Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/Na5QZvVlGuZQeLfXORY_9aEEYSo.roa
File: Na5QZvVlGuZQeLfXORY_9aEEYSo.roa (raw, json)
Hash identifier: 7zaWEKU6Pa667pchWMlNtONL4EFj3rNY7MR9JwlAuWs=
Subject key identifier: 35:AE:50:66:F5:65:1A:E6:50:78:B7:D7:39:16:3F:F5:A1:04:61:2A
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 0194244569D6C884304FBFE1E8D5BC3C266A
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/Na5QZvVlGuZQeLfXORY_9aEEYSo.roa
Signing time: Wed 01 Jan 2025 23:48:36 +0000
ROA not before: Wed 01 Jan 2025 23:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206046
IP address blocks: 195.55.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:69:d6:c8:84:30:4f:bf:e1:e8:d5:bc:3c:26:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 1 23:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35ae5066f5651ae65078b7d739163ff5a104612a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:15:78:45:21:2e:47:33:4b:47:0e:a5:25:
5e:8c:09:ea:1e:e0:c1:37:59:7f:c8:fa:17:fd:a8:
8f:4f:77:bd:22:a4:97:80:76:a5:91:df:63:30:46:
a0:37:a1:cc:b2:ea:59:98:61:e4:b7:84:5f:96:bd:
71:7d:b2:e3:35:a8:80:fa:c6:76:14:5e:e6:4d:43:
05:fd:e5:fd:1c:68:8e:94:bc:a3:12:f7:3f:08:aa:
91:4e:ce:20:2c:9e:69:86:0d:e0:a1:aa:5b:d0:a8:
34:14:f5:aa:d3:a1:28:e9:f2:f5:f9:c2:c6:2f:05:
74:7d:79:50:a9:08:c7:85:3a:cd:fe:49:cf:e2:81:
04:da:8f:81:ff:53:07:41:e6:5c:20:ad:bf:be:21:
69:52:74:f5:27:a2:2a:92:83:a6:61:a2:a1:74:55:
1d:11:2e:c8:78:08:8d:c5:e5:cf:23:8d:e7:67:09:
11:a0:b0:c7:03:ab:eb:ec:56:92:d5:f6:ad:45:10:
28:89:e6:24:53:e5:a9:19:73:39:19:0b:b2:31:31:
1a:fb:8b:40:25:c1:53:18:20:c3:ec:84:cb:07:73:
e6:5b:b7:34:dd:0d:97:20:fc:f0:07:91:ff:ae:03:
8d:95:c5:b6:5d:e8:65:0d:a8:a6:f4:73:d8:47:c5:
b3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AE:50:66:F5:65:1A:E6:50:78:B7:D7:39:16:3F:F5:A1:04:61:2A
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/Na5QZvVlGuZQeLfXORY_9aEEYSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.55.44.0/24
Signature Algorithm: sha256WithRSAEncryption
07:f7:3b:ce:f4:01:d2:06:74:0a:51:a1:a5:4f:0c:42:53:7d:
c5:f6:1b:99:04:b7:32:8d:18:66:86:bf:72:c9:ff:db:7c:59:
44:1a:6a:c1:6b:b5:ac:f6:16:fe:a8:ab:56:22:53:d4:a3:fd:
9d:db:31:46:fd:73:44:28:1d:98:14:bb:0b:a7:31:4a:37:6b:
b6:b9:ab:e4:78:1d:5f:99:83:a3:4a:40:f3:9d:84:e6:71:e7:
11:29:1d:ac:0b:9f:3b:5e:bf:42:e3:a1:0f:a9:d0:d6:fd:62:
1e:4e:7e:55:5b:43:93:bb:e8:73:c0:0c:31:6d:f4:72:e5:f9:
3e:eb:76:7d:53:41:c2:1d:4a:e2:08:37:61:f5:9b:79:3e:0a:
78:c0:50:06:46:01:7a:aa:55:4c:98:5e:c6:31:3d:91:a3:2e:
a2:2b:bb:ad:41:04:f0:6b:76:6d:b7:9d:eb:db:57:63:5a:72:
d4:bd:97:e1:59:60:8d:c7:d4:3a:db:9f:1a:22:0d:27:07:09:
25:6e:4a:9f:80:28:88:fd:2e:f5:28:af:0f:c0:cb:3e:4b:3f:
00:ea:ef:1c:d7:4a:08:45:9b:77:33:db:3c:a4:a6:5a:57:b6:
9a:28:76:69:97:08:58:3e:94:f7:b7:cd:82:25:dd:c1:fe:0b:
49:42:fd:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRWnWyIQwT7/h6NW8PCZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5
NjdkYTEwHhcNMjUwMTAxMjM0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWFlNTA2NmY1NjUxYWU2NTA3OGI3ZDczOTE2M2ZmNWExMDQ2MTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulkVeEUhLkczS0cOpSVejAnqHuDB
N1l/yPoX/aiPT3e9IqSXgHalkd9jMEagN6HMsupZmGHkt4Rflr1xfbLjNaiA+sZ2
FF7mTUMF/eX9HGiOlLyjEvc/CKqRTs4gLJ5phg3goapb0Kg0FPWq06Eo6fL1+cLG
LwV0fXlQqQjHhTrN/knP4oEE2o+B/1MHQeZcIK2/viFpUnT1J6IqkoOmYaKhdFUd
ES7IeAiNxeXPI43nZwkRoLDHA6vr7FaS1fatRRAoieYkU+WpGXM5GQuyMTEa+4tA
JcFTGCDD7ITLB3PmW7c03Q2XIPzwB5H/rgONlcW2XehlDaim9HPYR8WzoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDWuUGb1ZRrmUHi31zkWP/WhBGEqMB8GA1UdIwQY
MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt
NGJhMmY4ZjFmODNiLzEvTmE1UVp2VmxHdVpRZUxmWE9SWV85YUVFWVNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi
LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwzcsMA0G
CSqGSIb3DQEBCwUAA4IBAQAH9zvO9AHSBnQKUaGlTwxCU33F9huZBLcyjRhmhr9y
yf/bfFlEGmrBa7Ws9hb+qKtWIlPUo/2d2zFG/XNEKB2YFLsLpzFKN2u2uavkeB1f
mYOjSkDznYTmcecRKR2sC587Xr9C46EPqdDW/WIeTn5VW0OTu+hzwAwxbfRy5fk+
63Z9U0HCHUriCDdh9Zt5Pgp4wFAGRgF6qlVMmF7GMT2Roy6iK7utQQTwa3Ztt53r
21djWnLUvZfhWWCNx9Q6258aIg0nBwklbkqfgCiI/S71KK8PwMs+Sz8A6u8c10oI
RZt3M9s8pKZaV7aaKHZplwhYPpT3t82CJd3B/gtJQv3G
-----END CERTIFICATE-----
Generated at Sat Apr 12 06:19:36 2025 by rpki-client