Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/rv-2MUAhxSXgJ6_WUeSuY2HQEIc.roa
File: rv-2MUAhxSXgJ6_WUeSuY2HQEIc.roa (raw, json)
Hash identifier: pFW5RVqZxflQiZHo+kcVS/DdoHRiWRG5Vues4Jg84IU=
Subject key identifier: AE:FF:B6:31:40:21:C5:25:E0:27:AF:D6:51:E4:AE:63:61:D0:10:87
Certificate issuer: /CN=59f915ae3e2216be338f6334532f9380cfd2f40a
Certificate serial: 01941F8C2F69B882E77E02693289E8479D6F
Authority key identifier: 59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/rv-2MUAhxSXgJ6_WUeSuY2HQEIc.roa
Signing time: Wed 01 Jan 2025 01:47:48 +0000
ROA not before: Wed 01 Jan 2025 01:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 194.56.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2f:69:b8:82:e7:7e:02:69:32:89:e8:47:9d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f915ae3e2216be338f6334532f9380cfd2f40a
Validity
Not Before: Jan 1 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aeffb6314021c525e027afd651e4ae6361d01087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:be:de:0e:bc:3c:6c:2c:df:14:8d:48:e4:a6:
fa:f7:90:78:5e:03:a4:53:70:49:b3:85:be:2b:b7:
2b:09:9e:4b:8d:2e:20:94:7c:2a:d7:94:cd:ca:49:
98:63:0f:bf:f6:43:66:ef:a8:94:49:3a:6c:5c:60:
1f:7a:83:73:d6:8c:c0:7b:6f:d8:17:80:65:ab:6e:
34:c9:4c:d8:4b:4a:d6:ac:4f:63:89:cf:cd:b7:c1:
12:80:69:1c:64:b4:2c:68:1e:86:be:97:c2:28:b8:
b9:15:e2:14:c2:e7:ce:f3:74:85:61:92:83:6e:5f:
02:98:93:f5:71:38:80:b0:27:46:f6:3d:68:0d:5f:
6b:c8:86:85:30:64:81:8e:e3:64:55:22:84:c2:01:
fd:5e:ca:1f:14:8d:0a:1a:30:90:34:b5:25:8d:88:
64:60:17:51:36:c1:a0:ab:fa:ec:81:9d:f7:57:bc:
83:f3:0e:20:cb:51:29:7f:44:12:60:20:be:d7:77:
eb:9c:e9:79:ba:e3:1d:d7:59:3f:93:37:76:fa:dd:
72:43:34:06:08:b6:6d:02:6f:a9:3b:28:be:f6:51:
51:96:6b:c2:ad:cf:9e:8c:f1:c1:07:6a:e2:fb:db:
01:9f:71:43:15:59:bd:2f:d0:d6:29:f9:6b:ee:4f:
6c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FF:B6:31:40:21:C5:25:E0:27:AF:D6:51:E4:AE:63:61:D0:10:87
X509v3 Authority Key Identifier:
keyid:59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/rv-2MUAhxSXgJ6_WUeSuY2HQEIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.108.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:8e:3b:9c:f3:2a:c9:30:f9:7e:bc:d3:61:6a:19:2f:92:14:
cd:72:74:99:9e:6f:2e:c9:36:be:a0:4c:46:47:56:1b:97:fb:
11:37:c8:97:42:ea:b1:2a:2a:e1:36:0d:ea:0b:46:60:7a:e2:
67:cf:de:eb:f5:a4:54:e3:06:14:77:23:00:a3:a1:f4:b8:ab:
ab:b6:9f:8a:33:9c:ec:45:12:12:d7:11:3a:c8:d7:b0:5e:b5:
8a:8e:9f:d2:40:ec:3b:b6:2d:c5:9f:56:c7:e8:7d:23:1d:30:
34:21:c7:94:4d:28:be:f0:34:df:a8:78:61:0c:71:36:9b:62:
84:79:dc:08:4c:d8:b9:4f:07:66:54:61:07:dc:a9:6f:2c:f4:
5e:96:7f:a0:50:5e:74:64:99:71:6a:68:d8:63:64:91:d0:ab:
f8:9c:68:5e:ad:49:d5:78:d0:1c:4f:9e:fb:c4:8d:90:0c:4f:
17:36:e2:ac:e2:05:fb:5e:ad:cf:31:d2:4c:e6:82:f2:e6:00:
8d:be:5e:e5:2f:8f:96:69:44:17:19:7c:12:e6:ae:da:c8:c4:
3e:c1:f8:5d:9e:65:4e:bc:cb:5e:69:27:06:e9:56:57:6a:de:
69:bc:b6:8b:75:1e:11:cb:7a:9d:52:77:e5:6e:a1:af:83:7f:
c9:3a:36:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjC9puILnfgJpMonoR51vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZjkxNWFlM2UyMjE2YmUzMzhmNjMzNDUzMmY5MzgwY2Zk
MmY0MGEwHhcNMjUwMTAxMDE0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWZmYjYzMTQwMjFjNTI1ZTAyN2FmZDY1MWU0YWU2MzYxZDAxMDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4r7eDrw8bCzfFI1I5Kb695B4XgOk
U3BJs4W+K7crCZ5LjS4glHwq15TNykmYYw+/9kNm76iUSTpsXGAfeoNz1ozAe2/Y
F4Blq240yUzYS0rWrE9jic/Nt8ESgGkcZLQsaB6GvpfCKLi5FeIUwufO83SFYZKD
bl8CmJP1cTiAsCdG9j1oDV9ryIaFMGSBjuNkVSKEwgH9XsofFI0KGjCQNLUljYhk
YBdRNsGgq/rsgZ33V7yD8w4gy1Epf0QSYCC+13frnOl5uuMd11k/kzd2+t1yQzQG
CLZtAm+pOyi+9lFRlmvCrc+ejPHBB2ri+9sBn3FDFVm9L9DWKflr7k9shQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK7/tjFAIcUl4Cev1lHkrmNh0BCHMB8GA1UdIwQY
MBaAFFn5Fa4+Iha+M49jNFMvk4DP0vQKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2ZrVnJqNGlGcjR6ajJNMFV5LVRnTV9TOUFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hYTIzMTEtYjFjZC00ZDE4LWFlYmIt
YTNmMjMyNGY2ZDhjLzEvcnYtMk1VQWh4U1hnSjZfV1VlU3VZMkhRRUljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9hYTIzMTEtYjFjZC00ZDE4LWFlYmItYTNmMjMyNGY2ZDhj
LzEvV2ZrVnJqNGlGcjR6ajJNMFV5LVRnTV9TOUFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwjhsMA0G
CSqGSIb3DQEBCwUAA4IBAQA7jjuc8yrJMPl+vNNhahkvkhTNcnSZnm8uyTa+oExG
R1Ybl/sRN8iXQuqxKirhNg3qC0ZgeuJnz97r9aRU4wYUdyMAo6H0uKurtp+KM5zs
RRIS1xE6yNewXrWKjp/SQOw7ti3Fn1bH6H0jHTA0IceUTSi+8DTfqHhhDHE2m2KE
edwITNi5TwdmVGEH3KlvLPReln+gUF50ZJlxamjYY2SR0Kv4nGherUnVeNAcT577
xI2QDE8XNuKs4gX7Xq3PMdJM5oLy5gCNvl7lL4+WaUQXGXwS5q7ayMQ+wfhdnmVO
vMteaScG6VZXat5pvLaLdR4Ry3qdUnflbqGvg3/JOjZX
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:15:08 2025 by rpki-client