Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/p0QiI1gIAfs5U5lC7G0OOWAaRBQ.roa
File: p0QiI1gIAfs5U5lC7G0OOWAaRBQ.roa (raw, json)
Hash identifier: 4nxXwccG5SqREqQ+58I9yFIWDvk2ENzINdMQk8yTpJY=
Subject key identifier: A7:44:22:23:58:08:01:FB:39:53:99:42:EC:6D:0E:39:60:1A:44:14
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BD4443AA9EC7CBF9E7A98FB10296E
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/p0QiI1gIAfs5U5lC7G0OOWAaRBQ.roa
Signing time: Thu 02 Jan 2025 09:49:48 +0000
ROA not before: Thu 02 Jan 2025 09:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28982
IP address blocks: 82.143.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d4:44:3a:a9:ec:7c:bf:9e:7a:98:fb:10:29:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7442223580801fb39539942ec6d0e39601a4414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:49:7c:e3:dd:53:c6:28:aa:66:d3:ee:35:
e2:62:9e:e2:c5:67:f3:77:11:d5:e0:f5:4e:89:19:
36:07:fe:a8:09:06:3b:62:6f:d2:3b:57:26:d0:db:
9f:d3:5b:c3:cb:1d:21:3e:39:46:4b:90:75:9b:f6:
35:60:59:a1:b9:41:3c:b2:9f:e6:75:fb:ee:e7:d3:
29:d7:c2:72:17:48:a5:77:5d:74:d2:f4:21:92:e5:
cc:bd:c8:5b:27:c5:69:b4:ec:bf:92:16:19:f4:cc:
e6:b0:fb:d1:7f:85:63:bb:72:9d:79:34:b7:9a:a7:
15:ac:0c:de:ac:cc:e2:86:cc:a1:36:8d:d1:a7:c4:
5e:11:b7:2f:5b:6c:00:e5:27:3d:6d:de:59:9c:2d:
b1:5e:82:b8:82:03:2a:8f:06:12:09:d6:ea:20:54:
16:1f:0f:85:80:33:86:e1:bb:5f:53:68:56:d3:ec:
71:88:05:51:60:62:b0:88:07:86:8e:c9:06:7a:81:
15:78:26:ee:b3:c4:ee:09:cd:b7:cc:ab:09:80:bf:
f1:1f:7b:b8:da:f4:fc:a4:d2:6a:d1:3f:23:31:64:
ff:a7:eb:22:2d:1c:2b:d3:58:3d:6e:e1:6b:82:77:
7f:95:c2:21:11:f5:54:90:4f:89:0f:d2:f0:69:5a:
ea:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:44:22:23:58:08:01:FB:39:53:99:42:EC:6D:0E:39:60:1A:44:14
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/p0QiI1gIAfs5U5lC7G0OOWAaRBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.143.128.0/18
Signature Algorithm: sha256WithRSAEncryption
87:33:ec:cf:7b:42:3e:60:a2:82:19:8b:8c:cd:c3:53:3d:96:
7f:90:8a:0f:0c:20:ea:e9:63:a8:6c:40:28:28:cd:bb:b4:a3:
76:20:2f:14:76:8e:f0:c7:7b:bf:c4:9f:b4:67:04:8b:2c:e8:
c7:7e:e3:0b:38:e0:f6:32:4c:85:28:c3:94:25:ff:6c:47:e8:
d0:28:ea:39:aa:ac:ee:ce:9a:77:5d:6b:44:44:a9:3b:c9:50:
07:b9:0c:77:ae:81:e5:8b:15:0b:a1:04:ce:66:f9:ce:fd:e2:
39:73:f4:f5:ce:89:8b:7c:dc:fe:d7:dc:96:b4:e0:59:30:9b:
4e:99:fa:ff:56:71:26:41:c8:94:cc:bc:4b:39:a6:87:bb:8b:
41:e3:e4:18:3f:ee:8d:8a:3d:40:1b:e0:d5:35:b2:ac:4f:a3:
3c:43:7e:70:6c:ce:05:d1:1b:1e:0f:19:0b:e6:79:72:9a:de:
aa:7c:cc:03:78:01:5a:aa:c4:fa:5c:d4:1b:7c:f3:0c:23:06:
b8:fb:2c:a9:e8:7f:e8:98:39:5f:20:be:3e:5a:d7:e9:d5:db:
07:f8:7e:97:08:50:ba:63:cd:bb:f6:f1:31:74:a7:8b:6e:60:
83:58:d4:23:8e:47:2a:1c:27:ff:d1:e7:dc:1f:3c:a0:2e:d9:
8b:14:d6:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma9REOqnsfL+eepj7ECluMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjUwMTAyMDk0OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzQ0MjIyMzU4MDgwMWZiMzk1Mzk5NDJlYzZkMGUzOTYwMWE0NDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOBJfOPdU8YoqmbT7jXiYp7ixWfz
dxHV4PVOiRk2B/6oCQY7Ym/SO1cm0Nuf01vDyx0hPjlGS5B1m/Y1YFmhuUE8sp/m
dfvu59Mp18JyF0ild1100vQhkuXMvchbJ8VptOy/khYZ9MzmsPvRf4Vju3KdeTS3
mqcVrAzerMzihsyhNo3Rp8ReEbcvW2wA5Sc9bd5ZnC2xXoK4ggMqjwYSCdbqIFQW
Hw+FgDOG4btfU2hW0+xxiAVRYGKwiAeGjskGeoEVeCbus8TuCc23zKsJgL/xH3u4
2vT8pNJq0T8jMWT/p+siLRwr01g9buFrgnd/lcIhEfVUkE+JD9LwaVrqyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKdEIiNYCAH7OVOZQuxtDjlgGkQUMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvcDBRaUkxZ0lBZnM1VTVsQzdHME9PV0FhUkJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGUo+AMA0G
CSqGSIb3DQEBCwUAA4IBAQCHM+zPe0I+YKKCGYuMzcNTPZZ/kIoPDCDq6WOobEAo
KM27tKN2IC8Udo7wx3u/xJ+0ZwSLLOjHfuMLOOD2MkyFKMOUJf9sR+jQKOo5qqzu
zpp3XWtERKk7yVAHuQx3roHlixULoQTOZvnO/eI5c/T1zomLfNz+19yWtOBZMJtO
mfr/VnEmQciUzLxLOaaHu4tB4+QYP+6Nij1AG+DVNbKsT6M8Q35wbM4F0RseDxkL
5nlymt6qfMwDeAFaqsT6XNQbfPMMIwa4+yyp6H/omDlfIL4+Wtfp1dsH+H6XCFC6
Y8279vExdKeLbmCDWNQjjkcqHCf/0efcHzygLtmLFNbM
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:23:34 2025 by rpki-client