Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/H4OiQGL1DbG4MibNSVMRd8RQc_Q.roa
File: H4OiQGL1DbG4MibNSVMRd8RQc_Q.roa (raw, json)
Hash identifier: rv//nIfVZsrdzhdfXCHCp7/ysXvAYIb8HuuMGaQi3tw=
Subject key identifier: 1F:83:A2:40:62:F5:0D:B1:B8:32:26:CD:49:53:11:77:C4:50:73:F4
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B3AA2D7FD7409A149B74A2343B87CB
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/H4OiQGL1DbG4MibNSVMRd8RQc_Q.roa
Signing time: Thu 02 Jan 2025 01:49:01 +0000
ROA not before: Thu 02 Jan 2025 01:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400687
IP address blocks: 194.76.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:aa:2d:7f:d7:40:9a:14:9b:74:a2:34:3b:87:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f83a24062f50db1b83226cd49531177c45073f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:02:dc:b9:3f:08:64:20:5f:eb:a0:cc:35:
d9:4d:ec:5e:d8:33:ff:b4:fb:43:5d:09:75:99:8a:
b2:78:12:b8:a8:f5:be:6a:20:34:e7:10:f6:91:aa:
7e:6e:d0:e7:52:b0:f1:09:a4:0f:36:d2:19:47:36:
b2:a1:59:31:6c:21:66:9b:2f:78:cf:de:b3:6e:7c:
b5:2d:81:10:8d:76:f6:37:3f:b3:3b:6c:c5:a8:93:
dc:52:d5:e3:c4:15:9f:f2:89:a3:dd:91:02:fc:94:
ef:e6:c2:a6:3c:86:81:80:a4:92:c3:de:f2:48:cd:
2e:df:db:8b:2d:ae:6b:9d:a7:e6:22:64:8b:25:e7:
9e:6f:3d:cb:2a:51:25:d7:de:d0:c9:d4:11:93:ac:
93:60:af:be:d9:78:a2:98:d3:5a:24:3d:2a:84:62:
b5:7a:52:c9:ee:1c:24:f9:f0:8a:b6:da:d7:68:ef:
27:88:57:22:f8:49:51:53:a7:d5:ac:6c:67:8e:d9:
2b:49:7d:1d:a6:9c:a6:34:40:12:67:60:26:01:0d:
cf:01:31:77:b7:14:57:d2:6e:e9:d2:50:a0:54:7a:
2d:7b:27:14:fb:a7:89:7c:99:74:54:e4:90:e0:17:
ac:a1:f1:58:fc:4a:c6:70:15:b5:32:24:e3:98:d7:
55:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:83:A2:40:62:F5:0D:B1:B8:32:26:CD:49:53:11:77:C4:50:73:F4
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/H4OiQGL1DbG4MibNSVMRd8RQc_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.1.0/24
Signature Algorithm: sha256WithRSAEncryption
53:7c:eb:99:1f:dc:38:4d:8a:4c:74:65:08:de:29:fa:bf:41:
dd:93:f1:d9:e4:67:97:c3:ff:0a:00:a4:d0:ce:78:1f:f7:0e:
f2:8d:7e:1d:09:38:9a:c1:80:b8:df:5f:60:4c:a5:42:09:01:
a7:e3:23:7c:a3:3d:12:13:d9:a8:d9:f8:34:89:97:62:99:1e:
75:ae:ae:81:4b:97:ba:2a:90:98:ad:6b:ab:a5:c5:db:79:dd:
f8:a4:02:11:9e:5e:fa:92:22:03:61:d6:de:c9:87:08:d8:ba:
c2:2a:3b:b2:0e:60:91:0c:0a:76:7a:d8:01:53:58:37:5f:7e:
e7:70:9e:4e:ab:a7:61:98:95:b8:5f:72:9c:b9:d9:95:dc:52:
a8:78:c2:88:32:55:77:95:e4:35:02:34:93:13:c5:94:7d:d2:
8f:e9:95:09:e2:1c:72:2a:d6:82:37:c3:7c:3e:7e:be:0f:e0:
9a:63:b3:89:65:24:a8:ef:a6:37:a1:23:48:48:f7:47:f7:a2:
49:66:2c:bb:d9:25:18:dd:7a:3f:90:48:77:07:54:74:31:47:
a4:bf:01:e6:ab:15:36:52:b0:72:1e:c3:5c:27:07:44:61:63:
a6:e8:cd:0f:a2:48:89:6d:73:ee:ee:73:d4:75:74:ea:cb:2b:
06:39:7c:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks6otf9dAmhSbdKI0O4fLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjUwMTAyMDE0OTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjgzYTI0MDYyZjUwZGIxYjgzMjI2Y2Q0OTUzMTE3N2M0NTA3M2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq4C3Lk/CGQgX+ugzDXZTexe2DP/
tPtDXQl1mYqyeBK4qPW+aiA05xD2kap+btDnUrDxCaQPNtIZRzayoVkxbCFmmy94
z96zbny1LYEQjXb2Nz+zO2zFqJPcUtXjxBWf8omj3ZEC/JTv5sKmPIaBgKSSw97y
SM0u39uLLa5rnafmImSLJeeebz3LKlEl197QydQRk6yTYK++2XiimNNaJD0qhGK1
elLJ7hwk+fCKttrXaO8niFci+ElRU6fVrGxnjtkrSX0dppymNEASZ2AmAQ3PATF3
txRX0m7p0lCgVHoteycU+6eJfJl0VOSQ4BesofFY/ErGcBW1MiTjmNdVDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB+DokBi9Q2xuDImzUlTEXfEUHP0MB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvSDRPaVFHTDFEYkc0TWliTlNWTVJkOFJRY19RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkwBMA0G
CSqGSIb3DQEBCwUAA4IBAQBTfOuZH9w4TYpMdGUI3in6v0Hdk/HZ5GeXw/8KAKTQ
zngf9w7yjX4dCTiawYC4319gTKVCCQGn4yN8oz0SE9mo2fg0iZdimR51rq6BS5e6
KpCYrWurpcXbed34pAIRnl76kiIDYdbeyYcI2LrCKjuyDmCRDAp2etgBU1g3X37n
cJ5Oq6dhmJW4X3KcudmV3FKoeMKIMlV3leQ1AjSTE8WUfdKP6ZUJ4hxyKtaCN8N8
Pn6+D+CaY7OJZSSo76Y3oSNISPdH96JJZiy72SUY3Xo/kEh3B1R0MUekvwHmqxU2
UrByHsNcJwdEYWOm6M0PokiJbXPu7nPUdXTqyysGOXwv
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:51:11 2025 by rpki-client