Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/9VMEesSV6a-x_SjygxcaosIGoNs.roa
File: 9VMEesSV6a-x_SjygxcaosIGoNs.roa (raw, json)
Hash identifier: j886WgvsxRYSzK/QB3dbJNQTgLbqJaUrZ8NkjBVnb/g=
Subject key identifier: F5:53:04:7A:C4:95:E9:AF:B1:FD:28:F2:83:17:1A:A2:C2:06:A0:DB
Certificate issuer: /CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Certificate serial: 019426D949EF82A12FB8AA04A681D8FC2E77
Authority key identifier: 49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/9VMEesSV6a-x_SjygxcaosIGoNs.roa
Signing time: Thu 02 Jan 2025 11:49:22 +0000
ROA not before: Thu 02 Jan 2025 11:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209243
IP address blocks: 195.144.22.0/24 maxlen: 24
2a09:7cc7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:49:ef:82:a1:2f:b8:aa:04:a6:81:d8:fc:2e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Validity
Not Before: Jan 2 11:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f553047ac495e9afb1fd28f283171aa2c206a0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:45:4d:dc:5e:46:d7:06:5d:10:87:af:bd:54:
d5:02:76:6c:e9:f3:a6:b1:a1:39:8d:30:c6:d4:fc:
57:7f:49:75:9b:db:0c:52:7d:7f:99:75:d8:27:61:
47:4e:83:11:83:f7:e4:0e:61:81:06:11:68:e3:6a:
53:5a:d5:cd:7a:9b:5f:6b:6a:97:f3:64:87:e0:71:
6f:8b:d9:27:b3:db:b8:50:68:ae:af:f2:76:6b:c3:
3c:74:b3:02:6f:9b:cf:32:f8:d0:1f:32:f4:a9:67:
e4:44:2a:a3:86:ae:da:7f:2d:71:ea:f3:8f:b5:c8:
bc:76:72:53:69:b2:8b:ba:c8:dd:8c:e6:c1:60:49:
86:6b:8c:bf:5c:b5:68:ca:2b:30:30:7a:ef:8b:f1:
4d:b5:52:0c:65:99:a3:51:22:e6:3a:3f:69:c3:7c:
ee:5f:1f:df:f4:56:70:4e:fc:87:61:09:50:df:5c:
3a:77:68:de:28:53:23:f3:ea:3b:2b:d9:d1:3b:31:
a0:ff:ef:84:2b:85:dc:f0:dd:72:99:1c:a7:13:1f:
fd:5f:87:da:bd:4a:49:0e:29:24:a2:66:27:d4:73:
55:6d:88:b7:33:98:5c:9f:c9:43:cf:6f:b6:43:37:
a7:d4:b2:4a:61:49:e5:cd:e5:e0:01:be:f6:50:84:
0b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:53:04:7A:C4:95:E9:AF:B1:FD:28:F2:83:17:1A:A2:C2:06:A0:DB
X509v3 Authority Key Identifier:
keyid:49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/9VMEesSV6a-x_SjygxcaosIGoNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.144.22.0/24
IPv6:
2a09:7cc7::/32
Signature Algorithm: sha256WithRSAEncryption
60:10:1c:b8:80:3b:9d:6c:0c:23:10:3a:6d:5b:53:7b:71:7e:
d4:e2:2d:54:07:bb:9e:58:0a:05:90:c1:03:6a:d3:ef:7f:45:
ea:10:fa:47:c3:41:f9:b3:05:dc:1f:b2:cd:23:90:4b:ff:7c:
d8:97:7d:50:40:3e:86:a1:a4:6a:7d:43:e9:e1:c5:c3:79:b2:
c5:43:93:cc:4f:5c:d6:bf:20:67:f9:17:3a:cb:52:47:a0:7f:
34:50:8e:50:d8:00:87:01:83:a7:0a:0d:d9:47:17:b2:61:c5:
b0:62:03:82:f1:81:a0:ef:65:df:c1:4e:49:0e:bd:c3:6a:66:
c4:e9:07:b5:a8:1f:20:39:e5:62:5e:26:e7:65:44:f8:5d:36:
32:42:e9:db:5a:c5:82:ee:26:2a:68:db:0b:c8:ed:57:25:8a:
a0:89:00:f4:95:3f:30:6b:2e:1c:0b:bf:46:37:96:be:90:a2:
a0:07:9d:f9:06:27:9a:a3:b9:4d:8f:8d:aa:40:28:2b:34:a7:
c6:42:21:5d:2d:9a:f8:93:28:e5:fd:c1:40:5e:f0:e4:85:7f:
03:52:cd:47:65:52:39:cd:fa:0f:d8:50:30:a4:66:0a:d8:49:
48:8c:72:c2:9e:26:a1:73:ad:07:6c:ad:62:ef:bb:bc:9c:ae:
0a:08:ab:e2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQm2UnvgqEvuKoEpoHY/C53MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MTNiMjYxYWRiZjc5ZWUzNmE2YTNhZGZhNjg3YTdlYzY1
ODIxMGIwHhcNMjUwMTAyMTE0OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTUzMDQ3YWM0OTVlOWFmYjFmZDI4ZjI4MzE3MWFhMmMyMDZhMGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEVN3F5G1wZdEIevvVTVAnZs6fOm
saE5jTDG1PxXf0l1m9sMUn1/mXXYJ2FHToMRg/fkDmGBBhFo42pTWtXNeptfa2qX
82SH4HFvi9kns9u4UGiur/J2a8M8dLMCb5vPMvjQHzL0qWfkRCqjhq7afy1x6vOP
tci8dnJTabKLusjdjObBYEmGa4y/XLVoyiswMHrvi/FNtVIMZZmjUSLmOj9pw3zu
Xx/f9FZwTvyHYQlQ31w6d2jeKFMj8+o7K9nROzGg/++EK4Xc8N1ymRynEx/9X4fa
vUpJDikkomYn1HNVbYi3M5hcn8lDz2+2Qzen1LJKYUnlzeXgAb72UIQLowIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPVTBHrElemvsf0o8oMXGqLCBqDbMB8GA1UdIwQY
MBaAFEkTsmGtv3nuNqajrfpoen7GWCELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84ODBjNDctZmE5Mi00ZWVmLWIyNzYt
YThhMGU1NWY1ZTMxLzEvOVZNRWVzU1Y2YS14X1NqeWd4Y2Fvc0lHb05zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC84ODBjNDctZmE5Mi00ZWVmLWIyNzYtYThhMGU1NWY1ZTMx
LzEvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw5AWMA0E
AgACMAcDBQAqCXzHMA0GCSqGSIb3DQEBCwUAA4IBAQBgEBy4gDudbAwjEDptW1N7
cX7U4i1UB7ueWAoFkMEDatPvf0XqEPpHw0H5swXcH7LNI5BL/3zYl31QQD6GoaRq
fUPp4cXDebLFQ5PMT1zWvyBn+Rc6y1JHoH80UI5Q2ACHAYOnCg3ZRxeyYcWwYgOC
8YGg72XfwU5JDr3DambE6Qe1qB8gOeViXibnZUT4XTYyQunbWsWC7iYqaNsLyO1X
JYqgiQD0lT8way4cC79GN5a+kKKgB535Bieao7lNj42qQCgrNKfGQiFdLZr4kyjl
/cFAXvDkhX8DUs1HZVI5zfoP2FAwpGYK2ElIjHLCniahc60HbK1i77u8nK4KCKvi
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:21:16 2025 by rpki-client