Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/hHyN0hZC6wHmcYGt8_p-C_s5v9g.roa
File: hHyN0hZC6wHmcYGt8_p-C_s5v9g.roa (raw, json)
Hash identifier: 6yL1Aaix2KDbDG7ULOMbnaTIoz7b7GAVaAi9Cio4v+U=
Subject key identifier: 84:7C:8D:D2:16:42:EB:01:E6:71:81:AD:F3:FA:7E:0B:FB:39:BF:D8
Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial: 01942746644A8DD5FC98605B5F50175CDEC0
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/hHyN0hZC6wHmcYGt8_p-C_s5v9g.roa
Signing time: Thu 02 Jan 2025 13:48:32 +0000
ROA not before: Thu 02 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204333
IP address blocks: 185.255.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:64:4a:8d:d5:fc:98:60:5b:5f:50:17:5c:de:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Validity
Not Before: Jan 2 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=847c8dd21642eb01e67181adf3fa7e0bfb39bfd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1b:81:ae:79:9e:a6:ce:a3:f5:4f:f9:15:18:
14:b3:e1:f2:5e:dc:41:f5:73:e6:bd:8a:49:a3:06:
fb:65:6f:a4:ba:a0:c6:51:fa:eb:81:86:62:40:17:
c0:dd:e1:c2:62:fa:98:4a:71:e1:a3:e8:ec:06:f9:
5f:95:1a:ba:52:59:c7:67:64:d8:97:93:07:67:39:
92:10:61:7f:7b:be:5c:0d:4c:b4:57:c5:46:90:55:
3a:ae:27:dc:42:02:df:9f:d3:eb:2c:8e:c5:ed:82:
92:1c:4c:a5:b1:3f:0e:0a:1d:5d:d8:da:84:6b:b2:
55:d7:78:92:c8:74:d2:7e:9a:d5:55:f4:62:00:5a:
46:a9:d3:be:f4:ea:7c:2f:bc:63:e1:65:d0:a2:d0:
f9:8c:ce:6c:88:a8:72:b5:a6:4d:75:08:39:e8:f7:
a3:0c:99:1a:3f:62:3b:17:8c:dc:2d:c5:d7:23:6e:
c5:66:23:e4:bd:79:eb:d4:34:6f:9d:76:96:8b:e9:
45:15:0e:36:a0:2d:24:03:5a:3a:68:19:93:1f:62:
9c:8c:56:1d:42:64:e8:e3:7f:bc:03:d1:c7:20:5d:
3d:93:40:33:c8:6f:54:69:5c:5d:8e:d1:51:ca:9d:
5b:6d:f6:53:19:e8:ad:3d:24:0c:50:46:3c:28:9d:
a1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7C:8D:D2:16:42:EB:01:E6:71:81:AD:F3:FA:7E:0B:FB:39:BF:D8
X509v3 Authority Key Identifier:
keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/hHyN0hZC6wHmcYGt8_p-C_s5v9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.121.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:1f:d8:6c:25:6a:1f:a9:1b:3f:b2:76:59:b6:bd:10:5f:62:
97:99:f0:a9:3a:45:66:1f:32:e9:f0:f9:62:10:66:b7:b8:5e:
ef:48:74:29:d1:45:51:28:3a:03:25:73:3c:85:22:26:c1:e2:
db:86:46:f3:78:95:b1:5e:0c:a5:19:fe:34:17:bd:6e:6c:98:
35:1f:40:6b:aa:7c:31:98:a9:32:9f:23:fa:7b:42:a2:2a:28:
1f:9b:4e:61:f8:68:e0:02:a2:87:bf:82:01:c9:20:25:4f:a7:
8e:ab:56:f6:bd:6f:36:e0:95:0a:2b:90:91:b2:92:aa:45:c8:
e1:e1:3c:a2:f3:e3:56:e5:cd:90:57:0c:3c:83:4e:03:db:d9:
4c:a9:94:9c:18:b9:a6:f4:1a:e5:ca:8d:8b:6e:1c:94:7a:56:
ce:d4:7a:d2:ad:d4:2b:e7:fe:d8:b9:20:ef:5f:87:08:47:a3:
16:f0:d1:ed:a9:6c:e7:d7:e3:88:83:38:3e:09:0b:55:49:09:
7c:74:1c:be:37:00:8f:b5:b3:10:39:d1:8d:b5:62:32:4e:f2:
07:21:cf:9d:44:c5:a5:6d:5f:2a:02:c0:13:7b:60:5e:5c:b8:
0c:06:10:de:0d:1f:62:25:92:d5:bd:c2:15:0c:32:aa:b4:af:
8c:dd:88:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnRmRKjdX8mGBbX1AXXN7AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNzk4ZjBmZTRmNGRmZmRmZWQyYzhlNjJkMjM1NDMwZjQ5
Mzc3Y2QwHhcNMjUwMTAyMTM0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDdjOGRkMjE2NDJlYjAxZTY3MTgxYWRmM2ZhN2UwYmZiMzliZmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxuBrnmeps6j9U/5FRgUs+HyXtxB
9XPmvYpJowb7ZW+kuqDGUfrrgYZiQBfA3eHCYvqYSnHho+jsBvlflRq6UlnHZ2TY
l5MHZzmSEGF/e75cDUy0V8VGkFU6rifcQgLfn9PrLI7F7YKSHEylsT8OCh1d2NqE
a7JV13iSyHTSfprVVfRiAFpGqdO+9Op8L7xj4WXQotD5jM5siKhytaZNdQg56Pej
DJkaP2I7F4zcLcXXI27FZiPkvXnr1DRvnXaWi+lFFQ42oC0kA1o6aBmTH2KcjFYd
QmTo43+8A9HHIF09k0AzyG9UaVxdjtFRyp1bbfZTGeitPSQMUEY8KJ2h3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIR8jdIWQusB5nGBrfP6fgv7Ob/YMB8GA1UdIwQY
MBaAFGp5jw/k9N/9/tLI5i0jVDD0k3fNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMt
NzdjZjgxMDQxMDgzLzEvaEh5TjBoWkM2d0htY1lHdDhfcC1DX3M1djlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMtNzdjZjgxMDQxMDgz
LzEvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf95MA0G
CSqGSIb3DQEBCwUAA4IBAQDFH9hsJWofqRs/snZZtr0QX2KXmfCpOkVmHzLp8Pli
EGa3uF7vSHQp0UVRKDoDJXM8hSImweLbhkbzeJWxXgylGf40F71ubJg1H0Brqnwx
mKkynyP6e0KiKigfm05h+GjgAqKHv4IBySAlT6eOq1b2vW824JUKK5CRspKqRcjh
4Tyi8+NW5c2QVww8g04D29lMqZScGLmm9Brlyo2LbhyUelbO1HrSrdQr5/7YuSDv
X4cIR6MW8NHtqWzn1+OIgzg+CQtVSQl8dBy+NwCPtbMQOdGNtWIyTvIHIc+dRMWl
bV8qAsATe2BeXLgMBhDeDR9iJZLVvcIVDDKqtK+M3YhI
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:37:42 2025 by rpki-client