Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e1e232-c378-432e-aeac-9d765f3bce41/1/P9pOrboOUYoJTIpBG7R7qRfelzM.roa
File: P9pOrboOUYoJTIpBG7R7qRfelzM.roa (raw, json)
Hash identifier: pIv16gamQsdnzptrtP11A97FwpCu0eO7vuykwxEYxnE=
Subject key identifier: 3F:DA:4E:AD:BA:0E:51:8A:09:4C:8A:41:1B:B4:7B:A9:17:DE:97:33
Certificate issuer: /CN=6ecb285d26bde0997dde7db8489aa1d6e04ac445
Certificate serial: FE3D62
Authority key identifier: 6E:CB:28:5D:26:BD:E0:99:7D:DE:7D:B8:48:9A:A1:D6:E0:4A:C4:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bssoXSa94Jl93n24SJqh1uBKxEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e1e232-c378-432e-aeac-9d765f3bce41/1/P9pOrboOUYoJTIpBG7R7qRfelzM.roa
Signing time: Sat 01 Jan 2022 07:54:16 +0000
ROA not before: Sat 01 Jan 2022 07:54:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207046
IP address blocks: 194.26.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16661858 (0xfe3d62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ecb285d26bde0997dde7db8489aa1d6e04ac445
Validity
Not Before: Jan 1 07:54:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3fda4eadba0e518a094c8a411bb47ba917de9733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ea:fb:3e:26:17:bb:11:9a:a8:e7:36:ca:8c:
af:f4:e1:df:b1:34:53:d7:9e:af:a9:ea:16:1e:57:
66:c2:6e:a3:c7:c1:0a:07:21:7d:00:13:50:53:60:
be:b6:28:70:47:fd:1b:15:86:70:65:fd:91:20:c7:
c6:a7:79:fa:56:57:cc:41:a6:0b:e5:64:96:c7:c4:
dd:e6:14:ff:81:ff:9d:72:bf:a4:24:ea:61:ef:41:
c5:03:33:3b:06:d5:3b:e5:55:b7:b9:61:bb:aa:50:
38:75:91:56:67:15:99:4b:10:42:4b:24:0a:6f:43:
42:02:b7:a0:6c:87:ee:9d:39:6c:73:e0:1e:c3:39:
20:b1:97:20:14:bc:e5:99:07:d3:3b:44:6f:41:ab:
a4:e8:83:1c:6e:3b:0c:e3:5c:88:19:f5:06:5c:58:
91:26:22:15:cd:dc:41:15:c5:f5:bb:64:5d:a4:0c:
c2:e1:1b:a0:16:c6:9f:f1:31:3e:72:6d:b4:b7:d0:
3e:95:53:ba:e4:58:1b:52:5f:b1:5c:f5:5a:aa:5c:
80:80:73:49:20:68:46:54:0f:b8:d5:78:f6:85:2c:
1b:6d:72:29:94:57:ed:28:46:9b:18:85:41:b6:27:
ee:2e:8c:85:d2:87:4e:1c:48:75:5b:9e:e5:bb:84:
96:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DA:4E:AD:BA:0E:51:8A:09:4C:8A:41:1B:B4:7B:A9:17:DE:97:33
X509v3 Authority Key Identifier:
keyid:6E:CB:28:5D:26:BD:E0:99:7D:DE:7D:B8:48:9A:A1:D6:E0:4A:C4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bssoXSa94Jl93n24SJqh1uBKxEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e1e232-c378-432e-aeac-9d765f3bce41/1/P9pOrboOUYoJTIpBG7R7qRfelzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e1e232-c378-432e-aeac-9d765f3bce41/1/bssoXSa94Jl93n24SJqh1uBKxEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.100.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:b2:16:1c:78:27:e1:f7:ef:94:17:d2:80:92:4e:21:50:53:
ad:dd:28:f4:76:39:dd:2b:dc:7e:1f:70:a7:b5:9f:b3:7f:1b:
b4:ca:5c:76:87:3f:d8:6d:27:15:fa:85:bd:11:88:bf:2a:54:
fa:3a:00:72:16:2c:bd:9b:50:5e:fe:ab:05:cf:8e:e0:9f:21:
2d:a1:3c:a1:4d:a6:86:e8:83:39:6b:84:37:2c:af:df:d9:a9:
4c:83:48:dc:55:4c:a2:fb:aa:59:12:6b:8b:d3:de:5b:68:23:
14:9b:72:6b:5c:29:0e:ed:56:b7:d2:47:ad:de:0d:7b:da:95:
05:00:7f:e8:73:93:e1:96:87:07:05:b9:8b:9f:b7:a1:5e:dc:
22:bf:e6:65:3d:15:59:4f:af:eb:89:f7:2d:1e:3d:ae:7d:5e:
a8:95:de:cf:1f:b8:00:d3:c1:10:9f:6e:09:f3:b3:ed:20:53:
12:0d:4b:78:1d:60:14:db:d2:7f:ed:d2:fd:f4:6d:90:00:a8:
29:05:c5:97:20:91:53:60:92:14:ae:81:4c:19:5b:ee:31:f4:
63:b5:72:f1:30:2e:90:2a:92:f7:03:48:71:dc:27:28:eb:51:
64:b2:ad:1f:1d:27:45:85:29:6e:e0:9e:d0:47:38:db:ea:26:
78:3a:52:0e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAP49YjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZWNiMjg1ZDI2YmRlMDk5N2RkZTdkYjg0ODlhYTFkNmUwNGFjNDQ1MB4XDTIyMDEw
MTA3NTQxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2ZkYTRlYWRiYTBl
NTE4YTA5NGM4YTQxMWJiNDdiYTkxN2RlOTczMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPPq+z4mF7sRmqjnNsqMr/Th37E0U9eer6nqFh5XZsJuo8fB
CgchfQATUFNgvrYocEf9GxWGcGX9kSDHxqd5+lZXzEGmC+VklsfE3eYU/4H/nXK/
pCTqYe9BxQMzOwbVO+VVt7lhu6pQOHWRVmcVmUsQQkskCm9DQgK3oGyH7p05bHPg
HsM5ILGXIBS85ZkH0ztEb0GrpOiDHG47DONciBn1BlxYkSYiFc3cQRXF9btkXaQM
wuEboBbGn/ExPnJttLfQPpVTuuRYG1JfsVz1WqpcgIBzSSBoRlQPuNV49oUsG21y
KZRX7ShGmxiFQbYn7i6MhdKHThxIdVue5buElicCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ/2k6tug5RiglMikEbtHupF96XMzAfBgNVHSMEGDAWgBRuyyhdJr3gmX3e
fbhImqHW4ErERTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Jzc29YU2E5NEpsOTNuMjRTSnFoMXVCS3hFVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjkvZTFlMjMyLWMzNzgtNDMyZS1hZWFjLTlkNzY1ZjNiY2U0MS8x
L1A5cE9yYm9PVVlvSlRJcEJHN1I3cVJmZWx6TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkv
ZTFlMjMyLWMzNzgtNDMyZS1hZWFjLTlkNzY1ZjNiY2U0MS8xL2Jzc29YU2E5NEps
OTNuMjRTSnFoMXVCS3hFVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIaZDANBgkqhkiG9w0BAQsFAAOC
AQEATLIWHHgn4ffvlBfSgJJOIVBTrd0o9HY53Svcfh9wp7Wfs38btMpcdoc/2G0n
FfqFvRGIvypU+joAchYsvZtQXv6rBc+O4J8hLaE8oU2mhuiDOWuENyyv39mpTINI
3FVMovuqWRJri9PeW2gjFJtya1wpDu1Wt9JHrd4Ne9qVBQB/6HOT4ZaHBwW5i5+3
oV7cIr/mZT0VWU+v64n3LR49rn1eqJXezx+4ANPBEJ9uCfOz7SBTEg1LeB1gFNvS
f+3S/fRtkACoKQXFlyCRU2CSFK6BTBlb7jH0Y7Vy8TAukCqS9wNIcdwnKOtRZLKt
Hx0nRYUpbuCe0Ec42+omeDpSDg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 00:36:41 2025 by rpki-client