Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/9Wsyc-JvO9JC7caCozj-SAG1bJs.roa
File: 9Wsyc-JvO9JC7caCozj-SAG1bJs.roa (raw, json)
Hash identifier: bKm+mUgzyZClr4J+G/kqKks+sApaN1YwjRFddgUbnbE=
Subject key identifier: F5:6B:32:73:E2:6F:3B:D2:42:ED:C6:82:A3:38:FE:48:01:B5:6C:9B
Certificate issuer: /CN=9a5550e908a9b9688c29aac9895353dea836c45a
Certificate serial: 019421B1E12399A392C636E217F0E3D026F8
Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/9Wsyc-JvO9JC7caCozj-SAG1bJs.roa
Signing time: Wed 01 Jan 2025 11:48:13 +0000
ROA not before: Wed 01 Jan 2025 11:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.11.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e1:23:99:a3:92:c6:36:e2:17:f0:e3:d0:26:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a
Validity
Not Before: Jan 1 11:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f56b3273e26f3bd242edc682a338fe4801b56c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:95:ad:95:f9:3b:53:4f:9c:b1:89:2c:a7:
ad:94:dd:53:a3:ea:95:ff:22:81:c0:37:59:f9:79:
9d:8a:98:a3:04:95:b2:ae:64:2a:36:f4:2d:24:72:
90:2c:e9:df:22:b6:0c:16:bb:55:ff:6b:c7:26:75:
4c:e8:20:8c:9d:a3:04:58:f9:15:52:34:dc:0e:58:
ad:63:d8:e2:cf:31:8b:6a:92:f8:4c:28:4b:eb:83:
7b:2e:78:ff:86:16:fd:b0:6f:62:3c:a9:41:30:20:
a0:81:54:98:db:ea:5e:3c:ae:af:a3:bf:7c:81:eb:
22:8f:70:37:97:bc:7b:3e:95:90:be:98:30:74:6d:
10:4b:e5:db:3d:55:f5:16:0e:02:a1:b3:84:b5:86:
80:1d:a2:23:90:e5:e4:c3:04:d0:f5:90:b0:3b:3b:
f8:73:21:ca:32:25:29:4e:1c:d0:57:2f:c8:26:3b:
b3:70:32:63:30:56:30:41:38:c7:39:d0:1d:9f:6c:
f0:98:ae:f3:1a:2b:09:4e:97:71:4e:9c:9e:55:b1:
0a:8e:03:aa:41:26:81:1a:c8:fb:b7:e5:7e:df:f7:
a7:e7:0a:38:61:e6:78:72:61:bf:23:d8:54:6a:11:
b2:37:f3:cf:ad:0d:ef:00:b8:2b:d7:ef:3a:db:a2:
56:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6B:32:73:E2:6F:3B:D2:42:ED:C6:82:A3:38:FE:48:01:B5:6C:9B
X509v3 Authority Key Identifier:
keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/9Wsyc-JvO9JC7caCozj-SAG1bJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.126.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:4f:d0:7b:93:61:2d:20:69:5c:c1:75:85:22:dc:d4:c2:2e:
ad:96:a5:d6:b2:d8:53:2e:7b:43:46:fd:80:2c:00:43:e6:b5:
f4:c0:b8:a9:2a:71:bf:a2:d2:46:da:d5:78:d7:1c:f5:ca:68:
9d:cb:09:d7:f9:45:0a:d7:49:d9:41:f6:05:90:e4:ad:0c:cc:
5e:40:6c:0c:5a:df:3b:50:71:dc:3e:a9:e5:c0:f9:cc:33:6f:
e6:db:48:98:a4:fb:1b:54:1a:e1:e9:f7:40:07:55:af:13:ec:
d6:ce:c5:40:e2:2d:de:31:6f:8b:89:c4:ec:2e:df:7c:2c:06:
3b:2b:d5:4b:3e:23:1a:60:a8:fd:51:7a:db:70:fa:9d:b7:61:
e9:db:79:f4:52:44:5e:7a:b1:95:c9:e2:32:d6:62:69:91:38:
64:e9:5d:27:cf:24:84:8d:ac:39:14:d7:cd:6b:a2:70:77:57:
53:78:80:0b:12:7e:93:d2:01:54:ef:ad:80:9d:47:b4:fa:51:
64:b2:2c:68:be:8d:29:da:6d:02:9e:e7:91:1f:8c:8a:b3:f3:
b9:5f:42:7f:ad:c4:dc:33:19:a1:f6:27:e9:67:84:ce:c4:96:
e0:61:91:e2:a2:b3:95:07:5c:18:b2:18:fd:a4:21:9a:23:07:
29:b7:c0:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhseEjmaOSxjbiF/Dj0Cb4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNTU1MGU5MDhhOWI5Njg4YzI5YWFjOTg5NTM1M2RlYTgz
NmM0NWEwHhcNMjUwMTAxMTE0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTZiMzI3M2UyNmYzYmQyNDJlZGM2ODJhMzM4ZmU0ODAxYjU2YzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptmVrZX5O1NPnLGJLKetlN1To+qV
/yKBwDdZ+XmdipijBJWyrmQqNvQtJHKQLOnfIrYMFrtV/2vHJnVM6CCMnaMEWPkV
UjTcDlitY9jizzGLapL4TChL64N7Lnj/hhb9sG9iPKlBMCCggVSY2+pePK6vo798
gesij3A3l7x7PpWQvpgwdG0QS+XbPVX1Fg4CobOEtYaAHaIjkOXkwwTQ9ZCwOzv4
cyHKMiUpThzQVy/IJjuzcDJjMFYwQTjHOdAdn2zwmK7zGisJTpdxTpyeVbEKjgOq
QSaBGsj7t+V+3/en5wo4YeZ4cmG/I9hUahGyN/PPrQ3vALgr1+8626JWlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPVrMnPibzvSQu3GgqM4/kgBtWybMB8GA1UdIwQY
MBaAFJpVUOkIqblojCmqyYlTU96oNsRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWxWUTZRaXB1V2lNS2FySmlWTlQzcWcyeEZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iYmIzMGItMjY4OC00YTZlLWIyYTIt
MTM5OWEyODIyMjdhLzEvOVdzeWMtSnZPOUpDN2NhQ296ai1TQUcxYkpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iYmIzMGItMjY4OC00YTZlLWIyYTItMTM5OWEyODIyMjdh
LzEvbWxWUTZRaXB1V2lNS2FySmlWTlQzcWcyeEZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQt+MA0G
CSqGSIb3DQEBCwUAA4IBAQBvT9B7k2EtIGlcwXWFItzUwi6tlqXWsthTLntDRv2A
LABD5rX0wLipKnG/otJG2tV41xz1ymidywnX+UUK10nZQfYFkOStDMxeQGwMWt87
UHHcPqnlwPnMM2/m20iYpPsbVBrh6fdAB1WvE+zWzsVA4i3eMW+LicTsLt98LAY7
K9VLPiMaYKj9UXrbcPqdt2Hp23n0UkReerGVyeIy1mJpkThk6V0nzySEjaw5FNfN
a6Jwd1dTeIALEn6T0gFU762AnUe0+lFksixovo0p2m0CnueRH4yKs/O5X0J/rcTc
Mxmh9ifpZ4TOxJbgYZHiorOVB1wYshj9pCGaIwcpt8Al
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:40:02 2025 by rpki-client