Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/q3AXbL6rZbhTnwpfzP1NQy_LH90.roa
File: q3AXbL6rZbhTnwpfzP1NQy_LH90.roa (raw, json)
Hash identifier: /Y8O8m8t4XPnu/mE4fEnU1eCKys/OxYBGuNrhu5j6jI=
Subject key identifier: AB:70:17:6C:BE:AB:65:B8:53:9F:0A:5F:CC:FD:4D:43:2F:CB:1F:DD
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369D5A1B74140E3FAFB009ED6991A8E
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/q3AXbL6rZbhTnwpfzP1NQy_LH90.roa
Signing time: Wed 01 Jan 2025 19:48:46 +0000
ROA not before: Wed 01 Jan 2025 19:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199669
IP address blocks: 109.196.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d5:a1:b7:41:40:e3:fa:fb:00:9e:d6:99:1a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab70176cbeab65b8539f0a5fccfd4d432fcb1fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:f2:13:4e:8a:29:05:f9:01:0d:a6:d5:c6:
b5:19:75:63:c4:a8:c3:6c:5c:ee:b8:0a:76:e6:56:
53:6c:1f:e4:f9:db:30:de:99:70:57:7f:20:ea:36:
b9:36:35:2f:9d:a5:f5:d8:0d:f3:db:75:02:a2:9c:
1b:94:35:19:c1:9f:21:05:4c:a1:55:9e:45:b8:44:
12:a1:ea:fb:b7:53:8e:5a:53:6b:20:69:c5:67:e0:
41:78:21:5b:f9:3a:50:ad:9f:5d:4f:72:3b:4a:ca:
8a:46:20:cc:22:c9:3c:a8:bd:e0:fb:8c:f3:71:02:
34:ac:d3:9b:14:45:2f:63:8e:92:6a:9c:08:26:6f:
b2:c3:24:3e:fc:69:c8:dd:e9:47:3c:b7:fb:c0:c4:
2a:8e:02:e1:c8:ff:30:4a:8d:8a:0e:4c:18:ef:98:
fe:a9:01:b4:fe:b3:b1:d8:98:66:59:82:46:49:02:
77:53:60:71:02:ea:56:af:e3:18:59:11:bd:70:48:
15:39:6e:49:92:f4:67:f8:a5:05:14:2e:e1:a4:99:
40:86:d5:b5:d2:fb:09:0e:d1:c2:b4:00:15:31:86:
f8:c6:61:e4:56:9c:8d:53:89:23:ec:dc:67:bd:44:
ff:89:01:e4:84:d9:98:4f:2f:31:32:18:1e:b1:b1:
f4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:70:17:6C:BE:AB:65:B8:53:9F:0A:5F:CC:FD:4D:43:2F:CB:1F:DD
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/q3AXbL6rZbhTnwpfzP1NQy_LH90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.196.166.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c0:ae:72:1a:74:32:59:13:8c:8e:d0:f9:a9:f7:af:11:d3:
8d:e1:90:87:91:98:ae:81:25:10:22:65:5b:bb:b9:c0:df:88:
6c:a6:f6:2b:7e:2f:7e:8b:5e:26:47:23:45:03:fa:27:d3:ba:
fc:e7:25:c3:11:35:00:0f:31:5f:e3:ff:a9:12:18:20:5c:6d:
b8:e8:66:b2:f6:34:ec:3e:5b:79:d3:c2:a1:54:5e:f1:92:76:
ed:8c:2c:1d:bf:85:98:ab:5d:57:ab:1b:ab:ff:44:f7:58:0c:
b4:2e:0d:0e:fc:c1:14:b8:63:b4:3c:c9:a7:2e:fc:d0:b6:37:
0e:19:62:bb:22:5f:ab:43:af:63:50:4a:59:07:a9:c3:7c:5a:
5b:bc:1d:d6:e1:d6:83:86:11:9b:b3:30:bc:6d:bf:25:36:99:
06:02:e1:8c:42:37:97:c6:06:e9:e2:c9:6e:49:d2:dd:72:44:
7b:0f:48:ed:a8:6a:10:b8:8e:75:a9:ec:38:0a:f7:f2:18:33:
97:69:30:88:5d:21:4f:80:54:f8:24:a5:2f:3f:83:c7:ac:30:
d8:3a:8a:d2:61:f5:30:58:c0:99:30:2c:1a:fe:33:e2:f5:d1:
71:3b:c9:45:a6:1a:cc:18:23:2c:ef:d8:c5:51:db:5c:59:29:
05:f8:b7:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjadWht0FA4/r7AJ7WmRqOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjUwMTAxMTk0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjcwMTc2Y2JlYWI2NWI4NTM5ZjBhNWZjY2ZkNGQ0MzJmY2IxZmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdjyE06KKQX5AQ2m1ca1GXVjxKjD
bFzuuAp25lZTbB/k+dsw3plwV38g6ja5NjUvnaX12A3z23UCopwblDUZwZ8hBUyh
VZ5FuEQSoer7t1OOWlNrIGnFZ+BBeCFb+TpQrZ9dT3I7SsqKRiDMIsk8qL3g+4zz
cQI0rNObFEUvY46SapwIJm+ywyQ+/GnI3elHPLf7wMQqjgLhyP8wSo2KDkwY75j+
qQG0/rOx2JhmWYJGSQJ3U2BxAupWr+MYWRG9cEgVOW5JkvRn+KUFFC7hpJlAhtW1
0vsJDtHCtAAVMYb4xmHkVpyNU4kj7NxnvUT/iQHkhNmYTy8xMhgesbH0JQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKtwF2y+q2W4U58KX8z9TUMvyx/dMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvcTNBWGJMNnJaYmhUbndwZnpQMU5ReV9MSDkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbcSmMA0G
CSqGSIb3DQEBCwUAA4IBAQAbwK5yGnQyWROMjtD5qfevEdON4ZCHkZiugSUQImVb
u7nA34hspvYrfi9+i14mRyNFA/on07r85yXDETUADzFf4/+pEhggXG246Gay9jTs
Plt508KhVF7xknbtjCwdv4WYq11Xqxur/0T3WAy0Lg0O/MEUuGO0PMmnLvzQtjcO
GWK7Il+rQ69jUEpZB6nDfFpbvB3W4daDhhGbszC8bb8lNpkGAuGMQjeXxgbp4slu
SdLdckR7D0jtqGoQuI51qew4CvfyGDOXaTCIXSFPgFT4JKUvP4PHrDDYOorSYfUw
WMCZMCwa/jPi9dFxO8lFphrMGCMs79jFUdtcWSkF+Leq
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:50 2025 by rpki-client