Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1642bf-2430-4f22-95f8-f47f21588b1e/1/T18PbpQAxjlcTvNu_XYV6viJysg.roa
File: T18PbpQAxjlcTvNu_XYV6viJysg.roa (raw, json)
Hash identifier: IH0dd4NG/OJqzh9xTHVG09AWUxnfT5gIIi9ulOBc5WM=
Subject key identifier: 4F:5F:0F:6E:94:00:C6:39:5C:4E:F3:6E:FD:76:15:EA:F8:89:CA:C8
Certificate issuer: /CN=9e0a82ec78e8d005308e53bb6d1dc4db58e7014e
Certificate serial: F2F2C6
Authority key identifier: 9E:0A:82:EC:78:E8:D0:05:30:8E:53:BB:6D:1D:C4:DB:58:E7:01:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngqC7Hjo0AUwjlO7bR3E21jnAU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1642bf-2430-4f22-95f8-f47f21588b1e/1/T18PbpQAxjlcTvNu_XYV6viJysg.roa
Signing time: Sat 01 Jan 2022 13:04:27 +0000
ROA not before: Sat 01 Jan 2022 13:04:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49505
IP address blocks: 193.201.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15921862 (0xf2f2c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0a82ec78e8d005308e53bb6d1dc4db58e7014e
Validity
Not Before: Jan 1 13:04:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f5f0f6e9400c6395c4ef36efd7615eaf889cac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:67:01:a8:26:63:ac:d3:39:57:3c:d8:05:
8b:71:65:65:f9:7f:38:e0:20:20:e4:02:37:f4:d6:
d9:b9:a5:e2:ec:3c:db:6b:26:12:aa:f5:e6:9a:42:
86:7b:61:df:3f:40:75:35:c5:93:79:ba:d3:76:ec:
43:42:6b:ed:b4:61:c1:c5:d7:83:31:52:c8:82:a7:
ac:b9:a5:9a:7e:fc:75:7a:0e:aa:0f:59:4e:56:bc:
f5:2d:2e:d3:f0:00:e6:37:9f:71:8b:03:be:86:47:
d4:7e:55:4c:f9:81:4d:2a:20:b2:f0:22:23:55:63:
67:cf:58:b9:6d:07:56:7c:91:11:01:e7:d5:3a:88:
f2:c7:5b:57:f2:6b:15:9d:00:b3:75:c7:1a:0c:44:
ee:5e:24:41:8a:5c:1b:5c:aa:2e:c8:00:d7:56:0b:
7e:6e:a8:9f:95:d0:35:fa:3a:30:97:f4:25:40:a2:
f2:3f:cf:ce:e2:46:2a:0d:2d:65:f7:43:ff:42:5e:
c4:65:f7:ee:eb:fd:37:25:27:70:0c:53:11:22:84:
0f:7f:4c:5f:cd:29:60:cd:6c:22:69:20:0f:6d:6e:
a9:65:4a:bf:06:98:c3:d9:aa:1f:17:2c:45:01:60:
8d:e8:fe:42:f5:df:2d:b9:c0:b5:63:3c:be:60:df:
3f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5F:0F:6E:94:00:C6:39:5C:4E:F3:6E:FD:76:15:EA:F8:89:CA:C8
X509v3 Authority Key Identifier:
keyid:9E:0A:82:EC:78:E8:D0:05:30:8E:53:BB:6D:1D:C4:DB:58:E7:01:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngqC7Hjo0AUwjlO7bR3E21jnAU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1642bf-2430-4f22-95f8-f47f21588b1e/1/T18PbpQAxjlcTvNu_XYV6viJysg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1642bf-2430-4f22-95f8-f47f21588b1e/1/ngqC7Hjo0AUwjlO7bR3E21jnAU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.9.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ce:d1:a7:b6:0e:b3:03:26:dc:9b:c8:b5:9c:e5:d0:c8:ec:
77:52:19:5c:51:5f:36:a3:e8:56:3c:7b:b2:aa:97:92:12:54:
62:ed:e1:00:31:47:63:26:ef:92:f9:1a:82:8c:4b:d9:4d:7f:
0f:2e:f8:a2:da:18:17:c0:e9:62:30:54:69:29:8a:dc:79:7e:
fa:15:41:31:71:9e:6a:06:51:00:d0:bc:44:04:48:19:28:62:
d3:ff:ca:37:34:f8:e9:2f:60:53:86:56:77:c0:9c:9c:84:e6:
2b:52:b3:8a:5c:e9:aa:67:ab:8a:b0:3c:63:9f:c8:05:bb:a9:
0d:72:1e:b8:01:21:1d:d9:d5:d0:d2:53:95:75:06:b5:64:ae:
37:81:28:0b:bb:67:07:2f:6f:bc:fa:a6:35:b5:6b:ce:8a:ff:
fc:06:3e:26:35:11:30:6f:8b:7d:01:54:a1:1b:9c:54:d3:5a:
0c:97:b2:fc:c6:42:fd:85:a6:6d:6f:6e:f9:d9:fc:ea:e5:de:
9c:a4:41:69:dd:38:06:85:ef:85:b8:1b:4f:92:2d:33:df:03:
26:c4:40:51:6d:fc:2a:a1:ce:88:d3:0e:ef:aa:3a:bc:95:e2:
2c:d7:57:d9:c3:44:7c:db:14:1b:ae:d1:42:fc:fb:84:92:39:
a2:48:7a:a3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAPLyxjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZTBhODJlYzc4ZThkMDA1MzA4ZTUzYmI2ZDFkYzRkYjU4ZTcwMTRlMB4XDTIyMDEw
MTEzMDQyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGY1ZjBmNmU5NDAw
YzYzOTVjNGVmMzZlZmQ3NjE1ZWFmODg5Y2FjODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKRpZwGoJmOs0zlXPNgFi3FlZfl/OOAgIOQCN/TW2bml4uw8
22smEqr15ppChnth3z9AdTXFk3m603bsQ0Jr7bRhwcXXgzFSyIKnrLmlmn78dXoO
qg9ZTla89S0u0/AA5jefcYsDvoZH1H5VTPmBTSogsvAiI1VjZ89YuW0HVnyREQHn
1TqI8sdbV/JrFZ0As3XHGgxE7l4kQYpcG1yqLsgA11YLfm6on5XQNfo6MJf0JUCi
8j/PzuJGKg0tZfdD/0JexGX37uv9NyUncAxTESKED39MX80pYM1sImkgD21uqWVK
vwaYw9mqHxcsRQFgjej+QvXfLbnAtWM8vmDfP/8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRPXw9ulADGOVxO8279dhXq+InKyDAfBgNVHSMEGDAWgBSeCoLseOjQBTCO
U7ttHcTbWOcBTjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25ncUM3SGpvMEFVd2psTzdiUjNFMjFqbkFVNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDEvMTY0MmJmLTI0MzAtNGYyMi05NWY4LWY0N2YyMTU4OGIxZS8x
L1QxOFBicFFBeGpsY1R2TnVfWFlWNnZpSnlzZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEv
MTY0MmJmLTI0MzAtNGYyMi05NWY4LWY0N2YyMTU4OGIxZS8xL25ncUM3SGpvMEFV
d2psTzdiUjNFMjFqbkFVNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHJCTANBgkqhkiG9w0BAQsFAAOC
AQEAY87Rp7YOswMm3JvItZzl0Mjsd1IZXFFfNqPoVjx7sqqXkhJUYu3hADFHYybv
kvkagoxL2U1/Dy74otoYF8DpYjBUaSmK3Hl++hVBMXGeagZRANC8RARIGShi0//K
NzT46S9gU4ZWd8CcnITmK1KzilzpqmerirA8Y5/IBbupDXIeuAEhHdnV0NJTlXUG
tWSuN4EoC7tnBy9vvPqmNbVrzor//AY+JjURMG+LfQFUoRucVNNaDJey/MZC/YWm
bW9u+dn86uXenKRBad04BoXvhbgbT5ItM98DJsRAUW38KqHOiNMO76o6vJXiLNdX
2cNEfNsUG67RQvz7hJI5okh6ow==
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:52:40 2025 by rpki-client