Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/OavfbYy1o84nCmrZFmidFtsRQO8.roa
File: OavfbYy1o84nCmrZFmidFtsRQO8.roa (raw, json)
Hash identifier: DsB+GWShVgnP61AwUrWWGxV07/xh51DrwyP21/isTQ0=
Subject key identifier: 39:AB:DF:6D:8C:B5:A3:CE:27:0A:6A:D9:16:68:9D:16:DB:11:40:EF
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194266BE8952064D8C3F0ECF014660DC4A6
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/OavfbYy1o84nCmrZFmidFtsRQO8.roa
Signing time: Thu 02 Jan 2025 09:49:53 +0000
ROA not before: Thu 02 Jan 2025 09:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202409
IP address blocks: 185.1.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e8:95:20:64:d8:c3:f0:ec:f0:14:66:0d:c4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 09:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39abdf6d8cb5a3ce270a6ad916689d16db1140ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:71:25:95:53:b5:55:06:6f:9b:f5:51:6c:ec:
ef:06:94:86:c5:f0:27:95:e2:12:29:89:6e:54:35:
cc:43:f5:a8:ca:08:aa:de:3f:21:75:ee:49:50:96:
99:de:9a:15:d9:47:4b:13:f8:49:43:52:ad:21:4f:
aa:89:33:fe:87:b2:5e:fe:aa:98:08:01:87:73:37:
d0:d9:00:6f:3b:f0:46:80:8e:9d:d8:f7:d4:2f:d7:
cf:83:f9:79:1e:05:37:99:9e:b2:6c:bf:5b:4c:c1:
2a:48:ee:98:ea:88:cf:9d:d9:50:5f:25:ec:d0:90:
28:fa:6a:d3:56:6a:04:65:55:a3:a5:51:59:e1:07:
c2:24:f1:3a:f4:27:47:2e:17:98:90:0b:29:94:b4:
4a:c0:6b:99:2b:d4:99:fc:a7:22:59:75:9a:e2:11:
cf:f7:e7:93:1c:8e:02:f5:0f:69:c2:8d:1a:e3:4e:
aa:82:ee:fe:2b:e8:70:5a:0a:8c:d6:16:40:87:4e:
09:85:e9:37:74:e0:72:5f:b3:2a:23:8c:f7:cc:f0:
ac:49:40:18:3e:4d:c4:55:15:7f:e4:13:ba:5e:84:
f4:2f:e1:ad:38:9b:60:15:e1:37:76:a4:42:72:2e:
32:89:84:6e:1f:c5:50:7c:e2:53:30:53:5a:c4:71:
b9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AB:DF:6D:8C:B5:A3:CE:27:0A:6A:D9:16:68:9D:16:DB:11:40:EF
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/OavfbYy1o84nCmrZFmidFtsRQO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.155.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:93:8c:ea:ef:c3:67:33:77:a7:cb:ce:3f:21:c4:e2:f3:a0:
bc:3a:56:28:99:9f:7c:61:b4:a8:c9:8e:31:8c:92:ce:25:e5:
6a:7b:f6:79:2c:9f:15:a2:2c:cc:9d:4c:a1:0c:d3:48:1f:2d:
f2:88:9f:c1:a0:9a:28:72:cc:88:9d:3a:91:76:bb:7c:35:7f:
96:a3:d1:d3:4b:9d:56:41:6c:cf:39:f2:dd:e6:cd:78:e3:27:
74:1c:a6:31:5f:7c:a9:ff:ff:60:98:0a:c5:2e:10:53:00:6c:
0d:15:01:9c:e2:60:b9:21:ca:f3:e3:0d:f5:e8:62:f3:76:da:
c9:93:6f:94:6e:a5:96:a4:fa:02:d5:80:57:e6:e9:e0:1e:21:
dd:32:05:5e:4c:78:5d:a3:76:47:96:90:ab:f0:a1:17:ab:c7:
af:2a:04:f3:f5:a9:92:6d:63:ad:39:bc:7c:68:27:6a:77:2e:
60:15:31:a0:b3:d3:a7:7a:55:cc:96:70:7b:bc:cd:3b:d4:87:
bb:9d:69:a2:c6:c0:f5:dd:25:58:c1:a7:94:74:75:0c:c6:5e:
51:f2:c3:d4:aa:a2:b9:d1:a1:b8:42:91:05:9c:47:93:9a:7b:
01:40:31:16:0a:20:ba:25:b6:43:42:eb:e7:23:af:e2:ca:75:
c9:e4:da:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma+iVIGTYw/Ds8BRmDcSmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk
NWFlZjAwHhcNMjUwMTAyMDk0OTUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWFiZGY2ZDhjYjVhM2NlMjcwYTZhZDkxNjY4OWQxNmRiMTE0MGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3EllVO1VQZvm/VRbOzvBpSGxfAn
leISKYluVDXMQ/Woygiq3j8hde5JUJaZ3poV2UdLE/hJQ1KtIU+qiTP+h7Je/qqY
CAGHczfQ2QBvO/BGgI6d2PfUL9fPg/l5HgU3mZ6ybL9bTMEqSO6Y6ojPndlQXyXs
0JAo+mrTVmoEZVWjpVFZ4QfCJPE69CdHLheYkAsplLRKwGuZK9SZ/KciWXWa4hHP
9+eTHI4C9Q9pwo0a406qgu7+K+hwWgqM1hZAh04Jhek3dOByX7MqI4z3zPCsSUAY
Pk3EVRV/5BO6XoT0L+GtOJtgFeE3dqRCci4yiYRuH8VQfOJTMFNaxHG52wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDmr322MtaPOJwpq2RZonRbbEUDvMB8GA1UdIwQY
MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt
Y2MxYzliNWY2NjQwLzEvT2F2ZmJZeTFvODRuQ21yWkZtaWRGdHNSUU84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw
LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQGbMA0G
CSqGSIb3DQEBCwUAA4IBAQBrk4zq78NnM3eny84/IcTi86C8OlYomZ98YbSoyY4x
jJLOJeVqe/Z5LJ8VoizMnUyhDNNIHy3yiJ/BoJoocsyInTqRdrt8NX+Wo9HTS51W
QWzPOfLd5s144yd0HKYxX3yp//9gmArFLhBTAGwNFQGc4mC5Icrz4w316GLzdtrJ
k2+UbqWWpPoC1YBX5ungHiHdMgVeTHhdo3ZHlpCr8KEXq8evKgTz9amSbWOtObx8
aCdqdy5gFTGgs9OnelXMlnB7vM071Ie7nWmixsD13SVYwaeUdHUMxl5R8sPUqqK5
0aG4QpEFnEeTmnsBQDEWCiC6JbZDQuvnI6/iynXJ5Nr8
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:08:04 2025 by rpki-client