Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/oRj26DsRYCBlJNTpwqBL0inuLMA.roa
File: oRj26DsRYCBlJNTpwqBL0inuLMA.roa (raw, json)
Hash identifier: Pxxl3cDYQEqOHh80APTIV2utRwsPPG0ZLguKvigaez4=
Subject key identifier: A1:18:F6:E8:3B:11:60:20:65:24:D4:E9:C2:A0:4B:D2:29:EE:2C:C0
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A509F3FA8A0F5E0FB44B3AB6FD53C
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/oRj26DsRYCBlJNTpwqBL0inuLMA.roa
Signing time: Wed 01 Jan 2025 19:49:17 +0000
ROA not before: Wed 01 Jan 2025 19:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 288
IP address blocks: 195.169.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:50:9f:3f:a8:a0:f5:e0:fb:44:b3:ab:6f:d5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a118f6e83b1160206524d4e9c2a04bd229ee2cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:49:2b:98:5b:20:36:b3:c1:3f:8d:5e:17:9d:
1b:71:3b:1e:30:0f:62:3a:21:c8:1a:31:a0:c7:af:
3e:e2:c3:3d:d4:53:9a:dc:ac:ea:22:80:4c:dc:90:
20:79:c2:07:bf:e7:f0:9f:b2:89:70:77:c4:55:79:
fa:9c:c2:d7:62:da:84:f0:78:26:d0:2a:a5:f6:40:
db:04:71:19:64:3a:cd:20:2f:88:19:0a:9a:a4:39:
fd:79:a5:d4:a3:15:0a:99:8b:95:be:cb:f5:6d:98:
58:b5:c4:6a:3d:e0:c3:a5:fc:c7:4f:92:f8:08:e7:
7a:a8:4f:51:27:01:6b:c5:00:d6:d0:c1:05:67:27:
6e:3f:d5:53:e0:92:62:50:88:be:b4:64:30:d8:cc:
9a:86:a3:60:f7:c9:95:b0:aa:06:7e:3e:fb:d8:29:
84:9b:47:42:81:9f:b7:0a:0e:fc:22:d9:12:5b:75:
df:2f:be:65:ee:83:b2:f4:3f:7e:16:a5:e1:c9:bf:
75:ed:53:f3:7d:ea:a9:6b:b4:c0:f3:4c:81:99:d2:
5a:27:2e:4b:4a:b5:d4:0b:65:f1:cb:cc:96:3f:00:
4c:3a:98:52:b6:d3:be:27:4c:ed:d1:07:14:c3:a1:
7d:8e:14:40:89:39:0a:bb:2a:8c:44:d5:c7:bc:ca:
e6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:18:F6:E8:3B:11:60:20:65:24:D4:E9:C2:A0:4B:D2:29:EE:2C:C0
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/oRj26DsRYCBlJNTpwqBL0inuLMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.169.140.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:8b:45:4c:79:3a:a0:c9:18:08:bf:73:4c:92:3f:64:f6:e0:
18:2a:b1:02:13:85:44:58:9e:0b:51:f7:8d:30:03:2f:8c:37:
13:fd:e2:12:52:a8:c3:2b:20:5c:ba:6e:42:2d:51:e9:93:02:
66:88:43:6c:0e:f9:2e:5b:04:4c:28:1c:5e:28:2a:5d:1d:8e:
6a:81:97:71:1c:d7:d0:7c:8e:7d:4e:9e:40:39:1a:e5:78:56:
52:db:d2:9e:a5:fb:82:8e:38:bc:93:7a:03:0c:61:89:a1:5e:
9e:69:3d:b9:65:0d:02:29:34:8d:2d:58:f3:6e:99:9f:ae:4c:
bc:5e:e9:ec:b6:0a:98:23:c6:64:dc:a9:dd:02:00:a5:d6:02:
32:e0:11:18:eb:53:a9:14:23:37:37:64:86:40:63:0a:22:a0:
f1:e6:2c:23:e1:bf:b2:3d:2d:2b:4e:42:b0:d0:a3:84:61:1b:
ca:3e:16:81:f5:54:cf:ea:d6:82:88:a9:b9:ae:6d:28:17:7a:
7c:6c:85:91:8f:b8:04:be:31:6a:71:85:1d:ec:28:0c:f6:19:
a1:66:18:b3:39:63:b0:e8:91:cd:b5:1c:97:64:dd:8d:5e:b0:
29:7e:60:b7:6d:c0:20:f4:4b:35:bd:fa:93:25:cb:d1:7a:2a:
23:d7:b2:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjalCfP6ig9eD7RLOrb9U8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjUwMTAxMTk0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTE4ZjZlODNiMTE2MDIwNjUyNGQ0ZTljMmEwNGJkMjI5ZWUyY2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUkrmFsgNrPBP41eF50bcTseMA9i
OiHIGjGgx68+4sM91FOa3KzqIoBM3JAgecIHv+fwn7KJcHfEVXn6nMLXYtqE8Hgm
0Cql9kDbBHEZZDrNIC+IGQqapDn9eaXUoxUKmYuVvsv1bZhYtcRqPeDDpfzHT5L4
COd6qE9RJwFrxQDW0MEFZyduP9VT4JJiUIi+tGQw2MyahqNg98mVsKoGfj772CmE
m0dCgZ+3Cg78ItkSW3XfL75l7oOy9D9+FqXhyb917VPzfeqpa7TA80yBmdJaJy5L
SrXUC2Xxy8yWPwBMOphSttO+J0zt0QcUw6F9jhRAiTkKuyqMRNXHvMrmQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKEY9ug7EWAgZSTU6cKgS9Ip7izAMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvb1JqMjZEc1JZQ0JsSk5UcHdxQkwwaW51TE1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw6mMMA0G
CSqGSIb3DQEBCwUAA4IBAQBfi0VMeTqgyRgIv3NMkj9k9uAYKrECE4VEWJ4LUfeN
MAMvjDcT/eISUqjDKyBcum5CLVHpkwJmiENsDvkuWwRMKBxeKCpdHY5qgZdxHNfQ
fI59Tp5AORrleFZS29KepfuCjji8k3oDDGGJoV6eaT25ZQ0CKTSNLVjzbpmfrky8
XunstgqYI8Zk3KndAgCl1gIy4BEY61OpFCM3N2SGQGMKIqDx5iwj4b+yPS0rTkKw
0KOEYRvKPhaB9VTP6taCiKm5rm0oF3p8bIWRj7gEvjFqcYUd7CgM9hmhZhizOWOw
6JHNtRyXZN2NXrApfmC3bcAg9Es1vfqTJcvReioj17Ix
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:12:55 2025 by rpki-client