Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iXG-XSAoWVaaIeGBTVD5jq9s9CA.roa
File: iXG-XSAoWVaaIeGBTVD5jq9s9CA.roa (raw, json)
Hash identifier: MGyVH8Ae3OJjxTh/R2l/hNgr/+cuRaw1VKorEUIcwMM=
Subject key identifier: 89:71:BE:5D:20:28:59:56:9A:21:E1:81:4D:50:F9:8E:AF:6C:F4:20
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824F9B25F7D304EF2BC3386A51497D9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iXG-XSAoWVaaIeGBTVD5jq9s9CA.roa
Signing time: Thu 02 Jan 2025 17:51:39 +0000
ROA not before: Thu 02 Jan 2025 17:51:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199614
IP address blocks: 194.58.61.0/24 maxlen: 24
194.87.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:f9:b2:5f:7d:30:4e:f2:bc:33:86:a5:14:97:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8971be5d202859569a21e1814d50f98eaf6cf420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:cc:93:75:3c:62:66:5b:db:ae:16:22:b9:
7e:57:65:7f:65:19:24:0a:a2:c8:c2:09:fd:a2:f8:
b9:72:c8:9c:89:5e:95:cd:92:b1:b2:0d:d9:49:89:
95:85:4f:f8:90:b8:5a:61:f1:50:ed:68:24:9c:ba:
88:b9:04:7b:d7:8a:e2:9b:19:e9:96:7a:0d:18:59:
6a:02:0c:f9:d4:c0:d3:9c:bc:2d:16:b0:2b:e6:34:
cb:0a:7d:0a:9c:e0:9c:21:57:96:39:24:be:99:42:
58:dd:dd:59:54:b5:90:65:46:e2:cc:29:63:e8:94:
75:bb:7a:8d:54:8b:4e:02:5c:55:30:14:7b:06:bd:
b7:50:2a:49:e5:1d:b9:67:0b:cf:78:94:5e:40:32:
b9:d8:f3:7b:c9:7e:86:fa:b9:36:1e:be:fd:81:00:
1a:1c:58:1b:a1:90:b9:95:0d:c3:e7:bb:07:7a:4e:
80:dd:a0:cd:c6:05:9a:35:9b:b1:ab:3a:6d:7d:dc:
c0:4a:55:a5:81:14:f8:0a:35:75:44:88:5b:7d:02:
a5:04:3c:34:5a:26:23:8a:a9:49:85:36:12:d0:a4:
82:f1:08:79:ee:bf:3e:bb:ec:c8:7c:e7:b7:27:f4:
d5:0c:76:b7:92:9b:a7:f1:ec:56:17:ef:0b:d9:3a:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:71:BE:5D:20:28:59:56:9A:21:E1:81:4D:50:F9:8E:AF:6C:F4:20
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iXG-XSAoWVaaIeGBTVD5jq9s9CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.61.0/24
194.87.171.0/24
Signature Algorithm: sha256WithRSAEncryption
06:74:ed:cc:54:1f:c2:ed:cd:9e:40:d2:6b:45:82:83:95:ba:
e6:77:99:ce:e1:e0:ed:c3:cd:b8:8f:26:1d:32:a9:a8:93:f0:
f6:27:6f:8f:e2:74:90:5e:3b:da:67:1b:90:c8:e5:99:d4:2d:
08:98:b9:0a:df:d2:39:c7:3a:22:2c:ba:c6:dc:7f:bf:2d:03:
fd:28:ac:f2:e0:7d:67:45:0a:f5:d8:3f:6e:11:19:73:76:0b:
7d:4f:52:a3:56:99:42:48:c1:f8:23:e0:5b:b6:f5:23:e8:92:
82:d5:c7:75:7a:46:65:39:e5:2d:64:9a:e8:95:13:61:9e:c0:
08:5c:86:d8:55:70:02:c5:25:c7:03:47:f0:5d:ac:99:e2:6d:
13:fe:ba:a3:9d:f4:22:99:a1:d2:3b:c6:3c:32:9e:f8:ba:1f:
14:65:64:d2:0b:61:95:a7:1a:9f:a5:0c:ce:b9:0e:10:7c:45:
cd:07:88:fd:b3:14:99:62:5c:37:6c:6e:29:2d:55:8c:82:4f:
49:0e:2f:89:fc:9d:2b:32:8a:03:c7:d9:43:5b:12:3a:47:5e:
4a:20:5e:c9:0e:c2:51:1c:ae:50:1e:2b:1b:e7:9b:75:d8:e1:
f5:53:79:8b:9b:5e:d2:eb:b1:0e:17:9a:3b:37:e4:af:ab:07:
a5:76:e0:35
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoJPmyX30wTvK8M4alFJfZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjUwMTAyMTc1MTM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTcxYmU1ZDIwMjg1OTU2OWEyMWUxODE0ZDUwZjk4ZWFmNmNmNDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUjMk3U8YmZb264WIrl+V2V/ZRkk
CqLIwgn9ovi5csiciV6VzZKxsg3ZSYmVhU/4kLhaYfFQ7WgknLqIuQR714rimxnp
lnoNGFlqAgz51MDTnLwtFrAr5jTLCn0KnOCcIVeWOSS+mUJY3d1ZVLWQZUbizClj
6JR1u3qNVItOAlxVMBR7Br23UCpJ5R25ZwvPeJReQDK52PN7yX6G+rk2Hr79gQAa
HFgboZC5lQ3D57sHek6A3aDNxgWaNZuxqzptfdzASlWlgRT4CjV1RIhbfQKlBDw0
WiYjiqlJhTYS0KSC8Qh57r8+u+zIfOe3J/TVDHa3kpun8exWF+8L2TpZ9wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIlxvl0gKFlWmiHhgU1Q+Y6vbPQgMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvaVhHLVhTQW9XVmFhSWVHQlRWRDVqcTlzOUNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwjo9AwQA
wlerMA0GCSqGSIb3DQEBCwUAA4IBAQAGdO3MVB/C7c2eQNJrRYKDlbrmd5nO4eDt
w824jyYdMqmok/D2J2+P4nSQXjvaZxuQyOWZ1C0ImLkK39I5xzoiLLrG3H+/LQP9
KKzy4H1nRQr12D9uERlzdgt9T1KjVplCSMH4I+BbtvUj6JKC1cd1ekZlOeUtZJro
lRNhnsAIXIbYVXACxSXHA0fwXayZ4m0T/rqjnfQimaHSO8Y8Mp74uh8UZWTSC2GV
pxqfpQzOuQ4QfEXNB4j9sxSZYlw3bG4pLVWMgk9JDi+J/J0rMooDx9lDWxI6R15K
IF7JDsJRHK5QHisb55t12OH1U3mLm17S67EOF5o7N+SvqwelduA1
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:02:54 2025 by rpki-client