Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/Q1WtSLJNWy_RGq3LRqSVD2p5Wzo.roa
File: Q1WtSLJNWy_RGq3LRqSVD2p5Wzo.roa (raw, json)
Hash identifier: bzXxmYBf76M9JB8Kc6llvpRoGX6FsougBswiTSpsOSk=
Subject key identifier: 43:55:AD:48:B2:4D:5B:2F:D1:1A:AD:CB:46:A4:95:0F:6A:79:5B:3A
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0194258F520A3926A8BB5493A4A42D97C7CB
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/Q1WtSLJNWy_RGq3LRqSVD2p5Wzo.roa
Signing time: Thu 02 Jan 2025 05:48:57 +0000
ROA not before: Thu 02 Jan 2025 05:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42689
IP address blocks: 194.26.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:52:0a:39:26:a8:bb:54:93:a4:a4:2d:97:c7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Jan 2 05:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4355ad48b24d5b2fd11aadcb46a4950f6a795b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e4:45:54:b8:32:07:c6:c5:63:89:65:e9:43:
7c:8b:a0:f7:ac:91:a6:1e:6c:c7:84:e7:dc:68:25:
1f:ec:70:83:1b:cb:42:c9:e1:cd:0a:ec:90:3f:04:
79:dc:4a:40:d8:12:3e:dd:31:49:a8:3e:d0:ce:95:
52:b2:da:70:44:df:3d:c2:8c:3d:ff:cb:4f:28:73:
8b:42:28:eb:65:1e:f0:b8:75:29:bb:09:1f:2f:c5:
ab:c7:a1:ab:40:d4:62:fe:e8:f7:47:34:0e:63:ad:
76:70:df:c7:90:71:4c:90:62:fb:f7:c8:c4:01:82:
67:87:46:d3:b8:3f:fe:f9:c7:b5:ae:2e:a8:0d:ba:
57:39:60:f4:52:9b:27:92:74:66:de:ee:70:1a:f5:
92:29:ed:69:e8:5f:75:1a:99:26:c2:9a:26:6a:2f:
0b:7f:30:e0:97:79:0a:b3:6d:57:ca:c3:49:6c:c7:
3c:f0:09:9e:2c:75:48:b4:a4:50:47:3e:ea:60:c1:
61:41:e6:e9:1b:57:2d:50:4a:de:f4:25:76:bf:ca:
36:9e:0b:1a:94:1d:20:6c:34:d4:58:a4:85:a6:3d:
6e:45:b3:f4:48:cb:eb:aa:48:b0:de:3f:2d:d3:9e:
5f:7f:02:cf:9c:f2:2b:4b:60:61:51:2f:98:ae:ec:
d7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:55:AD:48:B2:4D:5B:2F:D1:1A:AD:CB:46:A4:95:0F:6A:79:5B:3A
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/Q1WtSLJNWy_RGq3LRqSVD2p5Wzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.20.0/24
Signature Algorithm: sha256WithRSAEncryption
23:db:a7:37:d0:5d:78:88:98:a2:3e:c6:de:3f:39:6b:3f:31:
72:40:14:fa:18:57:ed:48:d2:41:bc:c4:56:e0:f0:80:ac:2d:
7c:df:ea:7a:e9:7a:6b:e0:6a:05:84:e7:d7:5f:d8:b2:93:d8:
37:ab:b6:b8:ee:53:ad:5f:b6:4c:cd:f6:b0:bc:a9:e7:5e:4b:
52:b4:ee:09:01:40:7d:6e:29:64:7e:77:cf:f3:09:e8:72:1f:
95:22:00:0b:03:2e:fa:67:6f:72:04:8e:9e:6c:45:24:cc:4e:
3e:d8:72:4a:4c:aa:ac:de:3f:d9:7d:10:d7:55:f8:a0:ef:13:
91:8a:7b:40:51:42:41:9e:6e:5d:8b:6b:de:f1:f8:d4:d0:44:
2c:87:fa:fa:a2:de:f7:31:f8:20:88:95:89:87:72:8c:f9:e4:
36:0d:76:35:51:c8:f2:79:b5:b6:4f:45:3b:b6:19:fb:07:c9:
4e:d7:88:c5:1c:57:91:f6:f5:81:48:4b:b8:f5:c6:c5:2b:63:
fb:e5:5a:78:58:20:98:d1:22:c3:e7:bc:36:1d:f4:6a:ac:6c:
1c:71:a4:1b:8e:38:fd:8b:e0:9b:5f:11:c5:ad:09:3b:e2:32:
5a:28:89:5b:53:44:59:4d:ce:6f:34:d1:1a:15:a0:d6:40:c2:
38:30:c7:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj1IKOSaou1STpKQtl8fLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZjlmNTBjYTFjMzRhM2JlNjEwMDQ4ZDEzOGFmM2MwNzUz
YWY5MmIwHhcNMjUwMTAyMDU0ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzU1YWQ0OGIyNGQ1YjJmZDExYWFkY2I0NmE0OTUwZjZhNzk1YjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeRFVLgyB8bFY4ll6UN8i6D3rJGm
HmzHhOfcaCUf7HCDG8tCyeHNCuyQPwR53EpA2BI+3TFJqD7QzpVSstpwRN89wow9
/8tPKHOLQijrZR7wuHUpuwkfL8Wrx6GrQNRi/uj3RzQOY612cN/HkHFMkGL798jE
AYJnh0bTuD/++ce1ri6oDbpXOWD0UpsnknRm3u5wGvWSKe1p6F91Gpkmwpomai8L
fzDgl3kKs21XysNJbMc88AmeLHVItKRQRz7qYMFhQebpG1ctUEre9CV2v8o2ngsa
lB0gbDTUWKSFpj1uRbP0SMvrqkiw3j8t055ffwLPnPIrS2BhUS+YruzXtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFENVrUiyTVsv0Rqty0aklQ9qeVs6MB8GA1UdIwQY
MBaAFMX59Qyhw0o75hAEjROK88B1OvkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGZuMURLSERTanZtRUFTTkU0cnp3SFU2LVNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mMjE5NmEtMzg5ZS00Y2NlLTgxNzEt
OTBhZDBjYWRmZjc5LzEvUTFXdFNMSk5XeV9SR3EzTFJxU1ZEMnA1V3pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9mMjE5NmEtMzg5ZS00Y2NlLTgxNzEtOTBhZDBjYWRmZjc5
LzEveGZuMURLSERTanZtRUFTTkU0cnp3SFU2LVNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhoUMA0G
CSqGSIb3DQEBCwUAA4IBAQAj26c30F14iJiiPsbePzlrPzFyQBT6GFftSNJBvMRW
4PCArC183+p66Xpr4GoFhOfXX9iyk9g3q7a47lOtX7ZMzfawvKnnXktStO4JAUB9
bilkfnfP8wnoch+VIgALAy76Z29yBI6ebEUkzE4+2HJKTKqs3j/ZfRDXVfig7xOR
intAUUJBnm5di2ve8fjU0EQsh/r6ot73MfggiJWJh3KM+eQ2DXY1UcjyebW2T0U7
thn7B8lO14jFHFeR9vWBSEu49cbFK2P75Vp4WCCY0SLD57w2HfRqrGwccaQbjjj9
i+CbXxHFrQk74jJaKIlbU0RZTc5vNNEaFaDWQMI4MMd6
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:18:42 2025 by rpki-client