Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1r7FuSv6QLjDLkwwzyxbPMMnp1Q.roa
File: 1r7FuSv6QLjDLkwwzyxbPMMnp1Q.roa (raw, json)
Hash identifier: 5mvvzlkJFHGIvaTcxp2aCnE1b4jA92xcb+u31slyqEE=
Subject key identifier: D6:BE:C5:B9:2B:FA:40:B8:C3:2E:4C:30:CF:2C:5B:3C:C3:27:A7:54
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194696530BE08476A878C9526BE014E3CF3
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1r7FuSv6QLjDLkwwzyxbPMMnp1Q.roa
Signing time: Wed 15 Jan 2025 09:57:06 +0000
ROA not before: Wed 15 Jan 2025 09:57:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 128.0.118.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:65:30:be:08:47:6a:87:8c:95:26:be:01:4e:3c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 15 09:57:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6bec5b92bfa40b8c32e4c30cf2c5b3cc327a754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:22:a1:70:d4:ed:a0:bb:cd:c9:ca:47:12:bb:
53:1b:93:13:7b:ba:de:6d:7d:8c:20:eb:93:c7:63:
f7:e4:8e:25:77:0d:cc:e5:f6:cf:e2:51:71:26:65:
98:bb:d1:2c:6e:d3:e3:cb:89:75:64:23:72:88:39:
df:cf:db:65:4e:7a:3a:7a:30:fd:a9:2c:67:01:b5:
54:d2:1c:00:e6:fe:c5:5a:84:a0:dd:95:3e:b5:72:
01:30:86:9d:dc:15:2d:51:64:60:a7:db:c0:32:4d:
7f:e8:96:f7:94:e1:95:e4:37:45:85:f0:c7:34:ed:
03:4f:2f:df:f1:62:2c:24:f4:f2:6c:ba:b2:7f:a3:
dd:af:43:8a:98:7e:14:b8:37:0a:04:99:48:d3:0b:
a5:c9:0d:60:7c:b9:8e:39:14:54:b9:6b:0e:24:80:
d5:3d:6e:b2:54:2f:d6:a1:e0:ba:6f:5e:40:68:6c:
24:e6:26:a0:e9:b7:e0:b7:2e:4a:91:11:15:9b:15:
f3:3c:56:2e:17:e6:a1:80:7f:71:04:28:4d:93:98:
43:59:af:97:91:68:31:9a:b4:e4:a9:26:e0:62:dc:
7b:a0:0e:02:4f:6f:43:2e:e6:b6:7b:44:da:9d:2c:
06:91:bc:42:96:40:41:59:7f:0a:12:14:eb:9e:fb:
d1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BE:C5:B9:2B:FA:40:B8:C3:2E:4C:30:CF:2C:5B:3C:C3:27:A7:54
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1r7FuSv6QLjDLkwwzyxbPMMnp1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.118.0/24
Signature Algorithm: sha256WithRSAEncryption
86:1a:bb:91:b0:f7:78:a1:26:c5:08:f1:9d:2f:44:db:02:e2:
6a:db:d4:1a:1d:f2:da:57:a2:a6:2d:3d:cb:30:d2:29:69:a6:
ff:f4:91:2d:19:98:d0:7c:84:9a:f8:dc:c5:55:36:bb:3e:9c:
31:9c:18:67:9b:15:00:18:b8:55:a9:07:79:42:03:42:05:38:
8c:08:5a:50:df:5a:22:2f:9c:0f:62:b7:f3:5f:50:11:68:1b:
09:71:6c:ec:b3:5d:15:b8:4c:57:5d:d8:c3:5e:1d:2d:62:e5:
51:7f:bb:4c:41:c2:38:f8:04:c5:f2:b9:2c:2e:10:68:a0:3a:
a6:c6:57:c9:17:ce:18:f9:ca:44:9c:9b:e7:3c:94:15:99:ed:
0f:7c:d0:2e:1a:e2:a5:6f:fb:9e:90:5f:a3:f0:a4:11:f8:48:
75:ee:5a:b7:c5:95:c9:2f:47:39:6b:70:f7:b6:7c:8d:b1:1c:
42:29:c0:ab:8e:3e:b5:db:64:94:70:22:94:da:c9:a0:33:c2:
05:1c:0f:c8:c1:0d:20:27:92:27:08:35:28:84:0f:c5:e3:4c:
96:a2:77:a5:aa:21:88:90:d2:1e:20:0f:0c:bb:f2:89:ea:5e:
c9:84:a5:4c:2e:8e:46:25:4d:2f:82:4d:a2:45:c0:ad:c8:4e:
9f:07:ea:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRpZTC+CEdqh4yVJr4BTjzzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjUwMTE1MDk1NzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmJlYzViOTJiZmE0MGI4YzMyZTRjMzBjZjJjNWIzY2MzMjdhNzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSKhcNTtoLvNycpHErtTG5MTe7re
bX2MIOuTx2P35I4ldw3M5fbP4lFxJmWYu9EsbtPjy4l1ZCNyiDnfz9tlTno6ejD9
qSxnAbVU0hwA5v7FWoSg3ZU+tXIBMIad3BUtUWRgp9vAMk1/6Jb3lOGV5DdFhfDH
NO0DTy/f8WIsJPTybLqyf6Pdr0OKmH4UuDcKBJlI0wulyQ1gfLmOORRUuWsOJIDV
PW6yVC/WoeC6b15AaGwk5iag6bfgty5KkREVmxXzPFYuF+ahgH9xBChNk5hDWa+X
kWgxmrTkqSbgYtx7oA4CT29DLua2e0TanSwGkbxClkBBWX8KEhTrnvvRiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNa+xbkr+kC4wy5MMM8sWzzDJ6dUMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvMXI3RnVTdjZRTGpETGt3d3p5eGJQTU1ucDFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAB2MA0G
CSqGSIb3DQEBCwUAA4IBAQCGGruRsPd4oSbFCPGdL0TbAuJq29QaHfLaV6KmLT3L
MNIpaab/9JEtGZjQfISa+NzFVTa7PpwxnBhnmxUAGLhVqQd5QgNCBTiMCFpQ31oi
L5wPYrfzX1ARaBsJcWzss10VuExXXdjDXh0tYuVRf7tMQcI4+ATF8rksLhBooDqm
xlfJF84Y+cpEnJvnPJQVme0PfNAuGuKlb/uekF+j8KQR+Eh17lq3xZXJL0c5a3D3
tnyNsRxCKcCrjj6122SUcCKU2smgM8IFHA/IwQ0gJ5InCDUohA/F40yWonelqiGI
kNIeIA8Mu/KJ6l7JhKVMLo5GJU0vgk2iRcCtyE6fB+rT
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:20:55 2025 by rpki-client