Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/49af8e-881c-4212-9336-a6e53026852d/1/CH95dES2IUlvUKi-_gEHBKJCfUw.roa
File: CH95dES2IUlvUKi-_gEHBKJCfUw.roa (raw, json)
Hash identifier: Pm4VR48XtbQcqsNEgh4e26k30Kn8OHAIQip2FUQo3VA=
Subject key identifier: 08:7F:79:74:44:B6:21:49:6F:50:A8:BE:FE:01:07:04:A2:42:7D:4C
Certificate issuer: /CN=a580fe47b417c8730f857b6536f0df1a635ea852
Certificate serial: 01856C9CD004D3263D34B92CE21C91C0AFD8
Authority key identifier: A5:80:FE:47:B4:17:C8:73:0F:85:7B:65:36:F0:DF:1A:63:5E:A8:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYD-R7QXyHMPhXtlNvDfGmNeqFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/49af8e-881c-4212-9336-a6e53026852d/1/CH95dES2IUlvUKi-_gEHBKJCfUw.roa
Signing time: Sun 01 Jan 2023 09:14:54 +0000
ROA not before: Sun 01 Jan 2023 09:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201106
IP address blocks: 178.22.30.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:d0:04:d3:26:3d:34:b9:2c:e2:1c:91:c0:af:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a580fe47b417c8730f857b6536f0df1a635ea852
Validity
Not Before: Jan 1 09:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=087f797444b621496f50a8befe010704a2427d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f4:a4:5c:79:37:e3:9f:b8:c3:c5:68:e3:8e:
f4:e4:f5:e0:ce:22:8b:1d:4d:12:41:e2:ba:8f:df:
e7:cd:52:93:6a:cc:92:65:a5:28:15:51:25:af:5c:
85:03:ba:39:4c:55:0c:17:e4:3d:63:ba:b0:2e:83:
c5:bf:02:95:83:ca:77:0e:c0:bc:1a:c1:d3:08:42:
46:c4:53:b5:94:73:46:f3:fe:5e:d5:cb:77:e2:72:
b5:5f:00:20:42:0e:2d:43:28:f9:0f:51:6b:25:c8:
20:3e:00:81:9b:00:59:a8:56:77:6d:fc:fb:0e:09:
ad:aa:c7:b8:57:bd:43:72:b3:56:4f:b1:aa:ee:12:
9a:5e:e6:40:84:ef:8c:27:5c:09:98:94:31:e9:84:
66:0e:c9:f1:8f:fa:84:91:b1:54:09:b6:20:92:c2:
cf:89:7d:70:7e:52:db:61:23:2e:06:85:12:76:47:
dc:be:c6:3f:1f:09:6f:96:eb:0a:b8:79:76:48:3d:
e9:88:2f:22:9a:58:a3:0e:b3:5b:9e:0a:0f:70:cd:
43:b9:1c:b4:0c:f1:f2:9e:ce:b6:92:2e:6c:df:2c:
e4:15:0d:be:d7:b2:2c:78:87:56:3d:78:0a:de:9c:
cb:0f:36:fd:ca:98:8c:94:76:8d:e6:03:85:c5:1a:
f9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7F:79:74:44:B6:21:49:6F:50:A8:BE:FE:01:07:04:A2:42:7D:4C
X509v3 Authority Key Identifier:
keyid:A5:80:FE:47:B4:17:C8:73:0F:85:7B:65:36:F0:DF:1A:63:5E:A8:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYD-R7QXyHMPhXtlNvDfGmNeqFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/49af8e-881c-4212-9336-a6e53026852d/1/CH95dES2IUlvUKi-_gEHBKJCfUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/49af8e-881c-4212-9336-a6e53026852d/1/pYD-R7QXyHMPhXtlNvDfGmNeqFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.30.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:cb:a0:25:54:f8:f9:fd:38:28:20:ce:b4:88:7d:5c:eb:e0:
5d:5e:56:25:9a:d3:39:01:98:65:6d:87:43:49:38:23:74:94:
43:66:db:41:51:14:71:b9:78:61:4c:f6:32:9c:15:2f:9d:82:
2c:f6:31:b1:89:42:6d:99:2b:6f:37:c7:d1:ff:b9:68:4f:45:
38:34:c3:6d:29:41:c8:b9:3f:e0:12:72:3c:b5:02:c2:fa:db:
35:c9:c3:e7:9e:b6:ca:cc:c4:f0:24:af:98:8e:9b:7d:1d:2d:
9f:27:6b:91:ac:8f:7c:55:6c:28:a6:04:ec:ca:49:73:c2:d6:
bf:37:7b:14:ea:d9:d4:89:97:0f:f5:06:29:cd:98:22:69:01:
88:ae:b8:0f:2d:b2:88:55:4b:97:2b:3d:78:cb:5d:ed:33:78:
d9:24:0e:2a:db:4f:da:6d:61:53:ff:6b:76:4c:96:4c:e8:d0:
9c:b3:08:af:7b:53:1f:00:e3:58:1c:86:cd:e9:38:6f:cd:d3:
66:98:64:6f:4f:3a:2a:2a:6b:1e:06:49:65:d5:32:04:dd:44:
af:fa:0d:b5:7a:92:14:09:c1:7b:dd:a6:09:4c:f7:4a:05:28:
b5:47:3f:6e:c2:12:5b:4f:3c:f5:8d:dc:81:d4:aa:81:05:04:
bf:ea:c5:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsnNAE0yY9NLks4hyRwK/YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ODBmZTQ3YjQxN2M4NzMwZjg1N2I2NTM2ZjBkZjFhNjM1
ZWE4NTIwHhcNMjMwMTAxMDkxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODdmNzk3NDQ0YjYyMTQ5NmY1MGE4YmVmZTAxMDcwNGEyNDI3ZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vSkXHk345+4w8Vo44705PXgziKL
HU0SQeK6j9/nzVKTasySZaUoFVElr1yFA7o5TFUMF+Q9Y7qwLoPFvwKVg8p3DsC8
GsHTCEJGxFO1lHNG8/5e1ct34nK1XwAgQg4tQyj5D1FrJcggPgCBmwBZqFZ3bfz7
Dgmtqse4V71DcrNWT7Gq7hKaXuZAhO+MJ1wJmJQx6YRmDsnxj/qEkbFUCbYgksLP
iX1wflLbYSMuBoUSdkfcvsY/HwlvlusKuHl2SD3piC8imlijDrNbngoPcM1DuRy0
DPHyns62ki5s3yzkFQ2+17IseIdWPXgK3pzLDzb9ypiMlHaN5gOFxRr5twIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAh/eXREtiFJb1Covv4BBwSiQn1MMB8GA1UdIwQY
MBaAFKWA/ke0F8hzD4V7ZTbw3xpjXqhSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFlELVI3UVh5SE1QaFh0bE52RGZHbU5lcUZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80OWFmOGUtODgxYy00MjEyLTkzMzYt
YTZlNTMwMjY4NTJkLzEvQ0g5NWRFUzJJVWx2VUtpLV9nRUhCS0pDZlV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS80OWFmOGUtODgxYy00MjEyLTkzMzYtYTZlNTMwMjY4NTJk
LzEvcFlELVI3UVh5SE1QaFh0bE52RGZHbU5lcUZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshYeMA0G
CSqGSIb3DQEBCwUAA4IBAQBey6AlVPj5/TgoIM60iH1c6+BdXlYlmtM5AZhlbYdD
STgjdJRDZttBURRxuXhhTPYynBUvnYIs9jGxiUJtmStvN8fR/7loT0U4NMNtKUHI
uT/gEnI8tQLC+ts1ycPnnrbKzMTwJK+Yjpt9HS2fJ2uRrI98VWwopgTsyklzwta/
N3sU6tnUiZcP9QYpzZgiaQGIrrgPLbKIVUuXKz14y13tM3jZJA4q20/abWFT/2t2
TJZM6NCcswive1MfAONYHIbN6ThvzdNmmGRvTzoqKmseBkll1TIE3USv+g21epIU
CcF73aYJTPdKBSi1Rz9uwhJbTzz1jdyB1KqBBQS/6sUr
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:47:01 2025 by rpki-client