Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/DOgTri82R6LeQW28xJpSS31R9Ag.roa
File: DOgTri82R6LeQW28xJpSS31R9Ag.roa (raw, json)
Hash identifier: QQzAzUEVZGV/ErbPZRMzK9BxEKqpb5+nSRjAIrmqVpQ=
Subject key identifier: 0C:E8:13:AE:2F:36:47:A2:DE:41:6D:BC:C4:9A:52:4B:7D:51:F4:08
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0194258F4F5191B12F7EDCBAC0D89ADBB486
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/DOgTri82R6LeQW28xJpSS31R9Ag.roa
Signing time: Thu 02 Jan 2025 05:48:56 +0000
ROA not before: Thu 02 Jan 2025 05:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 128.65.172.0/22 maxlen: 24
188.214.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4f:51:91:b1:2f:7e:dc:ba:c0:d8:9a:db:b4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Jan 2 05:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ce813ae2f3647a2de416dbcc49a524b7d51f408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f3:5d:2c:ba:cf:19:b4:6a:66:e6:42:3f:d0:
38:80:ee:6f:81:d9:90:f1:b1:c7:56:36:be:e4:d0:
82:2f:63:b6:d2:d0:3d:08:f7:f4:18:ff:a2:6a:47:
94:d9:7e:1a:2d:16:08:e6:c4:80:a8:15:8b:af:9f:
92:7f:a3:06:fb:85:cb:de:a5:bb:7d:03:d2:0c:16:
70:6e:36:b8:c0:45:a7:59:8e:a5:d2:ee:7d:23:ba:
8f:cd:f4:23:5d:53:df:a7:fc:48:8f:de:08:24:91:
18:99:c6:ea:6e:9f:65:6c:91:ea:31:51:cb:09:04:
33:cf:f5:19:3b:ea:f9:95:17:73:aa:c5:8b:39:60:
a1:ef:b1:f2:8c:29:2a:0a:17:26:36:ac:26:83:90:
80:a2:54:6c:61:6a:39:3c:08:1a:c7:95:2e:60:71:
f9:60:59:fb:e9:07:19:0c:01:ae:63:1a:8b:e5:4f:
ac:d3:40:42:fb:83:e5:77:a6:c2:98:fe:9e:86:a2:
8c:02:36:79:05:a7:36:44:aa:fb:cd:4f:c8:9a:7f:
c2:3f:13:78:b3:6c:1a:bd:20:12:87:89:9b:cb:36:
51:b0:59:ee:c3:74:bc:2b:ea:4b:25:71:b8:32:46:
38:29:60:14:40:7c:6e:9b:ef:0c:91:70:91:64:8a:
c2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E8:13:AE:2F:36:47:A2:DE:41:6D:BC:C4:9A:52:4B:7D:51:F4:08
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/DOgTri82R6LeQW28xJpSS31R9Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.172.0/22
188.214.234.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:bf:9a:3c:71:8e:31:3a:1d:bd:f1:31:97:19:9f:c4:3d:e1:
a0:4e:b6:31:2f:7a:ba:a4:30:36:9d:e0:f8:f6:6e:79:b8:a8:
1a:c1:af:d0:f1:70:75:9c:4e:2d:64:d0:08:4e:df:41:00:b2:
84:12:49:1c:25:18:d8:ea:a0:b3:83:91:45:bc:e7:03:c1:c8:
67:d3:7a:fb:b3:45:27:95:e5:f1:04:ee:c2:4c:55:a5:52:62:
59:0b:9e:db:b4:5d:31:fd:79:b3:db:34:7b:7e:ee:be:08:53:
5a:7c:1f:6c:b6:ef:04:71:eb:0e:cc:fd:a3:23:e1:79:c5:13:
63:71:c3:ab:df:41:e4:87:d7:72:2b:03:61:06:39:55:84:96:
13:60:f6:4f:b2:f0:66:12:f3:b8:27:7c:e6:a2:1d:ed:bb:d0:
1c:8f:bc:19:84:2e:63:12:15:41:60:eb:7b:7b:89:bc:52:74:
89:e4:6b:23:3b:52:b6:c5:cd:42:99:2d:8d:96:ed:fe:9f:cf:
0b:37:f6:9a:1c:33:2e:29:9f:9b:b2:1b:92:01:1b:32:a5:16:
20:d3:ba:fa:98:41:05:82:d8:e3:52:08:6c:35:71:06:0c:ad:
d5:38:1e:fb:7f:0b:0f:3d:df:05:ca:64:ea:81:e9:af:f3:36:
c9:b2:bd:16
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlj09RkbEvfty6wNia27SGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZjlmNTBjYTFjMzRhM2JlNjEwMDQ4ZDEzOGFmM2MwNzUz
YWY5MmIwHhcNMjUwMTAyMDU0ODU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2U4MTNhZTJmMzY0N2EyZGU0MTZkYmNjNDlhNTI0YjdkNTFmNDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivNdLLrPGbRqZuZCP9A4gO5vgdmQ
8bHHVja+5NCCL2O20tA9CPf0GP+iakeU2X4aLRYI5sSAqBWLr5+Sf6MG+4XL3qW7
fQPSDBZwbja4wEWnWY6l0u59I7qPzfQjXVPfp/xIj94IJJEYmcbqbp9lbJHqMVHL
CQQzz/UZO+r5lRdzqsWLOWCh77HyjCkqChcmNqwmg5CAolRsYWo5PAgax5UuYHH5
YFn76QcZDAGuYxqL5U+s00BC+4Pld6bCmP6ehqKMAjZ5Bac2RKr7zU/Imn/CPxN4
s2wavSASh4mbyzZRsFnuw3S8K+pLJXG4MkY4KWAUQHxum+8MkXCRZIrCmQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAzoE64vNkei3kFtvMSaUkt9UfQIMB8GA1UdIwQY
MBaAFMX59Qyhw0o75hAEjROK88B1OvkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGZuMURLSERTanZtRUFTTkU0cnp3SFU2LVNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mMjE5NmEtMzg5ZS00Y2NlLTgxNzEt
OTBhZDBjYWRmZjc5LzEvRE9nVHJpODJSNkxlUVcyOHhKcFNTMzFSOUFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9mMjE5NmEtMzg5ZS00Y2NlLTgxNzEtOTBhZDBjYWRmZjc5
LzEveGZuMURLSERTanZtRUFTTkU0cnp3SFU2LVNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCgEGsAwQB
vNbqMA0GCSqGSIb3DQEBCwUAA4IBAQAev5o8cY4xOh298TGXGZ/EPeGgTrYxL3q6
pDA2neD49m55uKgawa/Q8XB1nE4tZNAITt9BALKEEkkcJRjY6qCzg5FFvOcDwchn
03r7s0UnleXxBO7CTFWlUmJZC57btF0x/Xmz2zR7fu6+CFNafB9stu8EcesOzP2j
I+F5xRNjccOr30Hkh9dyKwNhBjlVhJYTYPZPsvBmEvO4J3zmoh3tu9Acj7wZhC5j
EhVBYOt7e4m8UnSJ5GsjO1K2xc1CmS2Nlu3+n88LN/aaHDMuKZ+bshuSARsypRYg
07r6mEEFgtjjUghsNXEGDK3VOB77fwsPPd8FymTqgemv8zbJsr0W
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:17:36 2025 by rpki-client