Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sY2i8X0tT80zJQW5DpR2Qeg-10A.roa
File: sY2i8X0tT80zJQW5DpR2Qeg-10A.roa (raw, json)
Hash identifier: jJnRjHCd644QgxZQwFGOpMouc/BvkAf3eAyW91z1ndk=
Subject key identifier: B1:8D:A2:F1:7D:2D:4F:CD:33:25:05:B9:0E:94:76:41:E8:3E:D7:40
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50D60229
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sY2i8X0tT80zJQW5DpR2Qeg-10A.roa
Signing time: Sat 01 Jan 2022 16:01:48 +0000
ROA not before: Sat 01 Jan 2022 16:01:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41521
IP address blocks: 194.209.55.0/24 maxlen: 24
194.209.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356202537 (0x50d60229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b18da2f17d2d4fcd332505b90e947641e83ed740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:3d:b3:1b:43:b6:35:62:3d:19:a8:07:d8:
00:aa:51:24:5f:2e:9e:7b:ae:91:7a:e8:59:21:cd:
7f:9c:0b:35:cb:ac:e0:11:60:37:39:9b:bd:9a:0b:
de:c4:0c:57:f6:cc:c5:46:d3:17:21:9a:58:eb:c6:
d2:dd:e4:cc:7e:d1:0e:ad:17:51:f5:bc:e6:f5:f0:
02:4f:40:cc:5e:71:b4:3a:dd:fb:a0:86:75:8b:39:
e5:09:a3:9f:df:58:38:e8:a4:7d:d7:80:60:d5:f0:
51:3b:51:ef:6d:a7:d9:45:8d:ad:a9:0a:f4:03:3b:
9a:9b:94:d6:62:14:45:1f:83:0d:6e:6b:e8:ea:93:
44:18:68:2b:4e:61:c4:97:95:be:2b:18:1f:a4:8f:
86:4a:af:04:23:52:fb:08:9f:93:ed:83:c4:89:c7:
f4:a1:f1:11:e9:db:59:d0:bb:d8:1e:74:6e:06:e3:
4e:5b:7e:a3:1c:7d:6b:4f:81:14:27:0a:94:f7:5b:
93:b0:04:ad:59:c1:eb:61:c1:f8:76:39:e8:eb:d0:
c4:b3:a8:7d:d7:21:d9:e1:75:2b:64:0c:02:9e:e2:
b8:11:c3:0c:45:c6:2b:81:bf:dd:80:3f:97:7c:58:
71:10:14:56:dd:0e:14:7a:12:30:75:07:ef:c2:f4:
ac:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8D:A2:F1:7D:2D:4F:CD:33:25:05:B9:0E:94:76:41:E8:3E:D7:40
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sY2i8X0tT80zJQW5DpR2Qeg-10A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.55.0/24
194.209.69.0/24
Signature Algorithm: sha256WithRSAEncryption
95:17:6c:eb:07:03:15:21:3f:d4:4c:75:6d:6c:b3:73:df:91:
a6:df:80:83:46:19:be:10:bf:66:60:c7:a8:43:46:e4:a2:85:
d0:a5:b4:2e:15:01:14:ec:ab:26:fa:9e:72:3e:08:d1:5c:b0:
e3:2c:6c:a5:df:9f:89:f6:4b:4c:07:e6:9f:61:5c:9f:f9:43:
0a:a1:26:93:1d:29:ae:85:57:ec:74:bd:3b:e2:16:92:1a:6f:
e9:9d:30:63:b6:e1:ad:8f:55:89:4e:5f:71:de:6b:8f:6f:98:
6c:26:d9:fd:c3:b1:80:02:42:4a:c3:3b:65:ec:e6:27:39:b7:
e2:c0:a0:1c:e3:d4:aa:a6:1b:a4:67:c8:d5:56:d5:fd:cc:1b:
03:d5:01:33:c9:25:1f:80:4d:0c:09:84:76:61:17:31:57:b4:
8f:5f:6e:6e:22:11:e8:a7:ef:00:a8:cc:8d:96:68:f7:c5:2c:
f7:71:42:c2:9f:8d:30:ad:36:df:9c:98:87:11:8a:28:d1:bb:
f6:7b:ce:20:b3:29:23:da:8f:d4:5c:00:30:a2:1d:87:81:22:
fa:fd:5c:6a:6a:1b:85:a8:ad:de:5b:6c:12:43:09:7c:6c:eb:
5c:a5:de:37:5c:9c:36:81:fd:9a:5a:64:0e:5d:83:ce:a2:f3:
5d:a6:f1:b3
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEUNYCKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NjYzZjNkYjE1MmUwNTVhYzE0NWJkYmI0MjllMDE4NjU0MjA0YzhkMB4XDTIyMDEw
MTE2MDE0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjE4ZGEyZjE3ZDJk
NGZjZDMzMjUwNWI5MGU5NDc2NDFlODNlZDc0MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKEzPbMbQ7Y1Yj0ZqAfYAKpRJF8unnuukXroWSHNf5wLNcus
4BFgNzmbvZoL3sQMV/bMxUbTFyGaWOvG0t3kzH7RDq0XUfW85vXwAk9AzF5xtDrd
+6CGdYs55Qmjn99YOOikfdeAYNXwUTtR722n2UWNrakK9AM7mpuU1mIURR+DDW5r
6OqTRBhoK05hxJeVvisYH6SPhkqvBCNS+wifk+2DxInH9KHxEenbWdC72B50bgbj
Tlt+oxx9a0+BFCcKlPdbk7AErVnB62HB+HY56OvQxLOofdch2eF1K2QMAp7iuBHD
DEXGK4G/3YA/l3xYcRAUVt0OFHoSMHUH78L0rA8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSxjaLxfS1PzTMlBbkOlHZB6D7XQDAfBgNVHSMEGDAWgBQmY/PbFS4FWsFF
vbtCngGGVCBMjTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ptUHoyeFV1QlZyQlJiMjdRcDRCaGxRZ1RJMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjkvYzhjNmY2LTU5NWMtNDViMS1hNzZlLWJkMTkyNjc2YzliYi8x
L3NZMmk4WDB0VDgwekpRVzVEcFIyUWVnLTEwQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkv
YzhjNmY2LTU5NWMtNDViMS1hNzZlLWJkMTkyNjc2YzliYi8xL0ptUHoyeFV1QlZy
QlJiMjdRcDRCaGxRZ1RJMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMLRNwMEAMLRRTANBgkqhkiG9w0B
AQsFAAOCAQEAlRds6wcDFSE/1Ex1bWyzc9+Rpt+Ag0YZvhC/ZmDHqENG5KKF0KW0
LhUBFOyrJvqecj4I0Vyw4yxspd+fifZLTAfmn2Fcn/lDCqEmkx0proVX7HS9O+IW
khpv6Z0wY7bhrY9ViU5fcd5rj2+YbCbZ/cOxgAJCSsM7ZezmJzm34sCgHOPUqqYb
pGfI1VbV/cwbA9UBM8klH4BNDAmEdmEXMVe0j19ubiIR6KfvAKjMjZZo98Us93FC
wp+NMK0235yYhxGKKNG79nvOILMpI9qP1FwAMKIdh4Ei+v1camobhait3ltsEkMJ
fGzrXKXeN1ycNoH9mlpkDl2DzqLzXabxsw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:52:43 2025 by rpki-client