Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/b69695-a990-4a6e-8f0a-22dc1a41f84f/1/1mpJuBOSMhqm38gtiZjVU6JGC7E.roa
File: 1mpJuBOSMhqm38gtiZjVU6JGC7E.roa (raw, json)
Hash identifier: uQ3HzF0fWu+uu2jv6O77Y8SQ8/Uy/vWVpea7uZPGKEA=
Subject key identifier: D6:6A:49:B8:13:92:32:1A:A6:DF:C8:2D:89:98:D5:53:A2:46:0B:B1
Certificate issuer: /CN=650354e1002248dc70ba40f18d6958fcef569df3
Certificate serial: 01FFD1F7
Authority key identifier: 65:03:54:E1:00:22:48:DC:70:BA:40:F1:8D:69:58:FC:EF:56:9D:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQNU4QAiSNxwukDxjWlY_O9WnfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/b69695-a990-4a6e-8f0a-22dc1a41f84f/1/1mpJuBOSMhqm38gtiZjVU6JGC7E.roa
Signing time: Tue 17 May 2022 06:33:29 +0000
ROA not before: Tue 17 May 2022 06:33:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6453
IP address blocks: 194.104.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33542647 (0x1ffd1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=650354e1002248dc70ba40f18d6958fcef569df3
Validity
Not Before: May 17 06:33:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d66a49b81392321aa6dfc82d8998d553a2460bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:77:70:6d:2a:9e:b7:a2:95:ec:86:8d:66:c4:
64:eb:ef:e0:57:c9:84:a3:98:be:95:49:f7:95:80:
e3:4e:43:70:a0:5e:19:46:02:15:02:70:f9:4e:7b:
a3:05:ad:df:3f:4c:16:32:7f:71:55:33:5f:22:e6:
4a:49:c6:27:93:20:26:70:3f:db:a9:82:fd:78:b6:
7e:8c:a5:1a:79:d2:df:ca:f9:4b:54:f1:1d:e7:49:
bc:75:ef:f1:69:3c:30:a1:4b:e2:37:52:e3:c4:77:
84:3f:ef:31:8a:47:5b:09:4e:6a:34:6e:6f:8c:e2:
25:c1:66:fc:95:32:6d:e8:46:25:83:9c:81:47:3a:
97:e8:08:a3:ad:9f:bb:9d:d4:a3:1e:4d:17:87:2e:
66:18:6d:c7:1e:26:ce:ba:3c:e5:80:ef:1c:0c:dc:
8a:a6:bc:20:50:b3:50:55:c8:52:8b:e9:14:c4:85:
e6:6c:c1:a5:79:91:a7:6c:62:fe:f2:3e:00:d2:32:
fc:10:87:e0:9c:5f:e6:b8:77:99:8d:cf:3a:ff:76:
e8:4c:0e:1d:00:b2:59:e9:ae:9d:de:bf:f2:d5:7b:
58:7c:b6:fd:bb:c6:1d:11:01:c8:af:6b:75:e0:27:
a2:9e:af:69:a9:29:70:b9:98:69:d1:f4:ee:56:4a:
f0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6A:49:B8:13:92:32:1A:A6:DF:C8:2D:89:98:D5:53:A2:46:0B:B1
X509v3 Authority Key Identifier:
keyid:65:03:54:E1:00:22:48:DC:70:BA:40:F1:8D:69:58:FC:EF:56:9D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQNU4QAiSNxwukDxjWlY_O9WnfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b69695-a990-4a6e-8f0a-22dc1a41f84f/1/1mpJuBOSMhqm38gtiZjVU6JGC7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b69695-a990-4a6e-8f0a-22dc1a41f84f/1/ZQNU4QAiSNxwukDxjWlY_O9WnfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.226.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:07:ce:09:fa:07:76:56:dd:c2:c1:22:18:50:08:74:6e:fb:
d9:33:f0:3f:2e:47:ba:61:6d:87:e3:ff:e9:a1:fc:fc:d7:29:
59:5e:3f:6a:e7:29:b2:01:7a:22:9d:b1:d2:2a:a1:82:9b:1e:
51:5f:85:b5:d1:ed:29:63:3e:6e:84:3b:6f:59:e4:48:6c:f7:
9d:c7:69:69:14:9f:48:42:06:45:11:63:7a:64:26:c8:6a:5e:
72:f5:d8:f3:14:6e:72:82:87:95:71:de:2d:d9:9d:9c:4e:e7:
e8:f3:b4:5d:6e:7f:aa:89:be:34:41:de:22:2a:5f:db:da:b9:
30:8d:7b:1b:b7:eb:b4:b1:8b:89:9a:ca:c9:a3:41:51:a6:77:
05:25:6d:6e:a8:e8:75:f6:b3:1a:45:a8:a7:3d:cc:91:99:44:
2e:1e:e0:37:74:18:58:d4:30:2c:b1:c8:7d:43:9d:44:7d:f6:
07:17:4d:5f:8c:6e:0b:1a:7b:e5:43:42:be:9f:bb:cf:42:5a:
35:5a:75:1f:f1:30:4b:e2:d0:3b:5b:05:8d:f2:1f:db:d8:a2:
d0:bb:43:44:d0:4c:27:36:6b:d8:fa:94:ed:a3:92:3d:e9:5c:
11:c9:38:9f:fd:a5:09:b3:0b:56:11:32:b7:df:a4:94:8e:46:
94:14:b9:8b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAf/R9zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NTAzNTRlMTAwMjI0OGRjNzBiYTQwZjE4ZDY5NThmY2VmNTY5ZGYzMB4XDTIyMDUx
NzA2MzMyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDY2YTQ5YjgxMzky
MzIxYWE2ZGZjODJkODk5OGQ1NTNhMjQ2MGJiMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMd3cG0qnreileyGjWbEZOvv4FfJhKOYvpVJ95WA405DcKBe
GUYCFQJw+U57owWt3z9MFjJ/cVUzXyLmSknGJ5MgJnA/26mC/Xi2foylGnnS38r5
S1TxHedJvHXv8Wk8MKFL4jdS48R3hD/vMYpHWwlOajRub4ziJcFm/JUybehGJYOc
gUc6l+gIo62fu53Uox5NF4cuZhhtxx4mzro85YDvHAzciqa8IFCzUFXIUovpFMSF
5mzBpXmRp2xi/vI+ANIy/BCH4Jxf5rh3mY3POv926EwOHQCyWemund6/8tV7WHy2
/bvGHREByK9rdeAnop6vaakpcLmYadH07lZK8BsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTWakm4E5IyGqbfyC2JmNVTokYLsTAfBgNVHSMEGDAWgBRlA1ThACJI3HC6
QPGNaVj871ad8zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pRTlU0UUFpU054d3VrRHhqV2xZX085V25mTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmIvYjY5Njk1LWE5OTAtNGE2ZS04ZjBhLTIyZGMxYTQxZjg0Zi8x
LzFtcEp1Qk9TTWhxbTM4Z3RpWmpWVTZKR0M3RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIv
YjY5Njk1LWE5OTAtNGE2ZS04ZjBhLTIyZGMxYTQxZjg0Zi8xL1pRTlU0UUFpU054
d3VrRHhqV2xZX085V25mTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMJo4jANBgkqhkiG9w0BAQsFAAOC
AQEAXAfOCfoHdlbdwsEiGFAIdG772TPwPy5HumFth+P/6aH8/NcpWV4/aucpsgF6
Ip2x0iqhgpseUV+FtdHtKWM+boQ7b1nkSGz3ncdpaRSfSEIGRRFjemQmyGpecvXY
8xRucoKHlXHeLdmdnE7n6PO0XW5/qom+NEHeIipf29q5MI17G7frtLGLiZrKyaNB
UaZ3BSVtbqjodfazGkWopz3MkZlELh7gN3QYWNQwLLHIfUOdRH32BxdNX4xuCxp7
5UNCvp+7z0JaNVp1H/EwS+LQO1sFjfIf29ii0LtDRNBMJzZr2PqU7aOSPelcEck4
n/2lCbMLVhEyt9+klI5GlBS5iw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:51:49 2025 by rpki-client