Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/CoCdSP6A3DOgFrWGElZwDGT9nt0.roa
File: CoCdSP6A3DOgFrWGElZwDGT9nt0.roa (raw, json)
Hash identifier: XaSs/nwJw9nL54+dNHtfCY1gS/sTnOtkwaSjVFXXOK0=
Subject key identifier: 0A:80:9D:48:FE:80:DC:33:A0:16:B5:86:12:56:70:0C:64:FD:9E:DD
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 0322F4B0
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/CoCdSP6A3DOgFrWGElZwDGT9nt0.roa
Signing time: Tue 22 Mar 2022 15:52:42 +0000
ROA not before: Tue 22 Mar 2022 15:52:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35830
IP address blocks: 193.151.188.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52622512 (0x322f4b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Mar 22 15:52:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a809d48fe80dc33a016b5861256700c64fd9edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8b:8a:ac:9d:dc:81:d0:63:c5:38:70:d9:03:
34:28:eb:5a:db:a0:ab:4f:df:fd:e4:c5:55:58:1d:
49:50:a9:af:af:64:c3:f2:48:6f:c5:a9:e9:c6:2d:
27:5e:1d:5f:2a:47:98:f9:a1:7c:24:43:70:01:11:
34:69:62:35:d2:ee:b3:7a:cd:7a:92:f8:79:76:ab:
aa:e8:fc:d9:3e:fa:64:b1:41:9f:0e:a4:18:67:0e:
52:c1:83:25:46:12:e2:5f:cd:f1:66:3e:53:c0:c6:
d6:0d:3c:d9:9e:42:50:0f:48:56:ee:6d:0a:3e:6c:
c2:e5:91:6b:70:8b:3c:7c:22:e7:67:c2:7e:46:ed:
e7:50:45:42:73:f4:d6:75:0a:d8:a3:8e:b5:85:ef:
69:02:83:35:3d:40:ab:08:e8:0e:d1:02:14:9c:dc:
95:3f:f3:48:19:24:8b:cb:92:fe:6c:fb:99:32:76:
d1:cd:ff:64:40:aa:f4:da:6d:aa:87:61:88:ff:a1:
9a:83:93:cd:21:34:35:7c:03:0c:74:b9:26:1d:43:
09:b4:71:44:c7:82:ed:8a:71:95:4a:75:96:88:b1:
ca:09:c1:15:24:7f:7c:cd:f8:f1:64:bf:62:0c:fa:
62:15:eb:6b:87:83:dd:e1:5f:9f:6e:bc:bf:da:a0:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:80:9D:48:FE:80:DC:33:A0:16:B5:86:12:56:70:0C:64:FD:9E:DD
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/CoCdSP6A3DOgFrWGElZwDGT9nt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.188.0/24
Signature Algorithm: sha256WithRSAEncryption
16:6b:16:51:92:f2:34:b5:9a:e9:a3:3e:13:c6:9b:30:ea:df:
0d:be:0c:46:cb:6a:2a:21:fd:54:69:d6:de:c1:28:11:b6:47:
05:8e:77:29:7d:13:e1:0d:65:6b:79:55:8d:1a:83:93:8c:ce:
9b:0c:cf:ed:d0:d1:b8:8c:2f:6e:08:ac:20:19:d7:07:66:0e:
10:55:08:4e:5e:3d:01:d3:ad:03:86:ff:d9:07:ab:99:a4:da:
cd:91:a3:f6:f9:c0:48:35:56:8e:a8:84:80:5f:ef:87:89:46:
1b:50:09:db:88:6d:8f:04:c6:84:cc:f0:25:a3:e3:63:01:43:
43:18:69:28:27:74:b8:c7:7c:9c:c4:11:66:14:81:b7:49:e4:
a1:0a:80:47:fe:8e:64:ef:b1:bd:b6:c6:67:ca:8e:7c:85:98:
9c:3d:2f:8b:5c:5c:d8:d8:b8:3d:e2:24:0c:3f:41:06:05:31:
31:45:bc:ca:12:73:8b:6e:a3:8b:1e:27:09:1b:18:e9:2c:dc:
08:c5:95:c9:53:ca:e5:80:10:74:b5:c6:dc:b3:ba:1e:23:02:
bf:c8:5b:a1:dc:2c:22:6c:d7:71:1f:4a:0f:ab:99:d5:50:82:
39:b2:43:d1:e6:29:e8:72:eb:5d:f7:6a:43:df:57:80:f1:d7:
2e:ba:73:ad
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAyL0sDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZTc0NzQ4MWYyYzk4ZmJiNzBkY2E4ZDY1YzIzZGU0ZmNhMzc1ODNkMB4XDTIyMDMy
MjE1NTI0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGE4MDlkNDhmZTgw
ZGMzM2EwMTZiNTg2MTI1NjcwMGM2NGZkOWVkZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMeLiqyd3IHQY8U4cNkDNCjrWtugq0/f/eTFVVgdSVCpr69k
w/JIb8Wp6cYtJ14dXypHmPmhfCRDcAERNGliNdLus3rNepL4eXarquj82T76ZLFB
nw6kGGcOUsGDJUYS4l/N8WY+U8DG1g082Z5CUA9IVu5tCj5swuWRa3CLPHwi52fC
fkbt51BFQnP01nUK2KOOtYXvaQKDNT1AqwjoDtECFJzclT/zSBkki8uS/mz7mTJ2
0c3/ZECq9NptqodhiP+hmoOTzSE0NXwDDHS5Jh1DCbRxRMeC7YpxlUp1loixygnB
FSR/fM348WS/Ygz6YhXra4eD3eFfn268v9qgQVECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQKgJ1I/oDcM6AWtYYSVnAMZP2e3TAfBgNVHSMEGDAWgBSOdHSB8smPu3Dc
qNZcI95PyjdYPTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2puUjBnZkxKajd0dzNLaldYQ1BlVDhvM1dEMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDkvNDBkYjZiLWRhODUtNGM5ZC1hOTQ4LTY1MjFkMzk1ZjEzMi8x
L0NvQ2RTUDZBM0RPZ0ZyV0dFbFp3REdUOW50MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkv
NDBkYjZiLWRhODUtNGM5ZC1hOTQ4LTY1MjFkMzk1ZjEzMi8xL2puUjBnZkxKajd0
dzNLaldYQ1BlVDhvM1dEMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGXvDANBgkqhkiG9w0BAQsFAAOC
AQEAFmsWUZLyNLWa6aM+E8abMOrfDb4MRstqKiH9VGnW3sEoEbZHBY53KX0T4Q1l
a3lVjRqDk4zOmwzP7dDRuIwvbgisIBnXB2YOEFUITl49AdOtA4b/2QermaTazZGj
9vnASDVWjqiEgF/vh4lGG1AJ24htjwTGhMzwJaPjYwFDQxhpKCd0uMd8nMQRZhSB
t0nkoQqAR/6OZO+xvbbGZ8qOfIWYnD0vi1xc2Ni4PeIkDD9BBgUxMUW8yhJzi26j
ix4nCRsY6SzcCMWVyVPK5YAQdLXG3LO6HiMCv8hbodwsImzXcR9KD6uZ1VCCObJD
0eYp6HLrXfdqQ99XgPHXLrpzrQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 16:59:25 2025 by rpki-client