Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/Ia9_Al1piqnyn_Z0TB3In4a8pMA.roa
File: Ia9_Al1piqnyn_Z0TB3In4a8pMA.roa (raw, json)
Hash identifier: ZdxPt8zq+Sls/weJBLKFV4PNPGZ9d0PtlTR0s1gNMLE=
Subject key identifier: 21:AF:7F:02:5D:69:8A:A9:F2:9F:F6:74:4C:1D:C8:9F:86:BC:A4:C0
Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial: 019421B1A9F39C076BD479CD22E9197892F8
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/Ia9_Al1piqnyn_Z0TB3In4a8pMA.roa
Signing time: Wed 01 Jan 2025 11:47:59 +0000
ROA not before: Wed 01 Jan 2025 11:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59441
IP address blocks: 194.33.125.0/24 maxlen: 24
194.33.126.0/24 maxlen: 24
194.33.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a9:f3:9c:07:6b:d4:79:cd:22:e9:19:78:92:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Validity
Not Before: Jan 1 11:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21af7f025d698aa9f29ff6744c1dc89f86bca4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:9c:a1:e7:1d:24:84:e0:1a:82:2f:b6:13:
33:37:69:33:e8:4e:30:49:a7:f0:3a:36:8c:98:52:
ac:8b:57:de:84:b8:09:2b:1b:84:b9:27:98:c5:8f:
3a:23:fb:74:e5:db:c5:df:bc:5c:be:36:5f:30:5d:
44:38:1b:99:2a:d6:03:3b:7d:97:eb:0e:61:63:d7:
34:58:e5:15:c2:5b:21:5e:d8:ad:d9:c6:35:98:ac:
bc:7c:14:18:6f:07:98:80:76:1e:ba:75:a3:71:61:
dc:b4:21:6c:ba:09:a1:39:50:13:65:47:f5:85:8f:
70:15:29:c9:ae:f2:fc:fd:ca:ea:25:b0:92:02:a5:
7e:ac:81:2d:6e:54:d4:fb:22:91:be:68:6e:ea:de:
ad:18:3c:2c:c8:f8:f1:7c:09:97:4a:91:d4:27:09:
80:87:bd:f5:8e:a8:0e:8e:64:c6:63:11:81:d8:49:
14:40:41:90:fc:7a:f4:2a:bf:dd:48:7b:24:8d:ed:
73:ff:7e:fd:cb:06:a6:ea:20:6e:57:85:dd:33:fb:
3c:a2:86:07:5a:16:9d:92:c1:b6:c8:a2:61:1e:8b:
e0:cb:76:5f:59:b0:12:32:d2:80:8b:33:3b:8e:2e:
ed:cf:c8:f3:fa:55:71:8c:9d:03:f1:17:08:5b:7e:
c4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AF:7F:02:5D:69:8A:A9:F2:9F:F6:74:4C:1D:C8:9F:86:BC:A4:C0
X509v3 Authority Key Identifier:
keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/Ia9_Al1piqnyn_Z0TB3In4a8pMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.125.0-194.33.127.255
Signature Algorithm: sha256WithRSAEncryption
63:28:3e:1a:04:6e:6f:bd:b6:5a:42:0e:1d:e2:d2:8a:9d:c3:
6c:e3:54:a0:93:65:45:42:23:e8:7f:4a:27:de:bc:61:9b:41:
64:a6:7c:48:c8:d1:09:a3:88:b4:ac:cf:0c:4c:47:60:d9:09:
7d:8b:b2:2a:97:e9:b3:1b:24:09:29:ea:08:be:4e:32:a1:15:
a8:2b:a1:6e:34:9f:cd:82:54:92:51:0f:7d:58:fc:7b:36:b2:
f1:dd:3b:a4:6e:57:b0:05:d2:ba:78:7d:40:0f:71:fa:c5:fb:
dc:c9:c5:a5:bf:7a:26:5c:2a:b5:2c:db:6d:ea:16:fc:08:c3:
41:f8:47:57:b0:50:6e:a0:80:31:4b:ab:9e:ba:47:1b:46:01:
03:cc:b9:2a:79:c3:3a:5b:38:ee:ec:72:e5:01:e7:a8:a7:04:
e4:ba:42:81:f2:50:d3:94:b0:29:68:f9:fc:f8:91:7a:e3:47:
02:5c:bf:b1:f3:5e:0d:ab:94:9c:27:39:e6:e7:d3:98:4e:ad:
8f:96:f0:fa:a4:f6:0d:3a:9d:4f:71:74:57:c9:d3:78:61:2b:
d7:91:59:8a:98:08:31:66:29:4a:d2:6a:27:f5:03:af:ee:c0:
3f:5f:4d:05:17:38:04:7f:51:9e:e5:f9:d1:a9:02:6e:a9:a2:
af:59:0d:92
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQhsanznAdr1HnNIukZeJL4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYmM2MzNlMjg0NjY0YTRjYTUxYWQ1OTc2YzdmYWYyYzYy
NDZiNGIwHhcNMjUwMTAxMTE0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWFmN2YwMjVkNjk4YWE5ZjI5ZmY2NzQ0YzFkYzg5Zjg2YmNhNGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvycoecdJITgGoIvthMzN2kz6E4w
SafwOjaMmFKsi1fehLgJKxuEuSeYxY86I/t05dvF37xcvjZfMF1EOBuZKtYDO32X
6w5hY9c0WOUVwlshXtit2cY1mKy8fBQYbweYgHYeunWjcWHctCFsugmhOVATZUf1
hY9wFSnJrvL8/crqJbCSAqV+rIEtblTU+yKRvmhu6t6tGDwsyPjxfAmXSpHUJwmA
h731jqgOjmTGYxGB2EkUQEGQ/Hr0Kr/dSHskje1z/379ywam6iBuV4XdM/s8ooYH
WhadksG2yKJhHovgy3ZfWbASMtKAizM7ji7tz8jz+lVxjJ0D8RcIW37EJwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCGvfwJdaYqp8p/2dEwdyJ+GvKTAMB8GA1UdIwQY
MBaAFIK8Yz4oRmSkylGtWXbH+vLGJGtLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80MDNlYzMtYzAyZS00NDYzLWFkNDAt
MmE5MWMyY2QyMDc5LzEvSWE5X0FsMXBpcW55bl9aMFRCM0luNGE4cE1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80MDNlYzMtYzAyZS00NDYzLWFkNDAtMmE5MWMyY2QyMDc5
LzEvZ3J4alBpaEdaS1RLVWExWmRzZjY4c1lrYTBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADCIX0D
BAfCIQAwDQYJKoZIhvcNAQELBQADggEBAGMoPhoEbm+9tlpCDh3i0oqdw2zjVKCT
ZUVCI+h/SifevGGbQWSmfEjI0QmjiLSszwxMR2DZCX2LsiqX6bMbJAkp6gi+TjKh
FagroW40n82CVJJRD31Y/Hs2svHdO6RuV7AF0rp4fUAPcfrF+9zJxaW/eiZcKrUs
223qFvwIw0H4R1ewUG6ggDFLq566RxtGAQPMuSp5wzpbOO7scuUB56inBOS6QoHy
UNOUsClo+fz4kXrjRwJcv7HzXg2rlJwnOebn05hOrY+W8Pqk9g06nU9xdFfJ03hh
K9eRWYqYCDFmKUrSaif1A6/uwD9fTQUXOAR/UZ7l+dGpAm6poq9ZDZI=
-----END CERTIFICATE-----
Generated at Fri Apr 11 02:32:05 2025 by rpki-client