Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/2u8kv3rKzRJADJ6kOxi8h5B8sLE.roa
File: 2u8kv3rKzRJADJ6kOxi8h5B8sLE.roa (raw, json)
Hash identifier: J0S+ymNUvw3d73rX0xZZrqVD7y/AWzS134u/uN3nlv8=
Subject key identifier: DA:EF:24:BF:7A:CA:CD:12:40:0C:9E:A4:3B:18:BC:87:90:7C:B0:B1
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258FA527C7CBFCE1CDE1CC56C613526B
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/2u8kv3rKzRJADJ6kOxi8h5B8sLE.roa
Signing time: Thu 02 Jan 2025 05:49:18 +0000
ROA not before: Thu 02 Jan 2025 05:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213808
IP address blocks: 195.14.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a5:27:c7:cb:fc:e1:cd:e1:cc:56:c6:13:52:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=daef24bf7acacd12400c9ea43b18bc87907cb0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:78:84:4d:03:64:b3:6e:d5:74:a9:6c:05:e5:
0a:63:6f:c6:f0:04:4b:73:c0:a2:d2:73:61:68:5e:
6e:2d:91:5e:aa:fd:04:de:3b:a8:50:b1:02:32:eb:
93:0c:03:db:2c:fd:9c:04:a4:db:5a:25:3e:ad:f5:
7b:0d:d6:ca:d8:2f:5a:88:eb:8f:29:73:de:b6:35:
58:a3:cf:7c:7b:b8:8b:fe:be:f7:8b:b1:c3:de:61:
a7:e5:dc:05:0a:21:f9:18:83:d3:e1:40:fe:a6:3b:
e7:7c:ea:ec:f6:70:ec:2e:a2:63:f6:19:5d:88:40:
ca:87:ff:6e:33:42:7d:62:aa:d6:df:9e:eb:66:dd:
23:dd:3f:fa:26:b8:b9:92:08:73:5b:53:f5:75:d9:
4d:2d:9f:52:3b:37:99:35:1b:c6:34:77:f5:13:e2:
fb:4f:15:c5:43:2c:20:f7:d1:65:0e:86:9e:d1:94:
67:64:9f:40:8a:9e:16:f6:05:77:57:56:1a:e8:aa:
e1:87:a1:50:55:df:ba:ed:98:81:3c:12:3d:be:fc:
2d:30:d3:51:ab:aa:be:99:2e:5e:98:b3:a1:2c:44:
de:b9:89:05:90:47:d3:b1:b4:f3:de:f5:a6:56:a4:
b7:0d:9d:57:ad:ec:35:87:41:dc:ea:54:5d:a2:53:
7a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EF:24:BF:7A:CA:CD:12:40:0C:9E:A4:3B:18:BC:87:90:7C:B0:B1
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/2u8kv3rKzRJADJ6kOxi8h5B8sLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.14.118.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f0:91:6e:10:5e:51:f1:8a:cc:b8:5c:1b:75:05:6d:00:6f:
ce:a5:24:1f:17:4e:c8:ca:67:16:ad:3b:50:44:ee:2d:f6:29:
72:1d:91:9d:79:8f:ec:74:39:df:bf:40:48:8e:c5:da:b4:02:
fe:62:1e:56:b4:de:97:20:06:a5:3f:17:e3:15:6c:84:88:d4:
97:ca:d4:28:76:4a:10:96:5d:2a:af:eb:e5:ae:15:00:aa:35:
a5:b5:86:38:7a:c7:94:49:f7:e3:7d:e1:3a:1c:ad:47:cc:22:
be:e8:09:6d:db:1e:91:b6:33:0d:ed:1d:2e:3a:98:1b:df:b4:
bc:06:c1:4a:91:6c:58:04:82:06:5f:fc:88:16:1a:f8:9c:5a:
6c:f7:d6:79:f1:14:10:b9:44:35:0d:ee:e3:f0:ce:ae:fb:08:
95:a0:56:82:8a:31:3f:06:dc:88:fe:f6:d7:f0:0f:bd:54:29:
55:8b:3b:71:ef:6c:1e:18:d9:33:2b:c1:96:ee:ca:0c:5d:ce:
63:f6:12:9b:86:ff:ba:85:7b:c5:c9:8f:d8:da:78:03:ba:45:
c1:b6:ef:d4:ac:df:ed:35:b5:a5:5e:46:a9:43:2e:11:35:42:
a0:cd:97:b8:9f:e1:e3:e7:f4:32:33:85:19:6d:09:0e:9f:62:
1d:72:2b:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj6Unx8v84c3hzFbGE1JrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjUwMTAyMDU0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWVmMjRiZjdhY2FjZDEyNDAwYzllYTQzYjE4YmM4NzkwN2NiMGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzniETQNks27VdKlsBeUKY2/G8ARL
c8Ci0nNhaF5uLZFeqv0E3juoULECMuuTDAPbLP2cBKTbWiU+rfV7DdbK2C9aiOuP
KXPetjVYo898e7iL/r73i7HD3mGn5dwFCiH5GIPT4UD+pjvnfOrs9nDsLqJj9hld
iEDKh/9uM0J9YqrW357rZt0j3T/6Jri5kghzW1P1ddlNLZ9SOzeZNRvGNHf1E+L7
TxXFQywg99FlDoae0ZRnZJ9Aip4W9gV3V1Ya6Krhh6FQVd+67ZiBPBI9vvwtMNNR
q6q+mS5emLOhLETeuYkFkEfTsbTz3vWmVqS3DZ1Xrew1h0Hc6lRdolN6bwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNrvJL96ys0SQAyepDsYvIeQfLCxMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvMnU4a3Yzckt6UkpBREo2a094aThoNUI4c0xFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAww52MA0G
CSqGSIb3DQEBCwUAA4IBAQA68JFuEF5R8YrMuFwbdQVtAG/OpSQfF07IymcWrTtQ
RO4t9ilyHZGdeY/sdDnfv0BIjsXatAL+Yh5WtN6XIAalPxfjFWyEiNSXytQodkoQ
ll0qr+vlrhUAqjWltYY4eseUSffjfeE6HK1HzCK+6Alt2x6RtjMN7R0uOpgb37S8
BsFKkWxYBIIGX/yIFhr4nFps99Z58RQQuUQ1De7j8M6u+wiVoFaCijE/BtyI/vbX
8A+9VClViztx72weGNkzK8GW7soMXc5j9hKbhv+6hXvFyY/Y2ngDukXBtu/UrN/t
NbWlXkapQy4RNUKgzZe4n+Hj5/QyM4UZbQkOn2Idcits
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:28 2025 by rpki-client