Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/wSK3TEqaONdwtqYByktpLoC9XxM.roa
File: wSK3TEqaONdwtqYByktpLoC9XxM.roa (raw, json)
Hash identifier: VuQyagVUYb2xT4bvHSmNEYjaX9Dtg0YekkLzWO6iXDY=
Subject key identifier: C1:22:B7:4C:4A:9A:38:D7:70:B6:A6:01:CA:4B:69:2E:80:BD:5F:13
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 0195FB97E21E2AA1C0BB10754E471E23185E
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/wSK3TEqaONdwtqYByktpLoC9XxM.roa
Signing time: Thu 03 Apr 2025 12:19:49 +0000
ROA not before: Thu 03 Apr 2025 12:19:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 185.113.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:97:e2:1e:2a:a1:c0:bb:10:75:4e:47:1e:23:18:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Apr 3 12:19:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c122b74c4a9a38d770b6a601ca4b692e80bd5f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:fa:9a:5d:db:0a:8b:bf:f3:f9:73:df:12:
0d:81:83:f1:ca:86:b6:ae:b5:7a:a6:ad:09:22:23:
41:6b:12:b8:dc:f7:79:54:18:03:66:69:93:b1:a9:
0b:b8:59:f8:0d:1c:1d:02:c9:75:e8:e6:62:92:64:
24:52:9a:f6:84:dc:dc:c8:ec:fa:24:46:dd:82:5b:
32:19:d9:06:76:11:7b:29:db:ab:60:74:06:a4:29:
3b:4d:ef:7f:1c:fb:2d:d6:2b:9b:3e:36:74:a2:0e:
4c:9a:83:4c:00:7e:0d:4a:40:25:d4:e7:65:c6:a1:
67:ac:d9:4a:de:a3:f7:53:45:0a:a0:ef:10:2f:f4:
e1:d8:07:db:8a:13:7e:aa:52:7f:98:d8:b5:30:53:
57:50:f0:7f:68:e1:cc:62:85:4a:d8:ce:d5:be:6e:
87:46:65:e9:62:42:76:9b:f2:6c:08:81:76:84:a4:
dc:2f:c7:01:76:72:76:65:82:9e:4c:44:b1:6b:62:
f7:64:f7:50:8f:89:5a:b3:51:0c:fb:04:c3:c1:1d:
bd:41:32:0a:9a:50:45:81:34:55:d1:eb:27:97:b6:
62:9a:65:38:37:e2:96:3e:74:42:1c:ae:c9:50:03:
fc:c2:3c:bf:cf:82:2a:0e:b6:fb:14:c3:c2:6c:34:
b1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:22:B7:4C:4A:9A:38:D7:70:B6:A6:01:CA:4B:69:2E:80:BD:5F:13
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/wSK3TEqaONdwtqYByktpLoC9XxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.192.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:24:e7:15:89:33:7a:55:af:ae:7e:86:ec:ba:d1:c0:7f:4c:
52:54:fe:81:d3:38:e8:75:09:f3:2d:13:66:5d:85:c5:ed:d0:
e6:ba:50:b5:a2:21:e4:ab:71:b2:e7:8b:5e:d6:40:3f:9b:1d:
ab:e5:60:03:ab:3c:c9:6f:ba:77:fa:67:ca:44:2f:5f:42:4c:
fe:bd:66:7e:83:b3:f2:34:e9:60:55:72:80:11:d7:d3:03:44:
cc:06:61:33:f0:d7:02:b4:76:3c:24:f6:18:64:c3:9b:26:02:
47:24:be:88:b1:a6:ce:f1:e3:b4:68:7f:5f:af:a6:c1:29:97:
30:a8:67:07:0a:1e:3f:83:97:1c:45:bb:5b:f8:0b:dc:cf:38:
e0:2b:0f:68:bf:78:4e:33:29:86:c0:e5:c2:8e:79:b8:fa:53:
f1:01:74:1a:e6:13:93:c1:c2:f1:f3:4b:aa:8b:da:1c:23:5b:
71:43:8b:2a:7a:1d:06:a0:0a:ac:f2:2b:09:13:37:0e:51:00:
21:14:d3:b0:19:b5:dd:02:1f:a1:29:37:7c:08:f5:03:ca:bb:
cd:e6:4e:01:aa:aa:c5:22:74:20:a1:36:5a:0e:84:b4:d0:fa:
66:88:a0:8c:c4:93:fb:c9:09:c6:aa:6d:3a:b8:3e:35:1f:66:
bd:d2:f1:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZX7l+IeKqHAuxB1TkceIxheMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZmZiMzA5YzI4OWFjZmZjMWJlMzRhNmYwYjY2NzVjMDAx
NzEzZWEwHhcNMjUwNDAzMTIxOTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTIyYjc0YzRhOWEzOGQ3NzBiNmE2MDFjYTRiNjkyZTgwYmQ1ZjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr36ml3bCou/8/lz3xINgYPxyoa2
rrV6pq0JIiNBaxK43Pd5VBgDZmmTsakLuFn4DRwdAsl16OZikmQkUpr2hNzcyOz6
JEbdglsyGdkGdhF7KdurYHQGpCk7Te9/HPst1iubPjZ0og5MmoNMAH4NSkAl1Odl
xqFnrNlK3qP3U0UKoO8QL/Th2AfbihN+qlJ/mNi1MFNXUPB/aOHMYoVK2M7Vvm6H
RmXpYkJ2m/JsCIF2hKTcL8cBdnJ2ZYKeTESxa2L3ZPdQj4las1EM+wTDwR29QTIK
mlBFgTRV0esnl7ZimmU4N+KWPnRCHK7JUAP8wjy/z4IqDrb7FMPCbDSxKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMEit0xKmjjXcLamAcpLaS6AvV8TMB8GA1UdIwQY
MBaAFGT/swnCiaz/wb40pvC2Z1wAFxPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUt
Y2E0NDQ3MDQ0MTZmLzEvd1NLM1RFcWFPTmR3dHFZQnlrdHBMb0M5WHhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUtY2E0NDQ3MDQ0MTZm
LzEvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXHAMA0G
CSqGSIb3DQEBCwUAA4IBAQAfJOcViTN6Va+ufobsutHAf0xSVP6B0zjodQnzLRNm
XYXF7dDmulC1oiHkq3Gy54te1kA/mx2r5WADqzzJb7p3+mfKRC9fQkz+vWZ+g7Py
NOlgVXKAEdfTA0TMBmEz8NcCtHY8JPYYZMObJgJHJL6IsabO8eO0aH9fr6bBKZcw
qGcHCh4/g5ccRbtb+AvczzjgKw9ov3hOMymGwOXCjnm4+lPxAXQa5hOTwcLx80uq
i9ocI1txQ4sqeh0GoAqs8isJEzcOUQAhFNOwGbXdAh+hKTd8CPUDyrvN5k4BqqrF
InQgoTZaDoS00PpmiKCMxJP7yQnGqm06uD41H2a90vGM
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:27 2025 by rpki-client on console.sobornost.net