Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/kaCKh69UCH1e8YxXvfDRSIMinp4.roa
File: kaCKh69UCH1e8YxXvfDRSIMinp4.roa (raw, json)
Hash identifier: 1RbgYWWGOgFXxNNpggiv1pAr13/5f1ITVmQGcqYLD8s=
Subject key identifier: 91:A0:8A:87:AF:54:08:7D:5E:F1:8C:57:BD:F0:D1:48:83:22:9E:9E
Certificate issuer: /CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Certificate serial: 01942748307777E8C5D4E7E711136400C7B6
Authority key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/kaCKh69UCH1e8YxXvfDRSIMinp4.roa
Signing time: Thu 02 Jan 2025 13:50:29 +0000
ROA not before: Thu 02 Jan 2025 13:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393410
IP address blocks: 195.149.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:30:77:77:e8:c5:d4:e7:e7:11:13:64:00:c7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Validity
Not Before: Jan 2 13:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91a08a87af54087d5ef18c57bdf0d14883229e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:fd:e7:f2:80:df:e1:f9:21:94:ae:6f:05:
ac:e1:2e:e2:5d:43:74:98:6f:62:37:ff:44:3a:07:
d7:12:c7:22:c2:21:8e:f9:ef:09:55:88:2e:41:75:
e9:70:14:a1:f5:cc:8e:5f:7a:41:89:b0:de:93:2a:
59:60:4f:89:92:15:3e:db:d7:04:7c:3d:0b:b1:52:
6a:c1:ae:2b:19:f9:4f:5d:d2:82:0a:96:6e:0e:39:
e1:a0:2c:b1:99:c6:00:fa:48:c9:4f:25:e3:81:3d:
84:a8:1e:18:b1:eb:b4:3f:48:6e:54:31:2b:d0:62:
24:14:b2:5b:e6:3d:60:03:c2:3a:f3:18:15:5c:7a:
39:6c:dd:51:1f:66:00:0a:30:e6:25:1d:cd:87:b9:
79:0c:11:1a:16:15:70:6e:b6:1f:c1:f8:c6:de:9a:
cb:97:60:14:16:d2:2f:bd:a2:10:15:55:31:af:24:
85:ee:66:e7:0e:70:cb:08:96:59:62:59:60:ae:29:
63:d3:f2:18:4f:f3:25:12:25:c7:04:31:3e:41:3a:
1d:a7:ed:77:89:dd:e3:4e:68:39:f5:de:3a:8c:87:
0e:0c:80:95:9e:8a:16:25:44:6b:82:4e:c3:b7:82:
a6:ec:38:5b:43:e5:90:6f:71:81:b8:e4:71:98:b8:
34:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A0:8A:87:AF:54:08:7D:5E:F1:8C:57:BD:F0:D1:48:83:22:9E:9E
X509v3 Authority Key Identifier:
keyid:33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/kaCKh69UCH1e8YxXvfDRSIMinp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.107.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:9f:a7:3f:44:37:0e:0d:fe:df:52:a5:7e:7a:d9:72:36:47:
dd:53:14:ca:73:ec:bc:f7:23:28:0b:2c:8b:04:d8:e4:34:2e:
28:33:60:10:3f:fe:26:87:13:48:97:67:d2:c5:66:2d:09:c5:
26:7c:c9:2a:14:f7:32:50:47:3e:11:a7:f5:d1:59:db:cc:ef:
ff:2d:e7:9c:8d:72:1e:8e:5f:3d:13:42:aa:18:ac:66:fc:87:
96:8c:49:95:ff:2e:53:3b:79:6a:84:34:9c:c7:42:78:6a:9a:
4d:0c:34:bc:4f:b2:23:55:f2:27:28:ee:0f:1c:01:8f:6b:7f:
ed:16:30:3d:e9:2e:d1:99:8f:a3:34:67:02:54:df:a1:10:07:
07:15:3c:10:f3:da:52:7a:f4:15:00:40:62:ca:97:a2:1e:7e:
c2:dd:61:ba:dd:5b:95:a8:68:1b:1a:30:2a:f0:33:b3:d1:30:
6f:c9:4c:81:17:39:0d:43:da:7f:09:ed:43:ed:29:4e:3e:4d:
ca:74:7d:4e:34:e8:b1:ec:a7:56:90:a5:0b:c3:ae:e0:5b:3e:
7f:2a:7f:6d:b7:04:8b:29:5f:5a:5e:97:92:b7:6f:6d:09:78:
4c:ec:eb:be:38:15:93:32:0c:70:95:0c:c7:4b:44:35:86:36:
83:cc:8d:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSDB3d+jF1OfnERNkAMe2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYzViMGQ3YzBhOWNkMjRiNzNjZGNiOTJjODc0NmU4NWE0
YTViOGYwHhcNMjUwMTAyMTM1MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWEwOGE4N2FmNTQwODdkNWVmMThjNTdiZGYwZDE0ODgzMjI5ZTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4T95/KA3+H5IZSubwWs4S7iXUN0
mG9iN/9EOgfXEsciwiGO+e8JVYguQXXpcBSh9cyOX3pBibDekypZYE+JkhU+29cE
fD0LsVJqwa4rGflPXdKCCpZuDjnhoCyxmcYA+kjJTyXjgT2EqB4Yseu0P0huVDEr
0GIkFLJb5j1gA8I68xgVXHo5bN1RH2YACjDmJR3Nh7l5DBEaFhVwbrYfwfjG3prL
l2AUFtIvvaIQFVUxrySF7mbnDnDLCJZZYllgrilj0/IYT/MlEiXHBDE+QTodp+13
id3jTmg59d46jIcODICVnooWJURrgk7Dt4Km7DhbQ+WQb3GBuORxmLg0qwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJGgioevVAh9XvGMV73w0UiDIp6eMB8GA1UdIwQY
MBaAFDPFsNfAqc0ktzzcuSyHRuhaSluPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNTgxZjQtODQxMC00YTQzLTkxODYt
MGZhYjIyNjllYThlLzEva2FDS2g2OVVDSDFlOFl4WHZmRFJTSU1pbnA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8yNTgxZjQtODQxMC00YTQzLTkxODYtMGZhYjIyNjllYThl
LzEvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5VrMA0G
CSqGSIb3DQEBCwUAA4IBAQC6n6c/RDcODf7fUqV+etlyNkfdUxTKc+y89yMoCyyL
BNjkNC4oM2AQP/4mhxNIl2fSxWYtCcUmfMkqFPcyUEc+Eaf10VnbzO//LeecjXIe
jl89E0KqGKxm/IeWjEmV/y5TO3lqhDScx0J4appNDDS8T7IjVfInKO4PHAGPa3/t
FjA96S7RmY+jNGcCVN+hEAcHFTwQ89pSevQVAEBiypeiHn7C3WG63VuVqGgbGjAq
8DOz0TBvyUyBFzkNQ9p/Ce1D7SlOPk3KdH1ONOix7KdWkKULw67gWz5/Kn9ttwSL
KV9aXpeSt29tCXhM7Ou+OBWTMgxwlQzHS0Q1hjaDzI1E
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:53:52 2025 by rpki-client