Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/RdK3FxnAhkYPX98yWfjo7DAeI08.roa
File: RdK3FxnAhkYPX98yWfjo7DAeI08.roa (raw, json)
Hash identifier: rbc9T8wFnuY1eGGhGKpqFEjZU7Ty+f9Qb/UTCRgvkZM=
Subject key identifier: 45:D2:B7:17:19:C0:86:46:0F:5F:DF:32:59:F8:E8:EC:30:1E:23:4F
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01942369C969FD95AB94917F10FA6D0A3855
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/RdK3FxnAhkYPX98yWfjo7DAeI08.roa
Signing time: Wed 01 Jan 2025 19:48:42 +0000
ROA not before: Wed 01 Jan 2025 19:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206092
IP address blocks: 203.188.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c9:69:fd:95:ab:94:91:7f:10:fa:6d:0a:38:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 1 19:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45d2b71719c086460f5fdf3259f8e8ec301e234f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:88:e3:52:60:9e:d6:a0:ca:a8:79:61:72:dd:
78:52:ff:ee:de:8b:b3:cb:84:0c:6c:f0:b6:3a:24:
4b:58:d6:68:14:5d:cd:f9:c6:3e:39:6f:4f:e2:1f:
88:a8:dd:03:58:a6:52:80:a7:cf:9d:7b:71:79:ac:
ac:0b:cd:e3:7a:dc:8f:0e:f5:de:db:b0:de:a5:b9:
8d:f7:a9:49:f0:45:9b:b2:ad:62:96:34:73:8b:f7:
f4:8a:3a:b4:02:26:a0:25:71:9b:e8:40:ee:13:ea:
f7:4f:55:ca:df:d3:59:52:9f:6b:b3:02:e2:83:8c:
b1:11:5f:d7:54:73:14:14:eb:ce:9e:24:cb:70:13:
eb:9f:fe:b8:a0:e0:d5:66:f0:18:5e:17:39:28:87:
3a:9f:24:f1:d4:8d:a9:b3:18:0e:64:20:88:94:57:
0a:71:a3:ce:f1:52:80:5b:12:70:59:09:04:29:3e:
0a:38:ae:53:57:6c:9d:84:62:22:4f:72:be:e8:23:
11:ef:94:83:34:ba:e4:8d:50:d0:6f:3f:96:24:f4:
a5:83:a1:8c:11:27:f0:42:e6:b5:f1:19:d2:0c:a8:
67:78:a1:33:0b:47:f1:82:0a:aa:32:7f:c1:b4:cf:
bd:f2:5b:c7:fe:53:5d:a0:a1:0a:98:96:41:0e:a3:
a8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D2:B7:17:19:C0:86:46:0F:5F:DF:32:59:F8:E8:EC:30:1E:23:4F
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/RdK3FxnAhkYPX98yWfjo7DAeI08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.188.168.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:e7:10:30:6f:a9:12:41:58:c4:be:ec:af:4e:8b:8f:dd:9e:
47:1c:a1:50:48:7d:91:8f:aa:27:02:a9:be:6f:a2:18:6c:53:
28:eb:89:65:3c:1b:68:72:d2:ca:ae:34:f4:39:61:a3:33:f3:
81:3f:ee:da:58:d3:b1:a4:a8:ae:04:ba:a7:bb:8b:ff:8c:b2:
f2:d4:b9:36:d5:9b:a2:68:15:7d:c8:f5:3d:59:43:f2:ea:79:
0c:76:a1:d4:0d:97:1f:94:be:37:db:f5:ce:96:c7:ad:74:28:
18:25:2e:d7:ba:3c:ea:2f:2c:5f:e2:e0:79:64:a3:00:0a:b3:
2d:9e:fa:55:a8:d5:33:8e:6c:1a:19:c8:67:9a:f6:0a:ef:37:
9b:92:1b:5f:97:b7:ee:97:76:c8:71:ba:ee:07:06:38:4d:70:
27:fa:dd:ad:ff:f8:45:ba:74:70:b5:d3:30:eb:d9:d9:e2:2f:
df:c8:e1:91:c1:66:89:62:e7:d0:5c:64:04:e7:c1:79:7e:ee:
64:23:e9:22:50:32:b9:6f:15:53:64:bd:04:7f:11:eb:81:97:
18:b3:a8:d6:57:89:a1:60:80:88:a9:25:64:68:4c:5c:6e:f5:
34:43:c9:f1:aa:24:95:44:8e:6f:f8:98:8e:95:ed:3b:cc:35:
f4:be:27:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaclp/ZWrlJF/EPptCjhVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjUwMTAxMTk0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWQyYjcxNzE5YzA4NjQ2MGY1ZmRmMzI1OWY4ZThlYzMwMWUyMzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlojjUmCe1qDKqHlhct14Uv/u3ouz
y4QMbPC2OiRLWNZoFF3N+cY+OW9P4h+IqN0DWKZSgKfPnXtxeaysC83jetyPDvXe
27DepbmN96lJ8EWbsq1iljRzi/f0ijq0AiagJXGb6EDuE+r3T1XK39NZUp9rswLi
g4yxEV/XVHMUFOvOniTLcBPrn/64oODVZvAYXhc5KIc6nyTx1I2psxgOZCCIlFcK
caPO8VKAWxJwWQkEKT4KOK5TV2ydhGIiT3K+6CMR75SDNLrkjVDQbz+WJPSlg6GM
ESfwQua18RnSDKhneKEzC0fxggqqMn/BtM+98lvH/lNdoKEKmJZBDqOojwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEXStxcZwIZGD1/fMln46OwwHiNPMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvUmRLM0Z4bkFoa1lQWDk4eVdmam83REFlSTA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy7yoMA0G
CSqGSIb3DQEBCwUAA4IBAQC75xAwb6kSQVjEvuyvTouP3Z5HHKFQSH2Rj6onAqm+
b6IYbFMo64llPBtoctLKrjT0OWGjM/OBP+7aWNOxpKiuBLqnu4v/jLLy1Lk21Zui
aBV9yPU9WUPy6nkMdqHUDZcflL432/XOlsetdCgYJS7XujzqLyxf4uB5ZKMACrMt
nvpVqNUzjmwaGchnmvYK7zebkhtfl7ful3bIcbruBwY4TXAn+t2t//hFunRwtdMw
69nZ4i/fyOGRwWaJYufQXGQE58F5fu5kI+kiUDK5bxVTZL0EfxHrgZcYs6jWV4mh
YICIqSVkaExcbvU0Q8nxqiSVRI5v+JiOle07zDX0viem
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:25:00 2025 by rpki-client