Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/dR1c8gl1sUeEpcwnjCPusO2r7F4.roa
File: dR1c8gl1sUeEpcwnjCPusO2r7F4.roa (raw, json)
Hash identifier: VnUgcQ7ORmj8p3qlsZ6kiGOdd3CobpNQRpzK6IP4XFU=
Subject key identifier: 75:1D:5C:F2:09:75:B1:47:84:A5:CC:27:8C:23:EE:B0:ED:AB:EC:5E
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019465093D441B06410A238FC9793E2DD1E5
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/dR1c8gl1sUeEpcwnjCPusO2r7F4.roa
Signing time: Tue 14 Jan 2025 13:38:11 +0000
ROA not before: Tue 14 Jan 2025 13:38:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3223
IP address blocks: 194.176.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:65:09:3d:44:1b:06:41:0a:23:8f:c9:79:3e:2d:d1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 14 13:38:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=751d5cf20975b14784a5cc278c23eeb0edabec5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6e:29:46:59:8c:e7:f0:e6:dd:42:5f:af:aa:
ea:4e:ff:ba:9d:0a:78:71:69:64:14:de:8b:06:87:
f1:77:94:bb:f2:c6:18:36:0c:df:3e:a0:36:13:c5:
2f:a7:29:e6:ed:99:3a:5b:84:68:cd:f5:9b:0d:18:
d6:9b:af:3d:a6:e3:c6:fa:95:54:d4:85:93:63:9a:
26:d2:57:6c:22:e4:b3:61:8d:bc:85:74:36:fa:fe:
e4:1f:df:23:bd:92:36:be:88:cb:8e:8f:8a:4f:0b:
a1:4a:cb:fb:9f:e2:f8:f8:d6:d8:77:b0:fc:fc:6f:
80:1f:8a:7f:cb:96:25:fe:5f:5b:a2:04:e9:af:4d:
1b:63:a1:7a:5c:06:3b:06:75:a2:30:a8:b1:50:71:
9a:b3:31:47:70:3e:13:3f:7c:d5:b1:2a:a5:6d:de:
87:7c:e7:06:71:77:8e:9a:54:bb:19:01:ed:b6:d7:
3a:82:93:bf:13:71:17:17:f4:3d:b4:73:44:e7:e6:
ac:50:b4:33:ed:32:93:97:5d:d7:e8:22:56:0e:a8:
b4:e9:7d:70:2e:89:d5:62:8c:35:f6:b7:5e:a6:7c:
ab:4f:97:e0:da:33:fb:f2:a9:1a:e7:77:7b:88:49:
d6:2e:24:9a:9c:25:85:03:b2:25:51:39:22:fe:03:
f0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1D:5C:F2:09:75:B1:47:84:A5:CC:27:8C:23:EE:B0:ED:AB:EC:5E
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/dR1c8gl1sUeEpcwnjCPusO2r7F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.184.0/24
Signature Algorithm: sha256WithRSAEncryption
49:c4:15:4b:f3:5e:6f:71:41:1f:63:00:a0:d9:b3:c2:c0:a4:
e6:98:8f:24:5e:41:9c:86:e6:98:4c:fc:57:16:af:ef:36:b0:
85:97:65:dd:f0:0d:72:ef:6b:f1:91:3f:e9:0e:91:43:57:4e:
18:74:2f:8c:52:29:13:c0:0b:c9:ac:b6:ad:57:1f:3d:58:a2:
be:83:29:19:67:52:dc:11:cb:1c:10:1e:6b:0a:5d:86:e2:c6:
ef:c5:fa:30:2c:46:3e:7b:8c:42:6b:12:7f:48:88:a8:37:49:
c5:6b:00:65:dc:e3:c6:43:a5:79:df:cf:ea:8e:9d:32:7d:84:
d8:5a:c5:63:6c:61:6f:15:09:d2:bc:9a:2a:c9:fc:8a:51:05:
d4:a6:89:0a:07:da:00:9a:e5:3c:c3:7b:e8:f1:5b:75:72:12:
1b:d9:78:38:e1:6b:f5:4b:47:14:b9:b9:b9:19:6f:1f:31:2c:
72:61:64:01:c6:f8:21:67:cb:d5:26:75:86:e0:a8:ea:61:26:
1d:e7:17:27:bd:54:40:ab:85:b5:d7:bb:c4:85:5d:d4:ca:4e:
f4:b0:60:ec:53:1d:ac:e3:b9:f8:dc:c5:90:49:fa:88:11:c2:
c4:13:37:e0:43:bb:ef:69:24:22:d8:8f:53:2e:cd:a1:58:b8:
86:2f:a8:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRlCT1EGwZBCiOPyXk+LdHlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwMTE0MTMzODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTFkNWNmMjA5NzViMTQ3ODRhNWNjMjc4YzIzZWViMGVkYWJlYzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2m4pRlmM5/Dm3UJfr6rqTv+6nQp4
cWlkFN6LBofxd5S78sYYNgzfPqA2E8Uvpynm7Zk6W4RozfWbDRjWm689puPG+pVU
1IWTY5om0ldsIuSzYY28hXQ2+v7kH98jvZI2vojLjo+KTwuhSsv7n+L4+NbYd7D8
/G+AH4p/y5Yl/l9bogTpr00bY6F6XAY7BnWiMKixUHGaszFHcD4TP3zVsSqlbd6H
fOcGcXeOmlS7GQHtttc6gpO/E3EXF/Q9tHNE5+asULQz7TKTl13X6CJWDqi06X1w
LonVYow19rdepnyrT5fg2jP78qka53d7iEnWLiSanCWFA7IlUTki/gPwoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHUdXPIJdbFHhKXMJ4wj7rDtq+xeMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvZFIxYzhnbDFzVWVFcGN3bmpDUHVzTzJyN0Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrC4MA0G
CSqGSIb3DQEBCwUAA4IBAQBJxBVL815vcUEfYwCg2bPCwKTmmI8kXkGchuaYTPxX
Fq/vNrCFl2Xd8A1y72vxkT/pDpFDV04YdC+MUikTwAvJrLatVx89WKK+gykZZ1Lc
EcscEB5rCl2G4sbvxfowLEY+e4xCaxJ/SIioN0nFawBl3OPGQ6V538/qjp0yfYTY
WsVjbGFvFQnSvJoqyfyKUQXUpokKB9oAmuU8w3vo8Vt1chIb2Xg44Wv1S0cUubm5
GW8fMSxyYWQBxvghZ8vVJnWG4KjqYSYd5xcnvVRAq4W117vEhV3Uyk70sGDsUx2s
47n43MWQSfqIEcLEEzfgQ7vvaSQi2I9TLs2hWLiGL6hk
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:18 2025 by rpki-client