Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/h79SEaHwXYiVzt4p0CBMPa0GFjY.roa
File: h79SEaHwXYiVzt4p0CBMPa0GFjY.roa (raw, json)
Hash identifier: LtDXQ1PILY1+EGPsQbs1Ku9N9hF4cubp+4vVwoPrfN4=
Subject key identifier: 87:BF:52:11:A1:F0:5D:88:95:CE:DE:29:D0:20:4C:3D:AD:06:16:36
Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial: 019422FB8636DE077E5E4BCFD08790D527FC
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/h79SEaHwXYiVzt4p0CBMPa0GFjY.roa
Signing time: Wed 01 Jan 2025 17:48:16 +0000
ROA not before: Wed 01 Jan 2025 17:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 88.151.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:86:36:de:07:7e:5e:4b:cf:d0:87:90:d5:27:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Validity
Not Before: Jan 1 17:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87bf5211a1f05d8895cede29d0204c3dad061636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:43:93:27:2c:3a:80:d6:c8:c8:1d:b5:8a:
64:f9:c0:95:c5:d9:b9:78:e5:b6:15:84:f0:f7:a7:
f6:fd:50:78:4b:bb:83:b5:7e:b6:dc:f4:45:9c:0b:
00:d2:28:9c:f5:fa:6f:35:5d:32:fa:27:42:9c:ce:
6e:e6:5a:95:d7:fa:ba:72:dd:96:6c:ed:88:cb:20:
0a:7e:e9:be:c6:86:5b:74:e9:af:61:75:53:c1:64:
1f:f5:f9:f1:6b:b6:78:7b:6f:12:87:b4:63:90:e4:
f3:13:9b:41:3a:6a:28:a0:cb:bb:3f:6b:6a:43:67:
a7:99:e7:84:3d:e9:8f:1f:87:ea:e6:d0:64:79:6e:
69:c1:56:8a:18:6c:f4:36:28:e7:d4:08:79:c9:0d:
1d:28:f2:f5:4d:98:e4:a6:2f:12:1c:b1:6d:a5:26:
04:da:3d:e0:09:b7:93:86:84:de:b8:bf:d1:a1:6f:
07:7d:ab:da:24:44:ce:3c:3f:da:36:12:37:59:88:
11:9f:26:31:d1:15:05:f0:9c:21:9c:6d:ce:ca:04:
51:6a:86:fb:1f:e2:8a:91:39:60:51:6c:1f:f7:b9:
d7:14:f2:99:32:ca:4d:6b:1f:2d:b4:8a:0a:1c:c4:
3a:de:cd:b9:d2:81:3a:2c:e3:c4:c8:9e:54:37:f7:
b7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BF:52:11:A1:F0:5D:88:95:CE:DE:29:D0:20:4C:3D:AD:06:16:36
X509v3 Authority Key Identifier:
keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/h79SEaHwXYiVzt4p0CBMPa0GFjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.14.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b6:72:06:97:77:50:d2:f6:0d:b3:b2:18:4a:5b:fb:a7:b6:
cf:c0:06:26:28:d3:28:5a:01:c3:16:41:5c:8c:33:d8:42:6f:
a5:90:e2:4b:e2:04:d8:18:35:79:83:30:0a:e5:40:79:d6:50:
d8:2d:5f:da:cd:93:b0:b4:7d:a7:bd:61:b5:35:2d:9c:82:11:
d1:de:16:c4:9c:5a:fb:bc:b4:78:79:93:61:37:6f:3f:02:39:
af:c2:f1:4d:45:04:2a:25:98:b7:1c:29:7e:39:04:14:9a:a5:
b8:94:dd:8e:26:93:27:3c:fc:7e:83:4b:59:a6:bb:d7:2c:a4:
bf:03:bc:ae:e2:58:14:3d:3c:5e:b5:f9:a8:08:0b:6a:5c:a2:
78:4d:ea:52:5d:b6:77:b8:42:38:71:c8:16:7e:4f:3c:40:fc:
db:7a:46:34:d2:9a:6b:30:c6:96:91:92:55:58:87:24:80:92:
b1:34:29:d0:c5:ab:e0:f5:fe:90:e5:46:fd:01:5c:8e:64:ac:
d8:19:a5:b7:1b:2f:c0:f1:13:e2:c4:b7:a1:fc:e6:3f:60:11:
d3:ca:66:11:52:c4:e8:d5:14:b6:a9:f7:d3:64:d1:76:d8:ed:
16:64:41:72:67:a1:96:d1:25:59:48:f9:db:0e:46:7b:e8:0b:
3f:2b:bc:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+4Y23gd+XkvP0IeQ1Sf8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMWFjOWYwOTRkODMxOGYzMDg4ZGNhNjgzMDE4NjVmNDYw
NWU5ZGEwHhcNMjUwMTAxMTc0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2JmNTIxMWExZjA1ZDg4OTVjZWRlMjlkMDIwNGMzZGFkMDYxNjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ1DkycsOoDWyMgdtYpk+cCVxdm5
eOW2FYTw96f2/VB4S7uDtX623PRFnAsA0iic9fpvNV0y+idCnM5u5lqV1/q6ct2W
bO2IyyAKfum+xoZbdOmvYXVTwWQf9fnxa7Z4e28Sh7RjkOTzE5tBOmoooMu7P2tq
Q2enmeeEPemPH4fq5tBkeW5pwVaKGGz0Nijn1Ah5yQ0dKPL1TZjkpi8SHLFtpSYE
2j3gCbeThoTeuL/RoW8HfavaJETOPD/aNhI3WYgRnyYx0RUF8JwhnG3OygRRaob7
H+KKkTlgUWwf97nXFPKZMspNax8ttIoKHMQ63s250oE6LOPEyJ5UN/e3AwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIe/UhGh8F2Ilc7eKdAgTD2tBhY2MB8GA1UdIwQY
MBaAFC8ayfCU2DGPMIjcpoMBhl9GBenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEt
YzIzYzgyOWRiOTM3LzEvaDc5U0VhSHdYWWlWenQ0cDBDQk1QYTBHRmpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEtYzIzYzgyOWRiOTM3
LzEvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWJcOMA0G
CSqGSIb3DQEBCwUAA4IBAQAztnIGl3dQ0vYNs7IYSlv7p7bPwAYmKNMoWgHDFkFc
jDPYQm+lkOJL4gTYGDV5gzAK5UB51lDYLV/azZOwtH2nvWG1NS2cghHR3hbEnFr7
vLR4eZNhN28/AjmvwvFNRQQqJZi3HCl+OQQUmqW4lN2OJpMnPPx+g0tZprvXLKS/
A7yu4lgUPTxetfmoCAtqXKJ4TepSXbZ3uEI4ccgWfk88QPzbekY00pprMMaWkZJV
WIckgJKxNCnQxavg9f6Q5Ub9AVyOZKzYGaW3Gy/A8RPixLeh/OY/YBHTymYRUsTo
1RS2qffTZNF22O0WZEFyZ6GW0SVZSPnbDkZ76As/K7wb
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:54:18 2025 by rpki-client