Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/9lb0b8puZUrfHtd0Z5dIrE77_nU.roa
File: 9lb0b8puZUrfHtd0Z5dIrE77_nU.roa (raw, json)
Hash identifier: OJTr3zPbOINFegVE0vxgz27hNWHc6eDJ+C9CqzwclrQ=
Subject key identifier: F6:56:F4:6F:CA:6E:65:4A:DF:1E:D7:74:67:97:48:AC:4E:FB:FE:75
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01941FFA0CA8AB50F89E08AFBC3C5BB5DE48
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/9lb0b8puZUrfHtd0Z5dIrE77_nU.roa
Signing time: Wed 01 Jan 2025 03:47:48 +0000
ROA not before: Wed 01 Jan 2025 03:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216246
IP address blocks: 194.113.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0c:a8:ab:50:f8:9e:08:af:bc:3c:5b:b5:de:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 1 03:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f656f46fca6e654adf1ed774679748ac4efbfe75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:01:dd:a8:10:72:31:1d:ce:6e:c3:7a:ad:ef:
ee:22:55:2b:06:71:f1:cc:fa:2c:fb:5e:0a:6a:95:
53:ee:5a:d6:3e:60:72:7e:3e:30:7e:51:69:28:37:
f2:95:54:73:d1:93:95:2d:70:de:86:1a:1d:70:5a:
b9:b3:2a:96:e1:d4:50:57:c2:82:0e:5d:19:b6:ab:
4a:de:08:78:35:fa:6e:58:a8:cd:31:9b:c4:b8:00:
c0:3a:ac:96:2f:38:8c:ff:09:21:bb:8f:82:69:92:
1f:21:69:27:91:96:cc:e7:69:e9:51:a5:be:5d:73:
2c:78:18:bf:40:ec:c3:da:22:88:8c:87:1e:a2:91:
1d:1d:21:6d:35:c9:28:92:2e:62:bf:16:c4:c7:c2:
e3:e4:1b:55:ff:ad:87:16:56:b1:ed:e0:51:05:59:
72:f8:b9:1a:ed:59:65:3f:a1:af:a6:36:73:5a:80:
25:db:9e:7d:10:a4:d6:84:41:e5:8f:69:99:10:ba:
d5:7e:ca:93:30:41:26:61:e2:e2:54:9a:44:01:16:
a1:2a:85:1d:22:b9:15:be:14:06:c4:0e:4e:cf:d9:
1b:25:43:9f:23:06:cd:79:cc:48:77:50:a7:5a:3b:
9c:c9:99:b7:c8:b1:d9:bb:ea:75:6e:6c:16:d3:c0:
6f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:56:F4:6F:CA:6E:65:4A:DF:1E:D7:74:67:97:48:AC:4E:FB:FE:75
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/9lb0b8puZUrfHtd0Z5dIrE77_nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.106.0/24
Signature Algorithm: sha256WithRSAEncryption
50:46:49:ca:36:86:10:57:67:3d:5a:b8:a5:1d:01:9b:af:ad:
cc:e3:4c:e8:9e:30:c1:77:f5:b6:52:74:82:1f:1c:5d:e9:02:
4a:bb:a1:c1:cd:c4:8b:d6:20:d2:57:35:47:5b:61:ae:e5:e6:
62:43:be:ee:10:9a:2c:41:22:b7:f8:c2:b0:c5:79:ad:1b:92:
85:8d:b4:61:de:1e:f4:08:e8:95:3d:26:bc:46:2a:d6:1e:cb:
4a:7d:49:73:11:d0:43:bd:ac:56:a6:50:e7:41:f3:3e:f1:0c:
8d:8f:47:40:f2:45:3d:7b:8d:20:60:9f:bb:fd:b7:39:8c:d9:
82:68:4b:ab:3e:e8:1b:ff:cb:f8:90:06:7c:d8:fb:c3:d8:75:
56:84:dd:a2:29:a7:09:8e:22:b9:16:1a:19:b3:28:da:53:28:
f2:fe:49:89:35:1f:5a:a9:02:06:38:92:80:e7:9c:b3:81:99:
5f:cf:00:6b:83:3f:0b:b1:30:17:ab:8a:95:27:2e:4f:96:2d:
45:19:8c:5f:5b:ed:08:e5:37:68:51:60:cb:c3:4c:68:7b:f0:
7f:67:6e:2f:82:a5:f5:1d:08:2e:40:6f:e6:18:e3:e3:98:eb:
22:1c:76:f5:11:36:30:12:73:5e:8e:c1:57:dc:f5:d0:58:2d:
84:39:13:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+gyoq1D4ngivvDxbtd5IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjUwMTAxMDM0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjU2ZjQ2ZmNhNmU2NTRhZGYxZWQ3NzQ2Nzk3NDhhYzRlZmJmZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAHdqBByMR3ObsN6re/uIlUrBnHx
zPos+14KapVT7lrWPmByfj4wflFpKDfylVRz0ZOVLXDehhodcFq5syqW4dRQV8KC
Dl0ZtqtK3gh4NfpuWKjNMZvEuADAOqyWLziM/wkhu4+CaZIfIWknkZbM52npUaW+
XXMseBi/QOzD2iKIjIceopEdHSFtNckoki5ivxbEx8Lj5BtV/62HFlax7eBRBVly
+Lka7VllP6GvpjZzWoAl2559EKTWhEHlj2mZELrVfsqTMEEmYeLiVJpEARahKoUd
IrkVvhQGxA5Oz9kbJUOfIwbNecxId1CnWjucyZm3yLHZu+p1bmwW08BvHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPZW9G/KbmVK3x7XdGeXSKxO+/51MB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvOWxiMGI4cHVaVXJmSHRkMFo1ZElyRTc3X25VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnFqMA0G
CSqGSIb3DQEBCwUAA4IBAQBQRknKNoYQV2c9WrilHQGbr63M40zonjDBd/W2UnSC
Hxxd6QJKu6HBzcSL1iDSVzVHW2Gu5eZiQ77uEJosQSK3+MKwxXmtG5KFjbRh3h70
COiVPSa8RirWHstKfUlzEdBDvaxWplDnQfM+8QyNj0dA8kU9e40gYJ+7/bc5jNmC
aEurPugb/8v4kAZ82PvD2HVWhN2iKacJjiK5FhoZsyjaUyjy/kmJNR9aqQIGOJKA
55yzgZlfzwBrgz8LsTAXq4qVJy5Pli1FGYxfW+0I5TdoUWDLw0xoe/B/Z24vgqX1
HQguQG/mGOPjmOsiHHb1ETYwEnNejsFX3PXQWC2EORO3
-----END CERTIFICATE-----
Generated at Thu Apr 10 23:54:20 2025 by rpki-client