Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/F9dWkDI-kpGgHo1RGxktanl_gRQ.roa
File: F9dWkDI-kpGgHo1RGxktanl_gRQ.roa (raw, json)
Hash identifier: BuoIxKvYOd7Wk6s+uxgqf+pVlc2a+8mJGV3BltAm2us=
Subject key identifier: 17:D7:56:90:32:3E:92:91:A0:1E:8D:51:1B:19:2D:6A:79:7F:81:14
Certificate issuer: /CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Certificate serial: 019425FD952D0AFB1C84F130D3C10E97BD1B
Authority key identifier: 1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/F9dWkDI-kpGgHo1RGxktanl_gRQ.roa
Signing time: Thu 02 Jan 2025 07:49:23 +0000
ROA not before: Thu 02 Jan 2025 07:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 195.49.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:95:2d:0a:fb:1c:84:f1:30:d3:c1:0e:97:bd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Validity
Not Before: Jan 2 07:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17d75690323e9291a01e8d511b192d6a797f8114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:4b:5d:d3:5f:b6:ab:f6:a8:46:66:65:87:
3e:e9:84:5e:31:14:02:63:4e:a6:b9:c7:37:1b:53:
6e:e1:7b:68:3d:ae:76:3e:46:bd:d1:65:04:b6:6d:
e0:cf:0d:26:8d:af:ed:0c:78:08:78:76:63:9b:69:
b1:f9:d5:bf:83:04:b1:64:b0:8f:68:fb:7f:40:31:
fc:0b:34:7d:e9:a3:92:c8:7f:40:b4:70:af:1f:b8:
c2:e8:5d:e7:c1:3d:20:a5:b1:ef:a2:4c:48:5a:9d:
47:3b:db:e6:e8:b6:c3:c0:bf:1b:e8:ee:b8:be:ab:
27:fd:93:5e:9e:82:ba:4b:85:a2:eb:e1:e6:d8:8b:
1f:63:0f:e1:92:d5:b7:f0:70:b0:5e:73:19:a5:ed:
d6:24:fd:2a:72:1d:a9:d1:27:bc:83:02:9b:93:85:
53:5b:04:81:97:e3:6e:9a:a4:37:bc:11:15:d9:9f:
67:4b:b3:4e:bf:1a:9d:3d:33:48:9d:b5:f5:5a:bc:
4b:14:98:13:e9:eb:81:a2:2c:7e:29:27:07:6c:59:
34:3c:70:88:67:40:b9:5d:54:26:de:99:73:e2:60:
a0:19:d0:af:67:d8:8c:64:5e:16:4b:da:b9:f3:02:
b7:ff:72:ca:d0:ff:d1:e9:b1:37:5b:d9:2b:0a:d0:
f4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D7:56:90:32:3E:92:91:A0:1E:8D:51:1B:19:2D:6A:79:7F:81:14
X509v3 Authority Key Identifier:
keyid:1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/F9dWkDI-kpGgHo1RGxktanl_gRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.49.236.0/23
Signature Algorithm: sha256WithRSAEncryption
82:c6:87:64:0a:d3:c5:47:ac:98:4c:60:ce:8e:ac:e8:1c:80:
7d:d2:b9:99:ea:5d:bf:61:cd:71:10:fd:8f:69:59:8e:6d:4b:
3f:ae:8f:fb:db:71:90:2b:7d:fa:47:e2:f8:9b:20:1e:b6:1e:
37:6d:89:84:dc:b8:5e:51:cf:8f:69:5f:64:d4:31:bc:1e:09:
be:9d:00:c2:c0:da:d8:2c:a4:79:c3:ba:4f:5b:7c:b7:47:a7:
d5:4c:2e:97:b7:e9:6f:71:51:ee:9a:76:92:9c:ae:c7:6d:21:
5b:80:ea:2c:1c:b9:c1:36:92:88:88:61:b6:bd:06:d9:7a:28:
14:c6:bf:14:6d:5b:c1:d7:d3:79:38:02:69:bd:90:5d:30:f9:
c3:d4:31:27:19:fd:8a:2a:8c:e5:74:6c:6e:8c:08:24:bc:d4:
78:32:16:50:2d:01:b5:56:cb:73:55:b0:65:e9:32:88:11:c9:
21:c5:95:a2:16:be:05:f3:eb:63:fe:b9:b3:86:80:fc:de:bf:
e2:e1:1c:93:fb:45:d1:0e:ac:1f:95:67:6d:88:7e:91:6c:01:
67:21:26:e3:44:bd:98:39:11:80:d9:8a:9f:c5:f1:67:b1:31:
03:4c:77:ca:8f:2c:0e:79:99:58:c1:27:a7:ad:a3:e9:f9:b4:
17:cb:4a:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/ZUtCvschPEw08EOl70bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNGY4MDAxYzMwY2FjNTQ2ZTNmOTIxMDNiNGIxMjczMmRm
Y2JmNTIwHhcNMjUwMTAyMDc0OTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2Q3NTY5MDMyM2U5MjkxYTAxZThkNTExYjE5MmQ2YTc5N2Y4MTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeZLXdNftqv2qEZmZYc+6YReMRQC
Y06mucc3G1Nu4XtoPa52Pka90WUEtm3gzw0mja/tDHgIeHZjm2mx+dW/gwSxZLCP
aPt/QDH8CzR96aOSyH9AtHCvH7jC6F3nwT0gpbHvokxIWp1HO9vm6LbDwL8b6O64
vqsn/ZNenoK6S4Wi6+Hm2IsfYw/hktW38HCwXnMZpe3WJP0qch2p0Se8gwKbk4VT
WwSBl+NumqQ3vBEV2Z9nS7NOvxqdPTNInbX1WrxLFJgT6euBoix+KScHbFk0PHCI
Z0C5XVQm3plz4mCgGdCvZ9iMZF4WS9q58wK3/3LK0P/R6bE3W9krCtD0MwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBfXVpAyPpKRoB6NURsZLWp5f4EUMB8GA1UdIwQY
MBaAFBpPgAHDDKxUbj+SEDtLEnMt/L9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2stQUFjTU1yRlJ1UDVJUU8wc1NjeTM4djFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kNmM4NmQtNmM2NS00YTI1LWE4ZmEt
MzhkNGYzMjExODk2LzEvRjlkV2tESS1rcEdnSG8xUkd4a3RhbmxfZ1JRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kNmM4NmQtNmM2NS00YTI1LWE4ZmEtMzhkNGYzMjExODk2
LzEvR2stQUFjTU1yRlJ1UDVJUU8wc1NjeTM4djFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwzHsMA0G
CSqGSIb3DQEBCwUAA4IBAQCCxodkCtPFR6yYTGDOjqzoHIB90rmZ6l2/Yc1xEP2P
aVmObUs/ro/723GQK336R+L4myAeth43bYmE3LheUc+PaV9k1DG8Hgm+nQDCwNrY
LKR5w7pPW3y3R6fVTC6Xt+lvcVHumnaSnK7HbSFbgOosHLnBNpKIiGG2vQbZeigU
xr8UbVvB19N5OAJpvZBdMPnD1DEnGf2KKozldGxujAgkvNR4MhZQLQG1VstzVbBl
6TKIEckhxZWiFr4F8+tj/rmzhoD83r/i4RyT+0XRDqwflWdtiH6RbAFnISbjRL2Y
ORGA2YqfxfFnsTEDTHfKjywOeZlYwSenraPp+bQXy0pX
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:17:24 2025 by rpki-client