Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/MR9ZuC-IL_jZ4767dS-IkZgCrJw.roa
File: MR9ZuC-IL_jZ4767dS-IkZgCrJw.roa (raw, json)
Hash identifier: Vi7lFCDHTrpEyk68a6k87cSkUHM4wyPXzIO5RtGzU1U=
Subject key identifier: 31:1F:59:B8:2F:88:2F:F8:D9:E3:BE:BB:75:2F:88:91:98:02:AC:9C
Certificate issuer: /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Certificate serial: 0194266BA937659DFDBEFF5E8E25409A8B4E
Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/MR9ZuC-IL_jZ4767dS-IkZgCrJw.roa
Signing time: Thu 02 Jan 2025 09:49:37 +0000
ROA not before: Thu 02 Jan 2025 09:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29208
IP address blocks: 194.145.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a9:37:65:9d:fd:be:ff:5e:8e:25:40:9a:8b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Validity
Not Before: Jan 2 09:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=311f59b82f882ff8d9e3bebb752f88919802ac9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:9f:d5:49:94:29:03:22:cc:2d:05:b3:98:
a2:c9:46:05:04:bf:15:9f:24:d5:94:65:ef:95:51:
50:2e:31:3d:c5:d8:00:1a:fe:bd:81:a5:a0:2a:ca:
5c:ca:16:48:f4:04:7f:15:32:c3:d7:5c:11:35:7f:
07:e9:ec:5c:a8:10:0f:3c:5d:fd:f3:ab:48:1b:e2:
55:4c:d8:fd:05:0a:9f:2e:55:6c:1f:b3:81:99:e1:
f1:31:66:17:78:a9:9c:b1:3e:01:92:ba:51:de:9c:
51:eb:46:50:aa:d1:7a:57:42:88:70:85:7c:6b:55:
cd:7b:36:66:c7:25:7a:1f:fc:20:91:31:ac:80:06:
c5:d5:a9:f5:04:9d:29:37:82:ef:9c:e6:de:1d:0b:
6f:7a:e5:b5:e2:ea:32:6a:50:d8:cd:a6:77:fa:68:
89:06:c9:6b:d8:44:9e:7a:87:07:37:28:6d:10:b2:
39:30:2f:8c:2b:ee:ac:7a:aa:b8:ed:c5:6d:a2:d1:
a6:73:1e:16:ea:d1:34:24:d0:d5:1e:6f:64:54:19:
27:69:ce:5e:95:02:21:73:54:fb:d9:09:b4:f7:74:
dd:05:fc:76:3e:f4:6c:4c:6b:79:e5:9f:ff:c7:80:
de:16:c7:ba:b5:3f:93:bc:18:01:85:49:24:13:3b:
79:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1F:59:B8:2F:88:2F:F8:D9:E3:BE:BB:75:2F:88:91:98:02:AC:9C
X509v3 Authority Key Identifier:
keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/MR9ZuC-IL_jZ4767dS-IkZgCrJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.156.0/24
Signature Algorithm: sha256WithRSAEncryption
70:c2:e5:12:8a:6b:61:02:8a:49:76:7e:c4:cb:55:73:db:f8:
10:2b:06:9c:c7:5d:1c:19:d3:c5:59:d0:4d:6a:d9:ee:0b:d9:
ff:75:f5:bb:ca:d4:07:3e:84:1a:84:ac:6d:79:c5:b4:77:f8:
39:79:72:04:fd:e9:2c:42:63:ee:4c:2f:a9:ef:c4:bc:8f:f0:
fe:80:bc:ef:89:01:72:ea:46:1a:fc:46:07:79:8a:f1:36:93:
7c:76:3b:24:dc:61:04:e9:9f:3a:28:cb:56:29:39:72:81:11:
cc:13:25:20:af:ee:29:e1:45:7b:c1:99:61:40:2e:29:5a:b7:
c1:28:8f:b0:40:a4:02:0e:5d:b7:3f:b5:3f:f6:d2:63:a6:e8:
5e:5f:91:b2:00:37:4a:ad:42:30:17:52:6b:e0:44:a2:48:6d:
9d:a9:33:73:0b:d9:35:f9:21:c3:84:c3:37:b9:9e:cc:82:56:
05:1d:13:e9:be:f8:11:47:80:52:3f:1f:77:6a:2f:32:9c:81:
c0:1d:32:2c:62:ac:0c:47:2b:c8:6f:e3:83:c9:16:d6:6a:42:
c4:2f:ce:eb:72:b5:3d:f4:1b:6e:f1:94:b7:c0:41:15:89:05:
42:f1:fa:85:fa:af:3f:44:d1:be:e5:ad:15:66:9a:3f:6b:7d:
81:13:8e:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma6k3ZZ39vv9ejiVAmotOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZmY0ZWU2MjNkOGZhYjczYzkwMWQwY2JkYzkzYTMyMWU5
Y2NmYjcwHhcNMjUwMTAyMDk0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTFmNTliODJmODgyZmY4ZDllM2JlYmI3NTJmODg5MTk4MDJhYzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslqf1UmUKQMizC0Fs5iiyUYFBL8V
nyTVlGXvlVFQLjE9xdgAGv69gaWgKspcyhZI9AR/FTLD11wRNX8H6excqBAPPF39
86tIG+JVTNj9BQqfLlVsH7OBmeHxMWYXeKmcsT4BkrpR3pxR60ZQqtF6V0KIcIV8
a1XNezZmxyV6H/wgkTGsgAbF1an1BJ0pN4LvnObeHQtveuW14uoyalDYzaZ3+miJ
Bslr2ESeeocHNyhtELI5MC+MK+6seqq47cVtotGmcx4W6tE0JNDVHm9kVBknac5e
lQIhc1T72Qm093TdBfx2PvRsTGt55Z//x4DeFse6tT+TvBgBhUkkEzt5BQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDEfWbgviC/42eO+u3UviJGYAqycMB8GA1UdIwQY
MBaAFIj/TuYj2Pq3PJAdDL3JOjIenM+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVA5TzVpUFktcmM4a0IwTXZjazZNaDZjejdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lYWYyZTItMTgxNy00MGE4LTliZTgt
MjUwN2RiMzJjMWM0LzEvTVI5WnVDLUlMX2paNDc2N2RTLUlrWmdDckp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lYWYyZTItMTgxNy00MGE4LTliZTgtMjUwN2RiMzJjMWM0
LzEvaVA5TzVpUFktcmM4a0IwTXZjazZNaDZjejdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpGcMA0G
CSqGSIb3DQEBCwUAA4IBAQBwwuUSimthAopJdn7Ey1Vz2/gQKwacx10cGdPFWdBN
atnuC9n/dfW7ytQHPoQahKxtecW0d/g5eXIE/eksQmPuTC+p78S8j/D+gLzviQFy
6kYa/EYHeYrxNpN8djsk3GEE6Z86KMtWKTlygRHMEyUgr+4p4UV7wZlhQC4pWrfB
KI+wQKQCDl23P7U/9tJjpuheX5GyADdKrUIwF1Jr4ESiSG2dqTNzC9k1+SHDhMM3
uZ7MglYFHRPpvvgRR4BSPx93ai8ynIHAHTIsYqwMRyvIb+ODyRbWakLEL87rcrU9
9Btu8ZS3wEEViQVC8fqF+q8/RNG+5a0VZpo/a32BE46M
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:36:37 2025 by rpki-client