Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/N_S2U9YQCU_Rbvnm7tf9bsKeBLc.roa
File: N_S2U9YQCU_Rbvnm7tf9bsKeBLc.roa (raw, json)
Hash identifier: feGs6V8RCTvOZ3yW56sIgjuVtAUBDHcvVYtzWDmTOik=
Subject key identifier: 37:F4:B6:53:D6:10:09:4F:D1:6E:F9:E6:EE:D7:FD:6E:C2:9E:04:B7
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BEBF99484F2F6BC8F04E6B06BA15F
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/N_S2U9YQCU_Rbvnm7tf9bsKeBLc.roa
Signing time: Thu 02 Jan 2025 09:49:54 +0000
ROA not before: Thu 02 Jan 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201132
IP address blocks: 188.114.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:eb:f9:94:84:f2:f6:bc:8f:04:e6:b0:6b:a1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37f4b653d610094fd16ef9e6eed7fd6ec29e04b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:57:68:85:c0:25:36:b9:b9:e4:04:ab:35:79:
32:83:5c:0d:d8:94:64:25:aa:0b:64:e9:31:17:65:
74:1e:26:94:f7:c2:42:f1:d8:73:cc:1b:45:14:d3:
99:d8:67:87:8d:71:78:10:8f:e4:8e:15:c3:b7:69:
d3:91:91:00:64:d0:29:85:bb:f6:88:8c:41:07:af:
a5:21:58:c3:93:d1:68:d1:63:a4:40:a8:ab:e9:a8:
ff:97:70:85:bc:f1:55:22:d3:a9:a5:66:95:0f:ef:
6e:87:64:56:53:83:2c:36:6f:46:d7:35:87:08:c4:
7b:01:4e:87:c0:3b:38:22:52:bc:24:7d:15:d7:9e:
6e:67:98:f1:1c:97:9e:2f:0d:5e:70:52:24:2c:50:
c8:78:bb:ba:b1:a7:14:ff:0b:9d:2c:ac:fe:48:1c:
f5:fd:9c:09:a1:6f:c0:83:de:0b:19:e2:d4:8c:84:
71:4a:b6:c3:0c:da:8d:c8:f6:f3:80:e5:4b:40:3a:
df:df:78:c5:16:af:dc:f0:0e:f9:e5:20:92:4c:64:
a3:06:60:fb:83:7c:54:6e:f2:4e:12:90:4c:b4:f3:
80:1b:48:c4:d0:48:bb:6f:a3:9a:bd:4d:bd:ad:43:
b9:a2:f0:07:b2:8f:46:22:cd:59:8b:43:07:8e:90:
18:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F4:B6:53:D6:10:09:4F:D1:6E:F9:E6:EE:D7:FD:6E:C2:9E:04:B7
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/N_S2U9YQCU_Rbvnm7tf9bsKeBLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.114.94.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ec:ef:f5:f2:e2:14:f2:bd:e0:36:4a:99:77:3d:2d:69:26:
aa:d9:1b:4c:9d:cf:76:53:6c:13:6b:20:43:d1:38:a6:fb:6a:
03:ab:db:f0:e4:95:ea:95:18:79:94:b5:fa:3f:54:c1:c0:6c:
9e:74:10:48:8d:2b:f7:90:24:88:43:dd:32:69:79:6c:19:54:
e3:f4:8c:ae:37:85:0c:93:47:0a:cb:a6:ce:5b:df:bf:b5:82:
8d:63:45:2f:0c:1d:7e:39:c3:79:8c:80:9c:6a:0d:a8:bd:ca:
8c:6e:b8:4f:01:8e:56:28:4c:83:0c:f6:74:23:7c:7c:4e:55:
22:28:46:0e:a9:33:84:6b:2d:6f:60:79:91:56:1c:a4:7f:73:
10:13:3c:31:30:b1:a0:f2:a6:5c:51:71:b0:71:8f:e1:87:0f:
c0:5b:23:7b:64:c9:31:9a:73:31:1e:30:a3:ed:80:bb:78:45:
92:24:1c:f5:ff:c6:fe:06:9b:73:04:0c:2b:16:c5:c1:9f:eb:
c5:4d:88:c4:13:cb:f8:69:b3:cc:32:32:94:b5:8c:6a:0e:f6:
91:4c:f6:60:a7:a6:08:0d:6c:58:09:dc:3c:15:a7:f5:74:d3:
63:16:d0:08:a0:04:0d:c0:30:69:db:1a:10:46:ef:67:64:b4:
97:e4:4b:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma+v5lITy9ryPBOawa6FfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjUwMTAyMDk0OTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2Y0YjY1M2Q2MTAwOTRmZDE2ZWY5ZTZlZWQ3ZmQ2ZWMyOWUwNGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ldohcAlNrm55ASrNXkyg1wN2JRk
JaoLZOkxF2V0HiaU98JC8dhzzBtFFNOZ2GeHjXF4EI/kjhXDt2nTkZEAZNAphbv2
iIxBB6+lIVjDk9Fo0WOkQKir6aj/l3CFvPFVItOppWaVD+9uh2RWU4MsNm9G1zWH
CMR7AU6HwDs4IlK8JH0V155uZ5jxHJeeLw1ecFIkLFDIeLu6sacU/wudLKz+SBz1
/ZwJoW/Ag94LGeLUjIRxSrbDDNqNyPbzgOVLQDrf33jFFq/c8A755SCSTGSjBmD7
g3xUbvJOEpBMtPOAG0jE0Ei7b6OavU29rUO5ovAHso9GIs1Zi0MHjpAYyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDf0tlPWEAlP0W755u7X/W7CngS3MB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvTl9TMlU5WVFDVV9SYnZubTd0Zjlic0tlQkxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvHJeMA0G
CSqGSIb3DQEBCwUAA4IBAQAf7O/18uIU8r3gNkqZdz0taSaq2RtMnc92U2wTayBD
0Tim+2oDq9vw5JXqlRh5lLX6P1TBwGyedBBIjSv3kCSIQ90yaXlsGVTj9IyuN4UM
k0cKy6bOW9+/tYKNY0UvDB1+OcN5jICcag2ovcqMbrhPAY5WKEyDDPZ0I3x8TlUi
KEYOqTOEay1vYHmRVhykf3MQEzwxMLGg8qZcUXGwcY/hhw/AWyN7ZMkxmnMxHjCj
7YC7eEWSJBz1/8b+BptzBAwrFsXBn+vFTYjEE8v4abPMMjKUtYxqDvaRTPZgp6YI
DWxYCdw8Faf1dNNjFtAIoAQNwDBp2xoQRu9nZLSX5Esv
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:20:38 2025 by rpki-client