Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/wWq59skVXk0ZG4IFLK9dggmPZBc.roa
File: wWq59skVXk0ZG4IFLK9dggmPZBc.roa (raw, json)
Hash identifier: G7C47jomjQ8yRWntSox+zS/AjFvrINeu+2AEHacLP1Y=
Subject key identifier: C1:6A:B9:F6:C9:15:5E:4D:19:1B:82:05:2C:AF:5D:82:09:8F:64:17
Certificate issuer: /CN=869b3600fd738e698d12fef20e106e6a94e3b674
Certificate serial: 019518C955C29D9019D45660F4E06009CE52
Authority key identifier: 86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/wWq59skVXk0ZG4IFLK9dggmPZBc.roa
Signing time: Tue 18 Feb 2025 11:20:02 +0000
ROA not before: Tue 18 Feb 2025 11:20:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50635
IP address blocks: 195.191.186.0/23 maxlen: 23
195.191.186.0/24 maxlen: 24
195.191.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:c9:55:c2:9d:90:19:d4:56:60:f4:e0:60:09:ce:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869b3600fd738e698d12fef20e106e6a94e3b674
Validity
Not Before: Feb 18 11:20:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c16ab9f6c9155e4d191b82052caf5d82098f6417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c0:a5:33:df:83:ca:19:8d:bd:99:9b:5a:11:
cf:5d:6e:df:ac:af:3c:54:38:08:94:24:a0:43:69:
00:de:64:b6:bf:fe:eb:aa:3b:cd:52:3a:85:cb:06:
01:98:ef:14:04:1d:7d:32:b1:26:a5:d1:38:6c:5a:
45:dd:5e:7a:2e:55:61:cc:ae:37:13:7a:77:e3:7e:
d0:c6:9e:0e:b7:c0:d1:57:c9:97:fa:f2:8d:e1:00:
ff:78:42:8f:77:8c:2e:a5:b1:88:af:53:d8:af:45:
96:aa:e5:18:b1:5b:0b:3c:8b:79:a8:7c:9c:5b:e4:
53:36:d9:9f:97:91:a4:72:30:5a:39:e2:9f:35:cf:
aa:a3:7d:db:8e:e3:aa:db:da:49:c7:41:c3:ad:84:
96:7c:73:ab:76:67:cc:4b:66:b6:1a:ed:e8:a3:89:
14:d5:81:44:b4:b3:bd:b3:8f:85:6f:78:25:a3:71:
4b:57:6d:a2:91:8f:77:5b:15:76:d6:bb:67:18:bd:
4d:19:e3:6c:5a:d8:38:11:2e:4f:d7:b0:5b:d7:a9:
1d:e2:f2:b2:c7:66:22:80:74:5a:b6:19:d7:5e:35:
43:cf:4b:0a:88:e4:3c:74:fb:65:9f:b2:9c:29:19:
e6:5f:b4:39:4a:07:b4:45:0c:97:e3:47:ee:9e:d1:
9f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6A:B9:F6:C9:15:5E:4D:19:1B:82:05:2C:AF:5D:82:09:8F:64:17
X509v3 Authority Key Identifier:
keyid:86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/wWq59skVXk0ZG4IFLK9dggmPZBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.186.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:ea:dc:dd:74:1b:e8:40:fe:59:fc:ef:94:44:69:6c:fa:65:
5b:fd:88:9f:cf:19:a6:16:75:73:c6:2d:29:66:bf:2d:fb:10:
02:15:6c:1e:e0:9b:b8:34:89:0a:c6:4a:06:e8:9a:dc:9a:c7:
55:05:e8:2b:44:53:80:ea:9b:a6:10:e8:9e:21:3a:b1:45:98:
28:34:88:19:67:d2:fb:fd:bd:9c:f5:36:2c:6c:34:e7:b3:5c:
29:0a:94:6e:d4:1c:52:08:1b:21:d6:76:30:47:0d:06:90:ca:
f1:1c:05:b7:bb:d2:7e:90:9f:47:93:c4:90:f9:82:64:51:c0:
19:2e:30:b4:4b:a3:fc:97:c0:ef:f5:20:84:bd:68:5d:a6:f3:
4a:3a:b1:29:a5:e1:7d:85:39:8d:24:15:2a:c6:10:6f:b0:10:
48:8c:4f:bc:7e:7f:d6:2a:5f:21:bc:cd:6b:32:b4:15:5c:e5:
ac:fb:41:bb:f0:7e:6d:e1:6f:4e:60:aa:ac:fc:d9:97:1e:ef:
1d:c7:95:6c:f2:6b:af:44:4d:5f:f0:75:37:d0:6a:97:7b:6d:
f1:53:f8:73:75:47:e3:3c:6e:d2:f5:24:90:ae:fc:c0:07:28:
e4:60:6d:e6:ec:3d:e1:73:a3:3c:da:5f:48:a1:58:e7:3d:32:
5d:b7:0a:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUYyVXCnZAZ1FZg9OBgCc5SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OWIzNjAwZmQ3MzhlNjk4ZDEyZmVmMjBlMTA2ZTZhOTRl
M2I2NzQwHhcNMjUwMjE4MTEyMDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTZhYjlmNmM5MTU1ZTRkMTkxYjgyMDUyY2FmNWQ4MjA5OGY2NDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MClM9+DyhmNvZmbWhHPXW7frK88
VDgIlCSgQ2kA3mS2v/7rqjvNUjqFywYBmO8UBB19MrEmpdE4bFpF3V56LlVhzK43
E3p3437Qxp4Ot8DRV8mX+vKN4QD/eEKPd4wupbGIr1PYr0WWquUYsVsLPIt5qHyc
W+RTNtmfl5GkcjBaOeKfNc+qo33bjuOq29pJx0HDrYSWfHOrdmfMS2a2Gu3oo4kU
1YFEtLO9s4+Fb3glo3FLV22ikY93WxV21rtnGL1NGeNsWtg4ES5P17Bb16kd4vKy
x2YigHRathnXXjVDz0sKiOQ8dPtln7KcKRnmX7Q5Sge0RQyX40funtGfMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMFqufbJFV5NGRuCBSyvXYIJj2QXMB8GA1UdIwQY
MBaAFIabNgD9c45pjRL+8g4QbmqU47Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82MDk5NzYtMWFjZS00NDRmLWJjYjUt
NDI0M2U4OGJkNzZjLzEvd1dxNTlza1ZYazBaRzRJRkxLOWRnZ21QWkJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy82MDk5NzYtMWFjZS00NDRmLWJjYjUtNDI0M2U4OGJkNzZj
LzEvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw7+6MA0G
CSqGSIb3DQEBCwUAA4IBAQCP6tzddBvoQP5Z/O+URGls+mVb/YifzxmmFnVzxi0p
Zr8t+xACFWwe4Ju4NIkKxkoG6JrcmsdVBegrRFOA6pumEOieITqxRZgoNIgZZ9L7
/b2c9TYsbDTns1wpCpRu1BxSCBsh1nYwRw0GkMrxHAW3u9J+kJ9Hk8SQ+YJkUcAZ
LjC0S6P8l8Dv9SCEvWhdpvNKOrEppeF9hTmNJBUqxhBvsBBIjE+8fn/WKl8hvM1r
MrQVXOWs+0G78H5t4W9OYKqs/NmXHu8dx5Vs8muvRE1f8HU30GqXe23xU/hzdUfj
PG7S9SSQrvzAByjkYG3m7D3hc6M82l9IoVjnPTJdtwp8
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:28 2025 by rpki-client on console.sobornost.net