Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/N0G29n4QzABWDyaZ109k9CeNfy4.roa
File: N0G29n4QzABWDyaZ109k9CeNfy4.roa (raw, json)
Hash identifier: FUEPtrlhgY8hmReuR4z7fOT7eB3aKfFbbrPoxbBvthU=
Subject key identifier: 37:41:B6:F6:7E:10:CC:00:56:0F:26:99:D7:4F:64:F4:27:8D:7F:2E
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 0197CAD32BC2AC0EB9FD3D7C1B04C0ED13E3
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/N0G29n4QzABWDyaZ109k9CeNfy4.roa
Signing time: Wed 02 Jul 2025 11:08:46 +0000
ROA not before: Wed 02 Jul 2025 11:08:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 87.248.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:d3:2b:c2:ac:0e:b9:fd:3d:7c:1b:04:c0:ed:13:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jul 2 11:08:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3741b6f67e10cc00560f2699d74f64f4278d7f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bf:9e:81:da:a7:36:dd:8c:73:c3:df:a3:e0:
67:fa:4b:8d:8e:df:f2:69:63:90:62:c5:4f:98:d9:
91:1e:4d:0b:d1:bb:85:2c:f0:ee:06:f6:1c:d3:48:
1b:5d:59:b1:33:ba:b4:3a:ac:a5:0e:ad:67:4c:9c:
ea:25:a7:b9:b9:98:1a:b5:8d:34:4b:e7:e3:64:b2:
ac:17:1c:b4:9d:fa:6a:36:93:33:e1:07:e8:97:6b:
ef:75:c3:37:59:39:ee:11:15:ef:da:4f:45:5f:40:
35:de:ab:56:b1:9b:d5:06:16:73:f0:77:76:be:5c:
b5:98:39:61:5d:e1:d9:9b:b4:99:c5:74:ed:7f:01:
f0:6c:f8:d2:d6:9f:87:13:7a:96:4c:af:42:26:04:
51:15:53:09:31:8f:d6:a7:cb:da:d5:db:4a:54:61:
a7:aa:e0:ef:52:54:b7:02:88:0f:da:a4:03:a4:3d:
ea:8b:de:b1:30:38:ff:65:ee:ad:24:d1:96:53:cc:
bd:06:83:30:16:2f:bc:1b:65:d1:a8:1b:70:f5:db:
b1:74:fe:06:70:05:f7:c8:d4:96:54:4c:f9:f4:7b:
01:19:f4:05:a8:2c:cf:03:5c:ac:70:35:2b:2f:fb:
a3:00:d3:28:9b:c8:5d:aa:49:7b:e6:d3:31:79:c4:
7b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:41:B6:F6:7E:10:CC:00:56:0F:26:99:D7:4F:64:F4:27:8D:7F:2E
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/N0G29n4QzABWDyaZ109k9CeNfy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.143.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:09:35:ca:ae:a4:24:f2:59:fd:7f:c7:1b:69:01:e0:c7:36:
c6:83:97:a2:a9:3d:82:8a:dc:b2:79:f2:d2:7b:76:19:f4:7f:
7b:97:c7:5f:85:11:02:dc:bd:a7:dd:4c:db:41:42:fa:1c:3c:
2a:9a:09:50:5e:1c:3a:eb:0d:87:25:10:d5:fc:10:13:ec:95:
a1:a9:41:f4:7f:b5:92:54:76:ae:5d:02:2f:fc:8d:ae:c2:72:
cc:ca:52:69:24:8e:87:40:86:eb:98:d0:78:e4:66:d8:b6:e1:
00:6c:d2:80:f2:ec:b2:6e:3e:ce:e2:5f:95:47:32:bc:72:b7:
55:34:88:76:f0:10:ae:03:28:fb:0a:48:df:6a:58:e7:a9:af:
42:92:b2:72:4d:54:32:0c:26:e3:25:68:66:d2:1c:9b:d6:54:
63:54:1b:6b:04:f8:2e:80:c5:79:bb:c5:6f:ec:f3:e8:37:90:
7b:18:5b:e5:9c:ef:fb:2b:91:2d:6f:5c:3d:83:72:df:e0:49:
81:1f:7d:9c:1a:5c:94:11:4d:6b:6b:78:d0:c7:36:01:64:05:
06:42:99:e0:b5:a8:ff:4e:1a:3d:de:13:b7:a2:30:61:7b:2f:
3b:fe:b9:e6:3c:9e:20:28:2f:c9:42:37:b1:c2:74:3c:f2:e2:
a3:81:27:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfK0yvCrA65/T18GwTA7RPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjUwNzAyMTEwODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzQxYjZmNjdlMTBjYzAwNTYwZjI2OTlkNzRmNjRmNDI3OGQ3ZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL+egdqnNt2Mc8Pfo+Bn+kuNjt/y
aWOQYsVPmNmRHk0L0buFLPDuBvYc00gbXVmxM7q0OqylDq1nTJzqJae5uZgatY00
S+fjZLKsFxy0nfpqNpMz4Qfol2vvdcM3WTnuERXv2k9FX0A13qtWsZvVBhZz8Hd2
vly1mDlhXeHZm7SZxXTtfwHwbPjS1p+HE3qWTK9CJgRRFVMJMY/Wp8va1dtKVGGn
quDvUlS3AogP2qQDpD3qi96xMDj/Ze6tJNGWU8y9BoMwFi+8G2XRqBtw9duxdP4G
cAX3yNSWVEz59HsBGfQFqCzPA1yscDUrL/ujANMom8hdqkl75tMxecR72QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDdBtvZ+EMwAVg8mmddPZPQnjX8uMB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEvTjBHMjluNFF6QUJXRHlhWjEwOWs5Q2VOZnk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/iPMA0G
CSqGSIb3DQEBCwUAA4IBAQBcCTXKrqQk8ln9f8cbaQHgxzbGg5eiqT2CityyefLS
e3YZ9H97l8dfhREC3L2n3UzbQUL6HDwqmglQXhw66w2HJRDV/BAT7JWhqUH0f7WS
VHauXQIv/I2uwnLMylJpJI6HQIbrmNB45GbYtuEAbNKA8uyybj7O4l+VRzK8crdV
NIh28BCuAyj7Ckjfaljnqa9CkrJyTVQyDCbjJWhm0hyb1lRjVBtrBPgugMV5u8Vv
7PPoN5B7GFvlnO/7K5Etb1w9g3Lf4EmBH32cGlyUEU1ra3jQxzYBZAUGQpngtaj/
Tho93hO3ojBhey87/rnmPJ4gKC/JQjexwnQ88uKjgSex
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:35:32 2025 by rpki-client