Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/QIDf4Iu_RdrYgyyIuj6gJ-4zRDM.roa
File: QIDf4Iu_RdrYgyyIuj6gJ-4zRDM.roa (raw, json)
Hash identifier: gPzwG8Qs6NsEggCNX7yZgHvjhLMScjcNOKXedwp4M5g=
Subject key identifier: 40:80:DF:E0:8B:BF:45:DA:D8:83:2C:88:BA:3E:A0:27:EE:33:44:33
Certificate issuer: /CN=3269cc291ba260fc71118684e7b302f50ce9628d
Certificate serial: 0793D2CC
Authority key identifier: 32:69:CC:29:1B:A2:60:FC:71:11:86:84:E7:B3:02:F5:0C:E9:62:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmnMKRuiYPxxEYaE57MC9QzpYo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/QIDf4Iu_RdrYgyyIuj6gJ-4zRDM.roa
Signing time: Thu 24 Mar 2022 10:10:39 +0000
ROA not before: Thu 24 Mar 2022 10:10:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57327
IP address blocks: 192.211.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127128268 (0x793d2cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3269cc291ba260fc71118684e7b302f50ce9628d
Validity
Not Before: Mar 24 10:10:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4080dfe08bbf45dad8832c88ba3ea027ee334433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:35:b8:b4:14:30:a2:ed:26:65:75:d2:b3:60:
84:0f:41:58:f7:f4:9f:59:4f:a5:a6:ca:19:e9:1a:
1f:e3:16:f0:c5:9f:21:48:01:ab:7b:22:2f:06:7b:
d0:e0:c9:b2:5d:0a:ca:b1:a7:f6:ff:68:b0:c1:2b:
3c:de:36:fc:fe:15:2f:ee:ba:9a:60:6e:b4:34:18:
ee:61:75:f5:3a:fb:8b:b4:fb:a0:3a:0a:4c:7d:83:
28:8b:d4:9f:ac:01:7d:38:d8:9c:4a:2e:41:0c:37:
28:09:86:85:24:72:c9:fa:bb:06:6b:57:df:3e:77:
b8:83:78:33:a5:59:0a:88:5a:8f:a0:c5:18:86:94:
27:af:40:0c:38:37:d7:9e:f5:dd:5c:54:84:cd:e6:
df:fe:d5:52:8c:10:11:b1:17:25:4e:26:7e:b4:7b:
c1:64:66:39:7f:6d:f5:17:50:13:db:fb:f2:5c:44:
58:79:79:eb:74:19:45:b7:7e:52:df:a0:c0:fd:9b:
ec:1d:53:55:39:7e:d6:0d:60:9e:c2:33:3a:cf:30:
c9:ab:11:54:60:99:3e:89:52:c7:5f:41:8b:0b:5f:
aa:23:38:a4:0c:a5:bb:f7:62:f6:a4:56:e6:e9:19:
bd:de:27:49:b4:cd:d5:c6:e0:e2:a0:0a:61:c1:39:
03:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:80:DF:E0:8B:BF:45:DA:D8:83:2C:88:BA:3E:A0:27:EE:33:44:33
X509v3 Authority Key Identifier:
keyid:32:69:CC:29:1B:A2:60:FC:71:11:86:84:E7:B3:02:F5:0C:E9:62:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmnMKRuiYPxxEYaE57MC9QzpYo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/QIDf4Iu_RdrYgyyIuj6gJ-4zRDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/MmnMKRuiYPxxEYaE57MC9QzpYo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.211.0.0/24
Signature Algorithm: sha256WithRSAEncryption
56:8c:5d:95:ae:8b:26:68:27:8d:dd:68:5f:64:4e:a3:e1:5f:
b8:f7:05:ff:40:d6:76:c3:58:f8:db:ab:a9:7c:c0:35:9d:db:
a4:3c:52:74:28:75:d8:76:d0:40:12:01:e8:58:2c:a5:15:7c:
94:e3:a7:1b:02:3f:0a:2d:57:72:8b:3a:ae:49:a7:a2:f9:cb:
2d:1d:5c:78:4e:a6:1e:29:4c:57:3e:44:49:96:95:f0:91:b1:
64:45:b8:69:2c:09:56:1c:58:00:fc:5d:f3:ad:38:84:d4:c3:
8e:92:e1:e4:4a:ba:3b:88:8f:b2:b5:5f:81:74:86:de:38:b7:
ff:91:26:b9:74:a5:00:05:3c:58:e0:bc:4b:fd:34:22:6d:2e:
47:01:e2:88:11:9c:65:a2:56:84:3c:b1:0b:3c:0a:90:26:58:
e0:7f:7c:a0:6a:1b:cd:ef:d6:a3:38:ae:75:f5:cb:f4:d6:28:
46:c0:f1:12:80:1c:b5:33:da:2f:d1:81:52:11:19:62:f0:36:
94:da:09:ca:9f:8a:66:9b:e3:e5:29:40:df:67:52:04:96:ef:
b0:de:d4:3d:6c:be:c2:6b:0c:1e:88:20:e8:ef:89:d9:42:ed:
f8:9f:fb:82:54:18:0c:b2:d4:33:7c:79:11:02:70:4f:73:8b:
d5:c6:b7:1c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB5PSzDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MjY5Y2MyOTFiYTI2MGZjNzExMTg2ODRlN2IzMDJmNTBjZTk2MjhkMB4XDTIyMDMy
NDEwMTAzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDA4MGRmZTA4YmJm
NDVkYWQ4ODMyYzg4YmEzZWEwMjdlZTMzNDQzMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMI1uLQUMKLtJmV10rNghA9BWPf0n1lPpabKGekaH+MW8MWf
IUgBq3siLwZ70ODJsl0KyrGn9v9osMErPN42/P4VL+66mmButDQY7mF19Tr7i7T7
oDoKTH2DKIvUn6wBfTjYnEouQQw3KAmGhSRyyfq7BmtX3z53uIN4M6VZCohaj6DF
GIaUJ69ADDg315713VxUhM3m3/7VUowQEbEXJU4mfrR7wWRmOX9t9RdQE9v78lxE
WHl563QZRbd+Ut+gwP2b7B1TVTl+1g1gnsIzOs8wyasRVGCZPolSx19BiwtfqiM4
pAylu/di9qRW5ukZvd4nSbTN1cbg4qAKYcE5A6ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRAgN/gi79F2tiDLIi6PqAn7jNEMzAfBgNVHSMEGDAWgBQyacwpG6Jg/HER
hoTnswL1DOlijTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01tbk1LUnVpWVB4eEVZYUU1N01DOVF6cFlvMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2IvY2NiYzUyLWUwOTQtNGUxNS1iNjcyLTcxYTRjNmY5Yzg4Ny8x
L1FJRGY0SXVfUmRyWWd5eUl1ajZnSi00elJETS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Iv
Y2NiYzUyLWUwOTQtNGUxNS1iNjcyLTcxYTRjNmY5Yzg4Ny8xL01tbk1LUnVpWVB4
eEVZYUU1N01DOVF6cFlvMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMDTADANBgkqhkiG9w0BAQsFAAOC
AQEAVoxdla6LJmgnjd1oX2ROo+FfuPcF/0DWdsNY+NurqXzANZ3bpDxSdCh12HbQ
QBIB6FgspRV8lOOnGwI/Ci1Xcos6rkmnovnLLR1ceE6mHilMVz5ESZaV8JGxZEW4
aSwJVhxYAPxd8604hNTDjpLh5Eq6O4iPsrVfgXSG3ji3/5EmuXSlAAU8WOC8S/00
Im0uRwHiiBGcZaJWhDyxCzwKkCZY4H98oGobze/WoziudfXL9NYoRsDxEoActTPa
L9GBUhEZYvA2lNoJyp+KZpvj5SlA32dSBJbvsN7UPWy+wmsMHogg6O+J2ULt+J/7
glQYDLLUM3x5EQJwT3OL1ca3HA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 10:20:18 2025 by rpki-client