Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/c54NoWEXWRQA-dbSZ-8W6mQyP8E.roa
File: c54NoWEXWRQA-dbSZ-8W6mQyP8E.roa (raw, json)
Hash identifier: nRoWd4CNF6uxWBOBAy58vxnhfOJmaxOekRUGTIQqLKA=
Subject key identifier: 73:9E:0D:A1:61:17:59:14:00:F9:D6:D2:67:EF:16:EA:64:32:3F:C1
Certificate issuer: /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Certificate serial: 0194244497842668C55841D7FC7B108E710C
Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/c54NoWEXWRQA-dbSZ-8W6mQyP8E.roa
Signing time: Wed 01 Jan 2025 23:47:42 +0000
ROA not before: Wed 01 Jan 2025 23:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44243
IP address blocks: 185.178.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:97:84:26:68:c5:58:41:d7:fc:7b:10:8e:71:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Validity
Not Before: Jan 1 23:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=739e0da16117591400f9d6d267ef16ea64323fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a8:d2:fb:38:30:a2:0a:2e:f7:2e:9f:d9:45:
a7:35:d8:54:92:30:ec:cb:04:0a:5a:01:83:aa:fe:
a8:7b:e4:a6:e8:3a:44:ca:93:5c:a8:05:5b:81:80:
52:bd:7c:60:7a:20:9c:87:08:ec:be:34:3a:9c:2a:
70:a2:da:8f:20:8e:e4:5b:f1:9b:b2:38:f7:d5:6d:
5b:f1:2a:6f:29:5e:b3:f3:ee:6b:67:a2:ac:44:fa:
cc:20:74:8d:58:1a:c4:67:f6:97:54:3c:36:d9:80:
bc:87:06:10:da:9a:8d:3d:9b:ea:51:22:30:31:36:
cf:6c:b2:e0:4e:39:dd:8b:f5:3c:b9:d9:e1:c8:e0:
d8:11:e2:90:23:15:84:7f:69:f0:79:03:e5:f2:49:
b1:49:1c:67:2f:59:a1:c3:9b:b2:7f:75:9b:aa:7f:
01:e7:c1:bf:e5:e2:76:ca:b2:af:10:9b:48:39:bc:
f7:ee:8e:ec:6a:6b:e8:de:e6:bc:58:39:ef:44:0d:
09:93:0d:99:b9:5b:b8:3e:76:5f:8c:d3:ee:79:dd:
ce:9a:64:81:cd:f6:a5:8a:1c:8a:ea:18:f7:f9:47:
2b:f7:20:cc:2b:4c:25:d4:ef:33:3d:63:ec:b5:6e:
61:13:12:8a:cc:db:8a:30:9b:79:76:f9:d6:96:98:
23:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9E:0D:A1:61:17:59:14:00:F9:D6:D2:67:EF:16:EA:64:32:3F:C1
X509v3 Authority Key Identifier:
keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/c54NoWEXWRQA-dbSZ-8W6mQyP8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.104.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:6b:cf:34:41:5a:b9:48:6b:69:ee:3b:b0:cd:b2:56:ba:30:
35:67:3c:5e:7c:26:8a:dc:6a:60:6e:99:f1:ff:5d:fb:03:dc:
e3:6c:9c:ff:78:8e:07:97:c5:95:c3:f9:21:dd:72:32:2c:57:
e6:16:31:38:5c:af:6b:9e:36:d6:1d:90:8d:ba:05:f6:1a:92:
58:9b:f9:68:2e:d4:a4:0a:82:58:05:ea:6d:da:4e:18:3c:ab:
cd:48:19:ed:8b:ab:08:ad:2a:62:68:c6:7e:25:fb:74:1a:81:
3c:12:6c:fa:d9:76:a3:46:7b:74:3d:df:ed:c9:ac:60:5a:a1:
b5:7b:6b:33:99:1f:6d:7a:26:26:5d:11:7a:2a:5e:03:e2:de:
ed:91:2c:4f:03:30:bf:b0:76:0d:10:17:1a:92:f8:b3:f6:32:
5a:9d:38:eb:64:7d:6f:7d:6e:9f:58:21:98:d7:bb:d6:33:cd:
ba:07:65:2f:d4:a0:60:f1:9a:9f:dc:c9:e4:b3:81:fd:a8:76:
92:19:f4:3b:e9:6c:e4:23:52:f1:40:db:1b:7d:0b:3c:16:23:
c0:03:78:ba:94:40:20:4f:1a:9a:8e:0f:4c:72:54:83:cd:11:
01:b8:95:2a:aa:05:7d:81:8d:19:0d:eb:a4:91:c2:0a:dd:5b:
06:06:de:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRJeEJmjFWEHX/HsQjnEMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MTdmNzc3ZTcxYWMzNDEyMmVkYjM1ZWRkNjBjZjE0ZDc1
YjllZjYwHhcNMjUwMTAxMjM0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzllMGRhMTYxMTc1OTE0MDBmOWQ2ZDI2N2VmMTZlYTY0MzIzZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6jS+zgwogou9y6f2UWnNdhUkjDs
ywQKWgGDqv6oe+Sm6DpEypNcqAVbgYBSvXxgeiCchwjsvjQ6nCpwotqPII7kW/Gb
sjj31W1b8SpvKV6z8+5rZ6KsRPrMIHSNWBrEZ/aXVDw22YC8hwYQ2pqNPZvqUSIw
MTbPbLLgTjndi/U8udnhyODYEeKQIxWEf2nweQPl8kmxSRxnL1mhw5uyf3Wbqn8B
58G/5eJ2yrKvEJtIObz37o7samvo3ua8WDnvRA0Jkw2ZuVu4PnZfjNPued3OmmSB
zfalihyK6hj3+Ucr9yDMK0wl1O8zPWPstW5hExKKzNuKMJt5dvnWlpgjaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHOeDaFhF1kUAPnW0mfvFupkMj/BMB8GA1UdIwQY
MBaAFJkX93fnGsNBIu2zXt1gzxTXW572MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVJmM2QtY2F3MEVpN2JOZTNXRFBGTmRibnZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9iZThkNTktNzcwNC00NWY4LWIzOTkt
YTg4ZjU3NDE1MmI2LzEvYzU0Tm9XRVhXUlFBLWRiU1otOFc2bVF5UDhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9iZThkNTktNzcwNC00NWY4LWIzOTktYTg4ZjU3NDE1MmI2
LzEvbVJmM2QtY2F3MEVpN2JOZTNXRFBGTmRibnZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubJoMA0G
CSqGSIb3DQEBCwUAA4IBAQC4a880QVq5SGtp7juwzbJWujA1ZzxefCaK3Gpgbpnx
/137A9zjbJz/eI4Hl8WVw/kh3XIyLFfmFjE4XK9rnjbWHZCNugX2GpJYm/loLtSk
CoJYBept2k4YPKvNSBnti6sIrSpiaMZ+Jft0GoE8Emz62XajRnt0Pd/tyaxgWqG1
e2szmR9teiYmXRF6Kl4D4t7tkSxPAzC/sHYNEBcakviz9jJanTjrZH1vfW6fWCGY
17vWM826B2Uv1KBg8Zqf3Mnks4H9qHaSGfQ76WzkI1LxQNsbfQs8FiPAA3i6lEAg
Txqajg9MclSDzREBuJUqqgV9gY0ZDeukkcIK3VsGBt5q
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:01 2025 by rpki-client