Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/6npNfqw9ft3wFBb5k5d8Au1GyrU.roa
File: 6npNfqw9ft3wFBb5k5d8Au1GyrU.roa (raw, json)
Hash identifier: Ypl6gLmfJjGNPDL8Gk8ZFTBrn9giPszXF7Ziq9N8zCY=
Subject key identifier: EA:7A:4D:7E:AC:3D:7E:DD:F0:14:16:F9:93:97:7C:02:ED:46:CA:B5
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 0194244576A25297294B34C569B37501A928
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/6npNfqw9ft3wFBb5k5d8Au1GyrU.roa
Signing time: Wed 01 Jan 2025 23:48:39 +0000
ROA not before: Wed 01 Jan 2025 23:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 195.182.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:76:a2:52:97:29:4b:34:c5:69:b3:75:01:a9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 1 23:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea7a4d7eac3d7eddf01416f993977c02ed46cab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d8:bc:c6:04:14:b1:0e:c0:66:f2:ff:91:28:
d7:63:9a:fa:fa:5f:05:81:f4:4e:ee:b3:4a:81:38:
3d:22:92:19:b6:31:cf:2b:1f:74:2a:c7:35:d5:60:
79:44:b5:70:8a:ab:db:c1:c0:59:ce:17:a2:1d:75:
bf:f6:a9:4d:2a:9e:d8:49:4f:cb:9c:d4:eb:97:a6:
d1:3b:cc:1f:93:41:43:0d:60:d0:9f:46:59:db:b5:
a6:64:d4:94:a5:7d:ae:1c:1c:9f:75:9a:71:53:6f:
ab:b5:20:5c:31:83:97:10:27:27:82:8b:81:7a:62:
58:61:08:5c:42:53:ff:04:c5:d0:2e:3d:1f:8b:80:
0f:76:fa:54:91:c3:a4:90:87:8d:ad:36:a1:9c:f5:
8d:14:c9:e7:8f:a7:b1:33:27:ad:02:da:61:aa:ff:
43:8c:cb:82:08:da:22:13:c0:68:5d:bd:a3:31:21:
2f:0a:d6:03:40:a4:8e:0e:6f:07:02:25:0a:ba:c7:
7b:38:5d:e6:a7:e6:f3:7b:16:24:45:93:81:5c:38:
ab:18:b8:f7:63:23:a0:5c:bb:54:92:a1:8b:d6:70:
7f:aa:99:ff:db:c3:4c:14:f7:71:a8:49:28:a0:2b:
98:3c:58:bd:58:c3:00:24:b3:eb:b2:8d:c5:b9:7c:
6a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7A:4D:7E:AC:3D:7E:DD:F0:14:16:F9:93:97:7C:02:ED:46:CA:B5
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/6npNfqw9ft3wFBb5k5d8Au1GyrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.198.0/24
Signature Algorithm: sha256WithRSAEncryption
59:54:8f:8e:11:c9:89:fa:6b:c1:24:ae:af:7c:5e:64:5f:18:
f0:d0:66:0a:ad:8d:31:e5:47:c1:0a:3c:84:22:3e:a8:5a:e3:
93:2c:c7:b2:85:72:5d:89:d3:de:0a:02:5f:be:51:c2:d7:7e:
ed:44:14:03:3b:33:51:a8:df:b5:26:a6:d4:71:02:a5:c5:ef:
ea:c4:20:83:0d:d6:1e:67:0e:72:7c:f5:10:9b:44:9d:5a:8e:
95:c5:45:9a:9d:cf:52:b2:27:b5:7d:81:86:f6:76:f2:fd:59:
52:e0:ce:7a:ef:9d:5b:8d:15:cb:af:c3:e5:f6:cf:9e:c0:74:
e3:74:1c:15:a2:b3:1f:6a:2d:f2:3f:08:9c:d4:e0:23:d5:ad:
ff:fa:bd:2b:ea:68:eb:b7:ad:96:6e:f0:3d:f7:18:5a:90:b3:
f7:16:1e:82:e2:4f:a8:7f:73:23:75:84:5c:0d:9e:6c:76:eb:
a6:5c:02:48:f2:04:32:7b:46:57:36:f5:ad:fa:ac:90:fc:20:
0d:57:c5:71:e7:04:62:09:f4:ff:57:7f:70:74:4d:d5:9d:9b:
9d:d2:12:0e:15:36:06:b2:da:9e:28:df:f8:17:98:bc:9f:79:
2b:af:16:1f:cb:ff:b0:31:57:f2:c4:92:3e:b1:59:93:99:db:
b3:fa:f6:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRXaiUpcpSzTFabN1AakoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz
MTk4M2MwHhcNMjUwMTAxMjM0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTdhNGQ3ZWFjM2Q3ZWRkZjAxNDE2Zjk5Mzk3N2MwMmVkNDZjYWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9i8xgQUsQ7AZvL/kSjXY5r6+l8F
gfRO7rNKgTg9IpIZtjHPKx90Ksc11WB5RLVwiqvbwcBZzheiHXW/9qlNKp7YSU/L
nNTrl6bRO8wfk0FDDWDQn0ZZ27WmZNSUpX2uHByfdZpxU2+rtSBcMYOXECcngouB
emJYYQhcQlP/BMXQLj0fi4APdvpUkcOkkIeNrTahnPWNFMnnj6exMyetAtphqv9D
jMuCCNoiE8BoXb2jMSEvCtYDQKSODm8HAiUKusd7OF3mp+bzexYkRZOBXDirGLj3
YyOgXLtUkqGL1nB/qpn/28NMFPdxqEkooCuYPFi9WMMAJLPrso3FuXxqFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOp6TX6sPX7d8BQW+ZOXfALtRsq1MB8GA1UdIwQY
MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt
NTlhZTA5ZWRiZWI5LzEvNm5wTmZxdzlmdDN3RkJiNWs1ZDhBdTFHeXJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5
LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7bGMA0G
CSqGSIb3DQEBCwUAA4IBAQBZVI+OEcmJ+mvBJK6vfF5kXxjw0GYKrY0x5UfBCjyE
Ij6oWuOTLMeyhXJdidPeCgJfvlHC137tRBQDOzNRqN+1JqbUcQKlxe/qxCCDDdYe
Zw5yfPUQm0SdWo6VxUWanc9Ssie1fYGG9nby/VlS4M56751bjRXLr8Pl9s+ewHTj
dBwVorMfai3yPwic1OAj1a3/+r0r6mjrt62WbvA99xhakLP3Fh6C4k+of3MjdYRc
DZ5sduumXAJI8gQye0ZXNvWt+qyQ/CANV8Vx5wRiCfT/V39wdE3VnZud0hIOFTYG
stqeKN/4F5i8n3krrxYfy/+wMVfyxJI+sVmTmduz+vbH
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:41 2025 by rpki-client