Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/aC22qm65HmlnQmRshJm7pr66v5M.roa
File: aC22qm65HmlnQmRshJm7pr66v5M.roa (raw, json)
Hash identifier: LObDHQ4gNcpulvuWrsjsmncwDPjtYz0pJfy6Qo6CsRI=
Subject key identifier: 68:2D:B6:AA:6E:B9:1E:69:67:42:64:6C:84:99:BB:A6:BE:BA:BF:93
Certificate issuer: /CN=c9392c3276b243aff740a082c588fb73941ebbf7
Certificate serial: 019420D5A5965707A53C49403A7788C7DAD3
Authority key identifier: C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/aC22qm65HmlnQmRshJm7pr66v5M.roa
Signing time: Wed 01 Jan 2025 07:47:39 +0000
ROA not before: Wed 01 Jan 2025 07:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 195.128.184.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a5:96:57:07:a5:3c:49:40:3a:77:88:c7:da:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9392c3276b243aff740a082c588fb73941ebbf7
Validity
Not Before: Jan 1 07:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=682db6aa6eb91e696742646c8499bba6bebabf93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:17:00:1d:4f:43:e5:44:01:7d:86:91:e8:a2:
b3:f2:7f:51:91:58:ce:4a:cd:25:59:63:f4:c7:77:
bd:04:b5:0f:39:70:06:45:94:eb:d7:00:0f:b3:74:
be:1c:c0:f4:94:ea:63:51:a4:e6:0c:bb:a6:24:3c:
52:1c:cc:5d:e8:a0:e4:cd:f2:75:15:a2:0e:d7:1d:
5b:d7:b3:8f:11:f5:da:ad:e9:6b:aa:2f:23:c3:6a:
24:eb:2f:0a:fe:6b:55:bf:85:bd:fe:92:2d:99:a2:
13:f8:48:ee:fe:bb:f6:4d:4f:91:a0:d8:21:5b:8c:
90:0c:47:c9:1b:49:03:5e:fa:37:05:4e:2c:a0:49:
3b:f3:e3:35:ab:23:7f:f1:71:3f:94:d2:78:54:a0:
74:21:80:27:97:be:79:65:7e:fd:a9:71:fb:fa:00:
25:9a:b3:1b:40:5a:9b:0a:f9:aa:4e:97:a1:f4:13:
a1:28:59:fb:b3:9f:6e:c0:5f:6f:29:19:97:45:16:
fc:bf:c9:84:14:b1:68:ac:09:8e:fe:8b:09:40:14:
05:95:c8:2b:a6:4f:ad:90:a6:87:04:13:86:c9:2a:
da:c1:c9:5a:08:75:5f:3c:ee:53:ad:de:77:77:c8:
78:4d:74:bf:86:3b:ea:6c:4b:81:fe:15:56:cc:a3:
bc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2D:B6:AA:6E:B9:1E:69:67:42:64:6C:84:99:BB:A6:BE:BA:BF:93
X509v3 Authority Key Identifier:
keyid:C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/aC22qm65HmlnQmRshJm7pr66v5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.184.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:79:55:1c:0e:9b:1e:f4:d2:b9:0a:cb:94:b9:11:92:a1:3a:
06:78:71:cc:43:de:d5:1e:4c:be:2d:7e:cb:0b:d6:13:4d:f3:
3a:66:68:84:a0:04:26:06:16:3e:32:4d:30:2d:83:7e:31:f7:
3c:5c:95:0c:c2:41:01:05:09:30:b5:1a:a0:1e:30:08:10:32:
9e:41:bf:c3:d1:ce:48:5b:00:b4:d5:b3:58:31:95:c4:28:62:
3d:8c:a2:5d:90:c1:41:c5:55:f2:22:09:32:a3:5e:21:cb:9d:
c8:18:43:f8:9c:6b:bb:84:5a:56:7d:32:98:20:5a:20:54:7e:
4b:3c:52:6b:7f:af:29:7e:f8:cb:57:c5:eb:6b:c1:b6:8d:8e:
e8:f2:d0:49:c8:97:63:65:7e:3a:de:08:92:c1:c3:b4:8a:9b:
d4:51:19:03:80:7c:b6:fd:86:47:15:71:50:75:22:d2:64:95:
55:00:b2:67:f0:f4:35:30:4f:19:5a:11:df:6b:fc:74:67:fc:
83:3d:8b:f5:e3:93:50:7a:b7:bd:91:ab:03:76:46:d1:7e:21:
fe:3b:3a:13:c8:28:33:bc:c6:ed:ac:fd:da:7e:e4:1f:9b:25:
6b:3b:6e:c9:b0:45:12:36:5c:05:5b:6a:fe:d1:31:d7:13:1d:
41:c8:a2:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1aWWVwelPElAOneIx9rTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MzkyYzMyNzZiMjQzYWZmNzQwYTA4MmM1ODhmYjczOTQx
ZWJiZjcwHhcNMjUwMTAxMDc0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODJkYjZhYTZlYjkxZTY5Njc0MjY0NmM4NDk5YmJhNmJlYmFiZjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BcAHU9D5UQBfYaR6KKz8n9RkVjO
Ss0lWWP0x3e9BLUPOXAGRZTr1wAPs3S+HMD0lOpjUaTmDLumJDxSHMxd6KDkzfJ1
FaIO1x1b17OPEfXarelrqi8jw2ok6y8K/mtVv4W9/pItmaIT+Eju/rv2TU+RoNgh
W4yQDEfJG0kDXvo3BU4soEk78+M1qyN/8XE/lNJ4VKB0IYAnl755ZX79qXH7+gAl
mrMbQFqbCvmqTpeh9BOhKFn7s59uwF9vKRmXRRb8v8mEFLForAmO/osJQBQFlcgr
pk+tkKaHBBOGySrawclaCHVfPO5Trd53d8h4TXS/hjvqbEuB/hVWzKO8OwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGgttqpuuR5pZ0JkbISZu6a+ur+TMB8GA1UdIwQY
MBaAFMk5LDJ2skOv90CggsWI+3OUHrv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVRrc01uYXlRNl8zUUtDQ3hZajdjNVFldV9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yNTZjYjYtZGM0Mi00MWE1LWI5MjAt
MjRjYmExYzAzYzk5LzEvYUMyMnFtNjVIbWxuUW1Sc2hKbTdwcjY2djVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yNTZjYjYtZGM0Mi00MWE1LWI5MjAtMjRjYmExYzAzYzk5
LzEveVRrc01uYXlRNl8zUUtDQ3hZajdjNVFldV9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw4C4MA0G
CSqGSIb3DQEBCwUAA4IBAQCNeVUcDpse9NK5CsuUuRGSoToGeHHMQ97VHky+LX7L
C9YTTfM6ZmiEoAQmBhY+Mk0wLYN+Mfc8XJUMwkEBBQkwtRqgHjAIEDKeQb/D0c5I
WwC01bNYMZXEKGI9jKJdkMFBxVXyIgkyo14hy53IGEP4nGu7hFpWfTKYIFogVH5L
PFJrf68pfvjLV8Xra8G2jY7o8tBJyJdjZX463giSwcO0ipvUURkDgHy2/YZHFXFQ
dSLSZJVVALJn8PQ1ME8ZWhHfa/x0Z/yDPYv145NQere9kasDdkbRfiH+OzoTyCgz
vMbtrP3afuQfmyVrO27JsEUSNlwFW2r+0THXEx1ByKK9
-----END CERTIFICATE-----
Generated at Thu Apr 10 02:01:57 2025 by rpki-client