Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-acserkdaRwKD1ZOt9mnNNr_tGk.roa
File: 1-acserkdaRwKD1ZOt9mnNNr_tGk.roa (raw, json)
Hash identifier: 6hEtVWrVnbgrhSvEQ68FfjrHt5WP9Jfl8fiwkMXiUDI=
Subject key identifier: F9:A7:2C:7A:B9:1D:69:1C:0A:0F:56:4E:B7:D9:A7:34:DA:FF:B4:69
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019427B55A0AA6205731EF35F7780797C50B
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-acserkdaRwKD1ZOt9mnNNr_tGk.roa
Signing time: Thu 02 Jan 2025 15:49:43 +0000
ROA not before: Thu 02 Jan 2025 15:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199565
IP address blocks: 188.255.146.0/24 maxlen: 24
188.255.169.0/24 maxlen: 24
188.255.173.0/24 maxlen: 24
188.255.184.0/24 maxlen: 24
188.255.221.0/24 maxlen: 24
188.255.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5a:0a:a6:20:57:31:ef:35:f7:78:07:97:c5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 15:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9a72c7ab91d691c0a0f564eb7d9a734daffb469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:ab:40:a4:ce:af:86:69:0b:40:66:59:6d:
b9:60:80:60:0e:ef:79:40:14:18:93:b8:74:34:29:
6c:ea:11:c2:90:af:c9:da:73:73:4f:2c:78:94:e1:
3f:71:06:06:a9:23:b2:df:81:9f:d4:13:3a:de:c8:
49:1f:2c:00:ef:b3:e6:2c:14:4b:74:c7:20:d6:93:
2e:9c:e5:44:99:ed:1d:b5:b6:aa:4e:e5:b2:7a:4c:
02:bf:85:fd:7f:78:5b:e3:89:9c:45:41:70:69:2a:
f6:e2:f9:71:27:d5:4e:8f:63:57:68:84:83:e3:d0:
52:ba:a1:cc:0d:db:2c:7c:ef:30:d3:e2:4e:08:f7:
1a:8b:b1:da:50:fa:5d:fb:b6:1c:b5:c1:e9:58:3b:
8b:10:bf:c0:6e:15:e0:bd:ad:64:38:55:d0:54:ed:
ef:1f:8b:67:ea:31:5b:66:03:d1:cd:17:1b:80:53:
92:f5:94:7f:1e:1e:ae:3a:b3:11:e4:d4:2c:9c:7f:
19:56:d4:a4:2f:25:6f:09:a0:db:2b:ee:90:54:55:
ea:8b:59:4d:c5:0c:08:98:5f:a4:4f:43:dc:b0:c0:
89:02:64:1d:51:b3:4d:3b:af:38:8b:3d:9b:c6:9b:
a5:69:74:69:a7:c9:72:14:3e:e4:ab:64:b8:82:8e:
96:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A7:2C:7A:B9:1D:69:1C:0A:0F:56:4E:B7:D9:A7:34:DA:FF:B4:69
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-acserkdaRwKD1ZOt9mnNNr_tGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.146.0/24
188.255.169.0/24
188.255.173.0/24
188.255.184.0/24
188.255.221.0/24
188.255.224.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b7:9c:f7:fb:a5:77:67:bb:d8:d5:70:14:7b:9c:3b:98:90:
bc:d5:52:2d:36:cd:c6:12:88:b5:fa:45:9f:db:62:8f:0f:c3:
25:2c:68:ce:97:5f:36:9b:2f:e3:93:0e:93:43:64:b0:53:fe:
cf:54:84:3f:d1:84:1f:bc:c8:0a:27:f1:10:fe:ab:87:3d:27:
90:49:c8:90:df:f1:2e:f6:01:31:db:d1:49:25:f0:21:46:72:
36:a7:c9:04:cc:c3:f6:e9:a4:52:a9:39:55:64:06:c8:d9:17:
2a:0d:dd:c8:84:79:62:99:33:36:23:dc:df:d7:2c:db:a5:f9:
3e:8e:14:92:13:64:9c:c6:97:67:d3:fd:0b:a5:51:1f:14:bc:
9a:88:48:47:af:4d:38:af:0a:ce:50:d1:30:27:d7:24:01:a9:
2b:1b:be:2b:f6:c4:a2:66:08:6e:b8:2b:d7:d1:e0:ac:6f:4e:
5f:ee:0e:62:ff:b5:77:2d:b9:05:2d:6a:c3:7c:51:c3:07:6a:
d0:d8:9e:f0:06:1f:b2:aa:08:3f:e6:97:b9:a6:2f:9c:b2:47:
3a:bd:03:52:ac:f3:b5:be:d2:45:8d:8b:78:bc:9d:7e:0d:0c:
d5:66:8b:dc:f0:fc:10:1b:ed:ff:36:7b:66:89:52:51:11:df:
88:32:29:8c
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAZQntVoKpiBXMe8193gHl8ULMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjUwMTAyMTU0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWE3MmM3YWI5MWQ2OTFjMGEwZjU2NGViN2Q5YTczNGRhZmZiNDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAmrQKTOr4ZpC0BmWW25YIBgDu95
QBQYk7h0NCls6hHCkK/J2nNzTyx4lOE/cQYGqSOy34Gf1BM63shJHywA77PmLBRL
dMcg1pMunOVEme0dtbaqTuWyekwCv4X9f3hb44mcRUFwaSr24vlxJ9VOj2NXaISD
49BSuqHMDdssfO8w0+JOCPcai7HaUPpd+7YctcHpWDuLEL/AbhXgva1kOFXQVO3v
H4tn6jFbZgPRzRcbgFOS9ZR/Hh6uOrMR5NQsnH8ZVtSkLyVvCaDbK+6QVFXqi1lN
xQwImF+kT0PcsMCJAmQdUbNNO684iz2bxpulaXRpp8lyFD7kq2S4go6WdQIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFPmnLHq5HWkcCg9WTrfZpzTa/7RpMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvMS1hY3NlcmtkYVJ3S0QxWk90OW1uTk5yX3RHay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzYvZGRmOGIzLTFjMDgtNDk1Yy04ZGRmLWZhZTVkYmVkM2Ix
Yi8xL2I0VGtjNHB3NmpuQWpPOGhCREt1T1o3SDZSVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEALz/kgME
ALz/qQMEALz/rQMEALz/uAMEALz/3QMEALz/4DANBgkqhkiG9w0BAQsFAAOCAQEA
J7ec9/uld2e72NVwFHucO5iQvNVSLTbNxhKItfpFn9tijw/DJSxozpdfNpsv45MO
k0NksFP+z1SEP9GEH7zICifxEP6rhz0nkEnIkN/xLvYBMdvRSSXwIUZyNqfJBMzD
9umkUqk5VWQGyNkXKg3dyIR5YpkzNiPc39cs26X5Po4UkhNknMaXZ9P9C6VRHxS8
mohIR69NOK8KzlDRMCfXJAGpKxu+K/bEomYIbrgr19HgrG9OX+4OYv+1dy25BS1q
w3xRwwdq0Nie8AYfsqoIP+aXuaYvnLJHOr0DUqzztb7SRY2LeLydfg0M1WaL3PD8
EBvt/zZ7ZolSURHfiDIpjA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:25 2025 by rpki-client