Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/0MOXDUv4IarmUDXJ_6_NJ_DNTjE.roa
File: 0MOXDUv4IarmUDXJ_6_NJ_DNTjE.roa (raw, json)
Hash identifier: rLEoAgpILfeLseNAIpfgmASNTffHIHsRIbvYzKEOLhA=
Subject key identifier: D0:C3:97:0D:4B:F8:21:AA:E6:50:35:C9:FF:AF:CD:27:F0:CD:4E:31
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 01942143CB0EE54A872095BA8937C02539CF
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/0MOXDUv4IarmUDXJ_6_NJ_DNTjE.roa
Signing time: Wed 01 Jan 2025 09:47:58 +0000
ROA not before: Wed 01 Jan 2025 09:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197498
IP address blocks: 195.60.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:cb:0e:e5:4a:87:20:95:ba:89:37:c0:25:39:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: Jan 1 09:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0c3970d4bf821aae65035c9ffafcd27f0cd4e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:18:7c:86:f0:b2:e7:64:bd:ad:1a:ec:46:
57:34:e3:e8:dd:69:a2:bf:bd:dd:81:a8:51:c6:04:
13:f6:0c:e9:49:4c:37:cb:0c:c0:83:96:c9:30:2c:
c9:e3:27:48:29:b5:bd:ca:98:c0:d8:dc:8d:f1:8f:
4d:63:3c:e5:39:7d:84:5c:fd:b1:78:15:a8:2e:17:
61:b8:d6:76:2e:34:c8:2a:dd:19:3d:91:a5:39:22:
f1:a4:d0:6c:f0:ad:2e:a6:d6:ce:04:e7:01:9f:d4:
da:b5:d2:fe:e1:ca:61:f3:3c:01:14:ea:2c:81:29:
76:96:e8:e6:91:35:cf:24:1a:ee:41:9b:7a:01:b2:
ef:d7:23:4c:ee:29:07:04:e1:1d:ea:88:61:17:ce:
44:2d:27:c2:ea:bb:de:3a:2a:ac:1d:f5:28:b6:ec:
b4:0e:b2:9d:d6:ea:7d:a1:dc:00:bb:44:0e:f2:42:
d4:63:ad:97:7b:fd:4a:9d:95:b4:fe:5a:f0:54:26:
da:3a:e7:85:43:53:06:74:f5:4c:fa:2c:88:be:a3:
19:45:fc:fb:b9:59:9a:b6:76:f7:a5:ce:78:d7:91:
5f:67:85:24:db:8a:ab:dc:32:68:16:70:7d:39:cb:
7d:c1:98:90:d0:3d:3a:85:ba:16:1e:5b:ae:94:06:
72:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C3:97:0D:4B:F8:21:AA:E6:50:35:C9:FF:AF:CD:27:F0:CD:4E:31
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/0MOXDUv4IarmUDXJ_6_NJ_DNTjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.227.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ee:57:64:61:75:5e:9d:75:fa:98:fe:c6:29:95:63:fa:a0:
44:f0:9d:a6:7d:b2:43:97:b8:ae:af:bf:31:03:6c:7b:50:ff:
6a:81:db:68:c7:e6:81:0e:a6:40:8b:02:1b:d7:f7:31:8f:1b:
04:48:d8:a6:d4:ea:83:4d:08:c6:90:bb:0c:54:a5:c9:67:33:
2a:21:f6:8a:4f:a6:37:ec:03:00:8d:b5:d8:37:b6:89:27:78:
e3:3a:1e:14:78:13:05:b9:ff:18:4a:7c:3d:b1:8e:30:99:e6:
44:74:b6:d7:f4:b5:ee:f0:f7:07:e7:94:87:ec:8b:be:a2:a3:
4f:c6:be:43:d4:c6:bc:7c:a3:12:ec:91:0c:d5:1c:b4:17:ab:
23:42:1d:33:b9:b1:89:20:ca:6e:2b:9f:70:c5:81:46:fe:77:
39:7d:47:43:f0:fd:c3:4f:2a:b7:dd:d6:ad:00:f0:f0:a0:78:
8d:6e:ff:41:3c:79:5c:4d:c6:e5:e3:9a:be:93:4c:e9:72:a2:
a1:2f:dc:4e:3d:90:f2:79:be:2d:05:aa:55:b8:9e:2e:08:ca:
6a:52:6d:51:7e:6a:c5:7f:7f:3b:b8:16:24:78:c4:fd:b7:51:
d3:43:1d:85:5d:83:f6:8e:79:61:1f:89:f5:ac:fc:9b:aa:f3:
84:b7:ae:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ8sO5UqHIJW6iTfAJTnPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMGY1YTliZDJhZDFlOTY4NjVmMDBkMDg1MjJiOWFhZDNl
OTFhNGQwHhcNMjUwMTAxMDk0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGMzOTcwZDRiZjgyMWFhZTY1MDM1YzlmZmFmY2QyN2YwY2Q0ZTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR8YfIbwsudkva0a7EZXNOPo3Wmi
v73dgahRxgQT9gzpSUw3ywzAg5bJMCzJ4ydIKbW9ypjA2NyN8Y9NYzzlOX2EXP2x
eBWoLhdhuNZ2LjTIKt0ZPZGlOSLxpNBs8K0uptbOBOcBn9TatdL+4cph8zwBFOos
gSl2lujmkTXPJBruQZt6AbLv1yNM7ikHBOEd6ohhF85ELSfC6rveOiqsHfUotuy0
DrKd1up9odwAu0QO8kLUY62Xe/1KnZW0/lrwVCbaOueFQ1MGdPVM+iyIvqMZRfz7
uVmatnb3pc5415FfZ4Uk24qr3DJoFnB9Oct9wZiQ0D06hboWHluulAZyewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNDDlw1L+CGq5lA1yf+vzSfwzU4xMB8GA1UdIwQY
MBaAFK8PWpvSrR6Whl8A0IUiuarT6RpNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82YWQ5YjgtOWYwZS00YWQwLWEyMjAt
M2FjM2I2NzM3MDQyLzEvME1PWERVdjRJYXJtVURYSl82X05KX0ROVGpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS82YWQ5YjgtOWYwZS00YWQwLWEyMjAtM2FjM2I2NzM3MDQy
LzEvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwzzjMA0G
CSqGSIb3DQEBCwUAA4IBAQAu7ldkYXVenXX6mP7GKZVj+qBE8J2mfbJDl7iur78x
A2x7UP9qgdtox+aBDqZAiwIb1/cxjxsESNim1OqDTQjGkLsMVKXJZzMqIfaKT6Y3
7AMAjbXYN7aJJ3jjOh4UeBMFuf8YSnw9sY4wmeZEdLbX9LXu8PcH55SH7Iu+oqNP
xr5D1Ma8fKMS7JEM1Ry0F6sjQh0zubGJIMpuK59wxYFG/nc5fUdD8P3DTyq33dat
APDwoHiNbv9BPHlcTcbl45q+k0zpcqKhL9xOPZDyeb4tBapVuJ4uCMpqUm1RfmrF
f387uBYkeMT9t1HTQx2FXYP2jnlhH4n1rPybqvOEt66j
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:33:18 2025 by rpki-client