Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/coSeAFzvJ1bsacQOx5Spt7Di1PA.roa
File: coSeAFzvJ1bsacQOx5Spt7Di1PA.roa (raw, json)
Hash identifier: PUBStcyjBg3vrzcPjhutwaN8Js/hEoPbscyV1b7j4nc=
Subject key identifier: 72:84:9E:00:5C:EF:27:56:EC:69:C4:0E:C7:94:A9:B7:B0:E2:D4:F0
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 0195686193540234028E0422DF6610A66071
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/coSeAFzvJ1bsacQOx5Spt7Di1PA.roa
Signing time: Wed 05 Mar 2025 22:16:20 +0000
ROA not before: Wed 05 Mar 2025 22:16:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207088
IP address blocks: 195.210.96.0/22 maxlen: 22
195.210.104.0/22 maxlen: 22
195.210.120.0/22 maxlen: 22
2a0a:a200::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:68:61:93:54:02:34:02:8e:04:22:df:66:10:a6:60:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Mar 5 22:16:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72849e005cef2756ec69c40ec794a9b7b0e2d4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:2c:51:83:ae:74:bd:1b:d7:89:3b:64:f1:
63:52:4d:60:e4:b8:85:f4:09:44:e4:af:c5:b5:68:
e0:b9:d0:6e:ea:85:8a:81:d1:01:6f:05:33:3c:e2:
2d:d2:8d:e2:2b:64:e2:6b:fc:d7:bd:2f:10:c8:e1:
62:05:35:58:dd:7f:63:a3:e3:b7:50:9f:2a:a6:e4:
a2:bc:74:e5:8a:34:6e:0a:a0:0d:72:34:1e:e8:5d:
25:ae:ba:43:09:89:c2:1a:5e:5e:f6:85:b7:24:9c:
cc:91:b8:f6:39:44:c2:a7:67:77:12:5a:39:b0:9a:
ab:04:8f:04:75:6a:88:47:3b:03:0c:84:3c:0f:7c:
be:a6:cc:e4:cf:94:29:74:45:24:95:f7:f0:00:6d:
aa:dd:4a:2f:fe:0a:bf:d0:d0:97:13:b0:ae:cb:92:
5e:c1:e1:e6:9c:ec:3f:c7:79:1d:34:8b:25:46:9d:
bc:af:d8:85:05:01:ce:b8:f3:97:22:ae:bd:00:15:
21:fd:27:e7:26:fd:08:97:49:28:5c:a6:5b:3c:49:
5f:0b:50:0b:64:bd:db:60:9d:17:59:5c:a2:37:0c:
95:c8:86:55:4b:74:7c:42:c7:82:db:68:1a:5a:39:
53:6e:32:75:72:b7:d2:95:09:80:ef:65:b9:15:e4:
71:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:84:9E:00:5C:EF:27:56:EC:69:C4:0E:C7:94:A9:B7:B0:E2:D4:F0
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/coSeAFzvJ1bsacQOx5Spt7Di1PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.96.0/22
195.210.104.0/22
195.210.120.0/22
IPv6:
2a0a:a200::/29
Signature Algorithm: sha256WithRSAEncryption
d3:c9:a1:68:e2:64:19:58:81:93:91:70:61:99:f7:4f:a4:28:
04:4e:36:99:f5:d2:bf:4d:a9:e6:87:e2:97:dd:66:54:c5:fe:
27:ee:6a:b8:6b:27:69:c8:28:0a:86:aa:03:13:c6:dc:2c:53:
02:4a:c0:3e:f7:ef:51:9c:33:f6:14:c7:5f:de:7d:f7:df:91:
f8:0f:ad:66:12:f4:3c:95:2c:ca:42:b4:89:7e:24:39:7b:d4:
b4:98:05:3d:48:ad:8b:cc:b4:83:59:3f:a9:c9:0a:cf:d0:d5:
00:b7:96:e0:b9:40:68:e9:ed:15:6a:db:80:7b:e1:15:ef:79:
6b:34:36:e2:cc:2d:89:64:26:09:8d:67:e0:5d:d4:c6:38:7d:
3d:50:25:90:56:f6:a0:7e:7b:d0:a1:35:71:78:95:73:96:7b:
c3:a5:f1:a7:46:08:90:f0:b3:c1:b5:93:2f:56:d1:82:79:cd:
01:d0:af:93:f8:72:bf:be:94:a3:93:ef:5f:10:35:72:48:d6:
53:e2:8f:40:76:5a:cc:9e:13:1d:5b:c8:f4:d8:c4:c7:1b:08:
b7:c1:0a:21:4d:1d:bb:64:48:f2:b5:7b:3f:19:10:c9:57:aa:
b8:21:4c:04:da:57:46:ee:f4:b4:d7:20:95:68:ef:43:c2:a7:
b7:2d:32:07
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZVoYZNUAjQCjgQi32YQpmBxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYjg0ZDlmOGY5ZTMzMTU2NTg5YTVlYmY3MjIyMDNhODk5
ZTBhNTEwHhcNMjUwMzA1MjIxNjIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Mjg0OWUwMDVjZWYyNzU2ZWM2OWM0MGVjNzk0YTliN2IwZTJkNGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh0sUYOudL0b14k7ZPFjUk1g5LiF
9AlE5K/FtWjgudBu6oWKgdEBbwUzPOIt0o3iK2Tia/zXvS8QyOFiBTVY3X9jo+O3
UJ8qpuSivHTlijRuCqANcjQe6F0lrrpDCYnCGl5e9oW3JJzMkbj2OUTCp2d3Elo5
sJqrBI8EdWqIRzsDDIQ8D3y+pszkz5QpdEUklffwAG2q3Uov/gq/0NCXE7Cuy5Je
weHmnOw/x3kdNIslRp28r9iFBQHOuPOXIq69ABUh/SfnJv0Il0koXKZbPElfC1AL
ZL3bYJ0XWVyiNwyVyIZVS3R8QseC22gaWjlTbjJ1crfSlQmA72W5FeRxQwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFHKEngBc7ydW7GnEDseUqbew4tTwMB8GA1UdIwQY
MBaAFP64TZ+PnjMVZYml6/ciIDqJngpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82MTRlNWMtMjk5Yi00ZmQ0LWEwYmMt
YWYxY2MyMzE3ZTM5LzEvY29TZUFGenZKMWJzYWNRT3g1U3B0N0RpMVBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82MTRlNWMtMjk5Yi00ZmQ0LWEwYmMtYWYxY2MyMzE3ZTM5
LzEvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCw9JgAwQC
w9JoAwQCw9J4MA0EAgACMAcDBQMqCqIAMA0GCSqGSIb3DQEBCwUAA4IBAQDTyaFo
4mQZWIGTkXBhmfdPpCgETjaZ9dK/Tanmh+KX3WZUxf4n7mq4aydpyCgKhqoDE8bc
LFMCSsA+9+9RnDP2FMdf3n3335H4D61mEvQ8lSzKQrSJfiQ5e9S0mAU9SK2LzLSD
WT+pyQrP0NUAt5bguUBo6e0VatuAe+EV73lrNDbizC2JZCYJjWfgXdTGOH09UCWQ
VvagfnvQoTVxeJVzlnvDpfGnRgiQ8LPBtZMvVtGCec0B0K+T+HK/vpSjk+9fEDVy
SNZT4o9AdlrMnhMdW8j02MTHGwi3wQohTR27ZEjytXs/GRDJV6q4IUwE2ldG7vS0
1yCVaO9Dwqe3LTIH
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:32:04 2025 by rpki-client