Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/76OmZQRdZSBsr5mxi1X8GTIEY5k.roa
File: 76OmZQRdZSBsr5mxi1X8GTIEY5k.roa (raw, json)
Hash identifier: 942NRDldz6j0cH3tLG89Po8c85K8T48SzHE0QeUq0Co=
Subject key identifier: EF:A3:A6:65:04:5D:65:20:6C:AF:99:B1:8B:55:FC:19:32:04:63:99
Certificate issuer: /CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Certificate serial: 231803
Authority key identifier: E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/76OmZQRdZSBsr5mxi1X8GTIEY5k.roa
Signing time: Fri 21 Jan 2022 14:13:52 +0000
ROA not before: Fri 21 Jan 2022 14:13:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136526
IP address blocks: 194.126.202.0/24 maxlen: 24
194.126.219.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
194.126.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2299907 (0x231803)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Validity
Not Before: Jan 21 14:13:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efa3a665045d65206caf99b18b55fc1932046399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:75:7d:08:8d:8c:9d:45:a0:55:40:1e:79:
5b:2a:3a:df:44:0d:fd:8e:d0:66:a9:7d:95:00:dc:
ed:b6:8e:25:dd:48:15:3c:e9:69:59:8b:6f:c2:ae:
4d:4a:11:33:d4:b5:fc:b2:a6:9f:73:59:09:67:d5:
2c:a4:e9:56:a4:8d:eb:37:87:98:e7:2d:05:ce:f3:
ee:bb:ea:36:93:bf:b8:c9:24:a4:7d:48:5d:41:c9:
83:17:7e:39:a4:af:2b:9c:56:1b:30:5d:dd:de:94:
f1:b7:08:5e:03:77:07:f3:39:81:bc:df:e5:81:a0:
32:f1:8f:92:d9:3a:43:64:5b:a5:5e:57:40:47:a7:
69:8c:f8:82:5d:78:a9:03:f6:be:26:7a:00:1c:1e:
79:28:d4:0b:c5:cb:ef:ff:e1:82:68:78:c6:23:6d:
88:ff:ec:95:dd:e8:d6:6f:15:e8:48:af:4d:cc:6f:
9c:15:5c:29:85:5d:99:da:a2:ed:98:df:b1:c3:cf:
5a:23:aa:a6:96:87:f5:33:96:e2:d8:80:c7:6a:bc:
ff:ef:62:8f:ac:ef:16:3c:a5:d5:6d:ff:dc:1d:ab:
80:3c:3c:45:ad:06:f4:58:0b:80:89:e1:0f:a8:c8:
c4:93:c3:7f:87:8d:2a:51:62:4e:c9:c9:e4:2c:8d:
42:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A3:A6:65:04:5D:65:20:6C:AF:99:B1:8B:55:FC:19:32:04:63:99
X509v3 Authority Key Identifier:
keyid:E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/76OmZQRdZSBsr5mxi1X8GTIEY5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/6csWh0iM9DpzNPnvpNnN9jVyTpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.202.0/24
194.126.215.0/24
194.126.219.0/24
194.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a5:dc:e8:48:3f:95:c8:2a:a3:c9:fa:bc:9b:ca:c5:d3:02:
7a:34:85:b8:7a:84:55:06:5d:1d:1b:89:57:e9:fd:34:9e:88:
e9:da:6a:45:91:15:d2:5c:ed:30:d7:a9:6a:c7:69:74:68:78:
ca:25:25:a8:bb:6f:c2:20:45:b7:6d:28:3b:12:e1:8d:d9:80:
99:5a:60:fa:3b:a1:ef:26:49:6c:f1:2e:72:e3:d2:dd:8d:6f:
01:ca:34:f4:1f:3c:ff:d4:17:47:79:68:4d:99:2c:c7:2d:b9:
66:c3:79:9f:d3:82:02:f4:f7:48:c4:e0:a1:7a:02:fa:fb:af:
bd:85:48:ed:c8:61:85:18:eb:49:f8:36:d9:0c:06:14:e1:a8:
65:ef:15:70:72:b4:87:c2:bf:c9:3c:62:84:68:56:66:4d:02:
93:76:fd:2d:e0:ea:4b:d5:a8:4b:07:b2:99:44:2c:35:0d:bc:
4e:4c:26:10:c7:ed:d2:1f:32:bb:bf:b1:ee:ef:27:e9:48:8d:
87:88:bf:e7:24:e7:f0:dc:b3:38:af:93:9b:6c:e6:22:60:c0:
b9:f7:fe:54:fb:eb:3c:f4:67:de:82:9c:24:78:e9:4e:39:00:
4f:47:20:59:d6:02:60:eb:ad:86:b2:61:84:17:bd:89:3e:80:
f2:f0:2d:ab
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIDIxgDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU5
Y2IxNjg3NDg4Y2Y0M2E3MzM0ZjllZmE0ZDljZGY2MzU3MjRlOWMwHhcNMjIwMTIx
MTQxMzUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlZmEzYTY2NTA0NWQ2
NTIwNmNhZjk5YjE4YjU1ZmMxOTMyMDQ2Mzk5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAs2N1fQiNjJ1FoFVAHnlbKjrfRA39jtBmqX2VANztto4l3UgV
POlpWYtvwq5NShEz1LX8sqafc1kJZ9UspOlWpI3rN4eY5y0FzvPuu+o2k7+4ySSk
fUhdQcmDF345pK8rnFYbMF3d3pTxtwheA3cH8zmBvN/lgaAy8Y+S2TpDZFulXldA
R6dpjPiCXXipA/a+JnoAHB55KNQLxcvv/+GCaHjGI22I/+yV3ejWbxXoSK9NzG+c
FVwphV2Z2qLtmN+xw89aI6qmlof1M5bi2IDHarz/72KPrO8WPKXVbf/cHauAPDxF
rQb0WAuAieEPqMjEk8N/h40qUWJOycnkLI1CVQIDAQABo4ICGzCCAhcwHQYDVR0O
BBYEFO+jpmUEXWUgbK+ZsYtV/BkyBGOZMB8GA1UdIwQYMBaAFOnLFodIjPQ6czT5
76TZzfY1ck6cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
NmNzV2gwaU05RHB6TlBudnBObk45alZ5VHB3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC84MS9jNjBlY2UtNTYxYi00ZDE5LThhYmYtYzFmZmE3ZTViMDRhLzEv
NzZPbVpRUmRaU0JzcjVteGkxWDhHVElFWTVrLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9j
NjBlY2UtNTYxYi00ZDE5LThhYmYtYzFmZmE3ZTViMDRhLzEvNmNzV2gwaU05RHB6
TlBudnBObk45alZ5VHB3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG
CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwn7KAwQAwn7XAwQAwn7bAwQAwn7j
MA0GCSqGSIb3DQEBCwUAA4IBAQBspdzoSD+VyCqjyfq8m8rF0wJ6NIW4eoRVBl0d
G4lX6f00nojp2mpFkRXSXO0w16lqx2l0aHjKJSWou2/CIEW3bSg7EuGN2YCZWmD6
O6HvJkls8S5y49LdjW8ByjT0Hzz/1BdHeWhNmSzHLblmw3mf04IC9PdIxOChegL6
+6+9hUjtyGGFGOtJ+DbZDAYU4ahl7xVwcrSHwr/JPGKEaFZmTQKTdv0t4OpL1ahL
B7KZRCw1DbxOTCYQx+3SHzK7v7Hu7yfpSI2HiL/nJOfw3LM4r5ObbOYiYMC59/5U
++s89GfegpwkeOlOOQBPRyBZ1gJg662GsmGEF72JPoDy8C2r
-----END CERTIFICATE-----
Generated at Wed Mar 12 12:52:38 2025 by rpki-client