Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/92Wt7oM0GszhUSxz_z1xqqAicuY.roa
File: 92Wt7oM0GszhUSxz_z1xqqAicuY.roa (raw, json)
Hash identifier: /Sz3dmx9NyXz7YPf3AfkDs8iqkb05Bd7+/uX3QLUag0=
Subject key identifier: F7:65:AD:EE:83:34:1A:CC:E1:51:2C:73:FF:3D:71:AA:A0:22:72:E6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824E4ACC96D8BAD35ACC062BB511A42
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/92Wt7oM0GszhUSxz_z1xqqAicuY.roa
Signing time: Thu 02 Jan 2025 17:51:33 +0000
ROA not before: Thu 02 Jan 2025 17:51:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 195.133.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:e4:ac:c9:6d:8b:ad:35:ac:c0:62:bb:51:1a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f765adee83341acce1512c73ff3d71aaa02272e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:b9:55:2c:13:9f:07:29:45:ae:bd:02:5b:
4f:a6:7f:b1:d6:e6:e2:b5:af:c9:38:40:cc:22:6e:
32:05:06:ff:22:6b:ba:7d:3c:c7:54:a5:b7:37:53:
5c:bc:65:1c:9b:e3:cb:5a:58:78:bd:d8:43:73:53:
ef:c3:fd:4d:1b:fd:c3:81:8e:56:53:50:9b:e5:c4:
cd:16:c5:76:ae:bd:ab:09:93:63:3f:5b:02:13:9b:
52:b3:ba:a6:6a:46:3c:93:01:5c:60:a5:be:f3:24:
8a:a7:69:54:c8:5f:f8:eb:f7:bb:85:c5:0b:f6:55:
78:d5:cc:93:ac:72:fc:e9:c4:c0:1d:58:a0:af:a6:
2f:2b:f9:0c:1d:11:59:ec:88:75:42:3c:27:0e:96:
95:14:02:51:85:cd:64:dd:af:e3:be:65:e0:8b:97:
ce:e2:f5:c7:a0:e3:ae:e2:fc:1b:1c:19:00:cd:09:
53:50:32:61:1e:c9:39:99:6c:a0:23:1e:e4:ff:e1:
66:06:6c:76:42:3b:3e:da:9c:db:48:0a:86:9d:54:
ea:53:59:7f:0d:a5:08:42:70:9a:a9:c2:c3:86:bf:
86:d2:4c:77:d1:85:21:02:73:04:ae:66:05:ca:f0:
3a:3c:33:d9:2e:0a:15:25:30:60:3b:dc:2f:22:fd:
98:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:65:AD:EE:83:34:1A:CC:E1:51:2C:73:FF:3D:71:AA:A0:22:72:E6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/92Wt7oM0GszhUSxz_z1xqqAicuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.7.0/24
Signature Algorithm: sha256WithRSAEncryption
39:58:3d:5b:b1:67:0d:b9:33:10:b9:3c:93:8d:57:1e:45:d4:
cf:10:39:1b:af:8f:7c:b5:25:c7:e7:37:c7:db:45:f9:ab:d2:
4c:31:3b:d6:6e:3e:05:d1:d4:2d:81:89:6e:c0:36:70:87:f5:
63:6d:75:45:73:e2:27:42:ff:8d:17:dc:6b:6a:91:cf:35:86:
93:37:04:ef:29:70:8c:d2:60:04:41:52:ba:49:1d:95:3b:09:
a0:ce:57:a2:ea:53:9f:de:43:a5:ea:15:7d:c5:fb:e7:08:8a:
f0:f1:0e:69:56:59:f0:68:45:f1:bf:ed:9f:c2:af:fa:42:1f:
bb:2f:3b:d8:c5:28:99:58:b0:16:22:96:5d:40:87:72:b9:d6:
39:67:ff:6a:cb:ac:b6:3e:2b:95:e1:b3:98:5b:b8:70:c9:c3:
e4:9b:56:79:7f:42:f3:b7:eb:f7:9d:6d:5f:76:a7:c1:10:f1:
b1:7e:44:63:4e:fd:dc:e6:1e:61:48:d5:39:17:7a:58:91:e2:
27:fd:0d:80:b6:90:eb:18:57:42:a1:0a:f3:7a:46:df:36:3a:
18:f6:fa:76:cf:f6:f0:2f:d0:40:f9:cd:3a:ec:bd:26:b9:13:
33:52:97:cd:2e:89:44:b9:78:71:ef:b4:8f:53:13:f5:3b:b7:
b5:aa:b1:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJOSsyW2LrTWswGK7URpCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjUwMTAyMTc1MTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzY1YWRlZTgzMzQxYWNjZTE1MTJjNzNmZjNkNzFhYWEwMjI3MmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIu5VSwTnwcpRa69AltPpn+x1ubi
ta/JOEDMIm4yBQb/Imu6fTzHVKW3N1NcvGUcm+PLWlh4vdhDc1Pvw/1NG/3DgY5W
U1Cb5cTNFsV2rr2rCZNjP1sCE5tSs7qmakY8kwFcYKW+8ySKp2lUyF/46/e7hcUL
9lV41cyTrHL86cTAHVigr6YvK/kMHRFZ7Ih1QjwnDpaVFAJRhc1k3a/jvmXgi5fO
4vXHoOOu4vwbHBkAzQlTUDJhHsk5mWygIx7k/+FmBmx2Qjs+2pzbSAqGnVTqU1l/
DaUIQnCaqcLDhr+G0kx30YUhAnMErmYFyvA6PDPZLgoVJTBgO9wvIv2Y5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPdlre6DNBrM4VEsc/89caqgInLmMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvOTJXdDdvTTBHc3poVVN4el96MXhxcUFpY3VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4UHMA0G
CSqGSIb3DQEBCwUAA4IBAQA5WD1bsWcNuTMQuTyTjVceRdTPEDkbr498tSXH5zfH
20X5q9JMMTvWbj4F0dQtgYluwDZwh/VjbXVFc+InQv+NF9xrapHPNYaTNwTvKXCM
0mAEQVK6SR2VOwmgzlei6lOf3kOl6hV9xfvnCIrw8Q5pVlnwaEXxv+2fwq/6Qh+7
LzvYxSiZWLAWIpZdQIdyudY5Z/9qy6y2PiuV4bOYW7hwycPkm1Z5f0Lzt+v3nW1f
dqfBEPGxfkRjTv3c5h5hSNU5F3pYkeIn/Q2AtpDrGFdCoQrzekbfNjoY9vp2z/bw
L9BA+c067L0muRMzUpfNLolEuXhx77SPUxP1O7e1qrGZ
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:37:27 2025 by rpki-client