Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/rd8NnydFpZY9VMF7rki6mDfX1OE.roa
File: rd8NnydFpZY9VMF7rki6mDfX1OE.roa (raw, json)
Hash identifier: Fdl4wWRM/i0XUBMw6ya79MvwrhVDeixQdqpTA/MdgWc=
Subject key identifier: AD:DF:0D:9F:27:45:A5:96:3D:54:C1:7B:AE:48:BA:98:37:D7:D4:E1
Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0
Certificate serial: 01941FFA42B6DCF25F2539215A1B4FF01745
Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/rd8NnydFpZY9VMF7rki6mDfX1OE.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.1.32.0/24 maxlen: 24
2001:7f8:8f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:42:b6:dc:f2:5f:25:39:21:5a:1b:4f:f0:17:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=addf0d9f2745a5963d54c17bae48ba9837d7d4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:87:d2:0f:2c:a9:12:83:f6:24:8f:2a:3f:af:
4d:f2:d0:e2:27:c6:81:34:fa:db:c5:ae:c8:91:f6:
cf:27:ed:4d:d8:fc:a5:4c:98:ba:49:d6:13:61:77:
72:a8:f9:af:b9:cd:a8:ce:99:da:af:b5:e1:9e:a1:
ad:4c:6b:67:c0:b9:db:a5:cf:2e:42:a2:54:45:b8:
50:81:de:cf:ae:da:25:c3:d7:50:6a:db:d0:e4:82:
0f:a8:fb:13:fe:61:cd:8d:84:c9:d9:13:60:ec:52:
54:72:34:81:9d:8a:87:a9:2f:94:e1:8a:1d:30:81:
ef:45:e3:35:b2:2a:4a:88:df:4c:d8:d2:f7:ff:03:
41:ed:cb:d1:24:ba:96:ba:d6:76:fa:75:76:3e:31:
86:36:ea:15:39:5f:4b:6b:bc:c7:af:c9:83:af:54:
22:80:84:e7:44:72:e9:da:b8:46:45:22:e5:d7:3f:
68:b3:9a:f7:77:25:f9:a4:74:b4:c5:4f:6b:aa:af:
fc:6b:b6:d3:95:b8:0a:9c:54:f1:86:21:a8:75:8c:
8f:6a:fd:39:dc:d1:52:7e:3e:be:53:e0:53:ad:24:
73:24:3c:41:4f:03:7b:d7:e1:80:4b:a4:c1:7d:92:
6f:90:39:ce:0c:bc:ac:b7:35:36:4a:db:40:b7:2e:
8a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DF:0D:9F:27:45:A5:96:3D:54:C1:7B:AE:48:BA:98:37:D7:D4:E1
X509v3 Authority Key Identifier:
keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/rd8NnydFpZY9VMF7rki6mDfX1OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.32.0/24
IPv6:
2001:7f8:8f::/48
Signature Algorithm: sha256WithRSAEncryption
73:8a:74:92:15:5e:d8:7c:6d:d3:03:57:32:97:29:71:21:f8:
9b:96:ae:38:90:5d:1b:5d:c2:77:f4:a5:f0:ca:2a:9e:54:74:
f7:0c:0f:27:b3:2b:c5:46:1f:11:5e:06:4c:e8:0d:5f:b0:20:
80:e5:6d:d3:76:5f:ba:93:51:00:a8:8d:34:fc:a5:0e:12:e8:
b5:dc:9f:64:b7:5a:06:f6:39:6a:30:90:1f:b6:de:4f:90:c1:
1d:78:d5:e9:62:2b:88:72:05:55:8e:5b:a4:a0:c7:24:a3:1e:
69:78:e4:9e:ba:a2:ed:03:ce:30:15:73:e8:e3:6c:2b:1e:3d:
04:f3:47:e5:8c:b6:2a:93:5e:e3:5c:82:8a:31:f7:1e:9b:0b:
5e:9a:96:b1:6d:fc:0f:7c:50:ba:2f:8b:d4:ba:7a:71:9c:f1:
f1:df:70:d0:8a:af:35:df:b1:9e:97:a6:cb:38:76:a1:e1:af:
c4:9b:97:4c:e7:9c:23:48:23:98:97:45:44:0a:4f:df:9f:34:
17:52:b7:fe:15:ff:05:d7:fb:a4:7e:bb:14:6b:8a:82:4f:bf:
e8:91:7b:00:a7:3a:fe:1d:65:5f:10:df:b3:5a:23:1f:3f:df:
53:3f:b3:df:2f:88:c6:98:b3:bd:64:2a:ba:be:8a:bd:26:79:
f6:ed:55:d8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQf+kK23PJfJTkhWhtP8BdFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm
NGQ5ZTAwHhcNMjUwMTAxMDM0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGRmMGQ5ZjI3NDVhNTk2M2Q1NGMxN2JhZTQ4YmE5ODM3ZDdkNGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIfSDyypEoP2JI8qP69N8tDiJ8aB
NPrbxa7IkfbPJ+1N2PylTJi6SdYTYXdyqPmvuc2ozpnar7XhnqGtTGtnwLnbpc8u
QqJURbhQgd7Prtolw9dQatvQ5IIPqPsT/mHNjYTJ2RNg7FJUcjSBnYqHqS+U4Yod
MIHvReM1sipKiN9M2NL3/wNB7cvRJLqWutZ2+nV2PjGGNuoVOV9La7zHr8mDr1Qi
gITnRHLp2rhGRSLl1z9os5r3dyX5pHS0xU9rqq/8a7bTlbgKnFTxhiGodYyPav05
3NFSfj6+U+BTrSRzJDxBTwN71+GAS6TBfZJvkDnODLystzU2SttAty6KYQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFK3fDZ8nRaWWPVTBe65Iupg319ThMB8GA1UdIwQY
MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt
ZTljOTEzMjgzNmZmLzEvcmQ4Tm55ZEZwWlk5Vk1GN3JraTZtRGZYMU9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm
LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQEgMA8E
AgACMAkDBwAgAQf4AI8wDQYJKoZIhvcNAQELBQADggEBAHOKdJIVXth8bdMDVzKX
KXEh+JuWrjiQXRtdwnf0pfDKKp5UdPcMDyezK8VGHxFeBkzoDV+wIIDlbdN2X7qT
UQCojTT8pQ4S6LXcn2S3Wgb2OWowkB+23k+QwR141eliK4hyBVWOW6SgxySjHml4
5J66ou0DzjAVc+jjbCsePQTzR+WMtiqTXuNcgoox9x6bC16alrFt/A98ULovi9S6
enGc8fHfcNCKrzXfsZ6Xpss4dqHhr8Sbl0znnCNII5iXRUQKT9+fNBdSt/4V/wXX
+6R+uxRrioJPv+iRewCnOv4dZV8Q37NaIx8/31M/s98viMaYs71kKrq+ir0mefbt
Vdg=
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:25:20 2025 by rpki-client