Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/Ihvl1XcqHyjP0FVzINMHg78iCMM.roa
File: Ihvl1XcqHyjP0FVzINMHg78iCMM.roa (raw, json)
Hash identifier: Ui/2k2uNuQrXOnhxjKiBXWm37LASb2sf/Brkva68eC0=
Subject key identifier: 22:1B:E5:D5:77:2A:1F:28:CF:D0:55:73:20:D3:07:83:BF:22:08:C3
Certificate issuer: /CN=0141c53a7e41acca08f2ceb069a3cfff68f485eb
Certificate serial: 018224F9BE8D79A96C02F1429B0DE5418CE8
Authority key identifier: 01:41:C5:3A:7E:41:AC:CA:08:F2:CE:B0:69:A3:CF:FF:68:F4:85:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUHFOn5BrMoI8s6waaPP_2j0hes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/Ihvl1XcqHyjP0FVzINMHg78iCMM.roa
Signing time: Fri 22 Jul 2022 08:15:23 +0000
ROA not before: Fri 22 Jul 2022 08:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22653
IP address blocks: 194.49.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:24:f9:be:8d:79:a9:6c:02:f1:42:9b:0d:e5:41:8c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0141c53a7e41acca08f2ceb069a3cfff68f485eb
Validity
Not Before: Jul 22 08:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=221be5d5772a1f28cfd0557320d30783bf2208c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5a:33:35:27:92:2a:8b:f1:68:d6:e6:8e:37:
c0:4c:e6:2a:f3:1a:85:03:ec:c7:30:b5:2e:f3:e1:
8d:bd:d4:99:1a:94:eb:a8:ad:ea:e0:06:74:eb:5d:
b9:c2:92:1a:5f:42:7b:43:3f:c1:d9:6e:5b:97:b5:
17:f7:c5:58:94:8c:e2:f3:fc:2a:2b:29:32:38:a1:
03:fc:49:55:6b:38:c6:67:14:00:aa:e6:64:b1:e7:
5d:81:d6:a6:b9:cf:39:9b:ff:c9:d1:a7:e1:43:07:
08:b9:18:cf:bd:b7:46:9c:48:5a:90:be:4c:b7:0a:
bc:61:e7:15:d4:39:d0:7f:39:f0:1a:fb:8f:48:bb:
11:9a:6c:10:8a:4b:0c:01:5f:b2:71:0f:80:cd:76:
79:25:57:dc:05:82:fd:e5:82:3b:f5:93:fd:4b:dc:
2d:41:77:17:fa:b4:83:5d:fa:c8:92:c1:e6:c8:d8:
74:d0:36:fb:e7:cb:5c:09:f2:05:27:bb:b4:79:fe:
c9:d1:b4:f4:72:34:07:00:f4:c4:63:aa:38:f9:57:
2a:d2:f8:e4:c4:1e:e1:8b:7e:ce:8d:49:0e:8a:8e:
3d:85:b8:26:bf:af:ed:e4:3c:41:8f:ac:bf:bb:f0:
fc:f8:e0:67:de:3f:53:b8:9c:9f:59:4f:b4:3f:ae:
06:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1B:E5:D5:77:2A:1F:28:CF:D0:55:73:20:D3:07:83:BF:22:08:C3
X509v3 Authority Key Identifier:
keyid:01:41:C5:3A:7E:41:AC:CA:08:F2:CE:B0:69:A3:CF:FF:68:F4:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUHFOn5BrMoI8s6waaPP_2j0hes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/Ihvl1XcqHyjP0FVzINMHg78iCMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/AUHFOn5BrMoI8s6waaPP_2j0hes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.94.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:0a:a2:1e:6d:1d:e4:3b:38:e7:b6:b8:11:5a:c0:65:1c:11:
04:42:ff:85:5f:45:f3:1c:e6:49:7a:76:12:93:b3:a3:51:e0:
5c:d9:6f:d2:4c:2a:0d:30:73:48:22:a6:f7:d7:e5:28:af:be:
2b:8c:96:02:e6:63:dd:69:84:0d:8d:9f:0c:9e:7c:ef:c3:59:
3b:55:28:36:d5:80:65:8a:1d:cb:b6:19:12:bf:be:8e:76:dc:
9f:75:6f:41:25:be:40:b4:d4:05:1b:d9:55:18:aa:e0:8d:d4:
fe:ba:23:5e:5d:27:10:bc:62:69:e3:00:25:eb:86:e7:84:cf:
76:19:9d:b5:7a:2e:7e:c0:f6:31:70:da:15:f2:2e:e1:0e:9e:
e2:92:fb:df:86:6d:f0:64:ac:21:0f:d2:bb:e5:ea:dc:1d:a3:
e4:b7:0a:a8:05:f0:d8:cc:ce:78:30:ff:e9:a6:13:42:4b:5d:
1c:c5:f4:fc:ee:7e:82:a0:4c:5c:eb:36:df:66:2a:5e:14:27:
10:23:4d:7e:24:21:16:b7:31:02:7a:dc:3f:04:d9:7c:af:5b:
dc:74:8b:3c:81:56:26:9c:66:9a:25:1c:d5:a3:33:73:db:66:
25:34:a3:56:97:5e:af:41:e2:a0:e4:ef:b7:d5:35:f4:bd:95:
50:64:17:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIk+b6NealsAvFCmw3lQYzoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNDFjNTNhN2U0MWFjY2EwOGYyY2ViMDY5YTNjZmZmNjhm
NDg1ZWIwHhcNMjIwNzIyMDgxNTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjFiZTVkNTc3MmExZjI4Y2ZkMDU1NzMyMGQzMDc4M2JmMjIwOGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1ozNSeSKovxaNbmjjfATOYq8xqF
A+zHMLUu8+GNvdSZGpTrqK3q4AZ06125wpIaX0J7Qz/B2W5bl7UX98VYlIzi8/wq
KykyOKED/ElVazjGZxQAquZkseddgdamuc85m//J0afhQwcIuRjPvbdGnEhakL5M
twq8YecV1DnQfznwGvuPSLsRmmwQiksMAV+ycQ+AzXZ5JVfcBYL95YI79ZP9S9wt
QXcX+rSDXfrIksHmyNh00Db758tcCfIFJ7u0ef7J0bT0cjQHAPTEY6o4+Vcq0vjk
xB7hi37OjUkOio49hbgmv6/t5DxBj6y/u/D8+OBn3j9TuJyfWU+0P64GTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCIb5dV3Kh8oz9BVcyDTB4O/IgjDMB8GA1UdIwQY
MBaAFAFBxTp+QazKCPLOsGmjz/9o9IXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVVIRk9uNUJyTW9JOHM2d2FhUFBfMmowaGVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84ZjE3ZmEtZjQyOC00ZGQxLWIyOGIt
NDQzNjIwMzhkNWQxLzEvSWh2bDFYY3FIeWpQMEZWeklOTUhnNzhpQ01NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC84ZjE3ZmEtZjQyOC00ZGQxLWIyOGItNDQzNjIwMzhkNWQx
LzEvQVVIRk9uNUJyTW9JOHM2d2FhUFBfMmowaGVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjFeMA0G
CSqGSIb3DQEBCwUAA4IBAQA7CqIebR3kOzjntrgRWsBlHBEEQv+FX0XzHOZJenYS
k7OjUeBc2W/STCoNMHNIIqb31+Uor74rjJYC5mPdaYQNjZ8Mnnzvw1k7VSg21YBl
ih3LthkSv76OdtyfdW9BJb5AtNQFG9lVGKrgjdT+uiNeXScQvGJp4wAl64bnhM92
GZ21ei5+wPYxcNoV8i7hDp7ikvvfhm3wZKwhD9K75ercHaPktwqoBfDYzM54MP/p
phNCS10cxfT87n6CoExc6zbfZipeFCcQI01+JCEWtzECetw/BNl8r1vcdIs8gVYm
nGaaJRzVozNz22YlNKNWl16vQeKg5O+31TX0vZVQZBez
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:21 2025 by rpki-client