Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/L9eXoOzloyfByegWKWMIHSuYWXU.roa
File: L9eXoOzloyfByegWKWMIHSuYWXU.roa (raw, json)
Hash identifier: 0VEFznzUQQMlCk6q903xJ+gBbGsXZIaen1RH1RLLoj0=
Subject key identifier: 2F:D7:97:A0:EC:E5:A3:27:C1:C9:E8:16:29:63:08:1D:2B:98:59:75
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019420D629B423DA88715EF9859D6477C9A3
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/L9eXoOzloyfByegWKWMIHSuYWXU.roa
Signing time: Wed 01 Jan 2025 07:48:13 +0000
ROA not before: Wed 01 Jan 2025 07:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64161
IP address blocks: 195.88.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:29:b4:23:da:88:71:5e:f9:85:9d:64:77:c9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 07:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fd797a0ece5a327c1c9e8162963081d2b985975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:8a:f8:3f:a0:30:16:17:b0:50:88:25:fc:
d9:b6:bc:fb:c3:db:52:f2:ed:27:5e:6f:9d:1f:5f:
86:da:ab:eb:af:b8:29:42:25:20:03:94:58:3b:e7:
ee:87:7c:03:41:d0:6e:72:7e:5f:22:02:6f:94:54:
ab:23:8c:90:db:b6:c6:c2:81:b4:3b:b6:d8:d1:7d:
19:af:c8:84:46:dd:36:f0:b5:90:d0:c7:de:f7:71:
9d:28:87:0f:66:c0:55:61:0d:c5:38:aa:84:43:9b:
ba:6d:9a:a2:83:82:af:70:2c:75:3b:c8:b8:79:16:
1b:de:54:66:99:9e:0c:67:b6:65:42:75:a2:b2:78:
f9:da:30:bc:81:0a:6a:a9:9e:12:9f:0a:1e:22:cf:
21:ff:ad:22:ad:3e:d5:fe:14:2f:e4:09:05:e3:b1:
b7:52:31:68:7f:a8:47:85:f3:3a:51:0e:c7:df:b6:
9f:32:20:cf:71:2d:6d:9e:b5:e9:eb:03:4b:36:2e:
fc:39:c7:0e:16:53:f0:3f:3f:eb:da:25:af:bd:96:
ea:b0:b5:21:3a:e9:b1:0e:7e:37:89:0a:c0:21:9e:
8d:55:ea:5b:aa:fd:6b:6e:60:56:33:3c:55:08:4f:
74:03:73:b5:5b:34:7a:c7:1c:c3:9e:20:1f:3a:7f:
e1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D7:97:A0:EC:E5:A3:27:C1:C9:E8:16:29:63:08:1D:2B:98:59:75
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/L9eXoOzloyfByegWKWMIHSuYWXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.213.0/24
Signature Algorithm: sha256WithRSAEncryption
64:45:ad:03:28:46:ba:44:46:d0:ed:c4:a1:f4:1f:f3:de:23:
c6:f3:50:8d:0a:ac:a3:cb:e4:fa:bc:e0:25:06:e7:d1:06:86:
f9:8d:84:10:0f:23:2e:06:20:cd:82:33:81:87:74:51:47:b8:
15:84:da:dd:a3:32:7a:4c:13:38:44:98:e3:41:31:05:e4:12:
7d:2f:d5:d9:db:42:22:63:d5:22:9a:1b:38:31:94:2d:6d:b0:
63:83:89:df:d9:49:84:f3:42:a0:23:e8:9a:e7:be:2f:72:47:
8b:a3:8b:00:24:60:05:11:d3:9d:d1:0f:f5:6f:96:a8:bd:80:
61:91:a8:be:2f:09:f0:a2:ef:4d:55:5e:f7:89:4f:8a:72:38:
c1:eb:77:ea:19:13:ea:40:cb:6b:e8:78:d1:0c:46:91:bc:53:
1b:c7:b6:c3:0b:04:38:7d:63:7d:27:2e:30:ff:75:af:08:19:
29:7d:72:29:d8:aa:fe:5c:3d:b6:c9:90:e5:8b:89:ae:be:c1:
4c:f2:17:31:84:7b:6a:61:9b:46:45:c3:9f:96:b3:23:98:cf:
ac:f3:46:1b:07:37:2a:68:54:f4:06:5c:7f:c6:d8:50:a8:76:
a9:05:e0:fe:30:72:32:32:6e:41:95:a8:23:97:15:4e:ab:14:
45:55:93:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1im0I9qIcV75hZ1kd8mjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy
NTFkYWQwHhcNMjUwMTAxMDc0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmQ3OTdhMGVjZTVhMzI3YzFjOWU4MTYyOTYzMDgxZDJiOTg1OTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMOK+D+gMBYXsFCIJfzZtrz7w9tS
8u0nXm+dH1+G2qvrr7gpQiUgA5RYO+fuh3wDQdBucn5fIgJvlFSrI4yQ27bGwoG0
O7bY0X0Zr8iERt028LWQ0Mfe93GdKIcPZsBVYQ3FOKqEQ5u6bZqig4KvcCx1O8i4
eRYb3lRmmZ4MZ7ZlQnWisnj52jC8gQpqqZ4SnwoeIs8h/60irT7V/hQv5AkF47G3
UjFof6hHhfM6UQ7H37afMiDPcS1tnrXp6wNLNi78OccOFlPwPz/r2iWvvZbqsLUh
OumxDn43iQrAIZ6NVepbqv1rbmBWMzxVCE90A3O1WzR6xxzDniAfOn/heQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC/Xl6Ds5aMnwcnoFiljCB0rmFl1MB8GA1UdIwQY
MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt
YjdjNTc4Yjc0ZTM1LzEvTDllWG9PemxveWZCeWVnV0tXTUlIU3VZV1hVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1
LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1jVMA0G
CSqGSIb3DQEBCwUAA4IBAQBkRa0DKEa6REbQ7cSh9B/z3iPG81CNCqyjy+T6vOAl
BufRBob5jYQQDyMuBiDNgjOBh3RRR7gVhNrdozJ6TBM4RJjjQTEF5BJ9L9XZ20Ii
Y9Uimhs4MZQtbbBjg4nf2UmE80KgI+ia574vckeLo4sAJGAFEdOd0Q/1b5aovYBh
kai+Lwnwou9NVV73iU+KcjjB63fqGRPqQMtr6HjRDEaRvFMbx7bDCwQ4fWN9Jy4w
/3WvCBkpfXIp2Kr+XD22yZDli4muvsFM8hcxhHtqYZtGRcOflrMjmM+s80YbBzcq
aFT0Blx/xthQqHapBeD+MHIyMm5BlagjlxVOqxRFVZM3
-----END CERTIFICATE-----
Generated at Thu Apr 10 13:16:56 2025 by rpki-client