Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/pRRc-aHsLhs7L3jVpiMmTF9mbXU.roa
File: pRRc-aHsLhs7L3jVpiMmTF9mbXU.roa (raw, json)
Hash identifier: 3+Rll0s3Qp4ADMZLaRyXjqLo1eqDlTqqXI3V1CpcTo4=
Subject key identifier: A5:14:5C:F9:A1:EC:2E:1B:3B:2F:78:D5:A6:23:26:4C:5F:66:6D:75
Certificate issuer: /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Certificate serial: 0194228E039BAAF458538152CD7A56C98C5A
Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/pRRc-aHsLhs7L3jVpiMmTF9mbXU.roa
Signing time: Wed 01 Jan 2025 15:48:39 +0000
ROA not before: Wed 01 Jan 2025 15:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2119
IP address blocks: 194.246.8.0/23 maxlen: 23
194.246.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:03:9b:aa:f4:58:53:81:52:cd:7a:56:c9:8c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Validity
Not Before: Jan 1 15:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5145cf9a1ec2e1b3b2f78d5a623264c5f666d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:07:77:f5:3a:03:ba:19:73:78:e0:eb:91:f1:
db:4b:2a:5b:71:88:cf:1a:40:4d:cd:a5:55:08:ab:
c4:d8:3a:05:45:f8:61:37:6f:9e:3a:89:4b:fc:02:
ff:2a:1f:83:0c:71:cd:ac:28:fe:02:f1:29:a4:0f:
3a:12:70:bf:66:1b:42:ef:0f:3e:e8:31:32:5b:07:
0e:10:8c:dd:ca:f3:b2:8a:f5:0c:c1:b1:c6:59:58:
62:f9:5a:1a:ec:5b:5e:51:ee:e8:56:1c:a6:83:d9:
a1:8e:6e:ac:1e:5c:67:57:8c:82:98:fb:1c:5b:ff:
8b:19:70:dc:46:23:1b:ec:99:a8:7f:78:53:e8:4f:
0b:13:62:be:25:74:b0:4a:c6:c3:68:56:b2:23:45:
e0:b1:c5:42:05:9c:d1:74:ba:95:a6:44:f7:1d:ae:
00:41:d0:3a:01:d9:83:16:27:a5:52:4f:1a:78:77:
24:fc:90:13:bd:42:75:4f:cb:df:19:f2:f3:37:d0:
55:ea:c9:4d:a9:98:c0:7c:e7:26:86:84:1d:45:ea:
d3:73:f6:58:71:e8:04:80:f4:9d:3b:1d:4f:27:6e:
4e:c7:ff:9c:ff:5b:a0:09:1a:ec:03:63:36:fb:92:
e5:56:06:5e:5e:25:07:48:51:22:4c:47:d2:55:8c:
0e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:14:5C:F9:A1:EC:2E:1B:3B:2F:78:D5:A6:23:26:4C:5F:66:6D:75
X509v3 Authority Key Identifier:
keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/pRRc-aHsLhs7L3jVpiMmTF9mbXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.8.0/23
194.246.14.0/23
Signature Algorithm: sha256WithRSAEncryption
11:40:79:5a:07:10:79:85:b8:98:e7:b0:54:dc:2a:96:33:c2:
65:a9:70:a1:5b:76:0f:67:e6:8a:2d:73:f1:d3:89:f3:57:7e:
da:b2:a6:29:de:8f:43:f5:7e:58:fa:51:6c:9b:ae:94:f6:26:
b1:2e:af:35:75:32:3a:e3:bb:c5:97:b3:59:59:1a:5e:e6:44:
6d:5f:7e:b7:fc:2c:4e:f7:85:b7:d2:bb:05:92:d7:f4:d6:78:
8d:70:a8:34:0e:d1:d5:69:14:1f:65:14:25:f6:a4:12:9b:e7:
98:9b:33:d4:54:f3:9e:1a:83:4b:67:9f:6e:66:3e:3c:91:1d:
fa:37:97:39:66:6c:0b:f6:0f:66:b8:04:12:3a:f6:a0:3c:37:
8f:6d:16:8e:bb:ef:40:e8:8b:87:7b:69:2f:98:37:99:a7:b0:
71:25:13:95:4c:c5:f7:8f:f0:41:4b:0b:02:ea:2a:8a:99:c0:
a9:4b:a6:34:54:fc:c7:cb:5f:30:22:22:db:45:2f:6c:9c:c8:
7e:1c:39:6b:f3:8f:35:39:5d:3c:e6:ef:74:b1:03:0f:b3:7d:
12:eb:e2:5a:e3:03:e2:f0:25:26:4b:b8:ce:23:48:b5:e3:47:
d7:43:64:67:b9:66:a6:06:ae:bf:fc:e4:91:ce:92:f3:eb:b2:
17:fa:2f:57
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQijgObqvRYU4FSzXpWyYxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZTZjZWNmZmQ5YjhiYmExOGQ0NzRlN2IzOTkzZTBhMWQx
NGRiYjMwHhcNMjUwMTAxMTU0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTE0NWNmOWExZWMyZTFiM2IyZjc4ZDVhNjIzMjY0YzVmNjY2ZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAd39ToDuhlzeODrkfHbSypbcYjP
GkBNzaVVCKvE2DoFRfhhN2+eOolL/AL/Kh+DDHHNrCj+AvEppA86EnC/ZhtC7w8+
6DEyWwcOEIzdyvOyivUMwbHGWVhi+Voa7FteUe7oVhymg9mhjm6sHlxnV4yCmPsc
W/+LGXDcRiMb7Jmof3hT6E8LE2K+JXSwSsbDaFayI0XgscVCBZzRdLqVpkT3Ha4A
QdA6AdmDFielUk8aeHck/JATvUJ1T8vfGfLzN9BV6slNqZjAfOcmhoQdRerTc/ZY
cegEgPSdOx1PJ25Ox/+c/1ugCRrsA2M2+5LlVgZeXiUHSFEiTEfSVYwOGwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKUUXPmh7C4bOy941aYjJkxfZm11MB8GA1UdIwQY
MBaAFD7mzs/9m4u6GNR057OZPgodFNuzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNjFjYWEtMjUwMC00Mzg4LWE5ZmEt
NzMyNDkxMzk3NWQ1LzEvcFJSYy1hSHNMaHM3TDNqVnBpTW1URjltYlhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lNjFjYWEtMjUwMC00Mzg4LWE5ZmEtNzMyNDkxMzk3NWQ1
LzEvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwvYIAwQB
wvYOMA0GCSqGSIb3DQEBCwUAA4IBAQARQHlaBxB5hbiY57BU3CqWM8JlqXChW3YP
Z+aKLXPx04nzV37asqYp3o9D9X5Y+lFsm66U9iaxLq81dTI647vFl7NZWRpe5kRt
X363/CxO94W30rsFktf01niNcKg0DtHVaRQfZRQl9qQSm+eYmzPUVPOeGoNLZ59u
Zj48kR36N5c5ZmwL9g9muAQSOvagPDePbRaOu+9A6IuHe2kvmDeZp7BxJROVTMX3
j/BBSwsC6iqKmcCpS6Y0VPzHy18wIiLbRS9snMh+HDlr8481OV085u90sQMPs30S
6+Ja4wPi8CUmS7jOI0i140fXQ2RnuWamBq6//OSRzpLz67IX+i9X
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:19:05 2025 by rpki-client