Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/p0wUclpPuevv4ypNQEUNWwoIJGM.roa
File: p0wUclpPuevv4ypNQEUNWwoIJGM.roa (raw, json)
Hash identifier: N2jnTGwPGWAdRwXOQto72hnYK+KAB3JrINhTKOwTWF8=
Subject key identifier: A7:4C:14:72:5A:4F:B9:EB:EF:E3:2A:4D:40:45:0D:5B:0A:08:24:63
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A502928D9EB13EA102BD415824840
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/p0wUclpPuevv4ypNQEUNWwoIJGM.roa
Signing time: Wed 01 Jan 2025 19:49:17 +0000
ROA not before: Wed 01 Jan 2025 19:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202
IP address blocks: 145.61.196.0/24 maxlen: 24
145.61.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:50:29:28:d9:eb:13:ea:10:2b:d4:15:82:48:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a74c14725a4fb9ebefe32a4d40450d5b0a082463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c9:e8:6c:4f:3a:5f:9f:58:38:0f:3c:57:e6:
03:03:ff:c9:6f:f9:42:b6:45:2a:ea:8d:22:ff:24:
98:fb:ee:92:c2:38:04:22:7e:3d:f6:a0:c7:a4:c6:
69:79:b7:31:24:e6:cc:a0:24:4f:be:f1:6b:40:d4:
9f:b5:05:91:a9:8d:cd:e6:8e:fd:a0:cd:cb:16:16:
89:00:92:f8:07:bf:18:01:e1:0a:b4:5a:d3:96:f8:
c2:e9:ad:88:04:18:78:de:86:58:9e:99:01:b4:fb:
ec:61:fe:25:ad:a5:0e:3a:97:c4:c0:57:49:d8:75:
98:38:48:6a:55:a2:a7:b5:bd:cf:f6:e2:85:c7:10:
a0:8b:ae:d0:5a:96:6e:9f:b9:27:9f:e8:77:4e:3f:
3e:49:50:69:f8:c2:fa:00:aa:e8:13:76:72:df:4b:
da:33:c8:cd:fd:ad:9f:8f:c6:33:65:3d:97:1d:57:
07:04:13:94:b4:b5:e6:a0:7b:5e:b2:d1:b6:16:97:
c1:5a:5b:bc:de:a6:28:4d:9c:cf:d1:ec:e0:e9:27:
7a:58:ab:4a:7a:f5:87:81:9f:f7:93:c0:9b:4b:91:
d2:55:61:7d:f8:26:87:44:74:7f:aa:20:af:0f:70:
eb:24:39:4e:48:12:f1:34:33:2b:17:11:ea:a1:4c:
10:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4C:14:72:5A:4F:B9:EB:EF:E3:2A:4D:40:45:0D:5B:0A:08:24:63
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/p0wUclpPuevv4ypNQEUNWwoIJGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.61.196.0/24
145.61.200.0/22
Signature Algorithm: sha256WithRSAEncryption
84:39:54:6c:1c:47:f6:5a:6d:b5:37:7c:e8:f1:bd:17:5a:1f:
e8:ca:3c:ea:7d:c8:e8:d7:a2:ee:dd:40:9b:ce:1d:49:4e:6a:
8a:89:24:86:cb:5d:a7:c3:9f:dc:1d:5a:6b:1a:e7:00:f5:8e:
2a:3c:e0:4a:28:17:a6:65:cc:67:14:28:65:04:0b:73:16:e2:
f7:b9:3a:27:d5:f2:d7:76:7a:b9:e2:3c:0a:fd:a9:6e:8b:ca:
c5:16:60:65:e0:04:18:03:5d:76:be:e1:cd:58:be:a7:a8:8b:
6e:92:68:09:8b:39:49:28:25:53:43:9b:b7:1f:43:3f:c4:9b:
fe:a9:73:80:11:0c:7c:11:e8:e8:e4:0d:4f:67:bf:63:c3:e4:
c9:0e:eb:3d:b3:24:1f:46:08:0e:b0:ea:e6:5f:72:16:8e:1e:
8c:14:e5:55:e4:f6:6e:36:4f:f6:26:6a:02:21:23:e1:42:c7:
ed:f6:2f:a1:e7:66:28:95:cc:c4:47:dc:bd:13:db:c1:d7:06:
bd:d1:82:6d:c3:6f:34:cb:d4:af:17:aa:ba:fd:14:a1:8e:4f:
29:e2:d8:bc:9f:d2:cc:76:d7:bd:1a:bb:6a:57:ba:20:a7:c7:
7a:0c:d6:cd:f6:50:a9:69:78:86:01:32:a4:b6:8c:04:c9:94:
bf:a8:1e:3e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQjalApKNnrE+oQK9QVgkhAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjUwMTAxMTk0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzRjMTQ3MjVhNGZiOWViZWZlMzJhNGQ0MDQ1MGQ1YjBhMDgyNDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsnobE86X59YOA88V+YDA//Jb/lC
tkUq6o0i/ySY++6SwjgEIn499qDHpMZpebcxJObMoCRPvvFrQNSftQWRqY3N5o79
oM3LFhaJAJL4B78YAeEKtFrTlvjC6a2IBBh43oZYnpkBtPvsYf4lraUOOpfEwFdJ
2HWYOEhqVaKntb3P9uKFxxCgi67QWpZun7knn+h3Tj8+SVBp+ML6AKroE3Zy30va
M8jN/a2fj8YzZT2XHVcHBBOUtLXmoHtestG2FpfBWlu83qYoTZzP0ezg6Sd6WKtK
evWHgZ/3k8CbS5HSVWF9+CaHRHR/qiCvD3DrJDlOSBLxNDMrFxHqoUwQMwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKdMFHJaT7nr7+MqTUBFDVsKCCRjMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvcDB3VWNscFB1ZXZ2NHlwTlFFVU5Xd29JSkdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkT3EAwQC
kT3IMA0GCSqGSIb3DQEBCwUAA4IBAQCEOVRsHEf2Wm21N3zo8b0XWh/oyjzqfcjo
16Lu3UCbzh1JTmqKiSSGy12nw5/cHVprGucA9Y4qPOBKKBemZcxnFChlBAtzFuL3
uTon1fLXdnq54jwK/alui8rFFmBl4AQYA112vuHNWL6nqItukmgJizlJKCVTQ5u3
H0M/xJv+qXOAEQx8Eejo5A1PZ79jw+TJDus9syQfRggOsOrmX3IWjh6MFOVV5PZu
Nk/2JmoCISPhQsft9i+h52YolczER9y9E9vB1wa90YJtw280y9SvF6q6/RShjk8p
4ti8n9LMdte9GrtqV7ogp8d6DNbN9lCpaXiGATKktowEyZS/qB4+
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:04:47 2025 by rpki-client