Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/cOqBhkQFZDqvfoidrCqH20nwfYo.roa
File: cOqBhkQFZDqvfoidrCqH20nwfYo.roa (raw, json)
Hash identifier: e2BiJt4oTR8uOBuwP/FqEV3tWaMWx640gccR16PY+Ec=
Subject key identifier: 70:EA:81:86:44:05:64:3A:AF:7E:88:9D:AC:2A:87:DB:49:F0:7D:8A
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194266BBE9A285B43A533C8CEB22ED20940
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/cOqBhkQFZDqvfoidrCqH20nwfYo.roa
Signing time: Thu 02 Jan 2025 09:49:42 +0000
ROA not before: Thu 02 Jan 2025 09:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 109.122.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:be:9a:28:5b:43:a5:33:c8:ce:b2:2e:d2:09:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 09:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70ea81864405643aaf7e889dac2a87db49f07d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:51:c6:a4:bf:a3:d5:c9:5d:30:12:ce:70:47:
81:8d:e9:30:e5:a2:ac:64:1c:21:36:d0:4a:20:d3:
09:b7:c2:24:a2:30:5b:be:fb:b6:bb:e6:50:9f:51:
91:a3:44:e9:1f:c9:0d:ed:21:be:10:c0:13:7e:aa:
20:c9:95:6b:48:cd:cd:42:5d:c8:92:4e:1e:76:4b:
14:3a:2d:90:df:d7:98:99:d8:73:e6:a3:27:86:0e:
82:7f:51:d8:6d:dd:49:7c:37:e6:5d:98:71:7a:3d:
c8:88:da:7c:ba:19:f3:eb:6a:87:83:66:21:95:c1:
ed:df:5e:28:ee:98:80:d5:34:b5:36:32:44:ec:cc:
b8:27:8e:ae:c9:45:d8:b6:e3:40:01:6e:ed:2b:3f:
15:87:15:a5:01:15:60:e4:c1:5c:4e:97:75:9e:81:
fe:f3:17:35:93:6f:5d:01:62:0a:62:5b:89:f2:20:
8b:9d:73:da:89:cd:a7:b4:73:c6:a7:db:49:4e:14:
47:c3:ad:d7:19:c1:e0:1a:ae:2e:54:f1:89:c1:fd:
46:4b:99:55:f9:7d:11:7c:2a:b3:20:33:56:4f:de:
35:ce:46:64:97:e2:74:af:45:c0:a3:45:84:40:9c:
70:b5:43:ff:33:e5:70:19:93:8a:2b:5f:22:a4:e8:
5b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EA:81:86:44:05:64:3A:AF:7E:88:9D:AC:2A:87:DB:49:F0:7D:8A
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/cOqBhkQFZDqvfoidrCqH20nwfYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.41.0/24
Signature Algorithm: sha256WithRSAEncryption
29:49:43:62:eb:1d:9a:d8:f3:4e:ee:03:aa:15:1c:7a:e4:d5:
0c:4b:84:40:9a:0b:da:13:c2:19:ca:86:48:a1:de:75:05:5d:
bd:20:74:30:f0:70:cc:e3:82:9f:0f:00:62:33:08:0a:2c:1b:
d1:e8:31:d1:21:ab:b6:74:f1:62:e1:78:77:11:9d:dc:4f:24:
28:2b:5e:7e:ec:1c:1d:87:7e:de:d8:e4:bc:9b:22:20:d9:9e:
b3:cc:6f:21:b4:fb:83:9f:a2:3a:d3:e3:89:8b:ef:e3:50:5b:
d0:03:d1:22:09:12:2a:c1:95:80:9a:ad:2e:7d:ca:17:99:f5:
65:33:e5:3a:30:74:03:a4:ca:b7:6f:c9:c5:e4:d1:68:bb:cf:
83:93:34:04:0c:a7:b4:6d:43:d8:44:db:73:bc:d6:02:52:d3:
99:0d:b6:22:1c:d1:0c:ed:e1:46:9f:0e:a7:d0:a4:08:f9:4b:
59:17:20:99:ab:96:e8:60:b5:ba:52:18:00:23:25:ff:6d:08:
2c:a0:46:48:31:7c:78:e1:09:a8:0e:c0:e4:cf:e6:0c:68:a0:
9c:a0:83:4f:67:d2:12:c5:d1:cc:38:96:6b:be:cc:d2:68:3c:
b6:7e:1c:3e:41:67:b7:fa:20:2b:ff:cd:6b:2c:a3:80:f6:9f:
7f:99:0e:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma76aKFtDpTPIzrIu0glAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjUwMTAyMDk0OTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGVhODE4NjQ0MDU2NDNhYWY3ZTg4OWRhYzJhODdkYjQ5ZjA3ZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1HGpL+j1cldMBLOcEeBjekw5aKs
ZBwhNtBKINMJt8IkojBbvvu2u+ZQn1GRo0TpH8kN7SG+EMATfqogyZVrSM3NQl3I
kk4edksUOi2Q39eYmdhz5qMnhg6Cf1HYbd1JfDfmXZhxej3IiNp8uhnz62qHg2Yh
lcHt314o7piA1TS1NjJE7My4J46uyUXYtuNAAW7tKz8VhxWlARVg5MFcTpd1noH+
8xc1k29dAWIKYluJ8iCLnXPaic2ntHPGp9tJThRHw63XGcHgGq4uVPGJwf1GS5lV
+X0RfCqzIDNWT941zkZkl+J0r0XAo0WEQJxwtUP/M+VwGZOKK18ipOhbOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHDqgYZEBWQ6r36Inawqh9tJ8H2KMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvY09xQmhrUUZaRHF2Zm9pZHJDcUgyMG53ZllvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXopMA0G
CSqGSIb3DQEBCwUAA4IBAQApSUNi6x2a2PNO7gOqFRx65NUMS4RAmgvaE8IZyoZI
od51BV29IHQw8HDM44KfDwBiMwgKLBvR6DHRIau2dPFi4Xh3EZ3cTyQoK15+7Bwd
h37e2OS8myIg2Z6zzG8htPuDn6I60+OJi+/jUFvQA9EiCRIqwZWAmq0ufcoXmfVl
M+U6MHQDpMq3b8nF5NFou8+DkzQEDKe0bUPYRNtzvNYCUtOZDbYiHNEM7eFGnw6n
0KQI+UtZFyCZq5boYLW6UhgAIyX/bQgsoEZIMXx44QmoDsDkz+YMaKCcoINPZ9IS
xdHMOJZrvszSaDy2fhw+QWe3+iAr/81rLKOA9p9/mQ75
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:01:37 2025 by rpki-client