Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1994da-fbd0-4333-b419-e56fbe3a512a/1/iu1PxmFJb-HFP_ff0PUa6q2P4hE.roa
File: iu1PxmFJb-HFP_ff0PUa6q2P4hE.roa (raw, json)
Hash identifier: O3JEueDmq7Vdhtx8/Q/xjnl9frQ90E9emQt49N0nYvs=
Subject key identifier: 8A:ED:4F:C6:61:49:6F:E1:C5:3F:F7:DF:D0:F5:1A:EA:AD:8F:E2:11
Certificate issuer: /CN=ad4955f1cdbde7ed9e69de11dea5c560f60456a9
Certificate serial: 018CC6B8A23C4C26774E88FD300B0CF50A80
Authority key identifier: AD:49:55:F1:CD:BD:E7:ED:9E:69:DE:11:DE:A5:C5:60:F6:04:56:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUlV8c295-2ead4R3qXFYPYEVqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1994da-fbd0-4333-b419-e56fbe3a512a/1/iu1PxmFJb-HFP_ff0PUa6q2P4hE.roa
Signing time: Mon 01 Jan 2024 20:30:38 +0000
ROA not before: Mon 01 Jan 2024 20:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 194.49.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:a2:3c:4c:26:77:4e:88:fd:30:0b:0c:f5:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4955f1cdbde7ed9e69de11dea5c560f60456a9
Validity
Not Before: Jan 1 20:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8aed4fc661496fe1c53ff7dfd0f51aeaad8fe211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:e7:f0:e9:13:9e:ad:29:d1:04:69:e5:fc:
91:9f:77:6f:b1:9b:4d:f4:78:ac:2b:98:99:04:fd:
f4:38:b2:c4:f0:8d:e2:c2:e5:3a:7b:e2:0b:65:42:
b7:37:bd:18:7f:c6:dc:14:f5:2b:47:0e:26:ef:8b:
bc:84:f6:52:4e:10:59:ee:6c:e8:ad:7f:99:8b:29:
45:b5:6b:74:9f:65:b5:d4:72:ba:1f:ed:3c:c4:90:
37:ca:34:dc:10:cd:e0:c6:ad:d1:62:05:98:a3:b8:
e4:4c:5f:9a:5a:af:bf:32:37:7d:6f:49:4a:f7:7a:
02:4f:2e:fe:09:4f:00:d1:4e:60:ed:ee:e5:64:d1:
4e:91:dc:66:2a:29:d9:99:28:c0:c5:5e:e0:0d:6b:
91:b0:1a:82:f6:75:56:e9:5d:a9:53:60:47:89:50:
8f:80:68:8a:ee:3c:bd:f4:65:9d:d2:40:e4:81:c6:
aa:a8:ce:2e:34:a1:c9:0e:4a:7e:ba:92:2d:cc:4d:
f8:82:df:01:b2:74:04:2f:f8:2d:42:ec:be:ff:86:
ee:56:75:da:d0:81:fe:14:aa:9b:ff:e5:54:fd:70:
fd:28:26:97:95:c6:c2:34:24:e8:89:ce:9c:9c:0b:
9c:0c:7f:d3:3b:f9:e4:7f:11:3a:1a:e8:ab:00:03:
47:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:ED:4F:C6:61:49:6F:E1:C5:3F:F7:DF:D0:F5:1A:EA:AD:8F:E2:11
X509v3 Authority Key Identifier:
keyid:AD:49:55:F1:CD:BD:E7:ED:9E:69:DE:11:DE:A5:C5:60:F6:04:56:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUlV8c295-2ead4R3qXFYPYEVqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1994da-fbd0-4333-b419-e56fbe3a512a/1/iu1PxmFJb-HFP_ff0PUa6q2P4hE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1994da-fbd0-4333-b419-e56fbe3a512a/1/rUlV8c295-2ead4R3qXFYPYEVqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.68.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ba:8f:e7:ce:4d:59:aa:2f:a8:a7:9f:f5:ed:dc:2b:05:21:
55:84:87:30:ad:53:18:a0:ef:63:4a:3a:44:ca:42:e0:93:31:
3d:e9:43:17:87:da:1a:d2:be:92:5a:c1:17:e9:0a:d3:92:30:
76:c5:e5:c2:6c:06:f5:4b:c0:dc:2f:d4:74:29:b9:e1:5e:86:
66:9c:67:06:4a:f0:72:3e:92:32:2e:6a:7a:0c:aa:da:22:5a:
a8:fd:bf:21:a3:83:59:d1:0f:33:1e:bf:2c:3c:99:63:d3:f7:
6d:50:23:22:cb:20:28:a4:5f:19:a5:87:ea:db:1c:93:6d:42:
b4:4c:7b:4e:d3:d6:3e:0b:26:93:4c:53:d9:57:44:43:de:d1:
fe:43:cd:fd:b6:f0:b4:27:02:f4:85:bf:db:6a:ad:93:72:6f:
44:6a:01:32:e1:0a:1c:a4:22:8e:0f:50:d2:a9:a2:f0:76:12:
47:07:53:3c:69:57:3d:e4:f0:32:9f:5c:0b:a5:ba:d6:dd:e2:
18:ac:70:33:de:96:0b:5d:f3:f3:6a:f1:40:25:c7:00:59:bb:
8a:cf:99:65:1e:e8:49:4d:71:52:be:31:bd:72:ca:fe:24:ff:
58:f9:d8:36:f2:0c:6f:a0:58:af:b0:31:44:99:69:78:e4:30:
21:cb:b4:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuKI8TCZ3Toj9MAsM9QqAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNDk1NWYxY2RiZGU3ZWQ5ZTY5ZGUxMWRlYTVjNTYwZjYw
NDU2YTkwHhcNMjQwMTAxMjAzMDM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWVkNGZjNjYxNDk2ZmUxYzUzZmY3ZGZkMGY1MWFlYWFkOGZlMjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7zn8OkTnq0p0QRp5fyRn3dvsZtN
9HisK5iZBP30OLLE8I3iwuU6e+ILZUK3N70Yf8bcFPUrRw4m74u8hPZSThBZ7mzo
rX+ZiylFtWt0n2W11HK6H+08xJA3yjTcEM3gxq3RYgWYo7jkTF+aWq+/Mjd9b0lK
93oCTy7+CU8A0U5g7e7lZNFOkdxmKinZmSjAxV7gDWuRsBqC9nVW6V2pU2BHiVCP
gGiK7jy99GWd0kDkgcaqqM4uNKHJDkp+upItzE34gt8BsnQEL/gtQuy+/4buVnXa
0IH+FKqb/+VU/XD9KCaXlcbCNCToic6cnAucDH/TO/nkfxE6GuirAANHfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIrtT8ZhSW/hxT/339D1Guqtj+IRMB8GA1UdIwQY
MBaAFK1JVfHNveftnmneEd6lxWD2BFapMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclVsVjhjMjk1LTJlYWQ0UjNxWEZZUFlFVnFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xOTk0ZGEtZmJkMC00MzMzLWI0MTkt
ZTU2ZmJlM2E1MTJhLzEvaXUxUHhtRkpiLUhGUF9mZjBQVWE2cTJQNGhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8xOTk0ZGEtZmJkMC00MzMzLWI0MTktZTU2ZmJlM2E1MTJh
LzEvclVsVjhjMjk1LTJlYWQ0UjNxWEZZUFlFVnFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjFEMA0G
CSqGSIb3DQEBCwUAA4IBAQA4uo/nzk1Zqi+op5/17dwrBSFVhIcwrVMYoO9jSjpE
ykLgkzE96UMXh9oa0r6SWsEX6QrTkjB2xeXCbAb1S8DcL9R0KbnhXoZmnGcGSvBy
PpIyLmp6DKraIlqo/b8ho4NZ0Q8zHr8sPJlj0/dtUCMiyyAopF8ZpYfq2xyTbUK0
THtO09Y+CyaTTFPZV0RD3tH+Q839tvC0JwL0hb/baq2Tcm9EagEy4QocpCKOD1DS
qaLwdhJHB1M8aVc95PAyn1wLpbrW3eIYrHAz3pYLXfPzavFAJccAWbuKz5llHuhJ
TXFSvjG9csr+JP9Y+dg28gxvoFivsDFEmWl45DAhy7Sy
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:48 2025 by rpki-client