Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0v94mnKmrgYtt5y2MQGuDazjxjA.roa
File: 0v94mnKmrgYtt5y2MQGuDazjxjA.roa (raw, json)
Hash identifier: 3Fy3bWz7jcZoEFMt18MGzYWf/tfMkeytNpRPKao8d4A=
Subject key identifier: D2:FF:78:9A:72:A6:AE:06:2D:B7:9C:B6:31:01:AE:0D:AC:E3:C6:30
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019423D7FBE1C6ED7BB12EADC0727F8985E4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0v94mnKmrgYtt5y2MQGuDazjxjA.roa
Signing time: Wed 01 Jan 2025 21:49:04 +0000
ROA not before: Wed 01 Jan 2025 21:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49791
IP address blocks: 150.241.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:fb:e1:c6:ed:7b:b1:2e:ad:c0:72:7f:89:85:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jan 1 21:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2ff789a72a6ae062db79cb63101ae0dace3c630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bc:ae:88:bf:8c:6b:22:4b:f2:dd:cb:38:e4:
af:4c:a6:cb:6c:9c:b4:96:39:0c:af:90:6a:7f:00:
a2:01:8d:86:2f:cd:83:66:bf:77:2c:a4:78:4a:81:
07:8f:98:d2:a9:49:4a:e9:42:25:e7:82:f4:dd:fc:
89:4d:2f:23:37:fb:82:53:2f:fb:1e:c4:61:85:bf:
fb:82:bc:09:89:3b:60:15:37:70:73:2d:a3:c0:c1:
4d:74:ce:1e:e0:58:22:55:ea:91:85:fc:87:61:f2:
9c:e6:80:d2:8c:23:a1:91:95:47:92:54:c2:88:16:
fc:b2:54:c5:fe:f8:31:d7:62:4b:72:bb:01:65:7d:
8c:b0:e5:c7:10:3a:0f:31:55:5c:d8:65:18:38:01:
19:74:ce:26:2b:14:ec:1f:94:7f:2f:80:28:de:03:
1e:ce:44:f8:4c:07:0a:fb:33:c2:13:6b:2b:7e:90:
f8:5e:17:ae:60:7c:2d:fc:85:f0:74:67:48:9c:94:
55:20:40:15:88:48:fe:81:01:32:25:ba:23:6f:83:
c5:aa:de:f5:43:ac:d4:83:75:3f:ec:d7:51:2c:ea:
65:0b:41:52:b7:f2:0d:bf:16:2e:97:31:97:1e:2a:
05:c0:a9:84:4c:98:24:fb:67:4c:44:46:33:36:b1:
71:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FF:78:9A:72:A6:AE:06:2D:B7:9C:B6:31:01:AE:0D:AC:E3:C6:30
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0v94mnKmrgYtt5y2MQGuDazjxjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.122.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:41:1e:99:dd:0e:74:6a:03:27:6a:19:a7:e7:a6:9a:a0:b5:
13:cf:6a:e7:94:03:12:4c:9a:09:a0:a9:44:94:d0:18:c9:1e:
ce:8a:71:03:33:86:0b:e6:1b:70:d2:33:0b:e2:25:41:5e:2d:
5d:60:e8:61:2f:3a:48:77:38:33:47:14:3e:ef:93:9e:0e:7b:
11:52:d6:59:c6:b1:4f:57:46:16:fb:84:5d:72:34:73:16:e3:
16:49:36:6d:e0:37:cf:2e:f2:66:f3:89:0b:77:60:8d:c8:09:
7e:96:8a:54:c2:df:a2:d5:d1:f4:cb:cc:cb:91:b0:40:1f:3f:
24:db:0c:36:18:ac:3c:e6:dc:1f:e4:e5:90:bf:25:5f:5e:80:
c7:ec:2d:3e:90:2e:d6:72:18:86:d8:04:48:18:92:72:eb:7c:
4a:c0:c6:bb:ee:16:f1:9c:35:a5:e7:bc:8d:a3:aa:c8:d0:ef:
da:af:a2:a8:ee:4f:ec:38:68:e1:6e:0a:ae:81:bd:07:5c:92:
b0:78:b6:54:00:c2:3e:d7:c4:1b:8a:9e:9b:a8:47:ec:47:13:
c7:ed:29:9c:3d:60:04:13:24:98:d4:cc:50:db:e0:4f:b6:57:
00:5c:28:e1:de:7c:ed:23:6b:69:e4:88:3a:be:7b:36:8d:d3:
1f:76:b6:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1/vhxu17sS6twHJ/iYXkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjUwMTAxMjE0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmZmNzg5YTcyYTZhZTA2MmRiNzljYjYzMTAxYWUwZGFjZTNjNjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LyuiL+MayJL8t3LOOSvTKbLbJy0
ljkMr5BqfwCiAY2GL82DZr93LKR4SoEHj5jSqUlK6UIl54L03fyJTS8jN/uCUy/7
HsRhhb/7grwJiTtgFTdwcy2jwMFNdM4e4FgiVeqRhfyHYfKc5oDSjCOhkZVHklTC
iBb8slTF/vgx12JLcrsBZX2MsOXHEDoPMVVc2GUYOAEZdM4mKxTsH5R/L4Ao3gMe
zkT4TAcK+zPCE2srfpD4XheuYHwt/IXwdGdInJRVIEAViEj+gQEyJbojb4PFqt71
Q6zUg3U/7NdRLOplC0FSt/INvxYulzGXHioFwKmETJgk+2dMREYzNrFxnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNL/eJpypq4GLbectjEBrg2s48YwMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvMHY5NG1uS21yZ1l0dDV5Mk1RR3VEYXpqeGpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvF6MA0G
CSqGSIb3DQEBCwUAA4IBAQCxQR6Z3Q50agMnahmn56aaoLUTz2rnlAMSTJoJoKlE
lNAYyR7OinEDM4YL5htw0jML4iVBXi1dYOhhLzpIdzgzRxQ+75OeDnsRUtZZxrFP
V0YW+4RdcjRzFuMWSTZt4DfPLvJm84kLd2CNyAl+lopUwt+i1dH0y8zLkbBAHz8k
2ww2GKw85twf5OWQvyVfXoDH7C0+kC7WchiG2ARIGJJy63xKwMa77hbxnDWl57yN
o6rI0O/ar6Ko7k/sOGjhbgqugb0HXJKweLZUAMI+18Qbip6bqEfsRxPH7SmcPWAE
EySY1MxQ2+BPtlcAXCjh3nztI2tp5Ig6vns2jdMfdrZU
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:23 2025 by rpki-client