Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/mYkTlXqpG_46xscAOO-Sp6Bp4FA.roa
File: mYkTlXqpG_46xscAOO-Sp6Bp4FA.roa (raw, json)
Hash identifier: F4Jtc5+FUEqcLwMhPjxlPH6jWlgxGrbFa+YLXHGjjaE=
Subject key identifier: 99:89:13:95:7A:A9:1B:FE:3A:C6:C7:00:38:EF:92:A7:A0:69:E0:50
Certificate issuer: /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Certificate serial: 019420D632766D5E254FED7ED0221AB89144
Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/mYkTlXqpG_46xscAOO-Sp6Bp4FA.roa
Signing time: Wed 01 Jan 2025 07:48:16 +0000
ROA not before: Wed 01 Jan 2025 07:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 194.150.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:32:76:6d:5e:25:4f:ed:7e:d0:22:1a:b8:91:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Validity
Not Before: Jan 1 07:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=998913957aa91bfe3ac6c70038ef92a7a069e050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:bc:3a:a9:6a:78:bb:94:f1:97:e9:25:77:
72:b2:72:00:f9:c7:12:45:1b:e4:c8:72:54:8e:61:
2c:85:56:05:9f:38:37:d2:95:ca:96:93:11:99:62:
12:86:2d:a5:47:d9:6a:99:ad:f7:43:2f:6f:57:cf:
12:54:2d:a2:b3:90:84:85:5b:1d:cb:31:fb:7a:4d:
40:69:a6:81:8f:75:cb:f4:86:ca:99:ab:09:50:c0:
17:ec:27:c1:9e:54:41:ea:ac:85:fc:50:78:d5:7f:
e4:66:87:58:ad:f1:ff:d8:ec:0a:d2:6e:23:65:71:
64:43:45:5d:b8:de:57:e6:c9:55:57:98:ed:73:a0:
1a:d9:13:47:91:dd:e9:95:6b:92:e1:c3:97:11:5a:
0f:7e:63:34:4c:60:9c:cf:12:1a:50:68:b7:43:3d:
3d:3a:d0:c6:a1:b6:ae:92:22:50:fc:42:75:e1:5a:
c1:f2:67:c6:03:d6:49:19:ef:36:8b:a4:f9:6f:46:
da:db:12:5b:c7:a8:0a:08:0c:fb:3d:29:d0:95:78:
3b:ba:96:62:5c:51:02:9a:c1:96:c2:a7:7b:c2:48:
2c:9d:15:a4:60:ee:4a:df:5a:7b:05:3b:a1:95:e8:
21:7d:ed:9b:87:fb:67:81:bd:71:50:9e:46:91:65:
7d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:89:13:95:7A:A9:1B:FE:3A:C6:C7:00:38:EF:92:A7:A0:69:E0:50
X509v3 Authority Key Identifier:
keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/mYkTlXqpG_46xscAOO-Sp6Bp4FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.193.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ef:3f:f0:a5:91:38:39:cf:69:88:d7:03:71:28:4d:28:28:
85:3f:bf:78:d4:3c:c4:c9:7f:d2:90:fb:d1:9c:49:c8:95:fc:
db:8e:ff:7f:91:01:89:92:e5:28:d9:1e:e6:4f:21:ce:e5:e6:
e9:7b:cc:05:5e:fe:84:47:65:bd:99:ef:ba:cb:ff:c3:19:a6:
94:36:a2:78:20:d9:e1:65:3a:de:82:b8:1d:93:8a:8c:c0:cb:
7a:f4:9f:a6:06:d3:97:9d:f6:f8:94:47:1e:df:74:00:63:53:
eb:4f:bc:52:b0:00:4c:b6:b9:6b:04:ac:cf:66:0a:d4:80:75:
de:34:5b:e2:8e:89:34:77:d2:f3:9d:22:0d:ad:a4:f7:1f:7b:
ff:bf:ea:a3:c4:aa:21:5a:27:9a:c9:93:7f:37:ca:f5:97:b6:
68:fa:53:d1:02:23:22:61:e5:9c:ac:05:74:64:b3:bf:a4:07:
c1:b7:1a:ad:d4:80:bb:53:e1:06:23:ec:3e:11:96:60:15:dc:
62:b0:3e:55:2e:94:70:19:42:c1:6f:36:43:9c:d8:1b:d0:c6:
fe:54:44:c2:89:0f:93:0a:9b:e2:ae:78:44:38:57:2d:e3:c7:
b8:35:26:bc:ac:da:91:71:ae:07:1a:69:8b:e0:73:28:d9:8e:
e9:26:93:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1jJ2bV4lT+1+0CIauJFEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjN2M3ZDQ4ODg3ZTJmMDg2NWQ3MDFjZGM2ZTBiYjdkZWVk
NWRiMzQwHhcNMjUwMTAxMDc0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTg5MTM5NTdhYTkxYmZlM2FjNmM3MDAzOGVmOTJhN2EwNjllMDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbO8OqlqeLuU8ZfpJXdysnIA+ccS
RRvkyHJUjmEshVYFnzg30pXKlpMRmWIShi2lR9lqma33Qy9vV88SVC2is5CEhVsd
yzH7ek1AaaaBj3XL9IbKmasJUMAX7CfBnlRB6qyF/FB41X/kZodYrfH/2OwK0m4j
ZXFkQ0VduN5X5slVV5jtc6Aa2RNHkd3plWuS4cOXEVoPfmM0TGCczxIaUGi3Qz09
OtDGobaukiJQ/EJ14VrB8mfGA9ZJGe82i6T5b0ba2xJbx6gKCAz7PSnQlXg7upZi
XFECmsGWwqd7wkgsnRWkYO5K31p7BTuhleghfe2bh/tngb1xUJ5GkWV9TwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJmJE5V6qRv+OsbHADjvkqegaeBQMB8GA1UdIwQY
MBaAFHx8fUiIfi8IZdcBzcbgu33u1ds0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYt
ZjdhYmVmM2M4YTJiLzEvbVlrVGxYcXBHXzQ2eHNjQU9PLVNwNkJwNEZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYtZjdhYmVmM2M4YTJi
LzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpbBMA0G
CSqGSIb3DQEBCwUAA4IBAQCQ7z/wpZE4Oc9piNcDcShNKCiFP7941DzEyX/SkPvR
nEnIlfzbjv9/kQGJkuUo2R7mTyHO5ebpe8wFXv6ER2W9me+6y//DGaaUNqJ4INnh
ZTregrgdk4qMwMt69J+mBtOXnfb4lEce33QAY1PrT7xSsABMtrlrBKzPZgrUgHXe
NFvijok0d9LznSINraT3H3v/v+qjxKohWieayZN/N8r1l7Zo+lPRAiMiYeWcrAV0
ZLO/pAfBtxqt1IC7U+EGI+w+EZZgFdxisD5VLpRwGULBbzZDnNgb0Mb+VETCiQ+T
CpvirnhEOFct48e4NSa8rNqRca4HGmmL4HMo2Y7pJpPF
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:56:46 2025 by rpki-client