Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/i8Kr9EiHlGwbo-3XlnSbjG89RIw.roa
File: i8Kr9EiHlGwbo-3XlnSbjG89RIw.roa (raw, json)
Hash identifier: 0E2P6x+NEysXUFpl7woxjes7LLuwM7RFq3oU/ZnWr0g=
Subject key identifier: 8B:C2:AB:F4:48:87:94:6C:1B:A3:ED:D7:96:74:9B:8C:6F:3D:44:8C
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0194258F52DCCF152DC3A05EC757C3B7816E
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/i8Kr9EiHlGwbo-3XlnSbjG89RIw.roa
Signing time: Thu 02 Jan 2025 05:48:57 +0000
ROA not before: Thu 02 Jan 2025 05:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54339
IP address blocks: 194.26.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:52:dc:cf:15:2d:c3:a0:5e:c7:57:c3:b7:81:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Jan 2 05:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bc2abf44887946c1ba3edd796749b8c6f3d448c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:dc:ab:d5:02:8c:2d:04:36:e6:e4:0a:3b:
9b:69:d4:55:4e:58:04:86:ca:c9:e9:f0:8c:93:36:
bb:26:c4:a1:6c:f6:3e:39:94:32:92:0b:11:68:6c:
54:eb:33:8b:be:72:8a:e0:91:23:3e:1b:20:7a:07:
1f:c8:9d:21:9c:2f:0d:72:fd:5b:c1:32:1d:2e:05:
04:ce:3d:77:f7:44:2b:9d:0e:05:e0:0f:1b:be:49:
75:9d:68:d7:d4:72:9c:be:c5:c6:c6:3e:33:97:87:
d1:ac:d1:c3:34:57:86:c5:d8:f1:8a:4a:06:3c:ce:
bc:8d:2f:c5:c0:bc:3e:86:72:e8:38:70:cb:60:53:
ce:1c:54:b9:c0:cf:18:b9:98:63:d1:35:cc:2c:d7:
fc:09:15:aa:1a:d8:ed:e0:4a:cd:aa:e3:a2:57:fb:
80:7d:19:71:72:c7:7c:b9:e5:d0:1b:87:ac:31:b2:
66:07:83:a9:95:f0:82:f0:65:fb:96:f0:52:b3:8b:
49:52:f1:3a:b3:da:c0:1e:5f:36:83:64:0d:b0:57:
e4:c2:20:61:25:09:ca:f5:85:42:97:fc:5b:b8:57:
3e:ea:c9:c2:88:f6:60:e2:69:05:94:da:82:47:af:
71:88:61:b2:ec:b1:0b:2b:58:7a:45:bd:e8:a8:32:
27:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C2:AB:F4:48:87:94:6C:1B:A3:ED:D7:96:74:9B:8C:6F:3D:44:8C
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/i8Kr9EiHlGwbo-3XlnSbjG89RIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.3.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:17:4a:8b:35:ea:0c:0f:45:cb:ca:18:c5:6c:31:1b:06:30:
e7:37:d9:f6:3e:a8:e0:6a:d4:65:7e:08:91:14:9f:7d:a8:d9:
be:ad:7e:a3:d5:46:62:88:1f:54:c8:15:bc:3f:b6:7a:43:3f:
c9:49:fa:71:08:33:38:32:62:dc:4f:ea:6a:90:dd:67:5e:de:
9e:a9:be:4f:0c:02:1f:63:de:a6:1f:cf:33:08:90:8f:64:70:
a1:c9:e3:25:9b:5a:8b:1d:23:d0:76:3e:99:f5:75:fd:26:f1:
95:76:b7:0f:20:c6:cb:b4:7e:0b:f8:77:47:ac:b4:bb:10:42:
71:4e:c5:64:b8:ab:bc:d6:73:98:23:0f:4e:de:f7:4c:74:2e:
54:cd:f6:e0:02:f8:80:d7:da:de:20:74:16:69:52:50:4c:f8:
bb:85:eb:09:4d:72:44:40:37:09:ad:59:3c:fa:92:8b:5f:80:
2a:69:d9:b0:f2:f1:32:ca:3a:24:fc:db:38:fa:c9:17:c8:35:
7b:40:ac:66:8b:5d:78:e1:58:8b:bc:12:a0:67:1f:fb:5c:c1:
e5:85:6a:be:ce:52:30:8c:12:df:b7:97:05:42:8c:16:4c:36:
a9:a4:5d:74:7c:a0:b4:94:6d:94:3a:66:1f:7e:28:12:01:fe:
02:19:2b:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj1LczxUtw6Bex1fDt4FuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZjlmNTBjYTFjMzRhM2JlNjEwMDQ4ZDEzOGFmM2MwNzUz
YWY5MmIwHhcNMjUwMTAyMDU0ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmMyYWJmNDQ4ODc5NDZjMWJhM2VkZDc5Njc0OWI4YzZmM2Q0NDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq63cq9UCjC0ENubkCjubadRVTlgE
hsrJ6fCMkza7JsShbPY+OZQykgsRaGxU6zOLvnKK4JEjPhsgegcfyJ0hnC8Ncv1b
wTIdLgUEzj1390QrnQ4F4A8bvkl1nWjX1HKcvsXGxj4zl4fRrNHDNFeGxdjxikoG
PM68jS/FwLw+hnLoOHDLYFPOHFS5wM8YuZhj0TXMLNf8CRWqGtjt4ErNquOiV/uA
fRlxcsd8ueXQG4esMbJmB4OplfCC8GX7lvBSs4tJUvE6s9rAHl82g2QNsFfkwiBh
JQnK9YVCl/xbuFc+6snCiPZg4mkFlNqCR69xiGGy7LELK1h6Rb3oqDIn2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIvCq/RIh5RsG6Pt15Z0m4xvPUSMMB8GA1UdIwQY
MBaAFMX59Qyhw0o75hAEjROK88B1OvkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGZuMURLSERTanZtRUFTTkU0cnp3SFU2LVNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mMjE5NmEtMzg5ZS00Y2NlLTgxNzEt
OTBhZDBjYWRmZjc5LzEvaThLcjlFaUhsR3diby0zWGxuU2JqRzg5Ukl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9mMjE5NmEtMzg5ZS00Y2NlLTgxNzEtOTBhZDBjYWRmZjc5
LzEveGZuMURLSERTanZtRUFTTkU0cnp3SFU2LVNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhoDMA0G
CSqGSIb3DQEBCwUAA4IBAQA/F0qLNeoMD0XLyhjFbDEbBjDnN9n2PqjgatRlfgiR
FJ99qNm+rX6j1UZiiB9UyBW8P7Z6Qz/JSfpxCDM4MmLcT+pqkN1nXt6eqb5PDAIf
Y96mH88zCJCPZHChyeMlm1qLHSPQdj6Z9XX9JvGVdrcPIMbLtH4L+HdHrLS7EEJx
TsVkuKu81nOYIw9O3vdMdC5UzfbgAviA19reIHQWaVJQTPi7hesJTXJEQDcJrVk8
+pKLX4Aqadmw8vEyyjok/Ns4+skXyDV7QKxmi1144ViLvBKgZx/7XMHlhWq+zlIw
jBLft5cFQowWTDappF10fKC0lG2UOmYffigSAf4CGSsT
-----END CERTIFICATE-----
Generated at Tue Apr 22 12:41:28 2025 by rpki-client