Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/rmIDVlAjnT_mAqmz4uAYcRi_oOg.roa
File: rmIDVlAjnT_mAqmz4uAYcRi_oOg.roa (raw, json)
Hash identifier: CRdPsY1AifRgb2WD2TVMbcBGWygLvjbfoRTaCemUtQ0=
Subject key identifier: AE:62:03:56:50:23:9D:3F:E6:02:A9:B3:E2:E0:18:71:18:BF:A0:E8
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 01942521C6A8E800DDBE2EE6CCAA6399FF7A
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/rmIDVlAjnT_mAqmz4uAYcRi_oOg.roa
Signing time: Thu 02 Jan 2025 03:49:18 +0000
ROA not before: Thu 02 Jan 2025 03:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199579
IP address blocks: 82.196.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c6:a8:e8:00:dd:be:2e:e6:cc:aa:63:99:ff:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 2 03:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae62035650239d3fe602a9b3e2e0187118bfa0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a5:1f:18:ac:f7:41:81:54:63:3e:b6:30:cb:
ce:1f:cb:42:3a:fb:8a:5e:0d:56:f7:a2:a0:64:d6:
77:1b:da:1c:2a:80:dc:3d:6f:31:d7:10:77:ff:8a:
b2:a8:b7:1d:0c:91:f5:ff:ab:c2:26:09:a5:09:9c:
42:62:29:ca:73:d8:fe:6f:49:cd:8e:4a:44:b6:25:
77:e9:49:27:38:bb:bc:f1:63:3a:71:b2:eb:a6:05:
a9:4b:c0:85:b0:d4:6a:06:0b:b4:a8:10:4c:37:9b:
db:9d:58:ba:d6:ba:f6:82:ad:79:9a:51:83:ac:f7:
0a:e3:c9:ce:71:bd:8b:f7:97:f8:ea:1f:2e:65:3e:
3c:98:f0:6d:80:32:60:73:fb:05:bc:2e:40:36:f3:
89:10:49:c0:9e:65:4e:3e:41:9e:81:97:21:6f:df:
b9:18:e8:bf:c9:1c:eb:a9:28:b5:20:ce:28:1c:35:
92:14:de:df:1b:1f:19:16:89:52:8d:fb:85:32:3d:
72:d9:92:3b:df:f1:fd:53:ab:7d:3d:ac:98:f0:c8:
85:ad:9d:fe:13:15:77:db:7d:03:ce:f9:72:9b:02:
80:93:a1:af:c2:03:cc:48:eb:d3:ee:a1:32:6e:5f:
e9:0d:6f:a4:d8:59:65:86:90:31:f3:ec:b0:af:77:
1c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:62:03:56:50:23:9D:3F:E6:02:A9:B3:E2:E0:18:71:18:BF:A0:E8
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/rmIDVlAjnT_mAqmz4uAYcRi_oOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.196.30.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:83:90:ad:df:0e:3f:e4:8c:9e:8b:5d:b4:0a:c9:19:c0:9c:
34:56:6d:dd:27:b5:2c:4c:25:65:59:48:ac:df:71:c1:51:02:
97:99:3a:a4:9c:7c:24:06:f8:71:2a:85:0b:7c:ae:62:5c:94:
24:1c:89:38:1d:d6:22:fd:86:50:da:f9:c0:a3:15:2b:4a:83:
fe:e9:5b:88:eb:36:e7:73:10:fb:db:b7:cd:1b:1b:a8:82:22:
fa:f7:ec:2e:29:1d:75:b5:be:92:4d:d7:8d:4e:b6:c7:ea:c1:
0f:e7:21:51:08:bc:a9:83:d6:35:94:17:cb:89:d2:af:48:9e:
b4:c9:8c:16:c7:ea:55:17:dd:bb:b9:0c:db:7d:b3:3a:6f:06:
53:af:87:fc:04:78:27:fd:7a:94:86:45:dd:a9:42:62:38:02:
0c:b9:6a:80:d2:f6:09:80:b9:79:28:46:55:3d:6d:f6:54:f7:
6d:ec:9b:53:af:8c:85:72:1a:a8:fe:ef:a4:ec:05:7f:07:08:
22:2c:5b:b6:cd:9b:dd:09:ac:1a:e5:51:eb:74:d8:fc:ad:6d:
fb:63:a1:48:f7:e7:3e:f5:7c:a2:6e:d7:03:36:6b:c5:f6:26:
d0:34:a8:8e:d2:30:70:47:98:17:4b:04:c5:2d:43:86:4d:ce:
c7:1b:b3:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIcao6ADdvi7mzKpjmf96MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5
ODk4ODEwHhcNMjUwMTAyMDM0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTYyMDM1NjUwMjM5ZDNmZTYwMmE5YjNlMmUwMTg3MTE4YmZhMGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6UfGKz3QYFUYz62MMvOH8tCOvuK
Xg1W96KgZNZ3G9ocKoDcPW8x1xB3/4qyqLcdDJH1/6vCJgmlCZxCYinKc9j+b0nN
jkpEtiV36UknOLu88WM6cbLrpgWpS8CFsNRqBgu0qBBMN5vbnVi61rr2gq15mlGD
rPcK48nOcb2L95f46h8uZT48mPBtgDJgc/sFvC5ANvOJEEnAnmVOPkGegZchb9+5
GOi/yRzrqSi1IM4oHDWSFN7fGx8ZFolSjfuFMj1y2ZI73/H9U6t9PayY8MiFrZ3+
ExV3230DzvlymwKAk6GvwgPMSOvT7qEybl/pDW+k2FllhpAx8+ywr3cc9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK5iA1ZQI50/5gKps+LgGHEYv6DoMB8GA1UdIwQY
MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt
ZGQxMTVmOWUzMzAxLzEvcm1JRFZsQWpuVF9tQXFtejR1QVljUmlfb09nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx
LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUsQeMA0G
CSqGSIb3DQEBCwUAA4IBAQCNg5Ct3w4/5Iyei120CskZwJw0Vm3dJ7UsTCVlWUis
33HBUQKXmTqknHwkBvhxKoULfK5iXJQkHIk4HdYi/YZQ2vnAoxUrSoP+6VuI6zbn
cxD727fNGxuogiL69+wuKR11tb6STdeNTrbH6sEP5yFRCLypg9Y1lBfLidKvSJ60
yYwWx+pVF927uQzbfbM6bwZTr4f8BHgn/XqUhkXdqUJiOAIMuWqA0vYJgLl5KEZV
PW32VPdt7JtTr4yFchqo/u+k7AV/BwgiLFu2zZvdCawa5VHrdNj8rW37Y6FI9+c+
9XyibtcDNmvF9ibQNKiO0jBwR5gXSwTFLUOGTc7HG7PO
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:23:43 2025 by rpki-client