
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/IpPxqrkAJLVsXHeB04cvVHAP5Fg.roa
File: IpPxqrkAJLVsXHeB04cvVHAP5Fg.roa (raw, json)
Hash identifier: VtX3ApkZgzYiR7CYiCSZq34MU+2YZHhoSAVs9vYdqbA=
Subject key identifier: 22:93:F1:AA:B9:00:24:B5:6C:5C:77:81:D3:87:2F:54:70:0F:E4:58
Certificate issuer: /CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207
Certificate serial: 0194282524A65668F21B7549786F474C5EC2
Authority key identifier: 6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/IpPxqrkAJLVsXHeB04cvVHAP5Fg.roa
Signing time: Thu 02 Jan 2025 17:51:50 +0000
ROA not before: Thu 02 Jan 2025 17:51:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198467
IP address blocks: 195.254.176.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:24:a6:56:68:f2:1b:75:49:78:6f:47:4c:5e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207
Validity
Not Before: Jan 2 17:51:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2293f1aab90024b56c5c7781d3872f54700fe458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2a:93:f6:b1:33:18:73:bd:63:bd:5c:6b:3d:
fa:71:e5:ee:ca:32:db:96:54:43:da:8e:30:d5:3f:
7b:01:f4:0d:6e:b6:57:26:ba:a2:a5:38:73:82:8b:
32:68:96:23:52:b5:45:50:00:b7:2c:62:d1:9d:be:
b2:a7:58:0d:2a:ff:be:c9:95:20:a7:76:d4:6f:61:
a2:de:7a:a0:f5:19:a0:46:0a:9c:62:27:1d:46:92:
4d:ea:bf:50:28:47:6e:13:00:52:45:ef:2a:60:0e:
d3:76:f6:b3:42:9b:2b:11:66:07:42:64:02:5c:f3:
d7:77:f6:56:2d:0b:72:7d:4e:8e:c3:e1:2c:18:dc:
70:5c:63:66:c6:b6:ac:cb:65:94:3f:b2:e4:d1:d0:
af:83:f6:a3:96:e8:a1:a1:eb:ef:4d:77:01:fe:74:
6e:90:f1:6e:c2:b2:7e:b7:c9:3e:0f:69:ca:ed:11:
c9:95:7e:e5:1a:47:a6:97:f1:48:46:cc:14:7e:a0:
bf:eb:cc:43:57:33:1d:c8:8e:32:77:f0:d2:8c:d0:
90:f7:11:76:20:b7:a1:0b:4c:6e:4e:ec:f3:ec:1f:
1e:5d:66:40:8d:ca:34:74:6b:ae:46:93:5b:d0:d5:
c9:f5:39:78:33:0e:98:79:0e:61:e1:d7:db:23:c1:
db:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:93:F1:AA:B9:00:24:B5:6C:5C:77:81:D3:87:2F:54:70:0F:E4:58
X509v3 Authority Key Identifier:
keyid:6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/IpPxqrkAJLVsXHeB04cvVHAP5Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.176.0/23
Signature Algorithm: sha256WithRSAEncryption
04:d9:02:c9:87:89:7f:c6:ad:23:0b:20:e4:5d:1f:7c:25:10:
b6:11:f3:80:c4:c5:68:9d:d9:f3:0c:17:90:bb:a1:71:a0:00:
66:fb:71:77:5d:b7:64:91:71:59:39:b7:73:6b:ff:e1:45:c7:
c0:7d:98:24:69:3f:0d:8a:0d:99:8b:c6:d1:14:c4:ab:ed:f0:
9f:4a:7e:cc:c3:16:72:c4:e9:65:7b:4f:0c:bd:fa:9f:7a:5e:
42:f8:5f:c7:57:94:57:c2:e8:49:83:5b:1c:44:44:5e:ac:91:
3d:3e:b1:a1:a9:e5:59:fd:ab:84:26:80:c4:da:a7:29:e7:76:
07:ab:2e:4c:19:d0:9e:50:c6:60:8f:b9:e1:d6:bc:ea:98:9a:
a4:2d:c0:e8:6e:b4:81:62:7b:d4:21:78:cf:5e:78:e8:9e:89:
47:18:05:9a:aa:b9:65:81:81:77:7e:06:62:42:23:7a:25:28:
f5:d2:4a:db:ff:f8:71:8e:66:b6:22:2d:5c:1a:66:cf:59:6f:
ff:d8:d4:b3:4f:e6:e5:9e:89:04:b3:41:7b:12:d3:3f:22:65:
68:eb:76:80:cc:af:0e:32:7d:ee:3c:70:75:a4:2a:fb:69:f0:
9c:a6:e2:a3:6f:5d:f4:1d:ac:a0:2d:a5:02:8a:40:03:59:5e:
91:6a:13:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJSSmVmjyG3VJeG9HTF7CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWU0NzBlOTBkNWViZGRjY2FhOWNmNmJiMjJlODlkZTBk
OWYyMDcwHhcNMjUwMTAyMTc1MTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjkzZjFhYWI5MDAyNGI1NmM1Yzc3ODFkMzg3MmY1NDcwMGZlNDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCqT9rEzGHO9Y71caz36ceXuyjLb
llRD2o4w1T97AfQNbrZXJrqipThzgosyaJYjUrVFUAC3LGLRnb6yp1gNKv++yZUg
p3bUb2Gi3nqg9RmgRgqcYicdRpJN6r9QKEduEwBSRe8qYA7TdvazQpsrEWYHQmQC
XPPXd/ZWLQtyfU6Ow+EsGNxwXGNmxrasy2WUP7Lk0dCvg/ajluihoevvTXcB/nRu
kPFuwrJ+t8k+D2nK7RHJlX7lGkeml/FIRswUfqC/68xDVzMdyI4yd/DSjNCQ9xF2
ILehC0xuTuzz7B8eXWZAjco0dGuuRpNb0NXJ9Tl4Mw6YeQ5h4dfbI8HblwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCKT8aq5ACS1bFx3gdOHL1RwD+RYMB8GA1UdIwQY
MBaAFGteRw6Q1evdzKqc9rsi6J3g2fIHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTE1SERwRFY2OTNNcXB6MnV5TG9uZURaOGdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hODJjMTAtNTIxOC00N2E3LWE3YzQt
ZWViNmRhYTc1ZWM1LzEvSXBQeHFya0FKTFZzWEhlQjA0Y3ZWSEFQNUZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hODJjMTAtNTIxOC00N2E3LWE3YzQtZWViNmRhYTc1ZWM1
LzEvYTE1SERwRFY2OTNNcXB6MnV5TG9uZURaOGdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/6wMA0G
CSqGSIb3DQEBCwUAA4IBAQAE2QLJh4l/xq0jCyDkXR98JRC2EfOAxMVondnzDBeQ
u6FxoABm+3F3XbdkkXFZObdza//hRcfAfZgkaT8Nig2Zi8bRFMSr7fCfSn7MwxZy
xOlle08Mvfqfel5C+F/HV5RXwuhJg1scRERerJE9PrGhqeVZ/auEJoDE2qcp53YH
qy5MGdCeUMZgj7nh1rzqmJqkLcDobrSBYnvUIXjPXnjonolHGAWaqrllgYF3fgZi
QiN6JSj10krb//hxjma2Ii1cGmbPWW//2NSzT+blnokEs0F7EtM/ImVo63aAzK8O
Mn3uPHB1pCr7afCcpuKjb130HaygLaUCikADWV6RahP6
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:45:42 2025 by rpki-client