Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/qyphdMRg48o4QmPXSk_OaaQIYw8.roa
File: qyphdMRg48o4QmPXSk_OaaQIYw8.roa (raw, json)
Hash identifier: lkUqQM+hYiYzJgtpLKYB/0YXPUyEtY/oiN8P3e71gro=
Subject key identifier: AB:2A:61:74:C4:60:E3:CA:38:42:63:D7:4A:4F:CE:69:A4:08:63:0F
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019427472E22E3220C2A37EE0E2EB14F4E86
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/qyphdMRg48o4QmPXSk_OaaQIYw8.roa
Signing time: Thu 02 Jan 2025 13:49:23 +0000
ROA not before: Thu 02 Jan 2025 13:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204223
IP address blocks: 160.20.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:2e:22:e3:22:0c:2a:37:ee:0e:2e:b1:4f:4e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 2 13:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab2a6174c460e3ca384263d74a4fce69a408630f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:c7:7a:b9:fa:a5:8f:15:76:31:c7:f2:69:
c8:f8:5d:b5:09:f1:9f:15:42:f6:49:f8:97:6e:16:
67:57:47:38:93:b8:d8:1c:db:d0:73:3f:c6:74:0b:
97:68:47:87:a7:58:ab:93:2b:71:10:27:ab:62:53:
30:5a:bc:0a:1c:29:6a:68:fc:8f:cc:37:02:09:57:
b9:6f:e2:2d:d3:3a:10:59:ac:28:80:9f:b0:93:88:
5a:46:be:33:fe:83:45:96:44:69:c1:6c:8d:b9:b2:
09:03:92:de:b7:c9:de:78:ad:1a:a2:d9:df:ae:8f:
85:f5:2f:3a:e7:46:31:97:e6:71:d5:3b:4f:65:5f:
1e:ed:8a:5a:1f:8f:7d:f4:53:06:23:7e:c1:df:a7:
f7:1f:6e:f4:98:43:ea:08:a2:19:bd:bf:7e:29:d5:
45:1e:c7:57:19:78:29:b3:8e:2a:38:05:4d:9a:5a:
9a:a0:9f:55:b7:7e:f8:4b:87:a0:07:91:55:64:1e:
0f:a4:81:97:84:85:9b:d0:9c:13:1f:7b:99:d3:ce:
1f:2e:dd:9c:2c:ea:30:df:5e:76:ac:66:64:e7:8b:
4e:3f:2e:b4:6d:25:94:cb:35:c7:60:36:b8:3b:ac:
13:55:81:52:08:84:4a:5a:37:6b:d9:0d:25:78:5d:
ab:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2A:61:74:C4:60:E3:CA:38:42:63:D7:4A:4F:CE:69:A4:08:63:0F
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/qyphdMRg48o4QmPXSk_OaaQIYw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.111.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:be:95:85:04:e0:8c:b5:4d:7b:ad:8b:6f:db:f5:4a:96:ea:
ad:11:27:37:a5:30:06:11:10:ce:fa:46:13:fe:8c:66:84:e9:
31:41:15:c8:12:79:08:4c:fd:45:1c:92:f3:04:95:53:64:85:
4b:3d:67:7f:98:a6:49:96:90:04:70:79:68:9f:15:37:4b:1c:
1a:9b:45:dc:68:2e:94:0a:7f:5c:76:0b:2b:90:60:88:36:8f:
52:e6:da:e8:c7:00:67:3e:3f:39:a1:ef:ea:bb:a2:74:5f:7d:
38:cf:bf:fb:17:0d:69:b5:58:50:98:16:66:b7:39:5c:20:1b:
37:bd:6e:37:16:44:5f:1d:e4:3b:51:66:60:92:58:0c:08:b6:
68:48:d1:ff:76:17:00:f5:1f:01:0b:1f:ca:5a:cf:24:d0:91:
1a:55:8b:c2:88:7a:5e:f7:65:60:cd:d6:21:12:15:c7:c5:ea:
5e:f0:9d:47:da:79:dc:b7:57:39:4a:c6:a5:17:c5:8a:22:65:
fa:7e:b0:c6:8a:dd:31:b4:9a:a6:c7:93:35:19:c0:95:c5:1e:
6e:d7:d0:20:ed:a1:6e:3a:2c:d1:dd:c0:04:13:c5:2a:db:6a:
7e:31:dd:65:3a:78:27:6a:f2:24:f6:16:ae:91:de:6d:15:54:
e8:fe:78:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnRy4i4yIMKjfuDi6xT06GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjUwMTAyMTM0OTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjJhNjE3NGM0NjBlM2NhMzg0MjYzZDc0YTRmY2U2OWE0MDg2MzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOXHern6pY8VdjHH8mnI+F21CfGf
FUL2SfiXbhZnV0c4k7jYHNvQcz/GdAuXaEeHp1irkytxECerYlMwWrwKHClqaPyP
zDcCCVe5b+It0zoQWawogJ+wk4haRr4z/oNFlkRpwWyNubIJA5Let8neeK0aotnf
ro+F9S8650Yxl+Zx1TtPZV8e7YpaH4999FMGI37B36f3H270mEPqCKIZvb9+KdVF
HsdXGXgps44qOAVNmlqaoJ9Vt374S4egB5FVZB4PpIGXhIWb0JwTH3uZ084fLt2c
LOow3152rGZk54tOPy60bSWUyzXHYDa4O6wTVYFSCIRKWjdr2Q0leF2r5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKsqYXTEYOPKOEJj10pPzmmkCGMPMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvcXlwaGRNUmc0OG80UW1QWFNrX09hYVFJWXc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBRvMA0G
CSqGSIb3DQEBCwUAA4IBAQBsvpWFBOCMtU17rYtv2/VKluqtESc3pTAGERDO+kYT
/oxmhOkxQRXIEnkITP1FHJLzBJVTZIVLPWd/mKZJlpAEcHlonxU3Sxwam0XcaC6U
Cn9cdgsrkGCINo9S5troxwBnPj85oe/qu6J0X304z7/7Fw1ptVhQmBZmtzlcIBs3
vW43FkRfHeQ7UWZgklgMCLZoSNH/dhcA9R8BCx/KWs8k0JEaVYvCiHpe92VgzdYh
EhXHxepe8J1H2nnct1c5SsalF8WKImX6frDGit0xtJqmx5M1GcCVxR5u19Ag7aFu
OizR3cAEE8Uq22p+Md1lOngnavIk9haukd5tFVTo/nhJ
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:03:16 2025 by rpki-client