Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d87d60-5c58-4289-95f4-aadb79a60395/1/p3uH_dJ6_LecGMrS-upDwL2cRGU.roa
File: p3uH_dJ6_LecGMrS-upDwL2cRGU.roa (raw, json)
Hash identifier: YaYmLpDommcwytbeGsXi914t2onhhakRolJPb/9bBqE=
Subject key identifier: A7:7B:87:FD:D2:7A:FC:B7:9C:18:CA:D2:FA:EA:43:C0:BD:9C:44:65
Certificate issuer: /CN=fe4db7a73ef8bdf49ffbc5422aedb9524e5660e2
Certificate serial: 017D1A2B
Authority key identifier: FE:4D:B7:A7:3E:F8:BD:F4:9F:FB:C5:42:2A:ED:B9:52:4E:56:60:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_k23pz74vfSf-8VCKu25Uk5WYOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d87d60-5c58-4289-95f4-aadb79a60395/1/p3uH_dJ6_LecGMrS-upDwL2cRGU.roa
Signing time: Sat 01 Jan 2022 11:01:22 +0000
ROA not before: Sat 01 Jan 2022 11:01:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57497
IP address blocks: 194.62.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24975915 (0x17d1a2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe4db7a73ef8bdf49ffbc5422aedb9524e5660e2
Validity
Not Before: Jan 1 11:01:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a77b87fdd27afcb79c18cad2faea43c0bd9c4465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:89:ab:c3:97:fa:2e:b5:a9:22:bc:54:12:
20:7d:c0:67:38:b2:04:30:1a:1b:df:68:0d:be:8b:
30:2b:d6:3d:d0:d4:cc:63:e7:e0:da:a6:4b:d0:34:
63:68:88:a4:22:04:ac:87:0e:58:4b:3a:dc:cc:43:
01:0f:f8:07:3a:c5:a3:3e:cf:1b:14:21:c6:4a:82:
b8:e0:f0:a3:d9:67:7a:d0:7d:db:1d:d2:48:a7:78:
45:7c:fc:e3:01:f5:c1:c9:7a:48:26:b3:87:05:04:
62:8f:20:fb:35:67:06:5d:04:66:50:62:b6:f6:9a:
71:c0:21:b8:e1:ee:6b:64:aa:86:7b:83:df:7b:85:
58:df:94:3a:3c:06:f1:6e:45:a7:a5:c2:48:c5:e3:
62:90:de:aa:03:dd:f8:20:16:f7:41:8f:ee:e5:80:
19:46:e5:d3:db:51:fb:74:f2:be:30:29:e2:82:de:
8f:be:ef:b5:65:66:f5:88:93:b1:ec:38:86:ec:4a:
cf:6f:66:58:42:83:da:33:df:c0:f8:22:8b:f8:9d:
e3:53:57:24:7b:94:4f:c4:8f:04:be:6e:d5:b1:69:
cb:f9:d2:b3:91:04:3a:d6:d5:8d:49:3c:8b:b4:e6:
b0:6e:7c:24:1e:f1:0d:02:11:6c:b8:95:a6:25:1e:
1a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7B:87:FD:D2:7A:FC:B7:9C:18:CA:D2:FA:EA:43:C0:BD:9C:44:65
X509v3 Authority Key Identifier:
keyid:FE:4D:B7:A7:3E:F8:BD:F4:9F:FB:C5:42:2A:ED:B9:52:4E:56:60:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_k23pz74vfSf-8VCKu25Uk5WYOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d87d60-5c58-4289-95f4-aadb79a60395/1/p3uH_dJ6_LecGMrS-upDwL2cRGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d87d60-5c58-4289-95f4-aadb79a60395/1/_k23pz74vfSf-8VCKu25Uk5WYOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.17.0/24
Signature Algorithm: sha256WithRSAEncryption
12:de:14:66:98:9c:49:3a:bc:c3:27:56:9f:01:aa:e3:0d:29:
1f:31:76:47:f2:f7:4f:3d:3d:73:ae:d9:e8:18:74:1f:41:5e:
7c:eb:b1:1f:67:f0:68:f0:52:66:74:99:5f:8e:95:a5:24:0c:
f3:60:b2:95:e3:b8:7e:b3:47:e0:1a:d1:29:9b:1a:ca:df:f1:
59:fe:47:42:bd:9d:4d:53:e5:a4:8d:48:dc:4f:b4:84:25:f0:
4d:1a:c2:2d:6b:95:23:73:64:8c:c4:15:59:4f:b1:67:77:fd:
a5:5a:e7:40:b1:fc:4e:44:c3:ce:53:44:fa:47:39:58:0d:fd:
8f:98:58:69:47:e1:a5:3d:f0:b8:d2:7e:0e:7a:5b:dc:93:8a:
74:4f:1a:d6:f6:f0:b0:12:ec:d1:42:93:37:7b:9b:0e:04:9d:
40:79:ce:28:29:67:c1:f7:ba:47:c6:12:09:63:55:a7:d9:71:
3d:9c:df:15:f2:c4:01:25:00:b7:1c:3c:86:f1:3d:fe:cb:3e:
c5:53:8e:4a:a6:36:4c:1a:37:ff:ed:ef:8b:f5:e9:19:b1:3c:
c4:0d:00:2f:2a:93:1f:be:4e:d9:c3:1b:ff:48:10:78:4b:c9:
cd:42:e6:03:b8:a9:86:bd:62:10:46:51:46:1c:7a:4f:88:13:
7d:e7:1b:5e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAX0aKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZTRkYjdhNzNlZjhiZGY0OWZmYmM1NDIyYWVkYjk1MjRlNTY2MGUyMB4XDTIyMDEw
MTExMDEyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTc3Yjg3ZmRkMjdh
ZmNiNzljMThjYWQyZmFlYTQzYzBiZDljNDQ2NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ+YiavDl/outakivFQSIH3AZziyBDAaG99oDb6LMCvWPdDU
zGPn4NqmS9A0Y2iIpCIErIcOWEs63MxDAQ/4BzrFoz7PGxQhxkqCuODwo9lnetB9
2x3SSKd4RXz84wH1wcl6SCazhwUEYo8g+zVnBl0EZlBitvaaccAhuOHua2SqhnuD
33uFWN+UOjwG8W5Fp6XCSMXjYpDeqgPd+CAW90GP7uWAGUbl09tR+3TyvjAp4oLe
j77vtWVm9YiTsew4huxKz29mWEKD2jPfwPgii/id41NXJHuUT8SPBL5u1bFpy/nS
s5EEOtbVjUk8i7TmsG58JB7xDQIRbLiVpiUeGoECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSne4f90nr8t5wYytL66kPAvZxEZTAfBgNVHSMEGDAWgBT+TbenPvi99J/7
xUIq7blSTlZg4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19rMjNwejc0dmZTZi04VkNLdTI1VWs1V1lPSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2IvZDg3ZDYwLTVjNTgtNDI4OS05NWY0LWFhZGI3OWE2MDM5NS8x
L3AzdUhfZEo2X0xlY0dNclMtdXBEd0wyY1JHVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Iv
ZDg3ZDYwLTVjNTgtNDI4OS05NWY0LWFhZGI3OWE2MDM5NS8xL19rMjNwejc0dmZT
Zi04VkNLdTI1VWs1V1lPSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMI+ETANBgkqhkiG9w0BAQsFAAOC
AQEAEt4UZpicSTq8wydWnwGq4w0pHzF2R/L3Tz09c67Z6Bh0H0FefOuxH2fwaPBS
ZnSZX46VpSQM82CyleO4frNH4BrRKZsayt/xWf5HQr2dTVPlpI1I3E+0hCXwTRrC
LWuVI3NkjMQVWU+xZ3f9pVrnQLH8TkTDzlNE+kc5WA39j5hYaUfhpT3wuNJ+Dnpb
3JOKdE8a1vbwsBLs0UKTN3ubDgSdQHnOKClnwfe6R8YSCWNVp9lxPZzfFfLEASUA
txw8hvE9/ss+xVOOSqY2TBo3/+3vi/XpGbE8xA0ALyqTH75O2cMb/0gQeEvJzULm
A7iphr1iEEZRRhx6T4gTfecbXg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:09 2025 by rpki-client