Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9mMf3fbf4z5XHnQS7rq_MRovmVw.roa
File: 9mMf3fbf4z5XHnQS7rq_MRovmVw.roa (raw, json)
Hash identifier: 314gwK+qvFb5557TYPkwFpwnwVjEUL1fjXE/jJgHGks=
Subject key identifier: F6:63:1F:DD:F6:DF:E3:3E:57:1E:74:12:EE:BA:BF:31:1A:2F:99:5C
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D3B917995BC9D8AC9C5B5B4D2CBD4
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9mMf3fbf4z5XHnQS7rq_MRovmVw.roa
Signing time: Wed 01 Jan 2025 15:47:48 +0000
ROA not before: Wed 01 Jan 2025 15:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204574
IP address blocks: 188.164.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:3b:91:79:95:bc:9d:8a:c9:c5:b5:b4:d2:cb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6631fddf6dfe33e571e7412eebabf311a2f995c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:35:76:2a:4b:0e:81:2e:f3:bd:bf:88:22:d2:
6d:69:d1:d8:90:26:06:f8:8d:14:e1:31:ff:d7:0d:
43:69:2c:b1:7d:33:11:fb:83:8a:c0:95:b5:16:8a:
7d:ff:59:e8:03:9c:f2:f2:7d:40:4a:61:94:96:d1:
48:11:cc:8a:5b:c2:0f:db:35:4d:c3:b8:d8:e4:6a:
25:24:61:51:e9:17:db:a1:a7:cf:da:c6:ab:8c:91:
b4:09:d0:6e:54:f5:6e:81:3e:36:d9:8b:be:19:40:
20:98:66:99:e1:b9:79:d2:f7:82:6c:05:87:cc:1d:
ae:0c:c9:50:97:c8:19:e1:3d:5d:f3:0f:53:58:e0:
35:d7:20:7a:d3:6f:09:d9:1c:ea:6e:e9:33:4c:c7:
34:1b:e9:7f:15:4d:96:94:59:80:12:00:80:78:08:
ee:9f:dc:14:b1:c9:a1:37:05:e9:2d:39:a8:ff:66:
c3:41:ce:78:cc:cf:35:96:65:ed:d4:6d:87:79:35:
1e:85:74:5d:1b:57:f0:e1:27:79:8f:c6:10:a6:da:
c3:e1:c8:ea:21:09:91:1c:23:c8:c9:c4:87:4b:94:
16:9a:d7:b0:6c:4c:d4:b1:1f:fa:be:22:e1:22:1d:
b2:f7:cd:dd:4d:81:76:e0:3e:91:bf:09:b3:99:85:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:63:1F:DD:F6:DF:E3:3E:57:1E:74:12:EE:BA:BF:31:1A:2F:99:5C
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9mMf3fbf4z5XHnQS7rq_MRovmVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.210.0/24
Signature Algorithm: sha256WithRSAEncryption
62:1e:81:3b:17:5d:b8:eb:a3:03:e2:80:7e:71:1c:08:fb:eb:
cf:e1:9d:41:b3:56:20:58:7a:0f:ba:2f:09:4a:07:5a:45:bd:
28:08:33:80:96:6a:a7:18:2e:dc:98:b7:dd:c7:e3:5a:b4:54:
c1:10:3e:d6:45:77:ab:68:f9:0d:5c:39:04:ed:9e:a0:c6:8a:
a5:9c:5c:e8:c4:db:25:20:3e:20:8e:cc:d3:ba:21:06:e6:e4:
4b:1c:e9:13:79:40:d8:ce:7e:2f:36:93:65:30:ac:dd:31:b8:
51:b0:ce:e6:94:db:dc:5e:49:88:35:f4:b9:6e:d2:d6:ae:13:
b5:c7:da:07:96:35:bd:3b:36:6a:48:1a:5c:58:9c:e7:b8:17:
71:80:9f:62:2f:b5:62:19:8f:ed:b4:89:3f:2a:22:d0:17:50:
b3:1f:1d:96:7b:0f:26:31:74:84:66:24:9a:53:7b:17:c8:65:
19:b5:23:4f:02:69:2c:17:f8:5b:f6:6a:59:b5:33:e3:c9:6a:
7c:15:e4:9a:3d:09:66:e5:89:5f:79:a8:00:0e:09:c5:af:fb:
c7:6f:d2:6c:ae:80:66:5a:62:5b:6a:31:a0:e1:d8:92:b6:08:
27:db:a6:7d:1b:ed:60:b5:c4:9f:95:18:f3:22:70:91:4d:1e:
4a:ca:71:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijTuReZW8nYrJxbW00svUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjUwMTAxMTU0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjYzMWZkZGY2ZGZlMzNlNTcxZTc0MTJlZWJhYmYzMTFhMmY5OTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDV2KksOgS7zvb+IItJtadHYkCYG
+I0U4TH/1w1DaSyxfTMR+4OKwJW1Fop9/1noA5zy8n1ASmGUltFIEcyKW8IP2zVN
w7jY5GolJGFR6RfboafP2sarjJG0CdBuVPVugT422Yu+GUAgmGaZ4bl50veCbAWH
zB2uDMlQl8gZ4T1d8w9TWOA11yB6028J2RzqbukzTMc0G+l/FU2WlFmAEgCAeAju
n9wUscmhNwXpLTmo/2bDQc54zM81lmXt1G2HeTUehXRdG1fw4Sd5j8YQptrD4cjq
IQmRHCPIycSHS5QWmtewbEzUsR/6viLhIh2y983dTYF24D6RvwmzmYVM9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPZjH9323+M+Vx50Eu66vzEaL5lcMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvOW1NZjNmYmY0ejVYSG5RUzdycV9NUm92bVZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvKTSMA0G
CSqGSIb3DQEBCwUAA4IBAQBiHoE7F12466MD4oB+cRwI++vP4Z1Bs1YgWHoPui8J
SgdaRb0oCDOAlmqnGC7cmLfdx+NatFTBED7WRXeraPkNXDkE7Z6gxoqlnFzoxNsl
ID4gjszTuiEG5uRLHOkTeUDYzn4vNpNlMKzdMbhRsM7mlNvcXkmINfS5btLWrhO1
x9oHljW9OzZqSBpcWJznuBdxgJ9iL7ViGY/ttIk/KiLQF1CzHx2Wew8mMXSEZiSa
U3sXyGUZtSNPAmksF/hb9mpZtTPjyWp8FeSaPQlm5YlfeagADgnFr/vHb9JsroBm
WmJbajGg4diStggn26Z9G+1gtcSflRjzInCRTR5KynHt
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:31:23 2025 by rpki-client