Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/8YEIarEZx-dYy-m-KWzFFJwMPgc.roa
File: 8YEIarEZx-dYy-m-KWzFFJwMPgc.roa (raw, json)
Hash identifier: /Oh4KoguX/e5aBAHRSFC+nV1NgF/Rk6lBFfGk9GKTMI=
Subject key identifier: F1:81:08:6A:B1:19:C7:E7:58:CB:E9:BE:29:6C:C5:14:9C:0C:3E:07
Certificate issuer: /CN=d1c7581439a3aa12fea1cd587ec84b7509a3fc7a
Certificate serial: 0195CCF4B66A66ECEF150883A867F562C34E
Authority key identifier: D1:C7:58:14:39:A3:AA:12:FE:A1:CD:58:7E:C8:4B:75:09:A3:FC:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/8YEIarEZx-dYy-m-KWzFFJwMPgc.roa
Signing time: Tue 25 Mar 2025 10:59:04 +0000
ROA not before: Tue 25 Mar 2025 10:59:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 194.116.128.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:f4:b6:6a:66:ec:ef:15:08:83:a8:67:f5:62:c3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c7581439a3aa12fea1cd587ec84b7509a3fc7a
Validity
Not Before: Mar 25 10:59:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f181086ab119c7e758cbe9be296cc5149c0c3e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:b0:f2:d7:b3:e5:f6:36:c3:39:ac:8c:f9:
b7:78:82:32:b0:2a:c2:6c:83:9a:c2:9b:f4:e9:bc:
66:37:ce:04:42:6b:15:08:3f:ce:45:54:e0:73:93:
fe:f8:bb:d4:97:03:54:93:93:99:1a:0a:62:24:79:
0e:cd:4a:f1:13:bc:2e:4d:9f:c9:e2:e7:da:d4:8d:
2d:04:4d:16:ef:68:1f:11:ba:8a:d7:e4:0d:f4:4c:
06:b9:b6:34:c8:c5:b6:95:ea:c2:34:d5:25:6e:78:
92:98:1e:36:6e:0a:29:74:dc:cf:5c:32:4a:00:dc:
e7:b5:d5:b4:a0:7a:5e:db:92:5d:80:c5:05:05:3f:
7f:c9:02:c3:25:43:89:d0:6b:cf:27:43:81:0b:f0:
dc:f0:d8:9a:d0:b9:dc:2b:cb:da:c2:a8:bb:3f:1d:
67:8f:d3:5e:62:c6:51:b6:6b:c4:fb:92:c2:5c:31:
28:bc:a4:ef:3d:67:9d:80:e2:0a:96:16:79:43:c2:
97:18:dd:c4:66:aa:30:4d:58:6f:ac:d7:ae:41:ce:
ff:38:93:8c:dd:5f:bf:95:09:5b:b7:c6:ea:49:61:
b9:00:47:62:35:c6:07:8f:c7:32:8f:24:5c:97:83:
54:a7:1d:4b:9d:fd:14:a6:59:67:fd:0b:40:44:38:
e0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:81:08:6A:B1:19:C7:E7:58:CB:E9:BE:29:6C:C5:14:9C:0C:3E:07
X509v3 Authority Key Identifier:
keyid:D1:C7:58:14:39:A3:AA:12:FE:A1:CD:58:7E:C8:4B:75:09:A3:FC:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/8YEIarEZx-dYy-m-KWzFFJwMPgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.128.0/23
Signature Algorithm: sha256WithRSAEncryption
37:81:96:73:fb:01:d1:de:53:67:24:8f:32:ac:66:77:dc:fe:
f2:20:2d:ee:a6:c8:7d:c5:1e:3f:4f:b9:5b:86:51:b3:b5:51:
ef:a5:17:47:a1:5d:b5:bb:26:66:15:e5:05:77:0d:20:b3:c0:
ad:4d:89:0d:3c:92:73:54:e6:e6:df:d5:21:11:b9:cc:24:33:
5a:9e:8f:ae:06:b0:86:c6:9a:e1:99:35:06:d1:7a:22:3b:e3:
99:f9:93:75:be:35:2b:d2:e6:f3:bc:36:50:6e:c7:49:9b:cf:
5d:7b:b1:26:1d:03:1e:b2:6d:c2:1c:f2:b1:28:f5:cc:7d:3d:
6e:bc:5c:00:9e:07:70:b1:9b:28:66:e7:c0:88:e6:c2:9f:0d:
23:93:cc:49:07:3c:70:90:74:a6:24:e0:e2:b7:2a:0d:ce:6f:
40:51:c2:08:92:5f:87:33:78:2e:d2:2f:67:3a:25:73:6c:91:
a6:fc:88:57:c5:a7:95:31:00:04:ea:81:63:91:5d:4f:8c:2a:
7d:09:a0:c2:e6:ae:7c:19:7d:4f:18:c8:13:65:dc:a8:f8:a7:
2c:e7:32:be:2b:70:fb:f2:15:87:26:ee:89:54:cd:8e:63:aa:
ee:05:11:bb:f5:42:09:43:21:9b:33:a5:f8:e7:98:b5:4d:dd:
27:42:9c:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXM9LZqZuzvFQiDqGf1YsNOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYzc1ODE0MzlhM2FhMTJmZWExY2Q1ODdlYzg0Yjc1MDlh
M2ZjN2EwHhcNMjUwMzI1MTA1OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTgxMDg2YWIxMTljN2U3NThjYmU5YmUyOTZjYzUxNDljMGMzZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK+w8tez5fY2wzmsjPm3eIIysCrC
bIOawpv06bxmN84EQmsVCD/ORVTgc5P++LvUlwNUk5OZGgpiJHkOzUrxE7wuTZ/J
4ufa1I0tBE0W72gfEbqK1+QN9EwGubY0yMW2lerCNNUlbniSmB42bgopdNzPXDJK
ANzntdW0oHpe25JdgMUFBT9/yQLDJUOJ0GvPJ0OBC/Dc8Nia0LncK8vawqi7Px1n
j9NeYsZRtmvE+5LCXDEovKTvPWedgOIKlhZ5Q8KXGN3EZqowTVhvrNeuQc7/OJOM
3V+/lQlbt8bqSWG5AEdiNcYHj8cyjyRcl4NUpx1Lnf0Uplln/QtARDjgwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPGBCGqxGcfnWMvpvilsxRScDD4HMB8GA1UdIwQY
MBaAFNHHWBQ5o6oS/qHNWH7IS3UJo/x6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGNkWUZEbWpxaEwtb2MxWWZzaExkUW1qX0hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82YzU5Y2ItODRlZi00MjE4LThkN2It
ZmY0MWQ4MTdiNDQzLzEvOFlFSWFyRVp4LWRZeS1tLUtXekZGSndNUGdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC82YzU5Y2ItODRlZi00MjE4LThkN2ItZmY0MWQ4MTdiNDQz
LzEvMGNkWUZEbWpxaEwtb2MxWWZzaExkUW1qX0hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwnSAMA0G
CSqGSIb3DQEBCwUAA4IBAQA3gZZz+wHR3lNnJI8yrGZ33P7yIC3upsh9xR4/T7lb
hlGztVHvpRdHoV21uyZmFeUFdw0gs8CtTYkNPJJzVObm39UhEbnMJDNano+uBrCG
xprhmTUG0XoiO+OZ+ZN1vjUr0ubzvDZQbsdJm89de7EmHQMesm3CHPKxKPXMfT1u
vFwAngdwsZsoZufAiObCnw0jk8xJBzxwkHSmJODityoNzm9AUcIIkl+HM3gu0i9n
OiVzbJGm/IhXxaeVMQAE6oFjkV1PjCp9CaDC5q58GX1PGMgTZdyo+Kcs5zK+K3D7
8hWHJu6JVM2OY6ruBRG79UIJQyGbM6X455i1Td0nQpzR
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:31:31 2025 by rpki-client