Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5d837f-dfbe-4c6d-b585-ab8823c0ba2d/1/Cf-108icu98-WVS51BnZwN1Dnhs.roa
File: Cf-108icu98-WVS51BnZwN1Dnhs.roa (raw, json)
Hash identifier: e+2WAmc5TbMSCz8YvPFOG2QW2QfbkL9OTSqOcS8FVVM=
Subject key identifier: 09:FF:B5:D3:C8:9C:BB:DF:3E:59:54:B9:D4:19:D9:C0:DD:43:9E:1B
Certificate issuer: /CN=070de218d58c51137f102ff19f49d30cbcd6d5ee
Certificate serial: 039768
Authority key identifier: 07:0D:E2:18:D5:8C:51:13:7F:10:2F:F1:9F:49:D3:0C:BC:D6:D5:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bw3iGNWMURN_EC_xn0nTDLzW1e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5d837f-dfbe-4c6d-b585-ab8823c0ba2d/1/Cf-108icu98-WVS51BnZwN1Dnhs.roa
Signing time: Fri 11 Feb 2022 05:28:52 +0000
ROA not before: Fri 11 Feb 2022 05:28:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50964
IP address blocks: 194.59.39.0/24 maxlen: 24
91.205.76.0/22 maxlen: 22
194.59.38.0/24 maxlen: 24
194.59.36.0/24 maxlen: 24
194.59.36.0/22 maxlen: 22
194.59.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235368 (0x39768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070de218d58c51137f102ff19f49d30cbcd6d5ee
Validity
Not Before: Feb 11 05:28:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09ffb5d3c89cbbdf3e5954b9d419d9c0dd439e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0f:a7:bc:f3:01:3b:ad:05:86:8e:20:e1:c4:
db:ff:e7:3b:1a:3e:9d:fa:d4:ce:f4:92:90:e4:26:
7d:72:b6:63:dd:34:82:66:89:03:6f:c9:fa:fb:fe:
7e:7d:45:3c:6a:c2:2f:ca:31:d3:11:51:79:a1:a1:
51:bb:0e:47:fe:21:e7:af:50:2f:4e:03:9e:bb:77:
62:8b:38:a5:ce:d7:ce:14:2e:67:b7:60:46:f1:ca:
4a:50:2e:0b:20:3e:2d:5e:54:b4:f8:d6:98:ab:0d:
b0:a0:b5:8a:34:20:2e:9e:57:d1:e5:7c:65:3f:7f:
df:64:46:05:5e:6d:01:68:e3:71:af:ac:91:91:75:
73:ee:2e:b0:d4:7d:cb:14:e5:07:2d:f5:e5:fd:ad:
87:e9:86:c8:33:9e:16:b2:31:b1:07:8f:4b:27:19:
5d:5f:a4:02:5b:6d:d5:ff:8b:7f:da:f3:33:52:47:
31:47:c6:bb:bb:07:fa:0d:84:3a:18:4f:c9:ab:b3:
9b:d8:e9:e1:1c:b0:a0:35:eb:e9:94:82:c6:24:9d:
4b:15:71:bc:a3:e2:e0:b9:f8:a3:3d:5b:93:e1:c1:
4c:84:04:fa:e0:97:72:2d:32:49:33:a1:5a:fb:fd:
79:01:40:27:43:46:4d:f9:a0:fb:1b:9d:b6:d5:a4:
fe:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FF:B5:D3:C8:9C:BB:DF:3E:59:54:B9:D4:19:D9:C0:DD:43:9E:1B
X509v3 Authority Key Identifier:
keyid:07:0D:E2:18:D5:8C:51:13:7F:10:2F:F1:9F:49:D3:0C:BC:D6:D5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bw3iGNWMURN_EC_xn0nTDLzW1e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5d837f-dfbe-4c6d-b585-ab8823c0ba2d/1/Cf-108icu98-WVS51BnZwN1Dnhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5d837f-dfbe-4c6d-b585-ab8823c0ba2d/1/Bw3iGNWMURN_EC_xn0nTDLzW1e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.76.0/22
194.59.36.0/22
Signature Algorithm: sha256WithRSAEncryption
05:1f:c0:31:ea:d3:19:7d:b5:3c:42:31:24:92:ee:5b:ef:68:
17:7d:7b:06:33:e4:a7:2a:23:b6:6a:5c:33:3d:dd:4f:05:f0:
e3:77:ec:13:6f:97:41:c2:21:76:a6:d8:1a:b1:18:53:5a:f4:
fb:be:ff:0a:61:33:de:01:ef:8f:c8:38:4d:06:45:1c:07:56:
1c:40:57:c7:2b:00:19:db:40:68:1c:f9:63:c7:fc:b2:06:b5:
de:be:e2:5d:db:f9:73:47:98:71:1b:3e:e9:fb:0e:bf:b6:f5:
58:dd:31:88:19:b7:6c:38:99:3b:cf:3b:bd:6f:bb:3f:04:ba:
7f:a7:ad:55:40:34:d6:42:af:51:31:04:f5:b4:2d:3e:7e:1f:
17:82:dd:69:48:66:fe:f5:6c:a5:b6:47:44:98:99:fa:2a:78:
5a:e3:1a:ad:5d:1c:13:1f:ab:34:5b:11:b0:8c:81:f9:52:c9:
bd:3d:fe:e3:3b:9e:5c:da:6d:35:2f:33:d8:8e:27:a4:cd:da:
ba:87:fa:a6:3c:9d:16:87:a7:22:04:df:ef:79:55:31:47:4b:
af:c1:d0:c8:e2:36:17:9e:30:2a:05:0a:0c:7f:d3:75:e2:c9:
99:aa:f2:57:ce:c7:8f:31:3b:c9:76:1c:b4:70:94:83:d1:5a:
12:fa:3c:30
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIDA5doMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA3
MGRlMjE4ZDU4YzUxMTM3ZjEwMmZmMTlmNDlkMzBjYmNkNmQ1ZWUwHhcNMjIwMjEx
MDUyODUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygwOWZmYjVkM2M4OWNi
YmRmM2U1OTU0YjlkNDE5ZDljMGRkNDM5ZTFiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmw+nvPMBO60Fho4g4cTb/+c7Gj6d+tTO9JKQ5CZ9crZj3TSC
ZokDb8n6+/5+fUU8asIvyjHTEVF5oaFRuw5H/iHnr1AvTgOeu3diizilztfOFC5n
t2BG8cpKUC4LID4tXlS0+NaYqw2woLWKNCAunlfR5XxlP3/fZEYFXm0BaONxr6yR
kXVz7i6w1H3LFOUHLfXl/a2H6YbIM54WsjGxB49LJxldX6QCW23V/4t/2vMzUkcx
R8a7uwf6DYQ6GE/Jq7Ob2OnhHLCgNevplILGJJ1LFXG8o+LgufijPVuT4cFMhAT6
4JdyLTJJM6Fa+/15AUAnQ0ZN+aD7G5221aT+BwIDAQABo4ICDzCCAgswHQYDVR0O
BBYEFAn/tdPInLvfPllUudQZ2cDdQ54bMB8GA1UdIwQYMBaAFAcN4hjVjFETfxAv
8Z9J0wy81tXuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
QnczaUdOV01VUk5fRUNfeG4wblRETHpXMWU0LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jMi81ZDgzN2YtZGZiZS00YzZkLWI1ODUtYWI4ODIzYzBiYTJkLzEv
Q2YtMTA4aWN1OTgtV1ZTNTFCblp3TjFEbmhzLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81
ZDgzN2YtZGZiZS00YzZkLWI1ODUtYWI4ODIzYzBiYTJkLzEvQnczaUdOV01VUk5f
RUNfeG4wblRETHpXMWU0LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW81MAwQCwjskMA0GCSqGSIb3DQEB
CwUAA4IBAQAFH8Ax6tMZfbU8QjEkku5b72gXfXsGM+SnKiO2alwzPd1PBfDjd+wT
b5dBwiF2ptgasRhTWvT7vv8KYTPeAe+PyDhNBkUcB1YcQFfHKwAZ20BoHPljx/yy
BrXevuJd2/lzR5hxGz7p+w6/tvVY3TGIGbdsOJk7zzu9b7s/BLp/p61VQDTWQq9R
MQT1tC0+fh8Xgt1pSGb+9WyltkdEmJn6Knha4xqtXRwTH6s0WxGwjIH5Usm9Pf7j
O55c2m01LzPYjiekzdq6h/qmPJ0Wh6ciBN/veVUxR0uvwdDI4jYXnjAqBQoMf9N1
4smZqvJXzsePMTvJdhy0cJSD0VoS+jww
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:54:27 2025 by rpki-client