Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r16t71VW5XuRa51nMcuDvM6FMB4.roa
File: r16t71VW5XuRa51nMcuDvM6FMB4.roa (raw, json)
Hash identifier: jlEav4gANtj0jUtOZdSCUrTHIykJFAr3ABuIbWB4ky8=
Subject key identifier: AF:5E:AD:EF:55:56:E5:7B:91:6B:9D:67:31:CB:83:BC:CE:85:30:1E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195A7F0CA096D39BB59485DA4627429DAF0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r16t71VW5XuRa51nMcuDvM6FMB4.roa
Signing time: Tue 18 Mar 2025 06:28:50 +0000
ROA not before: Tue 18 Mar 2025 06:28:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396993
IP address blocks: 195.178.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a7:f0:ca:09:6d:39:bb:59:48:5d:a4:62:74:29:da:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 18 06:28:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af5eadef5556e57b916b9d6731cb83bcce85301e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:04:7b:0c:cf:d1:26:be:a9:84:c3:8a:25:b1:
ef:b9:fb:29:3b:68:13:04:4c:45:c3:ad:42:96:95:
e6:c1:f6:c7:64:bc:23:51:1e:01:f8:dc:ca:6b:61:
80:ab:e9:25:2c:63:f1:a1:c2:ac:7c:08:1a:e5:13:
30:68:ad:cd:6a:b5:df:97:2c:b3:fe:67:2f:cc:8f:
04:69:29:96:66:f6:98:5a:96:16:4e:23:72:26:9a:
4e:c3:3a:80:57:ca:64:5b:dc:a3:23:1d:bf:7c:c9:
1b:f5:4c:15:e7:1e:98:66:f5:cf:b1:fd:87:45:ab:
45:75:0c:9b:3e:04:31:f6:4b:7d:1d:05:c6:96:e7:
e5:a7:1c:61:0c:6a:1a:2b:0a:6d:bb:50:dc:5e:99:
46:0a:ca:35:82:ab:7c:3a:ad:ee:95:f3:80:8f:bd:
77:f8:af:ed:7c:05:01:e3:2e:f9:a5:87:43:44:79:
ca:ae:04:43:cb:b6:f1:72:8d:f3:8c:bf:cc:1b:3b:
8f:6d:f8:91:12:be:6a:26:fe:7b:1f:e0:f3:29:44:
c3:dc:51:3b:ef:ec:fc:89:fc:03:ad:c0:e0:53:be:
01:ec:2e:61:e8:4e:a0:72:0d:3b:b6:8e:4e:e2:e6:
c0:fb:b6:75:84:31:44:5f:0f:9e:b0:e3:67:d8:66:
ac:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5E:AD:EF:55:56:E5:7B:91:6B:9D:67:31:CB:83:BC:CE:85:30:1E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r16t71VW5XuRa51nMcuDvM6FMB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.121.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ab:a9:ce:dd:40:32:0a:38:79:83:3a:ea:2b:ef:d3:6c:c6:
f7:ad:b4:79:64:cb:ac:83:cd:c2:6c:a2:38:e4:61:da:51:48:
51:ba:24:40:32:7f:26:cd:b5:01:74:d4:1d:0f:d4:d1:68:6c:
50:18:2f:72:4f:05:f7:e5:9c:fa:3b:bb:e2:77:19:81:21:92:
dd:be:a3:fb:b0:cc:1c:00:b8:15:d7:11:57:b0:7f:56:12:5a:
eb:a1:db:38:94:db:5a:0a:67:17:14:ac:4e:16:22:d7:f8:9e:
99:34:73:af:84:88:c4:4e:a0:14:72:1f:ae:19:bf:65:4d:84:
98:d5:01:b9:f8:b2:95:19:9a:5c:6a:84:ab:c4:ff:a0:a8:d8:
14:05:4d:30:07:b3:e8:6b:03:af:de:71:f6:99:99:ca:a9:d1:
91:e3:d5:f8:6e:b7:38:e6:5c:7f:ec:5b:27:92:bd:c2:fa:b6:
e4:06:cc:49:e6:44:37:86:63:b9:a8:58:ed:7a:f2:42:bb:c5:
35:63:f6:10:8c:53:33:d6:b8:e2:4b:4d:e8:14:35:5a:6c:c8:
24:0b:95:49:21:3c:7a:0b:83:e1:11:8b:2d:eb:71:e0:09:95:
30:d6:6d:33:3d:c3:53:e4:b2:5f:15:de:2a:50:53:33:eb:e7:
8d:9a:cb:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWn8MoJbTm7WUhdpGJ0KdrwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMzE4MDYyODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjVlYWRlZjU1NTZlNTdiOTE2YjlkNjczMWNiODNiY2NlODUzMDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQR7DM/RJr6phMOKJbHvufspO2gT
BExFw61ClpXmwfbHZLwjUR4B+NzKa2GAq+klLGPxocKsfAga5RMwaK3NarXflyyz
/mcvzI8EaSmWZvaYWpYWTiNyJppOwzqAV8pkW9yjIx2/fMkb9UwV5x6YZvXPsf2H
RatFdQybPgQx9kt9HQXGluflpxxhDGoaKwptu1DcXplGCso1gqt8Oq3ulfOAj713
+K/tfAUB4y75pYdDRHnKrgRDy7bxco3zjL/MGzuPbfiREr5qJv57H+DzKUTD3FE7
7+z8ifwDrcDgU74B7C5h6E6gcg07to5O4ubA+7Z1hDFEXw+esONn2GasSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK9ere9VVuV7kWudZzHLg7zOhTAeMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvcjE2dDcxVlc1WHVSYTUxbk1jdUR2TTZGTUI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7J5MA0G
CSqGSIb3DQEBCwUAA4IBAQBoq6nO3UAyCjh5gzrqK+/TbMb3rbR5ZMusg83CbKI4
5GHaUUhRuiRAMn8mzbUBdNQdD9TRaGxQGC9yTwX35Zz6O7vidxmBIZLdvqP7sMwc
ALgV1xFXsH9WElrrods4lNtaCmcXFKxOFiLX+J6ZNHOvhIjETqAUch+uGb9lTYSY
1QG5+LKVGZpcaoSrxP+gqNgUBU0wB7PoawOv3nH2mZnKqdGR49X4brc45lx/7Fsn
kr3C+rbkBsxJ5kQ3hmO5qFjtevJCu8U1Y/YQjFMz1rjiS03oFDVabMgkC5VJITx6
C4PhEYst63HgCZUw1m0zPcNT5LJfFd4qUFMz6+eNmstI
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:10 2025 by rpki-client