Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/cg9Krk0ZRGmOqQxEXMLn6NKNqWI.roa
File: cg9Krk0ZRGmOqQxEXMLn6NKNqWI.roa (raw, json)
Hash identifier: qRcRo1KIIXd3eK67q35U7AZWAYX9zHXWdfoHma+qw5o=
Subject key identifier: 72:0F:4A:AE:4D:19:44:69:8E:A9:0C:44:5C:C2:E7:E8:D2:8D:A9:62
Certificate issuer: /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Certificate serial: 36F75E33
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/cg9Krk0ZRGmOqQxEXMLn6NKNqWI.roa
Signing time: Sat 01 Jan 2022 01:02:59 +0000
ROA not before: Sat 01 Jan 2022 01:02:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 195.42.144.0/23 maxlen: 32
2001:7f8:43::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 922181171 (0x36f75e33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Validity
Not Before: Jan 1 01:02:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=720f4aae4d1944698ea90c445cc2e7e8d28da962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:de:59:5b:f4:e1:e3:a1:97:d0:68:c9:93:
70:10:a9:0b:46:91:03:7e:04:24:24:7e:a0:81:78:
7d:fe:1b:ca:c0:24:d9:07:da:da:ab:50:5e:fa:a3:
cb:7b:62:21:93:55:99:6d:6b:25:77:b3:2c:32:d2:
fe:11:f7:a0:96:b8:21:8c:86:bb:09:0d:40:57:4b:
1c:32:be:06:b4:15:97:68:3e:b1:67:8d:09:fc:8e:
6a:a4:27:56:40:5a:5d:2c:d7:48:ee:45:bd:2e:61:
5a:f2:cb:59:fd:af:b5:14:f0:0f:59:ee:42:3b:d9:
04:51:ca:14:78:b5:9d:42:c2:fd:e6:8d:3a:28:c3:
41:41:a8:e9:61:2d:91:2c:e8:00:b9:97:f5:e5:15:
5a:2e:97:e4:7f:02:3e:ca:99:8f:50:4b:d7:ff:71:
95:e9:bb:ec:9b:f7:82:d5:90:a1:8a:3f:28:82:10:
f7:f9:eb:39:2e:ec:8d:c6:45:0d:27:db:f1:cd:7b:
54:30:f8:04:c0:1a:2d:c4:d9:a9:71:64:73:93:79:
1f:5a:1f:b8:6c:61:2b:45:4c:00:55:9c:91:bd:09:
f9:38:81:6e:ba:52:ae:08:3f:07:5e:0b:08:59:a4:
3e:ed:ee:61:dc:45:62:9b:66:d2:56:90:6e:05:7a:
0d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0F:4A:AE:4D:19:44:69:8E:A9:0C:44:5C:C2:E7:E8:D2:8D:A9:62
X509v3 Authority Key Identifier:
keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/cg9Krk0ZRGmOqQxEXMLn6NKNqWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.42.144.0/23
IPv6:
2001:7f8:43::/48
Signature Algorithm: sha256WithRSAEncryption
52:07:af:ba:bd:57:e1:86:1c:cf:e9:c2:74:1a:8d:15:e7:df:
73:33:bb:6d:6a:81:de:d2:1b:00:b0:40:68:38:90:86:40:65:
83:67:a5:ab:91:f7:59:af:7d:3e:65:04:aa:0a:9a:3e:e0:46:
fa:c4:e4:61:5b:86:c3:ce:11:74:2c:db:b7:9d:b9:b2:8d:70:
a6:91:60:02:14:76:62:38:9b:93:29:c4:8b:62:16:85:df:eb:
df:1d:59:9d:43:7c:4a:11:db:84:11:d2:0d:a8:13:54:41:f3:
90:f0:7c:c6:5a:57:20:c6:87:d1:5e:4c:1d:e6:98:ca:90:09:
41:f4:d9:0e:09:1d:12:bc:92:28:59:ec:00:b5:6f:bd:e3:e7:
cc:0d:e0:ac:6f:1d:e1:f9:9c:49:7c:df:32:75:be:9d:9c:13:
02:19:14:24:d0:13:1e:9e:94:2f:9a:a1:13:90:1d:2e:17:22:
a9:27:69:4d:da:7f:76:93:21:e9:b1:75:a4:97:31:be:97:e8:
15:0d:ae:c5:d5:68:c4:61:c7:c1:bc:60:e6:ca:da:1e:8e:eb:
9f:0b:59:6f:81:7e:65:ac:b5:10:0d:68:31:ea:8b:b7:50:cd:
df:d7:94:b2:8c:0f:9c:e2:a5:53:5f:6d:46:ab:fb:fc:b7:48:
51:3a:f8:84
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIENvdeMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YzM1MGJhODJmM2ZlYjVhZWUyODkzOGZiZjFiMDljMWUyZmQxOWI0MB4XDTIyMDEw
MTAxMDI1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzIwZjRhYWU0ZDE5
NDQ2OThlYTkwYzQ0NWNjMmU3ZThkMjhkYTk2MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALjl3llb9OHjoZfQaMmTcBCpC0aRA34EJCR+oIF4ff4bysAk
2Qfa2qtQXvqjy3tiIZNVmW1rJXezLDLS/hH3oJa4IYyGuwkNQFdLHDK+BrQVl2g+
sWeNCfyOaqQnVkBaXSzXSO5FvS5hWvLLWf2vtRTwD1nuQjvZBFHKFHi1nULC/eaN
OijDQUGo6WEtkSzoALmX9eUVWi6X5H8CPsqZj1BL1/9xlem77Jv3gtWQoYo/KIIQ
9/nrOS7sjcZFDSfb8c17VDD4BMAaLcTZqXFkc5N5H1ofuGxhK0VMAFWckb0J+TiB
brpSrgg/B14LCFmkPu3uYdxFYptm0laQbgV6Da0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRyD0quTRlEaY6pDERcwufo0o2pYjAfBgNVHSMEGDAWgBQ8NQuoLz/rWu4o
k4+/GwnB4v0ZtDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1BEVUxxQzhfNjFydUtKT1B2eHNKd2VMOUdiUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTkvNjRkN2E5LWNhYzMtNDU0OS1hN2FhLTYxYjc5MDJlZTIwNC8x
L2NnOUtyazBaUkdtT3FReEVYTUxuNk5LTnFXSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkv
NjRkN2E5LWNhYzMtNDU0OS1hN2FhLTYxYjc5MDJlZTIwNC8xL1BEVUxxQzhfNjFy
dUtKT1B2eHNKd2VMOUdiUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAcMqkDAPBAIAAjAJAwcAIAEH+ABD
MA0GCSqGSIb3DQEBCwUAA4IBAQBSB6+6vVfhhhzP6cJ0Go0V599zM7ttaoHe0hsA
sEBoOJCGQGWDZ6WrkfdZr30+ZQSqCpo+4Eb6xORhW4bDzhF0LNu3nbmyjXCmkWAC
FHZiOJuTKcSLYhaF3+vfHVmdQ3xKEduEEdINqBNUQfOQ8HzGWlcgxofRXkwd5pjK
kAlB9NkOCR0SvJIoWewAtW+94+fMDeCsbx3h+ZxJfN8ydb6dnBMCGRQk0BMenpQv
mqETkB0uFyKpJ2lN2n92kyHpsXWklzG+l+gVDa7F1WjEYcfBvGDmytoejuufC1lv
gX5lrLUQDWgx6ou3UM3f15SyjA+c4qVTX21Gq/v8t0hROviE
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:44 2025 by rpki-client