Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_laJgtoCkPl5eR0TLeAoHL13wFA.roa
File: _laJgtoCkPl5eR0TLeAoHL13wFA.roa (raw, json)
Hash identifier: 68CEJu/QyQez19ZJF79FAv4ZOVYzwbC1EOPidbXwzek=
Subject key identifier: FE:56:89:82:DA:02:90:F9:79:79:1D:13:2D:E0:28:1C:BD:77:C0:50
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 019426D89AB094CF1CD7768D98EF9B3A23D7
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_laJgtoCkPl5eR0TLeAoHL13wFA.roa
Signing time: Thu 02 Jan 2025 11:48:36 +0000
ROA not before: Thu 02 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 195.210.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:9a:b0:94:cf:1c:d7:76:8d:98:ef:9b:3a:23:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Jan 2 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe568982da0290f979791d132de0281cbd77c050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:fa:26:32:36:1e:4e:cb:7f:36:40:40:f0:
0f:1e:c5:fa:a4:a9:bc:39:db:d4:85:a7:21:30:51:
b9:cf:9b:75:cb:d3:f4:79:9b:35:3d:e3:f9:02:30:
bc:f4:20:ad:83:74:cd:e1:0d:56:3c:5b:7e:e8:ad:
ab:7d:dd:67:25:e5:2d:42:d3:c7:8f:43:b2:e2:c0:
ca:ca:31:5b:00:da:43:08:68:af:8f:b4:fa:73:53:
6e:01:93:9c:b2:02:72:97:2a:e3:37:f9:9c:2e:24:
3c:24:9f:16:77:b4:fd:ea:f1:63:98:88:16:a5:dc:
48:72:0a:24:28:53:05:77:a8:05:4d:5c:d3:dc:1e:
7a:32:15:23:58:55:3e:f9:9f:55:67:85:33:68:04:
78:c3:01:8d:99:79:ff:5a:e6:9c:cb:2f:80:46:1b:
77:7c:d8:72:ef:93:a7:3c:66:8f:d7:8f:96:64:f7:
d7:16:9c:c8:5c:e7:41:80:e3:30:81:23:26:c8:62:
e0:fd:d5:70:89:33:90:2f:03:04:45:20:fd:1e:7a:
5d:11:d7:37:8d:0a:ba:ce:0a:6a:ef:6a:55:ed:0f:
7a:9e:a5:98:11:e8:8e:c1:47:82:57:55:27:c2:c8:
55:71:c3:39:77:09:ca:13:2d:d2:7a:ca:66:f3:65:
51:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:56:89:82:DA:02:90:F9:79:79:1D:13:2D:E0:28:1C:BD:77:C0:50
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_laJgtoCkPl5eR0TLeAoHL13wFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.112.0/22
Signature Algorithm: sha256WithRSAEncryption
78:0c:59:b6:ff:bb:5c:c8:a7:c7:7f:d1:c2:71:44:80:6c:6e:
07:54:38:e9:a8:e7:53:5d:2e:b6:82:26:bb:57:c4:de:1a:d6:
92:f3:ed:fc:72:30:5f:54:a7:dd:b5:a5:66:1f:68:43:b4:a6:
8f:2e:4c:5e:a1:6f:2b:07:30:9f:5a:34:60:df:ba:f1:b7:ad:
7e:a5:4f:48:78:50:d3:3a:4b:4d:a7:76:20:0c:3e:cb:8a:02:
ab:5d:5d:f7:b4:90:55:16:1a:e8:de:ed:7d:47:1a:01:d5:6e:
64:71:80:5a:04:69:ed:a8:04:e9:13:b4:cb:35:95:25:78:af:
77:1f:4d:3e:08:a4:4e:2b:1a:ae:76:0e:85:6e:71:e1:35:af:
24:80:0c:9d:3c:bd:a7:89:b1:49:0f:6a:f4:01:9d:b3:58:19:
dd:1a:b3:cc:04:cb:14:ca:07:b9:e3:8c:7d:56:06:5a:00:4a:
4d:99:7d:3e:98:4d:ee:23:77:d7:b1:33:02:57:d6:9a:5b:19:
5b:c3:a1:ec:b1:d2:1a:e0:e0:b2:a0:92:ec:37:9e:40:8e:d3:
00:6d:5c:73:b2:de:bd:e2:63:4a:9e:3f:40:32:90:04:55:01:
bc:7f:23:d4:fa:ee:e2:77:28:70:27:22:50:fd:04:98:9c:e4:
63:27:03:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2JqwlM8c13aNmO+bOiPXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYjg0ZDlmOGY5ZTMzMTU2NTg5YTVlYmY3MjIyMDNhODk5
ZTBhNTEwHhcNMjUwMTAyMTE0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTU2ODk4MmRhMDI5MGY5Nzk3OTFkMTMyZGUwMjgxY2JkNzdjMDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjD6JjI2Hk7LfzZAQPAPHsX6pKm8
OdvUhachMFG5z5t1y9P0eZs1PeP5AjC89CCtg3TN4Q1WPFt+6K2rfd1nJeUtQtPH
j0Oy4sDKyjFbANpDCGivj7T6c1NuAZOcsgJylyrjN/mcLiQ8JJ8Wd7T96vFjmIgW
pdxIcgokKFMFd6gFTVzT3B56MhUjWFU++Z9VZ4UzaAR4wwGNmXn/Wuacyy+ARht3
fNhy75OnPGaP14+WZPfXFpzIXOdBgOMwgSMmyGLg/dVwiTOQLwMERSD9HnpdEdc3
jQq6zgpq72pV7Q96nqWYEeiOwUeCV1UnwshVccM5dwnKEy3Sespm82VRtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP5WiYLaApD5eXkdEy3gKBy9d8BQMB8GA1UdIwQY
MBaAFP64TZ+PnjMVZYml6/ciIDqJngpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82MTRlNWMtMjk5Yi00ZmQ0LWEwYmMt
YWYxY2MyMzE3ZTM5LzEvX2xhSmd0b0NrUGw1ZVIwVExlQW9ITDEzd0ZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82MTRlNWMtMjk5Yi00ZmQ0LWEwYmMtYWYxY2MyMzE3ZTM5
LzEvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw9JwMA0G
CSqGSIb3DQEBCwUAA4IBAQB4DFm2/7tcyKfHf9HCcUSAbG4HVDjpqOdTXS62gia7
V8TeGtaS8+38cjBfVKfdtaVmH2hDtKaPLkxeoW8rBzCfWjRg37rxt61+pU9IeFDT
OktNp3YgDD7LigKrXV33tJBVFhro3u19RxoB1W5kcYBaBGntqATpE7TLNZUleK93
H00+CKROKxqudg6FbnHhNa8kgAydPL2nibFJD2r0AZ2zWBndGrPMBMsUyge544x9
VgZaAEpNmX0+mE3uI3fXsTMCV9aaWxlbw6HssdIa4OCyoJLsN55AjtMAbVxzst69
4mNKnj9AMpAEVQG8fyPU+u7idyhwJyJQ/QSYnORjJwPr
-----END CERTIFICATE-----
Generated at Wed Apr 9 19:37:38 2025 by rpki-client