Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/V9HLk2dTPyx8JLcrHeeYbpb-iYg.roa
File: V9HLk2dTPyx8JLcrHeeYbpb-iYg.roa (raw, json)
Hash identifier: /ClwOkB9jNOizu5iWTlx/e2pgezvycQvsJHW535rffE=
Subject key identifier: 57:D1:CB:93:67:53:3F:2C:7C:24:B7:2B:1D:E7:98:6E:96:FE:89:88
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067D5CBD1B52B149215336D276E069C
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/V9HLk2dTPyx8JLcrHeeYbpb-iYg.roa
Signing time: Wed 01 Jan 2025 05:47:43 +0000
ROA not before: Wed 01 Jan 2025 05:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204572
IP address blocks: 194.209.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d5:cb:d1:b5:2b:14:92:15:33:6d:27:6e:06:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57d1cb9367533f2c7c24b72b1de7986e96fe8988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:21:4c:5a:cf:ef:c9:bf:ce:b1:1f:99:3c:c1:
e8:63:71:b6:9c:90:d8:73:31:eb:f3:50:79:94:ff:
0e:d7:0f:32:93:7e:ba:fa:c7:a2:3c:5b:84:40:63:
cd:c8:a0:f8:fb:1f:42:53:96:99:ab:70:6e:dd:e6:
5c:f3:3f:8b:35:58:e9:71:7f:fa:04:66:00:84:2d:
ac:5f:6b:d0:12:1a:3d:38:a1:59:a3:54:38:91:6e:
b4:77:8b:02:b6:ed:12:0a:fd:e8:ac:99:73:1b:85:
d7:bc:c9:61:d5:82:36:ec:e6:f8:98:ea:83:4b:9c:
36:9b:88:3f:3b:f8:75:ab:b8:f0:67:e5:46:f3:b7:
ea:b1:bc:a6:e9:3e:c8:df:74:c7:4f:c9:c3:a0:24:
c6:4d:5e:0c:c2:b9:ff:ed:a4:e1:b3:47:dc:e2:20:
ea:61:c5:ef:ca:f6:46:a7:50:63:dc:b1:ad:c2:67:
96:43:c2:cd:51:1d:50:9f:83:fc:d2:06:b4:81:e1:
84:77:14:b7:11:f8:0b:23:64:c1:04:b5:92:6d:e5:
79:8d:d1:66:20:b9:43:ba:69:52:4e:60:cd:06:6a:
f1:ba:4b:5c:09:96:d4:da:98:d8:d0:40:ef:b2:cd:
bf:2c:8f:bd:7f:b8:a6:4f:c9:20:98:89:ce:12:97:
ae:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D1:CB:93:67:53:3F:2C:7C:24:B7:2B:1D:E7:98:6E:96:FE:89:88
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/V9HLk2dTPyx8JLcrHeeYbpb-iYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.244.0/24
Signature Algorithm: sha256WithRSAEncryption
08:26:e1:0a:25:bd:e4:99:db:9b:21:4d:6f:39:17:2b:60:65:
ec:2d:8e:ea:1b:9e:ca:49:4e:36:29:cb:62:42:78:ad:9e:15:
d4:39:b1:75:d0:70:d9:62:97:e1:bd:2d:24:63:a6:93:d4:81:
df:e2:68:06:c5:4c:3c:ef:31:1d:a1:36:ac:a2:08:35:3a:c8:
68:c0:d6:e2:71:c8:ab:3e:37:30:58:b7:9f:ee:97:76:a3:53:
61:3d:d9:6c:75:0a:45:4b:5b:4b:3d:ee:db:14:de:c4:b0:d1:
a3:b5:82:3c:14:8d:85:f9:b2:20:61:7d:4c:6a:6d:4f:16:5e:
77:c1:5e:94:f2:25:ac:8d:ff:6f:4f:f8:47:21:ab:ba:5a:d9:
f2:f5:9a:95:76:dc:e6:b2:ff:d7:3c:57:75:9e:a3:7b:5a:68:
dc:76:30:68:bf:88:35:de:d2:83:be:d1:8d:b9:f1:ad:a2:d7:
f9:c4:d5:16:f1:fe:18:d5:39:d5:dc:f4:3d:e8:60:4e:66:a7:
aa:65:26:92:d3:50:77:01:c7:50:dd:f5:66:59:5f:13:ba:31:
32:51:73:ce:76:6d:9e:4b:8d:92:84:0b:5d:cd:c9:86:9d:d0:
65:bb:4e:c1:a4:31:27:5d:cc:62:40:f0:b2:91:eb:f1:58:7f:
d3:07:0d:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ9XL0bUrFJIVM20nbgacMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjUwMTAxMDU0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2QxY2I5MzY3NTMzZjJjN2MyNGI3MmIxZGU3OTg2ZTk2ZmU4OTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiFMWs/vyb/OsR+ZPMHoY3G2nJDY
czHr81B5lP8O1w8yk366+seiPFuEQGPNyKD4+x9CU5aZq3Bu3eZc8z+LNVjpcX/6
BGYAhC2sX2vQEho9OKFZo1Q4kW60d4sCtu0SCv3orJlzG4XXvMlh1YI27Ob4mOqD
S5w2m4g/O/h1q7jwZ+VG87fqsbym6T7I33THT8nDoCTGTV4Mwrn/7aThs0fc4iDq
YcXvyvZGp1Bj3LGtwmeWQ8LNUR1Qn4P80ga0geGEdxS3EfgLI2TBBLWSbeV5jdFm
ILlDumlSTmDNBmrxuktcCZbU2pjY0EDvss2/LI+9f7imT8kgmInOEpeuywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFfRy5NnUz8sfCS3Kx3nmG6W/omIMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvVjlITGsyZFRQeXg4SkxjckhlZVlicGItaVlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtH0MA0G
CSqGSIb3DQEBCwUAA4IBAQAIJuEKJb3kmdubIU1vORcrYGXsLY7qG57KSU42Kcti
QnitnhXUObF10HDZYpfhvS0kY6aT1IHf4mgGxUw87zEdoTasogg1OshowNbiccir
PjcwWLef7pd2o1NhPdlsdQpFS1tLPe7bFN7EsNGjtYI8FI2F+bIgYX1Mam1PFl53
wV6U8iWsjf9vT/hHIau6Wtny9ZqVdtzmsv/XPFd1nqN7WmjcdjBov4g13tKDvtGN
ufGtotf5xNUW8f4Y1TnV3PQ96GBOZqeqZSaS01B3AcdQ3fVmWV8TujEyUXPOdm2e
S42ShAtdzcmGndBlu07BpDEnXcxiQPCykevxWH/TBw2E
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:39:16 2025 by rpki-client