Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/9_6Qgvz8x0xmVgbjQq9RZaCrzwI.roa
File: 9_6Qgvz8x0xmVgbjQq9RZaCrzwI.roa (raw, json)
Hash identifier: XDjG9XViYUZoXuJfh57cLMJxvVfFwPpTj7Ylh+rpLA4=
Subject key identifier: F7:FE:90:82:FC:FC:C7:4C:66:56:06:E3:42:AF:51:65:A0:AB:CF:02
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01942827AEFA0D90F5FC0528795E586A7C7F
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/9_6Qgvz8x0xmVgbjQq9RZaCrzwI.roa
Signing time: Thu 02 Jan 2025 17:54:36 +0000
ROA not before: Thu 02 Jan 2025 17:54:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31863
IP address blocks: 195.216.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:ae:fa:0d:90:f5:fc:05:28:79:5e:58:6a:7c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jan 2 17:54:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7fe9082fcfcc74c665606e342af5165a0abcf02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:97:53:6c:67:68:07:80:d5:0f:f4:98:74:4f:
24:83:23:ea:68:ed:98:e4:96:63:e6:b9:19:45:d4:
c3:d3:1b:41:f8:a2:51:eb:28:94:b8:63:bf:eb:33:
d4:37:fd:1a:89:3f:7a:3b:da:cd:61:92:74:5e:1f:
91:40:d0:42:a9:04:b9:68:5c:c5:b5:9f:06:a3:de:
71:26:3a:37:4b:70:cc:c3:62:f5:64:5d:be:e1:37:
a2:ec:55:8c:ee:8f:2b:87:ca:df:42:f5:47:83:7d:
44:30:f6:02:eb:4c:6b:e9:b6:aa:c0:80:f4:11:d8:
54:e9:c7:6a:6f:55:3a:bb:8b:c8:2f:0c:c0:92:57:
fc:53:70:40:9a:54:04:86:f0:09:fc:fa:ba:1a:92:
75:27:19:9b:4c:f5:ce:bd:18:37:2f:76:5e:72:ed:
0c:63:80:e1:fb:06:98:4e:35:21:44:cc:85:fd:cc:
bc:49:fd:77:e4:54:8f:7a:2f:f0:f5:9c:fe:69:7c:
9e:f5:93:63:5d:ae:09:08:91:90:29:d6:15:6d:52:
2c:7a:5c:a9:60:82:ff:9e:7a:22:08:46:8a:6c:15:
6c:f0:a0:2e:07:08:80:5d:7d:13:12:c4:fb:34:c0:
5f:ff:e2:8d:f6:33:36:eb:64:04:82:c1:58:e6:21:
10:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FE:90:82:FC:FC:C7:4C:66:56:06:E3:42:AF:51:65:A0:AB:CF:02
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/9_6Qgvz8x0xmVgbjQq9RZaCrzwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.190.0/24
Signature Algorithm: sha256WithRSAEncryption
63:20:65:61:06:ba:1d:0a:99:08:93:70:05:86:64:89:a9:21:
a2:7e:c7:9e:b1:b9:d3:95:58:50:b6:46:f9:48:84:47:79:46:
c9:6b:0a:22:d8:41:2f:c8:4d:e7:cd:21:89:e5:8d:e6:f1:62:
a5:bc:4b:cd:02:a1:bf:3f:f1:79:14:1c:51:56:29:4a:50:b7:
04:ca:54:70:ed:71:e5:41:9e:5a:a2:01:ac:8c:d3:fd:96:89:
9a:96:ea:e1:95:53:e0:d0:6c:56:f6:8a:44:ad:3d:c8:7b:f8:
91:e6:27:db:65:8e:71:31:51:2f:57:79:9f:22:d9:8c:e1:f8:
6b:e3:95:9e:58:75:4e:8c:3b:3d:48:5a:f2:61:e1:29:74:66:
58:37:66:60:03:12:48:37:9b:f1:68:5b:fe:93:f9:88:23:3a:
49:13:ee:8f:0d:11:98:b3:3b:e5:77:76:11:24:96:cb:4f:17:
14:89:49:65:b3:ed:a9:2d:e9:b7:8b:15:c8:28:d4:59:d3:d3:
01:a4:55:33:45:9d:ec:0e:5a:84:18:03:40:4b:a4:00:a4:f5:
7b:f6:65:d7:76:d8:cc:e2:9d:ca:28:8b:28:5d:dc:35:c2:dd:
35:53:6d:5d:fb:cf:20:99:51:ae:1f:71:72:9e:06:35:01:a5:
05:56:2b:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJ676DZD1/AUoeV5Yanx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy
MTVkYTcwHhcNMjUwMTAyMTc1NDM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2ZlOTA4MmZjZmNjNzRjNjY1NjA2ZTM0MmFmNTE2NWEwYWJjZjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5dTbGdoB4DVD/SYdE8kgyPqaO2Y
5JZj5rkZRdTD0xtB+KJR6yiUuGO/6zPUN/0aiT96O9rNYZJ0Xh+RQNBCqQS5aFzF
tZ8Go95xJjo3S3DMw2L1ZF2+4Tei7FWM7o8rh8rfQvVHg31EMPYC60xr6baqwID0
EdhU6cdqb1U6u4vILwzAklf8U3BAmlQEhvAJ/Pq6GpJ1JxmbTPXOvRg3L3Zecu0M
Y4Dh+waYTjUhRMyF/cy8Sf135FSPei/w9Zz+aXye9ZNjXa4JCJGQKdYVbVIselyp
YIL/nnoiCEaKbBVs8KAuBwiAXX0TEsT7NMBf/+KN9jM262QEgsFY5iEQ/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPf+kIL8/MdMZlYG40KvUWWgq88CMB8GA1UdIwQY
MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct
OWU0MTNlYmY0MmYzLzEvOV82UWd2ejh4MHhtVmdialFxOVJaYUNyendJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz
LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9i+MA0G
CSqGSIb3DQEBCwUAA4IBAQBjIGVhBrodCpkIk3AFhmSJqSGifseesbnTlVhQtkb5
SIRHeUbJawoi2EEvyE3nzSGJ5Y3m8WKlvEvNAqG/P/F5FBxRVilKULcEylRw7XHl
QZ5aogGsjNP9lomalurhlVPg0GxW9opErT3Ie/iR5ifbZY5xMVEvV3mfItmM4fhr
45WeWHVOjDs9SFryYeEpdGZYN2ZgAxJIN5vxaFv+k/mIIzpJE+6PDRGYszvld3YR
JJbLTxcUiUlls+2pLem3ixXIKNRZ09MBpFUzRZ3sDlqEGANAS6QApPV79mXXdtjM
4p3KKIsoXdw1wt01U21d+88gmVGuH3FyngY1AaUFVivL
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:08:21 2025 by rpki-client