:08:b4:
4c:3f:36:12:92:2b:1e:82:d4:11:13:cf:95:32:a5:6c:7a:4e:
1f:5d:d4:4d:4c:15:5b:77:91:61:5d:37:dc:3b:75:33:e6:bf:
6d:b6:8c:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWFhp0HSqBO5y3am2f8h8eTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky
NzNjNGMwHhcNMjUwMzExMTQwNTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTI1ZjM3MTcyNzNiODAwODYwYmVkNmM3M2Y2ZWUwNjBjODNkOTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lFol5lquhm+GSNujYX/AE38bf0a
ejWRti8sVps1pAcDHQ0gX+wfdohbDencjsF0kBJU4IZbECQnLhumY7vkZLHjSedY
o6lnFse9B/18AeOQtwC2I2xfwiOEjAuR+Cdkr7XT8HNwYs0ncmUfLO4+4P4wp9gz
zsd+ONEzjG/oC8aiJEMXVZ04D+dJIdc787lCTQhjaTGRjvLs0ZKG1qhRtI2dkakp
dZ7ypEHSNGbz2Qt40aUEWxuT3KSSHUBB6wZMD8QupVZy2QbnlPI0xAy43JvdP10B
hTLqyglg3/yGwpO3DKR82lTBCQ2bFeZNBEdWKKTuGzbK0vDJdqYxYRXUHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMEl83Fyc7gAhgvtbHP27gYMg9mRMB8GA1UdIwQY
MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt
MTM1NzE3ZWYzODhhLzEvd1NYemNYSnp1QUNHQy0xc2NfYnVCZ3lEMlpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh
LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkDgRMA0G
CSqGSIb3DQEBCwUAA4IBAQA9J6ru0sjmj0dISJk7twgsEulUbhi4P3DbsBHD8c0i
LjESYpy6qfWUS8f1n6Qm00R1X8ESyQ2YdN2CsBzoG030Dq6AgA5krNebRJBkJ7Ny
5T0bVpSu1UB4YE6vq/sfWh0jniQ76BNvGRWZ5oF4AbX7ZGB0FOAPetLjJGB5hgCf
QL/UhdaNebNftM9kvFwO6JLI6ajSzCpbGqTp5binEYjHDQXtTHk0xe2QXx6f0/Gv
o/7wGfWUbiHpA6ymDa5NDM5PkR8ul/0N8o6CaihywYiA3+zJFt9NCLRMPzYSkise
gtQRE8+VMqVsek4fXdRNTBVbd5FhXTfcO3Uz5r9ttoxv
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net