Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/1UI6HT_8GUtsbAt1u0K32h0qEv8.roa
File: 1UI6HT_8GUtsbAt1u0K32h0qEv8.roa (raw, json)
Hash identifier: RqgJutHKgdkCSusd/ckZpEoLNhIYSrs1ZKahvFk+D38=
Subject key identifier: D5:42:3A:1D:3F:FC:19:4B:6C:6C:0B:75:BB:42:B7:DA:1D:2A:12:FF
Certificate issuer: /CN=05ad79492e809934d693b11855e75103241569eb
Certificate serial: 019420D62A56282B4BE957D00DBFFB55C318
Authority key identifier: 05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/1UI6HT_8GUtsbAt1u0K32h0qEv8.roa
Signing time: Wed 01 Jan 2025 07:48:13 +0000
ROA not before: Wed 01 Jan 2025 07:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2200
IP address blocks: 138.231.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2a:56:28:2b:4b:e9:57:d0:0d:bf:fb:55:c3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ad79492e809934d693b11855e75103241569eb
Validity
Not Before: Jan 1 07:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5423a1d3ffc194b6c6c0b75bb42b7da1d2a12ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:fa:c1:da:ad:04:72:21:b8:30:a5:39:09:
07:63:e2:e8:30:b5:7e:b0:7f:ea:27:11:61:f6:30:
cb:20:04:dd:f9:f3:c2:9a:0c:65:78:c8:00:2d:08:
ef:8e:38:a3:9d:0d:15:2b:5e:f5:a0:35:a6:3f:5b:
ab:28:f7:a1:04:6d:60:10:20:7a:4f:e9:8e:a6:51:
d6:26:97:a7:00:dd:c5:56:c9:b4:f8:7a:dd:93:ed:
86:df:9e:97:1d:19:70:13:32:0d:bb:6e:32:0c:a0:
a2:c0:fc:e3:43:f6:52:88:07:bd:75:d3:7c:5f:34:
04:9b:e9:d7:bd:60:1f:9d:4a:06:8e:e5:a8:af:65:
f1:1e:39:27:c9:34:12:ca:48:fa:c0:f4:df:bb:f5:
12:87:3f:08:94:92:19:03:99:06:59:ea:6f:a0:50:
63:4c:3d:ef:15:aa:ab:7b:e2:56:3d:68:31:66:d5:
59:6f:7f:e5:6b:f1:9e:cd:21:b5:0d:6a:1d:6b:17:
d8:74:40:13:b6:bd:11:9c:0a:9e:c3:12:60:b9:e3:
e5:84:03:ba:57:6a:7c:06:7a:7b:f4:e1:8e:71:0b:
87:b1:53:d0:77:b0:55:ee:1f:33:28:10:68:00:b2:
f0:aa:0e:79:7e:63:ca:b5:75:a8:f4:88:e0:e9:3e:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:42:3A:1D:3F:FC:19:4B:6C:6C:0B:75:BB:42:B7:DA:1D:2A:12:FF
X509v3 Authority Key Identifier:
keyid:05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/1UI6HT_8GUtsbAt1u0K32h0qEv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.231.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:55:9e:50:85:79:b2:7b:7f:48:7e:b2:73:3b:e0:2c:8f:98:
bb:16:52:bb:72:db:56:43:09:53:f7:e3:94:9d:90:e4:d4:a7:
23:ac:21:15:1a:64:b0:5e:ed:e1:ac:b3:bd:aa:c5:81:92:6e:
9b:b0:86:6e:81:2b:06:0e:f6:6d:57:5f:0c:51:93:00:35:b8:
2f:cd:bb:6d:a1:02:83:a6:aa:0c:e4:31:8f:12:a0:5e:56:69:
c3:f7:60:fa:d0:2a:c0:29:d7:39:a8:91:0b:00:5f:5a:0a:82:
d5:1c:c4:38:ab:65:5f:f6:7a:3e:d5:f4:0b:06:8c:97:47:f6:
f3:8c:ff:11:88:3f:8a:18:c1:b5:2e:be:3c:90:09:e0:7f:0f:
ca:21:4e:e9:cd:2f:b0:00:57:72:be:4c:cc:72:5c:a2:76:22:
f0:14:74:4f:9e:5b:99:c7:02:ae:6e:b9:59:02:7b:77:cd:ef:
76:d1:d4:b7:de:74:19:51:58:ce:7d:06:48:75:04:d5:27:65:
b6:8c:7c:6a:d8:2d:99:da:f2:bd:0d:71:f9:78:83:61:53:89:
27:a4:bf:62:9d:49:a0:c0:61:3a:a0:37:5a:3b:1f:3d:f1:02:
da:52:cf:1f:bc:f8:19:a7:14:de:cc:7a:9e:31:d6:f3:a3:db:
81:f1:de:cf
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQg1ipWKCtL6VfQDb/7VcMYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YWQ3OTQ5MmU4MDk5MzRkNjkzYjExODU1ZTc1MTAzMjQx
NTY5ZWIwHhcNMjUwMTAxMDc0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTQyM2ExZDNmZmMxOTRiNmM2YzBiNzViYjQyYjdkYTFkMmExMmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYP6wdqtBHIhuDClOQkHY+LoMLV+
sH/qJxFh9jDLIATd+fPCmgxleMgALQjvjjijnQ0VK171oDWmP1urKPehBG1gECB6
T+mOplHWJpenAN3FVsm0+Hrdk+2G356XHRlwEzINu24yDKCiwPzjQ/ZSiAe9ddN8
XzQEm+nXvWAfnUoGjuWor2XxHjknyTQSykj6wPTfu/UShz8IlJIZA5kGWepvoFBj
TD3vFaqre+JWPWgxZtVZb3/la/GezSG1DWodaxfYdEATtr0RnAqewxJguePlhAO6
V2p8Bnp79OGOcQuHsVPQd7BV7h8zKBBoALLwqg55fmPKtXWo9Ijg6T7FcwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFNVCOh0//BlLbGwLdbtCt9odKhL/MB8GA1UdIwQY
MBaAFAWteUkugJk01pOxGFXnUQMkFWnrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmExNVNTNkFtVFRXazdFWVZlZFJBeVFWYWVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yODBiNzYtMTVhYy00YzY4LTgwMzIt
ZjM3OTdlZjM0OGZmLzEvMVVJNkhUXzhHVXRzYkF0MXUwSzMyaDBxRXY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8yODBiNzYtMTVhYy00YzY4LTgwMzItZjM3OTdlZjM0OGZm
LzEvQmExNVNTNkFtVFRXazdFWVZlZFJBeVFWYWVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiucwDQYJ
KoZIhvcNAQELBQADggEBAIpVnlCFebJ7f0h+snM74CyPmLsWUrty21ZDCVP345Sd
kOTUpyOsIRUaZLBe7eGss72qxYGSbpuwhm6BKwYO9m1XXwxRkwA1uC/Nu22hAoOm
qgzkMY8SoF5WacP3YPrQKsAp1zmokQsAX1oKgtUcxDirZV/2ej7V9AsGjJdH9vOM
/xGIP4oYwbUuvjyQCeB/D8ohTunNL7AAV3K+TMxyXKJ2IvAUdE+eW5nHAq5uuVkC
e3fN73bR1LfedBlRWM59Bkh1BNUnZbaMfGrYLZna8r0Ncfl4g2FTiSekv2KdSaDA
YTqgN1o7Hz3xAtpSzx+8+BmnFN7Mep4x1vOj24Hx3s8=
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:17:58 2025 by rpki-client