Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/3O8SjjWsPfLABa3jrVc6djhtyEs.roa
File: 3O8SjjWsPfLABa3jrVc6djhtyEs.roa (raw, json)
Hash identifier: HeQvLqUlnnayNmN/r7cxXFLVXADWQxZs3mFygr2LMHc=
Subject key identifier: DC:EF:12:8E:35:AC:3D:F2:C0:05:AD:E3:AD:57:3A:76:38:6D:C8:4B
Certificate issuer: /CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Certificate serial: 019425222204D080210B84FEF68ABDFB8097
Authority key identifier: 08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/3O8SjjWsPfLABa3jrVc6djhtyEs.roa
Signing time: Thu 02 Jan 2025 03:49:41 +0000
ROA not before: Thu 02 Jan 2025 03:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8823
IP address blocks: 194.180.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:22:04:d0:80:21:0b:84:fe:f6:8a:bd:fb:80:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Validity
Not Before: Jan 2 03:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcef128e35ac3df2c005ade3ad573a76386dc84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:4d:cc:a3:97:d7:54:b4:35:4b:ad:34:da:
00:e2:bc:05:18:52:1a:a9:15:9e:a0:ac:66:ea:66:
ab:f4:71:9c:20:b4:4a:c9:91:b6:72:1e:ab:f1:f5:
0c:94:35:0e:79:69:ac:a7:88:0c:e1:b3:8a:76:09:
e8:64:9e:f5:47:4d:61:70:0a:78:9c:0a:fe:b8:4a:
ce:5b:12:2e:22:31:15:21:03:cc:75:61:8f:48:62:
c1:82:38:69:81:94:1d:93:6e:9d:80:72:0c:90:6a:
f2:d4:a9:bb:45:c9:d5:34:7d:72:52:6e:8c:e6:6d:
f5:94:6a:dd:99:83:08:c7:d0:d0:1b:0f:6b:26:7c:
87:45:98:d6:2b:89:89:83:00:35:27:50:10:ff:e6:
e1:aa:aa:e7:ba:d1:de:e2:23:c7:63:5d:88:50:8b:
98:de:41:2a:73:40:88:7f:8d:7a:1f:dc:80:74:21:
53:2d:43:98:ee:9e:09:b5:0d:20:a3:f3:1f:8f:91:
14:c6:85:98:f6:9a:18:ab:63:3e:e1:bc:e9:e9:ab:
57:27:d1:05:61:9c:ed:22:fe:7b:f8:73:ff:fc:44:
eb:5b:87:b9:b3:77:36:4b:f8:4d:76:04:e5:47:01:
30:4a:27:d2:1d:65:a5:93:92:b8:f2:21:55:1e:a9:
b5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EF:12:8E:35:AC:3D:F2:C0:05:AD:E3:AD:57:3A:76:38:6D:C8:4B
X509v3 Authority Key Identifier:
keyid:08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/3O8SjjWsPfLABa3jrVc6djhtyEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.199.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:02:3d:a0:80:0f:39:16:97:89:50:8a:23:6a:0d:09:a3:38:
e2:a4:f7:60:46:2e:87:39:2e:e8:12:b3:45:89:cc:6f:cf:4b:
e5:09:bb:71:e8:0d:95:4a:ab:9a:5f:2a:b1:0d:2e:79:ac:ad:
a6:09:d5:f5:73:95:66:b2:02:82:d6:6d:58:3b:2e:a5:46:1d:
bd:3d:23:4f:68:40:71:20:7d:2a:b2:e9:12:dc:94:f7:07:93:
74:21:cc:33:1f:c4:be:54:f9:22:57:9c:e4:fd:2a:5d:12:fb:
25:ad:97:a0:8a:0b:00:71:71:b6:62:f7:9e:54:ab:14:e9:b5:
49:96:86:b1:e2:b6:3c:1f:9f:41:d1:8d:b5:fc:36:6f:b0:9c:
3d:c8:18:4e:2e:d6:cd:96:71:03:97:a3:43:d3:24:af:fb:fe:
d5:d9:60:3b:df:94:c1:40:00:c1:c6:cf:23:48:4c:f6:22:33:
c3:9c:32:83:91:b3:be:84:d5:06:b0:a8:5a:1a:c0:c0:b4:a7:
bb:8a:44:15:a5:d8:fd:66:f3:b6:62:51:da:2a:9c:d2:3f:2e:
4c:e7:35:dd:d9:85:de:b8:35:97:0b:1e:53:a1:ae:02:40:da:
db:38:cc:4b:f3:50:30:7e:46:72:15:e9:73:57:e7:38:0f:3f:
28:3b:c5:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIiIE0IAhC4T+9oq9+4CXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDc2MDFiYzQ0NDIyYzhkMjNhM2NkNzJiZmVhMWJiZjJh
MDU2M2EwHhcNMjUwMTAyMDM0OTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2VmMTI4ZTM1YWMzZGYyYzAwNWFkZTNhZDU3M2E3NjM4NmRjODRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtRNzKOX11S0NUutNNoA4rwFGFIa
qRWeoKxm6mar9HGcILRKyZG2ch6r8fUMlDUOeWmsp4gM4bOKdgnoZJ71R01hcAp4
nAr+uErOWxIuIjEVIQPMdWGPSGLBgjhpgZQdk26dgHIMkGry1Km7RcnVNH1yUm6M
5m31lGrdmYMIx9DQGw9rJnyHRZjWK4mJgwA1J1AQ/+bhqqrnutHe4iPHY12IUIuY
3kEqc0CIf416H9yAdCFTLUOY7p4JtQ0go/Mfj5EUxoWY9poYq2M+4bzp6atXJ9EF
YZztIv57+HP//ETrW4e5s3c2S/hNdgTlRwEwSifSHWWlk5K48iFVHqm14QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNzvEo41rD3ywAWt461XOnY4bchLMB8GA1UdIwQY
MBaAFAgHYBvERCLI0jo81yv+obvyoFY6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FkZ0c4UkVJc2pTT2p6WEtfNmh1X0tnVmpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8xODI2MjEtY2M5OS00Mzg1LTkzNjgt
NWQ2MWZlMjYzMWQwLzEvM084U2pqV3NQZkxBQmEzanJWYzZkamh0eUVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8xODI2MjEtY2M5OS00Mzg1LTkzNjgtNWQ2MWZlMjYzMWQw
LzEvQ0FkZ0c4UkVJc2pTT2p6WEtfNmh1X0tnVmpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrTHMA0G
CSqGSIb3DQEBCwUAA4IBAQCpAj2ggA85FpeJUIojag0JozjipPdgRi6HOS7oErNF
icxvz0vlCbtx6A2VSquaXyqxDS55rK2mCdX1c5VmsgKC1m1YOy6lRh29PSNPaEBx
IH0qsukS3JT3B5N0IcwzH8S+VPkiV5zk/SpdEvslrZegigsAcXG2YveeVKsU6bVJ
loax4rY8H59B0Y21/DZvsJw9yBhOLtbNlnEDl6ND0ySv+/7V2WA735TBQADBxs8j
SEz2IjPDnDKDkbO+hNUGsKhaGsDAtKe7ikQVpdj9ZvO2YlHaKpzSPy5M5zXd2YXe
uDWXCx5Toa4CQNrbOMxL81AwfkZyFelzV+c4Dz8oO8Xa
-----END CERTIFICATE-----
Generated at Thu Apr 10 04:46:39 2025 by rpki-client