Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/Bwv82XkV7FAob6XSG1WIQTAXiME.roa
File: Bwv82XkV7FAob6XSG1WIQTAXiME.roa (raw, json)
Hash identifier: fZwSkDqrfZHh8kDyUWRIIfsgQ3meYZgmeBjdj7FUb4Y=
Subject key identifier: 07:0B:FC:D9:79:15:EC:50:28:6F:A5:D2:1B:55:88:41:30:17:88:C1
Certificate issuer: /CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Certificate serial: 019987A4B61B6ED8FAA6DC160FE96367C80D
Authority key identifier: CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/Bwv82XkV7FAob6XSG1WIQTAXiME.roa
Signing time: Fri 26 Sep 2025 20:09:02 +0000
ROA not before: Fri 26 Sep 2025 20:09:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51582
IP address blocks: 94.190.128.0/20 maxlen: 24
94.190.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:87:a4:b6:1b:6e:d8:fa:a6:dc:16:0f:e9:63:67:c8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Validity
Not Before: Sep 26 20:09:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=070bfcd97915ec50286fa5d21b558841301788c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2f:6e:a8:e8:8a:e2:72:b6:e1:4a:29:6a:ee:
97:fd:bc:99:53:d9:d1:70:78:b4:06:b9:76:32:d4:
07:27:90:a4:fb:d2:8c:80:34:0c:b9:7e:8e:58:b1:
11:04:bf:be:32:4e:3a:26:a1:27:3c:a0:df:72:2e:
7e:d5:8f:30:83:d4:40:f2:5a:71:7c:76:96:ce:7d:
12:12:32:b9:20:96:86:5b:3b:6d:e4:b7:29:f4:e3:
c6:c4:07:36:f6:04:e9:d9:d0:6f:53:50:9c:66:28:
04:b0:dc:74:de:66:27:28:fb:76:93:e1:0d:16:e0:
34:eb:0c:eb:df:c7:4c:0c:83:47:22:ee:30:a2:41:
58:49:3b:c0:62:90:e5:d3:06:89:a8:01:43:62:99:
52:45:0b:2d:53:24:d9:e7:11:74:58:16:c9:13:71:
13:1b:8e:74:93:3b:e7:c4:ec:26:ef:fc:18:3c:c6:
1e:aa:e7:e8:3a:b0:ec:80:f3:d5:cf:c5:56:33:08:
8c:fc:fb:71:34:ce:7c:bf:c0:c9:ed:d5:f1:d8:a3:
f9:7a:99:b4:f0:6d:ed:33:19:59:22:f5:18:89:af:
19:b9:a2:2f:be:9c:e5:da:c1:cc:23:d2:79:58:98:
c0:6f:e3:2b:3c:45:f2:de:e0:af:2a:57:96:0f:33:
d6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0B:FC:D9:79:15:EC:50:28:6F:A5:D2:1B:55:88:41:30:17:88:C1
X509v3 Authority Key Identifier:
keyid:CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/Bwv82XkV7FAob6XSG1WIQTAXiME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.190.128.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:0e:7e:15:35:cf:99:9f:41:31:a7:e1:e6:2c:b1:db:4c:c3:
28:27:5e:26:fb:b5:70:0b:51:60:9b:d2:ed:42:5d:40:67:fd:
bc:7b:6f:5e:6e:d3:f5:d6:f9:41:2d:fb:9b:09:1e:5f:b4:49:
d4:c6:33:d4:73:4c:72:f8:54:1f:d5:4b:c3:87:b8:48:c5:b5:
8f:dd:1a:f3:c5:a8:e9:17:16:1b:a2:af:4a:64:ae:63:29:7e:
24:17:d6:6a:a5:ba:7c:d8:d3:fb:68:9a:01:ab:50:32:f4:8f:
7c:3c:23:07:45:ed:d8:07:fc:dc:89:c4:87:4c:85:0f:73:e5:
31:22:2e:da:44:d1:6b:bb:31:69:24:51:69:34:18:15:e6:48:
8e:0e:eb:4f:d4:1a:49:63:43:4d:78:22:3f:e8:11:0b:51:3b:
b7:82:8c:81:ef:0e:d0:13:a4:6c:e2:71:54:e3:39:c9:23:f4:
99:5b:c3:97:33:5a:e2:bb:d9:12:7b:eb:69:fc:13:0a:83:1f:
70:4e:73:14:80:02:41:15:90:c4:6e:7c:d2:d3:98:d4:bb:57:
44:a9:04:eb:c5:65:3a:77:34:b8:59:d7:d6:d3:af:bc:50:86:
d1:0d:9b:55:98:58:e4:fc:1d:34:74:d6:e0:07:ee:94:8b:64:
61:10:8e:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZmHpLYbbtj6ptwWD+ljZ8gNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNmI5ZDU5M2FjNTRhYTZjYmI4Mzg4OTI3N2JhMjRmNTQw
Njc4ODkwHhcNMjUwOTI2MjAwOTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzBiZmNkOTc5MTVlYzUwMjg2ZmE1ZDIxYjU1ODg0MTMwMTc4OGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy9uqOiK4nK24Uopau6X/byZU9nR
cHi0Brl2MtQHJ5Ck+9KMgDQMuX6OWLERBL++Mk46JqEnPKDfci5+1Y8wg9RA8lpx
fHaWzn0SEjK5IJaGWztt5Lcp9OPGxAc29gTp2dBvU1CcZigEsNx03mYnKPt2k+EN
FuA06wzr38dMDINHIu4wokFYSTvAYpDl0waJqAFDYplSRQstUyTZ5xF0WBbJE3ET
G450kzvnxOwm7/wYPMYequfoOrDsgPPVz8VWMwiM/PtxNM58v8DJ7dXx2KP5epm0
8G3tMxlZIvUYia8ZuaIvvpzl2sHMI9J5WJjAb+MrPEXy3uCvKleWDzPWHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAcL/Nl5FexQKG+l0htViEEwF4jBMB8GA1UdIwQY
MBaAFM1rnVk6xUqmy7g4iSd7ok9UBniJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveld1ZFdUckZTcWJMdURpSkozdWlUMVFHZUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lNjhlMWItMzU2Yy00ODY4LTkwOWYt
NDI2MDZmNWFhNWI5LzEvQnd2ODJYa1Y3RkFvYjZYU0cxV0lRVEFYaU1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lNjhlMWItMzU2Yy00ODY4LTkwOWYtNDI2MDZmNWFhNWI5
LzEveld1ZFdUckZTcWJMdURpSkozdWlUMVFHZUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEXr6AMA0G
CSqGSIb3DQEBCwUAA4IBAQCPDn4VNc+Zn0Exp+HmLLHbTMMoJ14m+7VwC1Fgm9Lt
Ql1AZ/28e29ebtP11vlBLfubCR5ftEnUxjPUc0xy+FQf1UvDh7hIxbWP3Rrzxajp
FxYboq9KZK5jKX4kF9Zqpbp82NP7aJoBq1Ay9I98PCMHRe3YB/zcicSHTIUPc+Ux
Ii7aRNFruzFpJFFpNBgV5kiODutP1BpJY0NNeCI/6BELUTu3goyB7w7QE6Rs4nFU
4znJI/SZW8OXM1riu9kSe+tp/BMKgx9wTnMUgAJBFZDEbnzS05jUu1dEqQTrxWU6
dzS4WdfW06+8UIbRDZtVmFjk/B00dNbgB+6Ui2RhEI5n
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:06 2025 by rpki-client