Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1-djklCI8iMn8ztrwnKp9Hilrq1E.roa
File: 1-djklCI8iMn8ztrwnKp9Hilrq1E.roa (raw, json)
Hash identifier: nAkDPpGwlpFvRzZT3mhGQdn+8/ypoLoS4qHZ+ewpEoE=
Subject key identifier: F9:D8:E4:94:22:3C:88:C9:FC:CE:DA:F0:9C:AA:7D:1E:29:6B:AB:51
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50C7AC27
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1-djklCI8iMn8ztrwnKp9Hilrq1E.roa
Signing time: Sat 01 Jan 2022 16:01:42 +0000
ROA not before: Sat 01 Jan 2022 16:01:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15600
IP address blocks: 212.243.163.0/24 maxlen: 24
194.209.56.0/24 maxlen: 24
195.65.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355263015 (0x50c7ac27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9d8e494223c88c9fccedaf09caa7d1e296bab51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:d3:03:f4:2c:88:b5:72:7f:6a:de:15:4c:
07:fb:e3:b7:1e:fe:97:03:f6:2b:2c:49:6c:63:07:
0f:f3:8c:6f:00:bd:b7:bb:a9:1e:60:6b:af:9d:b6:
2d:72:a6:53:0a:73:9c:72:80:b0:7b:ed:43:43:f0:
dd:01:78:09:8e:a2:b6:7b:fc:b2:db:2b:e5:c4:63:
e5:9e:63:96:a1:11:15:0a:e9:ae:21:b8:59:6f:37:
49:51:06:e9:d7:6a:a2:d4:b4:2e:39:68:d1:bf:bc:
62:d1:fa:7a:2b:e7:75:27:84:e4:82:13:14:05:4f:
c7:2c:fd:8b:fb:46:f0:f7:06:67:26:cb:cc:2d:6a:
14:dd:16:4a:46:6a:40:a4:77:cf:10:55:7f:69:52:
3d:8b:1a:d0:db:18:30:d1:50:10:93:f7:86:5d:a8:
22:19:35:fc:d1:a6:fd:74:ae:d4:e2:3a:76:0d:78:
f9:20:48:e6:b8:bf:cf:51:a7:d1:e8:ec:42:4d:37:
3c:09:34:91:6c:2a:f9:ef:8f:c7:12:77:6a:67:d6:
56:75:4b:b0:3a:34:63:98:2c:2b:56:e9:0b:36:de:
56:f0:96:92:8f:20:19:bb:e0:a0:df:58:b6:af:86:
95:07:83:03:03:f8:87:32:0f:21:2d:56:51:c4:2e:
eb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D8:E4:94:22:3C:88:C9:FC:CE:DA:F0:9C:AA:7D:1E:29:6B:AB:51
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1-djklCI8iMn8ztrwnKp9Hilrq1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.56.0/24
195.65.217.0/24
212.243.163.0/24
Signature Algorithm: sha256WithRSAEncryption
79:37:87:0b:a2:3d:fa:a1:08:ac:ab:3f:3c:b4:d0:f9:6a:da:
75:a3:f2:30:18:14:dd:6e:f3:a4:47:33:39:54:2c:b5:ac:8c:
86:33:98:7e:6a:f2:9d:69:79:88:6e:e8:87:1f:58:65:50:d8:
6c:ce:8d:c3:ea:dc:8f:70:33:ca:cd:16:bc:db:5f:b6:cb:6b:
4d:8f:7a:6d:91:49:c6:e3:37:c4:9f:a2:fa:ea:b7:e1:71:05:
c4:de:aa:1e:c5:45:48:d2:a6:65:78:5e:c8:85:a1:34:86:c6:
2e:55:d7:7d:f2:26:a4:b8:72:02:26:5d:a2:0b:c9:cb:bc:0e:
2c:4f:f2:2a:76:ec:b1:93:ba:09:10:0e:d9:b3:ac:05:0b:62:
8a:ce:b4:03:f5:21:c6:9d:60:26:16:80:f1:e3:a9:b9:45:db:
ca:c9:6c:5f:12:c3:3e:0d:0a:5b:e7:a7:f9:f7:eb:9d:a8:a3:
61:a1:64:30:bd:30:7b:9e:11:eb:69:9c:fa:d5:d1:1a:c6:a0:
50:da:47:45:41:19:5e:6c:c7:ce:f0:e5:29:76:d4:90:ee:92:
1e:0a:1a:92:0b:c1:c5:b1:99:68:e1:00:a7:87:31:9c:69:42:
8f:5b:06:ec:8d:dd:48:53:88:ba:19:08:3f:4f:71:1c:38:e0:
8b:a2:31:6c
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIEUMesJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NjYzZjNkYjE1MmUwNTVhYzE0NWJkYmI0MjllMDE4NjU0MjA0YzhkMB4XDTIyMDEw
MTE2MDE0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjlkOGU0OTQyMjNj
ODhjOWZjY2VkYWYwOWNhYTdkMWUyOTZiYWI1MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKsD0wP0LIi1cn9q3hVMB/vjtx7+lwP2KyxJbGMHD/OMbwC9
t7upHmBrr522LXKmUwpznHKAsHvtQ0Pw3QF4CY6itnv8stsr5cRj5Z5jlqERFQrp
riG4WW83SVEG6ddqotS0Ljlo0b+8YtH6eivndSeE5IITFAVPxyz9i/tG8PcGZybL
zC1qFN0WSkZqQKR3zxBVf2lSPYsa0NsYMNFQEJP3hl2oIhk1/NGm/XSu1OI6dg14
+SBI5ri/z1Gn0ejsQk03PAk0kWwq+e+PxxJ3amfWVnVLsDo0Y5gsK1bpCzbeVvCW
ko8gGbvgoN9Ytq+GlQeDAwP4hzIPIS1WUcQu698CAwEAAaOCAhYwggISMB0GA1Ud
DgQWBBT52OSUIjyIyfzO2vCcqn0eKWurUTAfBgNVHSMEGDAWgBQmY/PbFS4FWsFF
vbtCngGGVCBMjTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ptUHoyeFV1QlZyQlJiMjdRcDRCaGxRZ1RJMC5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjkvYzhjNmY2LTU5NWMtNDViMS1hNzZlLWJkMTkyNjc2YzliYi8x
LzEtZGprbENJOGlNbjh6dHJ3bktwOUhpbHJxMUUucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5
L2M4YzZmNi01OTVjLTQ1YjEtYTc2ZS1iZDE5MjY3NmM5YmIvMS9KbVB6MnhVdUJW
ckJSYjI3UXA0QmhsUWdUSTAuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
KwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBADC0TgDBADDQdkDBADU86MwDQYJ
KoZIhvcNAQELBQADggEBAHk3hwuiPfqhCKyrPzy00Plq2nWj8jAYFN1u86RHMzlU
LLWsjIYzmH5q8p1peYhu6IcfWGVQ2GzOjcPq3I9wM8rNFrzbX7bLa02Pem2RScbj
N8Sfovrqt+FxBcTeqh7FRUjSpmV4XsiFoTSGxi5V133yJqS4cgImXaILycu8DixP
8ip27LGTugkQDtmzrAULYorOtAP1IcadYCYWgPHjqblF28rJbF8Swz4NClvnp/n3
652oo2GhZDC9MHueEetpnPrV0RrGoFDaR0VBGV5sx87w5Sl21JDukh4KGpILwcWx
mWjhAKeHMZxpQo9bBuyN3UhTiLoZCD9PcRw44IuiMWw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:52:53 2025 by rpki-client