Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/ihNyotZtolKqMCRhO04MWCbXUJk.roa
File: ihNyotZtolKqMCRhO04MWCbXUJk.roa (raw, json)
Hash identifier: tmDtmBtcXWgGrrmdgW30ksQyerYLbFI3XBEv/0SqZAs=
Subject key identifier: 8A:13:72:A2:D6:6D:A2:52:AA:30:24:61:3B:4E:0C:58:26:D7:50:99
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0193E9E06ED07B8C517F2CA31280AD491235
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/ihNyotZtolKqMCRhO04MWCbXUJk.roa
Signing time: Sat 21 Dec 2024 15:40:19 +0000
ROA not before: Sat 21 Dec 2024 15:40:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9008
IP address blocks: 207.244.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e9:e0:6e:d0:7b:8c:51:7f:2c:a3:12:80:ad:49:12:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Dec 21 15:40:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a1372a2d66da252aa3024613b4e0c5826d75099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:97:00:20:c1:bc:4e:be:e0:f5:2b:a4:8d:a1:
06:76:57:ec:03:07:9f:fc:a0:5c:40:af:a5:0d:1f:
13:ab:09:47:a7:34:43:19:c3:25:6b:44:9e:62:cb:
7e:f1:81:7f:07:83:a5:76:19:c8:fd:02:ec:95:6c:
22:40:3d:a0:9d:53:08:21:eb:88:ee:0b:35:47:2c:
15:8c:d8:34:69:b4:04:fd:46:61:85:99:64:3d:f2:
e3:e3:09:48:a1:3d:4a:eb:a9:b9:c3:59:ff:fe:bd:
da:4b:a9:6b:ef:ef:b2:95:67:8c:67:c5:1f:79:9d:
30:9f:a8:b8:bf:ba:30:80:23:0c:b5:e2:3b:8d:3b:
32:49:88:dd:dd:90:ff:5e:1d:1a:18:d5:52:d8:ef:
c9:93:7d:68:c1:9c:23:a4:90:3f:67:2c:6c:c7:20:
a3:05:2b:5d:51:27:b2:3b:6f:8f:dc:92:cf:0c:06:
3c:1d:48:e2:08:91:54:6a:f9:1a:16:9e:83:c4:16:
6d:cd:45:11:b1:e4:cc:89:c4:4c:2a:95:1f:93:5d:
86:05:71:de:ab:37:22:99:9b:b0:52:72:fa:11:3d:
e8:9c:b7:34:87:c3:bc:61:0a:00:98:8b:c0:4d:64:
9d:47:28:51:39:83:c9:43:c4:3f:58:7c:19:28:56:
66:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:13:72:A2:D6:6D:A2:52:AA:30:24:61:3B:4E:0C:58:26:D7:50:99
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/ihNyotZtolKqMCRhO04MWCbXUJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.244.196.0/24
Signature Algorithm: sha256WithRSAEncryption
56:f7:27:00:11:53:01:36:bb:61:1c:5a:ff:07:3f:81:70:74:
6e:33:84:dc:38:e9:dc:5f:64:0b:58:42:fc:b1:4c:18:5b:8b:
db:0a:23:48:96:28:2a:37:ea:84:61:54:9b:95:9e:5d:25:07:
40:49:f8:9f:f3:a9:13:5a:57:2c:26:f8:97:28:55:7e:c7:3b:
2d:eb:0b:ea:02:ea:d8:b6:0f:d9:6a:06:28:48:20:7d:ef:35:
b7:fa:03:04:97:84:da:ce:b6:3a:46:cc:49:ec:c1:cb:11:93:
c1:15:16:d0:1e:9c:66:9d:8e:07:20:af:32:cd:51:72:5c:8d:
22:2f:82:49:36:2b:6c:d9:33:71:d1:fd:5f:d7:74:76:8f:58:
4b:7f:4e:bb:87:56:6c:d8:96:2e:71:10:a9:eb:bc:27:6c:f7:
a5:fb:ae:4b:c7:ff:a9:ab:85:5a:bc:c8:bf:99:1c:a1:f3:77:
20:ff:a5:ab:f0:b2:56:fe:8b:3b:2d:1f:98:ee:1a:ab:ef:11:
e0:50:28:23:53:57:5a:33:de:d2:69:f1:46:28:3f:c2:4e:52:
98:cb:3c:96:35:ba:16:11:93:0e:50:e9:af:26:c4:c3:a0:84:
f8:89:de:60:5e:c3:42:0f:dc:b9:79:03:9a:ed:08:70:22:ea:
cd:7c:30:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPp4G7Qe4xRfyyjEoCtSRI1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjQxMjIxMTU0MDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTEzNzJhMmQ2NmRhMjUyYWEzMDI0NjEzYjRlMGM1ODI2ZDc1MDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJcAIMG8Tr7g9SukjaEGdlfsAwef
/KBcQK+lDR8TqwlHpzRDGcMla0SeYst+8YF/B4OldhnI/QLslWwiQD2gnVMIIeuI
7gs1RywVjNg0abQE/UZhhZlkPfLj4wlIoT1K66m5w1n//r3aS6lr7++ylWeMZ8Uf
eZ0wn6i4v7owgCMMteI7jTsySYjd3ZD/Xh0aGNVS2O/Jk31owZwjpJA/ZyxsxyCj
BStdUSeyO2+P3JLPDAY8HUjiCJFUavkaFp6DxBZtzUURseTMicRMKpUfk12GBXHe
qzcimZuwUnL6ET3onLc0h8O8YQoAmIvATWSdRyhROYPJQ8Q/WHwZKFZmIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIoTcqLWbaJSqjAkYTtODFgm11CZMB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvaWhOeW90WnRvbEtxTUNSaE8wNE1XQ2JYVUprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/TEMA0G
CSqGSIb3DQEBCwUAA4IBAQBW9ycAEVMBNrthHFr/Bz+BcHRuM4TcOOncX2QLWEL8
sUwYW4vbCiNIligqN+qEYVSblZ5dJQdASfif86kTWlcsJviXKFV+xzst6wvqAurY
tg/ZagYoSCB97zW3+gMEl4TazrY6RsxJ7MHLEZPBFRbQHpxmnY4HIK8yzVFyXI0i
L4JJNits2TNx0f1f13R2j1hLf067h1Zs2JYucRCp67wnbPel+65Lx/+pq4VavMi/
mRyh83cg/6Wr8LJW/os7LR+Y7hqr7xHgUCgjU1daM97SafFGKD/CTlKYyzyWNboW
EZMOUOmvJsTDoIT4id5gXsNCD9y5eQOa7QhwIurNfDAv
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:04:50 2025 by rpki-client