Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/I9_0GMOAnJ943tDCt95B2EbJQhI.roa
File: I9_0GMOAnJ943tDCt95B2EbJQhI.roa (raw, json)
Hash identifier: MGPZgp/I3fCodXxgt0EruSzleiV8yqA8A8jUp0ufHqE=
Subject key identifier: 23:DF:F4:18:C3:80:9C:9F:78:DE:D0:C2:B7:DE:41:D8:46:C9:42:12
Certificate issuer: /CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
Certificate serial: 0185A4F5B4FF7D49E5376F5D016D443DDAAA
Authority key identifier: F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/I9_0GMOAnJ943tDCt95B2EbJQhI.roa
Signing time: Thu 12 Jan 2023 07:50:44 +0000
ROA not before: Thu 12 Jan 2023 07:50:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 194.11.212.0/24 maxlen: 24
194.11.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a4:f5:b4:ff:7d:49:e5:37:6f:5d:01:6d:44:3d:da:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
Validity
Not Before: Jan 12 07:50:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23dff418c3809c9f78ded0c2b7de41d846c94212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:54:cf:6a:d4:84:dd:e0:d8:f7:48:ca:14:0a:
3f:92:6e:a4:e0:f6:44:80:34:b8:fb:e5:80:0f:46:
00:86:8e:b2:bd:a7:88:a3:64:ca:39:f4:62:c2:01:
1a:d4:49:2a:b9:f5:e3:54:93:b2:1c:3e:83:c4:32:
94:e5:03:dc:8d:21:07:f5:d2:3a:21:05:ce:a8:99:
d0:de:29:51:06:1f:3a:e8:21:34:64:dd:2b:ba:6a:
85:60:d3:55:99:57:2d:34:d4:c6:75:de:d6:b7:89:
26:e9:1f:2c:9c:be:a2:aa:0e:6c:02:dc:96:6e:a5:
d8:38:18:b4:cb:77:bc:b0:55:eb:be:a4:fc:2c:c3:
e6:e1:6b:84:0e:48:05:f0:05:e6:e6:63:ca:60:ee:
4e:56:9e:0c:4e:44:95:2e:c1:b0:4a:8a:90:45:20:
4f:21:cc:37:87:7f:41:ef:07:60:56:6d:f9:47:68:
41:a2:1c:a5:bd:84:96:55:5c:0d:61:32:10:ae:ff:
85:69:63:ab:7c:88:b1:f8:04:e0:53:b1:53:4f:4e:
1f:31:f2:b2:7e:6d:ed:02:ff:35:ae:ec:33:f8:b8:
9d:f4:90:3a:43:59:18:b7:3b:b6:0a:2d:92:96:3b:
71:51:ee:6b:70:0a:d4:47:56:ab:d2:45:74:28:b8:
c4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DF:F4:18:C3:80:9C:9F:78:DE:D0:C2:B7:DE:41:D8:46:C9:42:12
X509v3 Authority Key Identifier:
keyid:F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/I9_0GMOAnJ943tDCt95B2EbJQhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.207.0/24
194.11.212.0/24
Signature Algorithm: sha256WithRSAEncryption
20:4b:55:fb:5d:88:07:09:1c:a4:1e:dd:3a:94:06:1d:f2:c9:
d6:a2:29:d1:0e:56:53:be:82:e8:75:e7:d3:a4:55:ba:cf:bd:
47:7e:8b:47:62:ed:3c:3a:3c:e9:11:4f:df:3a:8c:c8:38:99:
b2:12:67:bb:99:ef:b1:df:48:c8:2b:17:b2:be:8a:ce:41:f6:
b4:42:19:78:11:21:81:a1:b7:da:d3:22:93:ff:7c:8b:53:9a:
c3:65:21:ea:85:ae:9b:e8:16:2b:4d:57:26:82:41:42:56:e2:
8a:1b:44:a3:65:d1:4a:a5:60:76:a7:71:2d:86:83:f4:f2:85:
bd:d9:76:79:8b:20:8b:52:4b:3d:a4:6f:9d:ab:01:61:bd:8a:
72:12:cf:6e:e2:fb:f4:cd:59:0f:82:42:1e:47:32:c0:c0:bf:
20:76:25:cb:5f:5b:41:81:3a:23:c8:5c:09:58:ed:eb:37:98:
1a:6c:c2:1f:51:a1:7f:63:60:ce:e8:3b:9d:0b:28:33:76:c1:
7a:21:32:10:f6:23:21:cb:25:3f:a4:42:98:9e:5b:75:24:3b:
f8:95:d6:9f:b1:6c:5d:8c:a6:34:59:d8:b4:5a:69:44:3c:a4:
8d:30:62:16:28:ce:98:ab:02:ca:0e:42:9d:ef:8f:61:2d:b6:
3d:8c:79:fb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYWk9bT/fUnlN29dAW1EPdqqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYzQ5ODMzZjQzOWI5ZTA2NzdkOGQzYmYxZjUyZGZiZmIy
YzYyNGYwHhcNMjMwMTEyMDc1MDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2RmZjQxOGMzODA5YzlmNzhkZWQwYzJiN2RlNDFkODQ2Yzk0MjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFTPatSE3eDY90jKFAo/km6k4PZE
gDS4++WAD0YAho6yvaeIo2TKOfRiwgEa1EkqufXjVJOyHD6DxDKU5QPcjSEH9dI6
IQXOqJnQ3ilRBh866CE0ZN0rumqFYNNVmVctNNTGdd7Wt4km6R8snL6iqg5sAtyW
bqXYOBi0y3e8sFXrvqT8LMPm4WuEDkgF8AXm5mPKYO5OVp4MTkSVLsGwSoqQRSBP
Icw3h39B7wdgVm35R2hBohylvYSWVVwNYTIQrv+FaWOrfIix+ATgU7FTT04fMfKy
fm3tAv81ruwz+Lid9JA6Q1kYtzu2Ci2SljtxUe5rcArUR1ar0kV0KLjEjQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCPf9BjDgJyfeN7QwrfeQdhGyUISMB8GA1UdIwQY
MBaAFPHEmDP0ObngZ32NO/H1Lfv7LGJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGNTWU1fUTV1ZUJuZlkwNzhmVXQtX3NzWWs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zYWUzNzktNzllMS00NmFiLWIwNGQt
MGYwZmE2YjZlNGJkLzEvSTlfMEdNT0FuSjk0M3REQ3Q5NUIyRWJKUWhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8zYWUzNzktNzllMS00NmFiLWIwNGQtMGYwZmE2YjZlNGJk
LzEvOGNTWU1fUTV1ZUJuZlkwNzhmVXQtX3NzWWs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwgvPAwQA
wgvUMA0GCSqGSIb3DQEBCwUAA4IBAQAgS1X7XYgHCRykHt06lAYd8snWoinRDlZT
voLodefTpFW6z71HfotHYu08OjzpEU/fOozIOJmyEme7me+x30jIKxeyvorOQfa0
Qhl4ESGBobfa0yKT/3yLU5rDZSHqha6b6BYrTVcmgkFCVuKKG0SjZdFKpWB2p3Et
hoP08oW92XZ5iyCLUks9pG+dqwFhvYpyEs9u4vv0zVkPgkIeRzLAwL8gdiXLX1tB
gTojyFwJWO3rN5gabMIfUaF/Y2DO6DudCygzdsF6ITIQ9iMhyyU/pEKYnlt1JDv4
ldafsWxdjKY0Wdi0WmlEPKSNMGIWKM6YqwLKDkKd749hLbY9jHn7
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:51:31 2025 by rpki-client