Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/7kSoyCwS51Z99WFt9PFCATkixn8.roa
File: 7kSoyCwS51Z99WFt9PFCATkixn8.roa (raw, json)
Hash identifier: YO8XFXWWJme9Ue9ZQYiu3rdgg2SuRg7amStm9PGC74I=
Subject key identifier: EE:44:A8:C8:2C:12:E7:56:7D:F5:61:6D:F4:F1:42:01:39:22:C6:7F
Certificate issuer: /CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Certificate serial: 01942521C8AED104FEB990FC5C1102094B24
Authority key identifier: 9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/7kSoyCwS51Z99WFt9PFCATkixn8.roa
Signing time: Thu 02 Jan 2025 03:49:18 +0000
ROA not before: Thu 02 Jan 2025 03:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 194.115.212.0/22 maxlen: 22
194.115.212.0/24 maxlen: 24
194.115.213.0/24 maxlen: 24
194.115.214.0/24 maxlen: 24
194.115.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c8:ae:d1:04:fe:b9:90:fc:5c:11:02:09:4b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Validity
Not Before: Jan 2 03:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee44a8c82c12e7567df5616df4f142013922c67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:0e:7b:29:62:e2:2e:5b:54:b4:01:e5:93:
07:72:bf:e5:e8:c5:8f:0b:b6:27:87:2c:cd:28:6d:
83:c8:34:99:ef:0c:41:de:4f:b2:44:39:93:27:d2:
44:29:f3:84:48:55:e1:63:bb:ce:d5:c1:60:90:ea:
b8:02:32:2e:cb:53:7a:92:f0:ea:8b:b4:07:33:33:
47:9d:61:9c:4b:a2:8e:3a:5a:b2:32:6a:4f:4e:43:
c3:6d:18:61:f0:57:f2:8d:9a:7d:e1:57:0b:de:9b:
a5:a6:c6:57:8c:0d:a6:1f:4d:f3:8c:e3:98:a1:55:
78:70:62:f6:bb:1f:85:d5:c7:40:4f:ea:2a:d3:b6:
3b:49:d6:50:19:45:49:40:79:03:db:c4:71:c4:c7:
80:56:e2:f9:dc:55:5b:b7:bb:82:95:bf:a9:08:d1:
f6:53:81:83:03:bf:bb:1f:a2:5f:ec:5e:0b:be:90:
02:48:86:13:7e:06:c4:bb:8e:c4:39:df:bf:e9:ca:
35:bb:e6:8e:0b:cf:22:8e:71:5a:ed:48:c8:24:51:
d9:6a:cb:c5:79:f9:31:cd:c7:06:dd:74:70:26:44:
60:09:33:aa:d1:2b:f2:5e:e5:c1:9d:91:46:30:eb:
0f:ec:52:4a:b8:5f:76:82:a8:e5:7b:dc:cd:bf:18:
8e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:44:A8:C8:2C:12:E7:56:7D:F5:61:6D:F4:F1:42:01:39:22:C6:7F
X509v3 Authority Key Identifier:
keyid:9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/7kSoyCwS51Z99WFt9PFCATkixn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.115.212.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:e5:28:91:c2:1a:7e:2e:9b:98:4f:7e:63:3d:04:f1:23:39:
cb:11:35:90:42:81:e8:ec:62:c8:e6:f0:59:fe:d6:a5:56:b5:
4a:d5:be:c8:fe:17:a7:c3:e9:21:03:94:12:9f:36:ac:e9:c5:
48:8e:a0:9f:bc:5f:cc:b2:02:23:20:cd:7c:0b:14:95:6c:46:
52:c3:4a:9f:bd:a1:85:b1:ce:85:50:3f:0c:8e:2f:3d:f3:03:
20:25:81:fa:be:f6:3a:86:07:0e:69:44:7f:1c:b7:5e:8e:eb:
4d:18:8c:be:5e:bf:f9:1c:42:b9:c7:dd:14:bb:68:5c:aa:02:
44:9b:fc:7e:5e:2b:7f:bc:4e:8d:11:60:b2:58:08:b0:98:56:
6a:68:93:20:dd:d7:ad:2c:3c:0f:3a:33:48:78:32:04:37:37:
0c:f0:aa:d7:01:44:b2:8b:03:ce:72:40:9f:17:d1:3d:04:88:
d6:a7:e0:20:f1:b8:34:db:3a:f2:a1:97:5b:16:62:6f:7f:f8:
ac:4e:a3:7a:84:56:97:89:54:4c:5e:0a:59:3d:47:d8:df:da:
e5:2d:37:bc:14:4a:f9:46:ac:01:fe:ed:07:03:52:de:63:2b:
94:f7:d0:66:22:de:97:8b:c1:3e:4f:34:63:8f:5f:b5:32:ba:
c4:b1:e9:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIciu0QT+uZD8XBECCUskMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYzZmZDNmMzJjYTQ1OTRjOTYwNzU2NTlhNzA4OWIyN2Fl
M2ZlZjMwHhcNMjUwMTAyMDM0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTQ0YThjODJjMTJlNzU2N2RmNTYxNmRmNGYxNDIwMTM5MjJjNjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3UOeyli4i5bVLQB5ZMHcr/l6MWP
C7YnhyzNKG2DyDSZ7wxB3k+yRDmTJ9JEKfOESFXhY7vO1cFgkOq4AjIuy1N6kvDq
i7QHMzNHnWGcS6KOOlqyMmpPTkPDbRhh8FfyjZp94VcL3pulpsZXjA2mH03zjOOY
oVV4cGL2ux+F1cdAT+oq07Y7SdZQGUVJQHkD28RxxMeAVuL53FVbt7uClb+pCNH2
U4GDA7+7H6Jf7F4LvpACSIYTfgbEu47EOd+/6co1u+aOC88ijnFa7UjIJFHZasvF
efkxzccG3XRwJkRgCTOq0SvyXuXBnZFGMOsP7FJKuF92gqjle9zNvxiOAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO5EqMgsEudWffVhbfTxQgE5IsZ/MB8GA1UdIwQY
MBaAFJvG/T8yykWUyWB1ZZpwibJ64/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbThiOVB6TEtSWlRKWUhWbG1uQ0pzbnJqX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kYTI0NDctYjI1Mi00YjZhLWE4MmYt
ZGNiZTUzZGE3ODYwLzEvN2tTb3lDd1M1MVo5OVdGdDlQRkNBVGtpeG44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kYTI0NDctYjI1Mi00YjZhLWE4MmYtZGNiZTUzZGE3ODYw
LzEvbThiOVB6TEtSWlRKWUhWbG1uQ0pzbnJqX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwnPUMA0G
CSqGSIb3DQEBCwUAA4IBAQCn5SiRwhp+LpuYT35jPQTxIznLETWQQoHo7GLI5vBZ
/talVrVK1b7I/henw+khA5QSnzas6cVIjqCfvF/MsgIjIM18CxSVbEZSw0qfvaGF
sc6FUD8Mji898wMgJYH6vvY6hgcOaUR/HLdejutNGIy+Xr/5HEK5x90Uu2hcqgJE
m/x+Xit/vE6NEWCyWAiwmFZqaJMg3detLDwPOjNIeDIENzcM8KrXAUSyiwPOckCf
F9E9BIjWp+Ag8bg02zryoZdbFmJvf/isTqN6hFaXiVRMXgpZPUfY39rlLTe8FEr5
RqwB/u0HA1LeYyuU99BmIt6Xi8E+TzRjj1+1MrrEselb
-----END CERTIFICATE-----
Generated at Fri Apr 11 10:12:44 2025 by rpki-client