Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/vA-diuifVzq49UFgnNVHORQRei8.roa
File: vA-diuifVzq49UFgnNVHORQRei8.roa (raw, json)
Hash identifier: +tmrXBHsUfFZNctkzhwShfKXfU5rr0URW+T4LsSGP5w=
Subject key identifier: BC:0F:9D:8A:E8:9F:57:3A:B8:F5:41:60:9C:D5:47:39:14:11:7A:2F
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BE502B9375CA0794A4A5065212F61
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/vA-diuifVzq49UFgnNVHORQRei8.roa
Signing time: Thu 02 Jan 2025 09:49:52 +0000
ROA not before: Thu 02 Jan 2025 09:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199442
IP address blocks: 178.16.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e5:02:b9:37:5c:a0:79:4a:4a:50:65:21:2f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc0f9d8ae89f573ab8f541609cd5473914117a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:89:56:c5:37:4d:91:f8:2c:68:33:88:61:39:
2f:9e:4f:e5:61:0d:23:9e:e4:fb:63:b2:9a:b1:ed:
a2:a6:bc:99:0b:ee:cf:4e:89:86:a3:b1:fa:60:f6:
8d:53:f1:69:d9:ab:d6:2d:61:91:45:28:59:b5:22:
1b:fa:85:39:e5:48:ce:c3:4d:3b:2a:40:09:e3:15:
73:4a:b5:38:15:9c:ab:8d:53:1e:6d:d6:01:e1:cc:
fd:a3:c1:b6:e7:74:a6:8b:56:b3:7a:61:a0:71:39:
7e:92:4c:2c:78:28:7e:89:6d:52:a4:a7:2d:70:df:
5f:bb:70:79:01:b7:7c:48:d1:3e:0a:d5:e3:53:28:
8c:f6:64:a8:dd:a9:3f:a3:06:78:8f:65:c1:08:ba:
f6:30:94:86:9b:fb:0e:70:c4:e6:44:b9:af:d7:a6:
b6:4d:02:db:d9:ee:a4:ec:ff:9c:91:36:58:84:9f:
ff:b6:83:f3:37:e6:78:f6:f2:fc:4a:8b:2b:24:d3:
3a:c6:33:04:10:57:2e:e3:b8:35:d2:5e:64:aa:df:
96:c3:1f:54:bc:97:a9:64:f7:93:7d:1c:c5:99:3e:
06:4e:f6:af:af:b3:f1:7d:80:69:a7:78:55:38:e6:
8e:97:c6:4d:8e:0d:54:7f:3d:58:95:b2:0b:de:19:
f4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0F:9D:8A:E8:9F:57:3A:B8:F5:41:60:9C:D5:47:39:14:11:7A:2F
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/vA-diuifVzq49UFgnNVHORQRei8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.115.0/24
Signature Algorithm: sha256WithRSAEncryption
85:f3:e4:7b:74:ae:53:e9:bf:7d:7c:bb:10:ff:fd:f5:61:c3:
28:70:b1:eb:0c:55:fc:b5:89:ac:76:be:92:6b:d8:b0:fb:fb:
20:fb:af:70:2f:6e:3e:40:eb:f8:84:86:8b:e4:49:a3:83:1e:
3a:ce:c8:5b:41:b4:92:a1:2c:52:60:be:6a:0b:ec:7a:ec:aa:
b5:66:6b:3c:d1:65:8c:88:35:03:55:6f:98:78:da:87:ba:4c:
57:d6:24:51:04:56:ec:ee:cd:43:70:d9:5b:e5:0a:b8:94:5c:
92:55:fd:fe:bc:f1:a5:0d:93:e5:e3:5b:38:88:5c:d3:aa:b8:
4e:54:b0:76:d3:8a:b1:f7:57:94:1e:5e:79:6e:9b:b5:7d:82:
a0:0f:e1:5c:b6:41:36:44:6b:39:38:c4:83:e7:c4:29:3f:f8:
a5:03:fa:78:d0:82:f1:18:32:c7:8e:64:4e:90:49:bb:4b:cb:
2b:8e:b7:bb:c8:e2:cf:27:c4:7a:e3:af:d7:f0:7d:9f:4f:25:
ac:16:75:db:c3:6e:03:5f:6b:35:4a:6b:73:3e:44:1f:a7:d0:
5e:e1:de:3c:7d:10:63:38:be:56:87:99:4d:dc:20:5c:5a:b8:
f6:40:3c:98:fe:f9:7c:ce:13:df:a5:73:ac:db:bd:df:a8:d4:
65:89:3e:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma+UCuTdcoHlKSlBlIS9hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjUwMTAyMDk0OTUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzBmOWQ4YWU4OWY1NzNhYjhmNTQxNjA5Y2Q1NDczOTE0MTE3YTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIlWxTdNkfgsaDOIYTkvnk/lYQ0j
nuT7Y7Kase2ipryZC+7PTomGo7H6YPaNU/Fp2avWLWGRRShZtSIb+oU55UjOw007
KkAJ4xVzSrU4FZyrjVMebdYB4cz9o8G253Smi1azemGgcTl+kkwseCh+iW1SpKct
cN9fu3B5Abd8SNE+CtXjUyiM9mSo3ak/owZ4j2XBCLr2MJSGm/sOcMTmRLmv16a2
TQLb2e6k7P+ckTZYhJ//toPzN+Z49vL8SosrJNM6xjMEEFcu47g10l5kqt+Wwx9U
vJepZPeTfRzFmT4GTvavr7PxfYBpp3hVOOaOl8ZNjg1Ufz1YlbIL3hn02wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLwPnYron1c6uPVBYJzVRzkUEXovMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvdkEtZGl1aWZWenE0OVVGZ25OVkhPUlFSZWk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshBzMA0G
CSqGSIb3DQEBCwUAA4IBAQCF8+R7dK5T6b99fLsQ//31YcMocLHrDFX8tYmsdr6S
a9iw+/sg+69wL24+QOv4hIaL5Emjgx46zshbQbSSoSxSYL5qC+x67Kq1Zms80WWM
iDUDVW+YeNqHukxX1iRRBFbs7s1DcNlb5Qq4lFySVf3+vPGlDZPl41s4iFzTqrhO
VLB204qx91eUHl55bpu1fYKgD+FctkE2RGs5OMSD58QpP/ilA/p40ILxGDLHjmRO
kEm7S8srjre7yOLPJ8R646/X8H2fTyWsFnXbw24DX2s1SmtzPkQfp9Be4d48fRBj
OL5Wh5lN3CBcWrj2QDyY/vl8zhPfpXOs273fqNRliT7x
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:36:57 2025 by rpki-client