Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/DoY4w3eDr0QZqWG_dQu4Ykoy6hM.roa
File: DoY4w3eDr0QZqWG_dQu4Ykoy6hM.roa (raw, json)
Hash identifier: 2Zc9Pdi2hY1LfILUKJoZ+VxAZ9FI3LyVcofrDKTQHgA=
Subject key identifier: 0E:86:38:C3:77:83:AF:44:19:A9:61:BF:75:0B:B8:62:4A:32:EA:13
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067CC8F86559B5A3CB00EF93107251F
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/DoY4w3eDr0QZqWG_dQu4Ykoy6hM.roa
Signing time: Wed 01 Jan 2025 05:47:41 +0000
ROA not before: Wed 01 Jan 2025 05:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48318
IP address blocks: 194.209.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cc:8f:86:55:9b:5a:3c:b0:0e:f9:31:07:25:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e8638c37783af4419a961bf750bb8624a32ea13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:3e:5b:59:78:1a:de:a4:ea:da:32:80:b8:
42:57:4d:14:01:31:71:16:06:0a:90:d2:3d:2c:d6:
56:85:17:b8:6f:15:29:60:f1:aa:ce:74:75:54:90:
64:88:3f:7d:0d:b0:fe:04:15:cc:dd:36:94:ac:b1:
78:d6:3d:b3:07:07:01:e7:30:ff:a3:24:80:04:66:
9e:a1:3b:70:bb:5f:4a:87:e4:b5:af:33:ef:c3:b9:
7e:bd:2c:35:a5:ef:91:85:d6:3f:a8:cd:0b:8c:7c:
6a:e5:a8:fa:83:83:83:2d:ad:77:a4:35:b1:99:d1:
73:20:f5:7a:57:d2:b3:de:bd:55:da:91:60:4f:7a:
7d:7f:44:3e:36:15:1d:8c:e6:fc:30:15:0b:1a:e2:
fd:77:20:a6:34:f5:99:41:f1:c5:d9:64:6c:8b:84:
50:19:db:61:02:6a:ce:9a:bb:ee:88:cd:95:da:81:
8d:55:15:5f:84:2e:97:47:1d:6a:a6:5d:00:cb:13:
38:e3:3c:13:a4:ec:7b:83:96:ca:73:64:00:17:40:
3f:d9:f9:3d:40:d3:4e:71:56:13:cf:2f:e7:e2:c8:
e3:78:dd:5e:38:b6:af:66:2b:c9:53:10:fb:48:ee:
94:dd:b7:67:46:7a:01:60:f8:01:bf:b4:fc:4c:f3:
76:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:86:38:C3:77:83:AF:44:19:A9:61:BF:75:0B:B8:62:4A:32:EA:13
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/DoY4w3eDr0QZqWG_dQu4Ykoy6hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.227.0/24
Signature Algorithm: sha256WithRSAEncryption
74:fc:7a:0e:5e:88:4d:ed:dc:0d:4e:1f:41:13:cd:57:47:88:
fa:22:4b:62:9f:34:a8:56:9e:82:bb:1c:29:dc:c9:9c:b2:ff:
c9:1c:62:f0:05:e8:30:43:5f:a0:97:f8:46:49:37:38:01:00:
9c:e1:65:a3:7c:da:d6:3a:29:24:d1:11:0f:e0:a9:e3:ea:3e:
1c:5a:33:cb:e8:8d:29:8c:aa:20:1b:6d:2d:8f:70:db:9a:fd:
58:d6:b4:3d:93:e6:8f:70:78:19:62:2e:e9:ba:f4:74:76:4a:
13:e8:13:c1:be:4a:b3:8c:e9:f0:4d:71:d5:40:05:8e:fa:c8:
af:46:34:c3:67:45:a4:23:cf:0f:58:94:70:2a:a9:ff:28:70:
89:c4:14:59:e6:7c:a7:43:a8:ba:4d:7c:62:ef:4d:63:5f:06:
4f:c5:4f:db:08:54:f3:98:b1:c2:69:d6:e5:3d:4f:68:34:82:
90:8d:3e:e3:1c:ef:63:81:bc:c0:a0:2e:05:7d:9a:22:fb:49:
4b:8d:50:52:e9:9b:6f:70:27:c9:f6:12:74:a9:eb:84:04:ea:
06:11:62:31:0a:a4:33:b6:55:d5:6f:30:ec:d1:4f:47:f8:7d:
01:fe:24:f9:b5:b2:65:5b:22:40:fb:8b:6a:b6:39:fb:a1:9f:
72:f9:16:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ8yPhlWbWjywDvkxByUfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjUwMTAxMDU0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTg2MzhjMzc3ODNhZjQ0MTlhOTYxYmY3NTBiYjg2MjRhMzJlYTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOE+W1l4Gt6k6toygLhCV00UATFx
FgYKkNI9LNZWhRe4bxUpYPGqznR1VJBkiD99DbD+BBXM3TaUrLF41j2zBwcB5zD/
oySABGaeoTtwu19Kh+S1rzPvw7l+vSw1pe+RhdY/qM0LjHxq5aj6g4ODLa13pDWx
mdFzIPV6V9Kz3r1V2pFgT3p9f0Q+NhUdjOb8MBULGuL9dyCmNPWZQfHF2WRsi4RQ
GdthAmrOmrvuiM2V2oGNVRVfhC6XRx1qpl0AyxM44zwTpOx7g5bKc2QAF0A/2fk9
QNNOcVYTzy/n4sjjeN1eOLavZivJUxD7SO6U3bdnRnoBYPgBv7T8TPN2MQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA6GOMN3g69EGalhv3ULuGJKMuoTMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvRG9ZNHczZURyMFFacVdHX2RRdTRZa295NmhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtHjMA0G
CSqGSIb3DQEBCwUAA4IBAQB0/HoOXohN7dwNTh9BE81XR4j6IktinzSoVp6Cuxwp
3Mmcsv/JHGLwBegwQ1+gl/hGSTc4AQCc4WWjfNrWOikk0REP4Knj6j4cWjPL6I0p
jKogG20tj3Dbmv1Y1rQ9k+aPcHgZYi7puvR0dkoT6BPBvkqzjOnwTXHVQAWO+siv
RjTDZ0WkI88PWJRwKqn/KHCJxBRZ5nynQ6i6TXxi701jXwZPxU/bCFTzmLHCadbl
PU9oNIKQjT7jHO9jgbzAoC4FfZoi+0lLjVBS6ZtvcCfJ9hJ0qeuEBOoGEWIxCqQz
tlXVbzDs0U9H+H0B/iT5tbJlWyJA+4tqtjn7oZ9y+RYU
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:39:00 2025 by rpki-client