Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/aiayIUHfqJqjLTqVFWc4nu-4G4A.roa
File: aiayIUHfqJqjLTqVFWc4nu-4G4A.roa (raw, json)
Hash identifier: pzPbeMaNHz+Qf8EsosFYtAc0dvzeTKY+f3jQ8e+tojI=
Subject key identifier: 6A:26:B2:21:41:DF:A8:9A:A3:2D:3A:95:15:67:38:9E:EF:B8:1B:80
Certificate issuer: /CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Certificate serial: 0194258FC9E4A49240D88107E275F6809763
Authority key identifier: 9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/aiayIUHfqJqjLTqVFWc4nu-4G4A.roa
Signing time: Thu 02 Jan 2025 05:49:27 +0000
ROA not before: Thu 02 Jan 2025 05:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200571
IP address blocks: 185.97.9.0/24 maxlen: 24
185.97.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c9:e4:a4:92:40:d8:81:07:e2:75:f6:80:97:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Validity
Not Before: Jan 2 05:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a26b22141dfa89aa32d3a951567389eefb81b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:c3:e6:03:19:56:08:79:96:81:67:de:94:
d1:ea:03:0e:ba:a6:66:e1:a8:87:06:18:b1:cd:32:
19:6d:97:25:e9:af:df:c1:9c:0d:75:67:c4:81:47:
52:0b:1a:63:71:73:e2:67:97:48:10:44:df:e5:bf:
4f:de:e3:78:f5:3d:4c:7e:7b:ac:1a:61:59:6b:98:
9e:bb:f0:c5:0f:13:79:02:61:d1:fc:c2:e9:ef:7f:
9d:8f:d5:1c:72:f2:5a:45:ff:08:c2:15:8f:2a:23:
53:c4:a3:ce:6d:6c:e1:88:b2:5e:d6:02:4b:f4:04:
35:b4:2f:32:33:76:69:9e:f5:03:cf:e6:44:8b:93:
3d:36:b4:c2:08:83:0a:97:df:13:6b:02:f4:64:46:
7d:e3:1d:90:14:53:3f:32:d8:63:1d:b4:2f:be:ea:
03:66:7a:a7:97:99:18:6e:00:2b:04:de:b3:37:c0:
b2:0c:b7:9b:74:9f:ac:2e:f0:dc:25:2b:a3:a9:45:
4d:8f:df:ed:14:f1:93:08:a3:09:01:f1:97:d5:1f:
df:f3:b5:09:b8:c4:98:e4:70:64:b5:c5:68:f4:81:
46:5b:e2:e5:88:e2:a5:52:b0:bd:44:55:5c:22:bd:
be:b4:1b:6e:24:34:cc:e9:fc:c4:c1:5e:d4:d9:de:
37:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:26:B2:21:41:DF:A8:9A:A3:2D:3A:95:15:67:38:9E:EF:B8:1B:80
X509v3 Authority Key Identifier:
keyid:9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/aiayIUHfqJqjLTqVFWc4nu-4G4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.9.0/24
185.97.11.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:6e:09:0f:56:60:63:e1:c2:54:0b:fd:78:76:10:20:b8:af:
9d:8c:f8:d5:72:9b:7b:4a:8e:86:07:e3:65:0c:6e:ee:17:8a:
b6:8f:b9:53:57:39:8a:23:ba:29:5a:41:b0:9d:f6:51:09:a5:
15:9e:40:2b:08:7d:9f:ee:75:38:c2:c1:41:15:eb:d8:22:ab:
13:1a:8d:46:dc:c7:31:08:6e:89:8f:4b:56:61:02:2c:4a:19:
85:06:45:39:a2:c4:3b:22:33:17:d8:46:82:4a:92:06:e2:88:
ff:e2:16:3c:87:c6:ac:b3:cd:8a:9e:bb:2a:b0:68:40:b2:14:
89:7b:99:b7:36:df:b9:a5:25:8c:01:37:ba:db:68:1b:9f:47:
d4:29:f8:76:b8:ac:eb:12:08:d5:7d:c7:6a:f6:51:ab:a3:8d:
00:c1:96:ad:b5:3b:39:91:0f:ef:7f:fb:bf:6d:f0:2e:56:51:
06:5d:6e:4a:d1:85:c3:83:a3:d5:08:9c:78:e6:11:1a:d1:47:
2d:eb:80:3b:72:5f:ea:ad:ed:18:d3:3c:4d:73:27:c6:ff:6c:
b6:19:46:cb:14:e6:0e:30:81:f4:99:b1:2f:c7:2b:3f:69:cf:
0d:08:94:68:c4:38:b4:07:4d:b6:f2:de:a5:51:7e:9c:8d:13:
8a:6f:15:e8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlj8nkpJJA2IEH4nX2gJdjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMDM3NGQ3MWJjNTdkYjk2ZGMzOTNlOTFmZWJiOWU5ZDU5
ZmVmOWEwHhcNMjUwMTAyMDU0OTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTI2YjIyMTQxZGZhODlhYTMyZDNhOTUxNTY3Mzg5ZWVmYjgxYjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtfD5gMZVgh5loFn3pTR6gMOuqZm
4aiHBhixzTIZbZcl6a/fwZwNdWfEgUdSCxpjcXPiZ5dIEETf5b9P3uN49T1Mfnus
GmFZa5ieu/DFDxN5AmHR/MLp73+dj9UccvJaRf8IwhWPKiNTxKPObWzhiLJe1gJL
9AQ1tC8yM3ZpnvUDz+ZEi5M9NrTCCIMKl98TawL0ZEZ94x2QFFM/MthjHbQvvuoD
Znqnl5kYbgArBN6zN8CyDLebdJ+sLvDcJSujqUVNj9/tFPGTCKMJAfGX1R/f87UJ
uMSY5HBktcVo9IFGW+LliOKlUrC9RFVcIr2+tBtuJDTM6fzEwV7U2d433QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGomsiFB36iaoy06lRVnOJ7vuBuAMB8GA1UdIwQY
MBaAFJ4DdNcbxX25bcOT6R/ruenVn++aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmdOMDF4dkZmYmx0dzVQcEgtdTU2ZFdmNzVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jNDNhNzUtYTMyNi00YzZkLTg3Y2Et
ODE3ZDg0ZTUzZDUzLzEvYWlheUlVSGZxSnFqTFRxVkZXYzRudS00RzRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jNDNhNzUtYTMyNi00YzZkLTg3Y2EtODE3ZDg0ZTUzZDUz
LzEvbmdOMDF4dkZmYmx0dzVQcEgtdTU2ZFdmNzVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuWEJAwQA
uWELMA0GCSqGSIb3DQEBCwUAA4IBAQBtbgkPVmBj4cJUC/14dhAguK+djPjVcpt7
So6GB+NlDG7uF4q2j7lTVzmKI7opWkGwnfZRCaUVnkArCH2f7nU4wsFBFevYIqsT
Go1G3McxCG6Jj0tWYQIsShmFBkU5osQ7IjMX2EaCSpIG4oj/4hY8h8ass82Knrsq
sGhAshSJe5m3Nt+5pSWMATe622gbn0fUKfh2uKzrEgjVfcdq9lGro40AwZattTs5
kQ/vf/u/bfAuVlEGXW5K0YXDg6PVCJx45hEa0Uct64A7cl/qre0Y0zxNcyfG/2y2
GUbLFOYOMIH0mbEvxys/ac8NCJRoxDi0B0228t6lUX6cjROKbxXo
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:48:54 2025 by rpki-client