Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/iB1yT7UlhU0LGpG-dOlcfc3wi6M.roa
File: iB1yT7UlhU0LGpG-dOlcfc3wi6M.roa (raw, json)
Hash identifier: BN7vfcSbIL7J1CHJUZmut9Os0b4hGVS6rSST5PN+pg4=
Subject key identifier: 88:1D:72:4F:B5:25:85:4D:0B:1A:91:BE:74:E9:5C:7D:CD:F0:8B:A3
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067D41F9FA852571DC53DEBA35BFC5D
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/iB1yT7UlhU0LGpG-dOlcfc3wi6M.roa
Signing time: Wed 01 Jan 2025 05:47:42 +0000
ROA not before: Wed 01 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203042
IP address blocks: 194.209.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d4:1f:9f:a8:52:57:1d:c5:3d:eb:a3:5b:fc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=881d724fb525854d0b1a91be74e95c7dcdf08ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:62:ef:c4:69:98:70:52:17:56:28:db:30:
e7:d3:0c:4c:39:de:8e:88:74:9b:37:8e:dc:0e:85:
c1:1b:32:3c:65:8e:d1:02:20:3a:71:3f:a1:6f:a9:
17:2e:17:5c:17:a3:9c:97:af:be:ee:79:eb:9b:e8:
11:5f:c1:28:d4:13:68:a4:06:06:e2:4b:6e:bc:30:
4c:3d:06:cf:93:33:20:98:c1:eb:3a:9a:2e:ce:b3:
8f:18:71:1c:0f:30:61:83:f2:41:ab:83:47:9f:1e:
24:48:5d:06:28:1c:39:f4:68:8b:bc:63:98:f7:c9:
32:30:4d:b9:c4:6b:a0:9a:00:a1:c8:5b:19:65:7b:
6c:e0:9c:c0:e9:63:cb:2d:8d:9b:d3:17:ec:20:7a:
84:34:fd:a0:40:75:9f:46:d1:46:ac:80:36:7a:73:
33:00:76:c9:68:6c:49:3b:ad:e2:d6:af:f7:e4:bd:
15:a0:20:ed:63:46:95:cc:a9:fb:ee:13:65:4e:a5:
52:8f:50:0c:1d:2a:bb:2a:77:58:73:8e:9c:37:6b:
aa:ef:25:a9:12:3a:dd:37:9a:24:e7:79:bf:58:64:
da:96:7e:84:f1:a5:63:8c:04:b1:a6:e6:c2:11:87:
07:8e:68:38:14:7b:7c:3e:dd:0c:7d:d5:6e:ed:72:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1D:72:4F:B5:25:85:4D:0B:1A:91:BE:74:E9:5C:7D:CD:F0:8B:A3
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/iB1yT7UlhU0LGpG-dOlcfc3wi6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.64.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:40:5f:9a:1a:ac:68:9a:d1:2a:4e:ba:fb:1f:57:f2:dd:5c:
c3:37:1e:00:f8:86:dc:23:ee:3c:bb:e5:07:88:83:1e:7a:2f:
c6:62:52:e4:55:1f:95:44:cc:db:08:ea:58:06:2d:b6:ed:b1:
a2:96:78:e4:a1:11:12:34:fd:b1:19:7b:14:e3:5d:3c:c1:5e:
cb:bd:c6:44:d7:20:6b:45:d6:80:d8:8f:8e:97:49:3b:97:c8:
0f:86:8a:85:09:ee:b1:f2:e0:eb:07:53:7b:6a:8f:5f:e3:3f:
a4:bf:4a:aa:4b:44:1b:49:b2:43:83:72:30:fd:77:bd:a3:78:
27:e9:d6:7d:25:93:81:11:00:a5:8f:df:0f:54:70:ad:38:65:
12:26:5e:3d:8a:b9:40:0e:99:45:17:e0:c8:92:9b:44:6c:1e:
5c:0a:5e:05:7f:eb:2c:06:92:43:ca:64:4c:41:aa:b4:5e:bc:
ae:91:41:6b:77:23:ac:d2:bf:99:a1:85:d8:1b:6f:2b:8b:10:
72:35:50:40:df:b5:a3:79:a7:d2:6c:1c:4f:b0:c6:8a:28:5f:
dc:12:06:c0:15:09:66:65:e7:8c:39:9d:c0:77:37:47:c0:8c:
92:1e:1b:ec:53:e4:55:d5:b6:77:97:24:f8:ad:f6:49:17:79:
31:c3:e6:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ9Qfn6hSVx3FPeujW/xdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjUwMTAxMDU0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODFkNzI0ZmI1MjU4NTRkMGIxYTkxYmU3NGU5NWM3ZGNkZjA4YmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLJi78RpmHBSF1Yo2zDn0wxMOd6O
iHSbN47cDoXBGzI8ZY7RAiA6cT+hb6kXLhdcF6Ocl6++7nnrm+gRX8Eo1BNopAYG
4ktuvDBMPQbPkzMgmMHrOpouzrOPGHEcDzBhg/JBq4NHnx4kSF0GKBw59GiLvGOY
98kyME25xGugmgChyFsZZXts4JzA6WPLLY2b0xfsIHqENP2gQHWfRtFGrIA2enMz
AHbJaGxJO63i1q/35L0VoCDtY0aVzKn77hNlTqVSj1AMHSq7KndYc46cN2uq7yWp
EjrdN5ok53m/WGTaln6E8aVjjASxpubCEYcHjmg4FHt8Pt0MfdVu7XLevQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIgdck+1JYVNCxqRvnTpXH3N8IujMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvaUIxeVQ3VWxoVTBMR3BHLWRPbGNmYzN3aTZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtFAMA0G
CSqGSIb3DQEBCwUAA4IBAQA+QF+aGqxomtEqTrr7H1fy3VzDNx4A+IbcI+48u+UH
iIMeei/GYlLkVR+VRMzbCOpYBi227bGilnjkoRESNP2xGXsU4108wV7LvcZE1yBr
RdaA2I+Ol0k7l8gPhoqFCe6x8uDrB1N7ao9f4z+kv0qqS0QbSbJDg3Iw/Xe9o3gn
6dZ9JZOBEQClj98PVHCtOGUSJl49irlADplFF+DIkptEbB5cCl4Ff+ssBpJDymRM
Qaq0XryukUFrdyOs0r+ZoYXYG28rixByNVBA37WjeafSbBxPsMaKKF/cEgbAFQlm
ZeeMOZ3AdzdHwIySHhvsU+RV1bZ3lyT4rfZJF3kxw+ae
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:26 2025 by rpki-client