Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/7RaGRpteAPU-JEOa6gyOeUUaz1M.roa
File: 7RaGRpteAPU-JEOa6gyOeUUaz1M.roa (raw, json)
Hash identifier: OqBBLrE7nX8ZR8+lsbAyGBi0x2gZcydxjiv43PsnDSA=
Subject key identifier: ED:16:86:46:9B:5E:00:F5:3E:24:43:9A:EA:0C:8E:79:45:1A:CF:53
Certificate issuer: /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Certificate serial: 019425FD78FB888E0938C899F2512D86E548
Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/7RaGRpteAPU-JEOa6gyOeUUaz1M.roa
Signing time: Thu 02 Jan 2025 07:49:15 +0000
ROA not before: Thu 02 Jan 2025 07:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5483
IP address blocks: 195.90.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:78:fb:88:8e:09:38:c8:99:f2:51:2d:86:e5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Validity
Not Before: Jan 2 07:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed1686469b5e00f53e24439aea0c8e79451acf53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:a1:05:5c:44:a3:3b:68:09:b9:20:14:34:
6d:4a:0b:d7:17:37:99:82:6d:1f:f2:a2:98:52:1f:
b1:86:be:d1:ec:68:23:9a:13:1e:df:e1:11:47:08:
cb:53:81:98:8c:c9:77:1d:e5:cd:41:ac:d9:68:06:
f7:f8:ee:bc:fe:60:35:e3:94:aa:d4:ce:fb:c5:b5:
81:ab:e8:e1:1f:e6:c7:ae:4c:c3:bf:f0:31:43:d3:
1d:4a:4b:6c:cd:81:bb:9d:06:e4:9e:74:5a:f4:77:
71:c2:e4:89:69:41:fd:b1:40:9d:65:ed:af:2b:97:
73:7c:27:30:ef:fc:0a:9f:e2:72:d5:22:38:00:0f:
45:7e:a8:be:40:fb:12:49:f3:f4:b3:9e:74:79:f1:
b7:bd:9c:fa:69:0c:e4:d4:8e:49:4e:f4:c7:ff:00:
7b:8b:72:25:a1:f4:a3:4c:0b:1c:08:91:4b:a1:8f:
79:a4:b6:ce:86:6b:d5:35:37:1b:16:d9:a1:46:6b:
30:da:d9:26:04:fd:d8:2b:db:e0:14:97:a5:bf:7a:
6a:eb:85:4d:89:8e:a9:3b:70:eb:7b:35:36:7a:fa:
b1:d9:c8:81:45:6c:a3:d5:4b:3d:31:29:0d:c5:72:
16:20:b8:8c:c1:f1:44:4c:2c:60:aa:a2:a9:b7:06:
7a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:16:86:46:9B:5E:00:F5:3E:24:43:9A:EA:0C:8E:79:45:1A:CF:53
X509v3 Authority Key Identifier:
keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/7RaGRpteAPU-JEOa6gyOeUUaz1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.90.98.0/24
Signature Algorithm: sha256WithRSAEncryption
42:05:33:27:9d:93:fe:da:06:30:fd:18:d8:fe:63:97:bd:2d:
12:70:ac:fa:6b:83:60:13:98:14:93:2c:c7:2c:ab:6c:6e:e1:
2c:80:ff:a8:d6:dc:96:93:2b:c7:5a:22:e9:a4:b5:04:91:60:
b0:cc:fe:f5:a7:f5:8f:4c:d2:ce:1e:e4:9e:11:28:74:97:04:
53:16:37:52:0c:45:dd:f1:bc:67:2d:f6:cd:99:fd:a6:83:87:
03:86:6b:88:fd:ea:c6:56:25:4b:76:d9:07:39:5a:5a:17:26:
81:08:9b:e2:71:29:05:2e:60:63:0a:db:d0:fe:44:d3:2c:ea:
58:ec:95:54:08:75:21:be:e9:bb:3f:52:1a:00:53:ea:e0:7c:
46:d5:ea:11:ef:a1:d2:15:b1:c5:74:06:11:e9:47:a5:b5:d7:
ef:f7:40:94:00:f2:01:3f:d2:38:34:25:2b:34:c6:88:7a:6d:
c3:64:bb:50:0d:e0:24:de:aa:3e:b8:6b:bc:1d:b4:35:f5:2c:
1f:0c:b2:16:4d:ae:93:36:7a:45:ff:cc:c7:0b:64:ee:09:9a:
f4:e7:76:3f:77:d1:84:22:5b:c4:56:45:f7:35:7a:1e:21:ff:
49:15:a4:b3:76:a4:ae:e5:9c:24:2b:05:a5:9e:4d:a0:26:11:
af:e3:72:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/Xj7iI4JOMiZ8lEthuVIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZThmNDFmNmIwMmI5M2Y4NWQxYTdiNDhiNDhjZmEzMjJm
MDg4ZjgwHhcNMjUwMTAyMDc0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDE2ODY0NjliNWUwMGY1M2UyNDQzOWFlYTBjOGU3OTQ1MWFjZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAShBVxEoztoCbkgFDRtSgvXFzeZ
gm0f8qKYUh+xhr7R7GgjmhMe3+ERRwjLU4GYjMl3HeXNQazZaAb3+O68/mA145Sq
1M77xbWBq+jhH+bHrkzDv/AxQ9MdSktszYG7nQbknnRa9HdxwuSJaUH9sUCdZe2v
K5dzfCcw7/wKn+Jy1SI4AA9Ffqi+QPsSSfP0s550efG3vZz6aQzk1I5JTvTH/wB7
i3IlofSjTAscCJFLoY95pLbOhmvVNTcbFtmhRmsw2tkmBP3YK9vgFJelv3pq64VN
iY6pO3DrezU2evqx2ciBRWyj1Us9MSkNxXIWILiMwfFETCxgqqKptwZ6LwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO0WhkabXgD1PiRDmuoMjnlFGs9TMB8GA1UdIwQY
MBaAFOHo9B9rArk/hdGntItIz6Mi8Ij4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGVqMEgyc0N1VC1GMGFlMGkwalBveUx3aVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85YmE5NDAtMDA3OC00ZmQwLWFmZGUt
NTM3YTJiMGI0ZGRhLzEvN1JhR1JwdGVBUFUtSkVPYTZneU9lVVVhejFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85YmE5NDAtMDA3OC00ZmQwLWFmZGUtNTM3YTJiMGI0ZGRh
LzEvNGVqMEgyc0N1VC1GMGFlMGkwalBveUx3aVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1piMA0G
CSqGSIb3DQEBCwUAA4IBAQBCBTMnnZP+2gYw/RjY/mOXvS0ScKz6a4NgE5gUkyzH
LKtsbuEsgP+o1tyWkyvHWiLppLUEkWCwzP71p/WPTNLOHuSeESh0lwRTFjdSDEXd
8bxnLfbNmf2mg4cDhmuI/erGViVLdtkHOVpaFyaBCJvicSkFLmBjCtvQ/kTTLOpY
7JVUCHUhvum7P1IaAFPq4HxG1eoR76HSFbHFdAYR6Ueltdfv90CUAPIBP9I4NCUr
NMaIem3DZLtQDeAk3qo+uGu8HbQ19SwfDLIWTa6TNnpF/8zHC2TuCZr053Y/d9GE
IlvEVkX3NXoeIf9JFaSzdqSu5ZwkKwWlnk2gJhGv43Lq
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:00:09 2025 by rpki-client