Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/dNxBOY3fJxweU0pOsjJMTtBxibI.roa
File: dNxBOY3fJxweU0pOsjJMTtBxibI.roa (raw, json)
Hash identifier: +7/ZxVutYTL6jT8ak+OBnFIC5cdnfh0cuZkYLSLo+Fg=
Subject key identifier: 74:DC:41:39:8D:DF:27:1C:1E:53:4A:4E:B2:32:4C:4E:D0:71:89:B2
Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial: 019421B225D23F955B638AE1FD74640A69AE
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/dNxBOY3fJxweU0pOsjJMTtBxibI.roa
Signing time: Wed 01 Jan 2025 11:48:30 +0000
ROA not before: Wed 01 Jan 2025 11:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 192.33.88.0/24 maxlen: 24
2001:67c:2e40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:25:d2:3f:95:5b:63:8a:e1:fd:74:64:0a:69:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Validity
Not Before: Jan 1 11:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74dc41398ddf271c1e534a4eb2324c4ed07189b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:26:41:d6:f7:d2:9f:72:bb:90:cd:c6:0f:ba:
e2:92:cb:38:c0:57:59:4d:66:7e:64:94:70:37:9c:
7a:74:f0:76:69:2d:4e:f9:d6:f9:ad:50:2d:8a:4e:
00:b8:59:02:0f:7c:40:6f:88:6e:97:da:0f:78:8e:
97:f4:4d:8e:f1:97:6f:cc:34:25:d1:0b:52:3a:9a:
de:f8:2f:ce:09:55:0d:e8:21:b2:42:9a:9d:73:49:
e1:a4:81:43:b8:9b:fe:a9:84:8c:c8:a3:e7:02:56:
74:27:c4:1e:20:4d:e9:c4:13:cc:19:46:17:f3:35:
ed:d8:e5:fa:f8:75:dd:22:b0:bd:6e:98:96:3b:0d:
7d:15:14:b1:63:ca:2c:a1:35:e9:8c:0b:e1:9a:84:
52:ab:ed:4e:57:81:8e:e7:54:58:db:e0:d4:f4:07:
47:23:54:21:24:2a:b5:f5:88:18:2d:92:2e:cb:a0:
8b:03:1e:8f:14:b8:3c:2a:cd:16:68:b8:8e:a2:94:
c6:e5:b8:02:6c:5a:94:5d:e3:af:a7:8d:e1:ef:c9:
c8:58:fe:f8:b1:e7:3d:dc:78:52:03:45:c1:f7:25:
12:e2:fb:7f:4b:bb:84:8d:49:fe:8d:55:95:2c:ac:
0f:6c:3b:8f:ed:b1:0d:5c:13:c5:0f:b5:df:22:e5:
95:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DC:41:39:8D:DF:27:1C:1E:53:4A:4E:B2:32:4C:4E:D0:71:89:B2
X509v3 Authority Key Identifier:
keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/dNxBOY3fJxweU0pOsjJMTtBxibI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.33.88.0/24
IPv6:
2001:67c:2e40::/48
Signature Algorithm: sha256WithRSAEncryption
82:3e:e1:57:20:03:c2:13:7f:e6:40:5d:36:e9:99:b7:7d:e4:
78:2a:47:72:d4:5b:f5:e6:85:c3:4b:64:8a:eb:29:c4:94:57:
b2:07:04:1c:6d:7f:18:06:10:d6:27:b5:fe:11:44:aa:9d:b5:
d8:19:85:65:88:f0:a0:56:39:e8:6b:a3:27:66:60:40:d1:85:
16:51:6f:79:76:82:05:c6:47:30:3d:52:a3:cd:c0:e7:36:93:
8f:ff:aa:13:30:16:1f:04:c2:06:15:be:be:0f:cc:17:4d:29:
2c:d7:30:17:85:50:59:fb:36:a4:f5:f2:b5:f4:76:d4:05:60:
6a:03:66:65:7f:4b:53:5e:5c:8e:1c:3e:f6:4c:29:24:e5:24:
7c:fb:64:7a:82:31:02:85:4b:9f:2c:8f:5c:ab:ce:4a:0f:50:
e6:09:68:ed:50:76:c3:f5:9c:6f:c1:a1:44:f8:99:d5:38:4b:
e5:bd:18:44:25:f3:a6:d4:fa:3c:ad:c8:1b:bd:c6:19:7e:63:
cf:07:1d:f0:81:d2:47:1f:85:1c:f5:66:b3:59:65:fc:4a:6f:
2c:a9:f1:ce:e6:57:51:af:19:c1:84:19:23:d5:08:70:6c:00:
89:af:1d:dd:b8:a2:3b:c9:e6:13:82:51:63:e8:c7:5c:64:2b:
21:98:8f:9e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQhsiXSP5VbY4rh/XRkCmmuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYTgyNGJjNjMxY2NlZTFhZTk5ZDcxMDNhZmQyZGM3NGYx
ZTI5YzQwHhcNMjUwMTAxMTE0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGRjNDEzOThkZGYyNzFjMWU1MzRhNGViMjMyNGM0ZWQwNzE4OWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iZB1vfSn3K7kM3GD7rikss4wFdZ
TWZ+ZJRwN5x6dPB2aS1O+db5rVAtik4AuFkCD3xAb4hul9oPeI6X9E2O8ZdvzDQl
0QtSOpre+C/OCVUN6CGyQpqdc0nhpIFDuJv+qYSMyKPnAlZ0J8QeIE3pxBPMGUYX
8zXt2OX6+HXdIrC9bpiWOw19FRSxY8osoTXpjAvhmoRSq+1OV4GO51RY2+DU9AdH
I1QhJCq19YgYLZIuy6CLAx6PFLg8Ks0WaLiOopTG5bgCbFqUXeOvp43h78nIWP74
sec93HhSA0XB9yUS4vt/S7uEjUn+jVWVLKwPbDuP7bENXBPFD7XfIuWVcwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHTcQTmN3yccHlNKTrIyTE7QcYmyMB8GA1UdIwQY
MBaAFI2oJLxjHM7hrpnXEDr9LcdPHinEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xY2FhNzktYjhjNC00ZDA4LTliYmUt
Mzg2YzFmOGIwNjQwLzEvZE54Qk9ZM2ZKeHdlVTBwT3NqSk1UdEJ4aWJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8xY2FhNzktYjhjNC00ZDA4LTliYmUtMzg2YzFmOGIwNjQw
LzEvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwCFYMA8E
AgACMAkDBwAgAQZ8LkAwDQYJKoZIhvcNAQELBQADggEBAII+4VcgA8ITf+ZAXTbp
mbd95HgqR3LUW/XmhcNLZIrrKcSUV7IHBBxtfxgGENYntf4RRKqdtdgZhWWI8KBW
OehroydmYEDRhRZRb3l2ggXGRzA9UqPNwOc2k4//qhMwFh8EwgYVvr4PzBdNKSzX
MBeFUFn7NqT18rX0dtQFYGoDZmV/S1NeXI4cPvZMKSTlJHz7ZHqCMQKFS58sj1yr
zkoPUOYJaO1QdsP1nG/BoUT4mdU4S+W9GEQl86bU+jytyBu9xhl+Y88HHfCB0kcf
hRz1ZrNZZfxKbyyp8c7mV1GvGcGEGSPVCHBsAImvHd24ojvJ5hOCUWPox1xkKyGY
j54=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:54:20 2025 by rpki-client