Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/myv-zwO_SgHipLXYA0MvUkOtzFA.roa
File: myv-zwO_SgHipLXYA0MvUkOtzFA.roa (raw, json)
Hash identifier: dkQNhTE9kr1HAOmMeiIP+UCVAv/6E1vZojS/MfEW0Pg=
Subject key identifier: 9B:2B:FE:CF:03:BF:4A:01:E2:A4:B5:D8:03:43:2F:52:43:AD:CC:50
Certificate issuer: /CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Certificate serial: 09AE987B
Authority key identifier: 38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/myv-zwO_SgHipLXYA0MvUkOtzFA.roa
Signing time: Sat 01 Jan 2022 05:05:34 +0000
ROA not before: Sat 01 Jan 2022 05:05:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213220
IP address blocks: 192.145.97.0/24 maxlen: 24
192.145.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162437243 (0x9ae987b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Validity
Not Before: Jan 1 05:05:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b2bfecf03bf4a01e2a4b5d803432f5243adcc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:20:cf:de:ab:e2:ad:dd:00:ae:5e:ef:b4:
e2:f6:d7:e5:34:80:0a:89:b7:d7:5e:11:6a:f6:51:
53:5f:b9:22:67:19:f9:92:9e:bd:ea:f5:9d:32:7d:
94:24:68:41:ba:56:8f:04:b0:14:17:9f:d7:8a:c4:
ca:3d:07:2a:94:f5:61:d0:87:52:60:00:94:09:42:
70:a9:a0:03:50:bb:c3:05:4d:99:41:bc:e9:14:64:
0b:49:37:a1:e6:cb:09:1a:7b:38:d9:99:9d:f6:3b:
a7:eb:45:9b:b6:2f:fb:ba:0b:33:32:d6:53:aa:61:
cd:2a:c9:aa:43:08:cb:32:e4:51:08:d7:23:3d:4c:
06:5b:16:a6:ef:70:1e:1d:85:90:78:25:47:24:85:
54:fa:b8:4c:55:21:da:53:56:8d:1a:af:8d:67:e3:
07:79:80:ff:92:66:21:0b:94:ab:f9:8a:4e:70:7b:
72:24:32:a4:8e:e3:76:d8:08:ae:bd:fa:0d:20:ba:
60:85:8d:c5:5b:7c:bd:5a:c2:28:ee:6b:46:61:ae:
65:71:94:c2:46:5f:df:a4:35:d9:14:6d:fb:24:74:
71:d5:b9:51:e9:16:34:a6:29:b1:24:4a:03:45:f0:
34:15:d4:1e:83:52:cd:55:29:a4:5e:90:99:b5:02:
8f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2B:FE:CF:03:BF:4A:01:E2:A4:B5:D8:03:43:2F:52:43:AD:CC:50
X509v3 Authority Key Identifier:
keyid:38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/myv-zwO_SgHipLXYA0MvUkOtzFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/OEAeWIkL8jDcrl0DBRGf8sK41DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.97.0-192.145.98.255
Signature Algorithm: sha256WithRSAEncryption
15:ce:de:1b:7b:44:7e:b0:8d:dd:7e:b2:8b:5b:b2:b3:de:d9:
eb:db:05:44:5a:bc:ad:3c:43:63:b9:21:61:de:36:77:2b:97:
6b:03:6d:27:56:79:36:ac:09:de:12:03:17:cf:0b:e5:48:3e:
24:33:a3:ee:ad:d0:5c:c6:02:e4:55:e0:a4:7f:0e:10:0c:65:
f4:09:a3:1b:a9:d9:28:1d:a1:20:f5:fa:4d:b2:f6:86:f4:2c:
ae:86:9e:cc:ee:8a:98:87:d0:3e:ad:35:32:90:28:e9:12:37:
f5:84:ad:52:e1:18:63:87:f6:56:0d:38:62:42:e1:c6:a1:0a:
d8:05:88:ca:55:25:c2:8d:4c:96:47:94:ca:31:78:9c:78:05:
1e:37:20:3f:03:22:ae:66:ee:b6:de:b4:94:ba:c5:a1:3d:a2:
a0:bb:2c:fe:20:7c:3d:a8:1a:5e:97:cd:b0:04:09:91:f4:17:
76:38:98:5f:e5:cd:a6:86:c5:2f:86:f2:1d:15:d6:de:e3:02:
80:8c:3f:13:f0:c0:8b:ab:1a:de:ac:1a:6d:b2:8e:13:ae:cc:
a0:00:f3:41:3c:48:44:76:9d:95:84:7a:c3:2d:ae:7b:0c:43:
67:48:48:6b:ea:9f:c0:07:39:bd:20:01:ab:e7:7b:1b:a6:fe:
2d:97:91:90
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIECa6YezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
ODQwMWU1ODg5MGJmMjMwZGNhZTVkMDMwNTExOWZmMmMyYjhkNDMzMB4XDTIyMDEw
MTA1MDUzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWIyYmZlY2YwM2Jm
NGEwMWUyYTRiNWQ4MDM0MzJmNTI0M2FkY2M1MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALcAIM/eq+Kt3QCuXu+04vbX5TSACom3114RavZRU1+5ImcZ
+ZKever1nTJ9lCRoQbpWjwSwFBef14rEyj0HKpT1YdCHUmAAlAlCcKmgA1C7wwVN
mUG86RRkC0k3oebLCRp7ONmZnfY7p+tFm7Yv+7oLMzLWU6phzSrJqkMIyzLkUQjX
Iz1MBlsWpu9wHh2FkHglRySFVPq4TFUh2lNWjRqvjWfjB3mA/5JmIQuUq/mKTnB7
ciQypI7jdtgIrr36DSC6YIWNxVt8vVrCKO5rRmGuZXGUwkZf36Q12RRt+yR0cdW5
UekWNKYpsSRKA0XwNBXUHoNSzVUppF6QmbUCj08CAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBSbK/7PA79KAeKktdgDQy9SQ63MUDAfBgNVHSMEGDAWgBQ4QB5YiQvyMNyu
XQMFEZ/ywrjUMzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09FQWVXSWtMOGpEY3JsMERCUkdmOHNLNDFETS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjgvNjdkM2I4LWM0M2QtNDRiNy1hZmE2LThiOWNkZGI3MzQwOC8x
L215di16d09fU2dIaXBMWFlBME12VWtPdHpGQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgv
NjdkM2I4LWM0M2QtNDRiNy1hZmE2LThiOWNkZGI3MzQwOC8xL09FQWVXSWtMOGpE
Y3JsMERCUkdmOHNLNDFETS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAwJFhAwQAwJFiMA0GCSqGSIb3
DQEBCwUAA4IBAQAVzt4be0R+sI3dfrKLW7Kz3tnr2wVEWrytPENjuSFh3jZ3K5dr
A20nVnk2rAneEgMXzwvlSD4kM6PurdBcxgLkVeCkfw4QDGX0CaMbqdkoHaEg9fpN
svaG9Cyuhp7M7oqYh9A+rTUykCjpEjf1hK1S4Rhjh/ZWDThiQuHGoQrYBYjKVSXC
jUyWR5TKMXiceAUeNyA/AyKuZu623rSUusWhPaKguyz+IHw9qBpel82wBAmR9Bd2
OJhf5c2mhsUvhvIdFdbe4wKAjD8T8MCLqxrerBptso4TrsygAPNBPEhEdp2VhHrD
La57DENnSEhr6p/ABzm9IAGr53sbpv4tl5GQ
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:36:30 2025 by rpki-client