Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/r0aCHKZqLV95OV5gwTfYdhHbA6Q.roa
File: r0aCHKZqLV95OV5gwTfYdhHbA6Q.roa (raw, json)
Hash identifier: xjRrpFDO8g9sZNIp8GQ1hogAG1em04ZcPXgm2d8N7a8=
Subject key identifier: AF:46:82:1C:A6:6A:2D:5F:79:39:5E:60:C1:37:D8:76:11:DB:03:A4
Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial: 0194228DD7CBAA49226A4B7E43307337D5F3
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/r0aCHKZqLV95OV5gwTfYdhHbA6Q.roa
Signing time: Wed 01 Jan 2025 15:48:28 +0000
ROA not before: Wed 01 Jan 2025 15:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43633
IP address blocks: 109.235.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d7:cb:aa:49:22:6a:4b:7e:43:30:73:37:d5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Validity
Not Before: Jan 1 15:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af46821ca66a2d5f79395e60c137d87611db03a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:dc:e5:c8:f2:aa:61:6b:51:99:38:4e:e8:
c6:77:db:49:54:8e:40:81:89:88:22:f1:91:1c:2a:
d6:29:e0:0f:3f:77:8d:dd:8e:4d:80:f4:cf:3e:0a:
21:a3:64:1f:8a:45:ce:62:f0:57:54:f2:30:64:0d:
b6:8e:b6:65:2f:2b:bd:de:69:3f:12:b5:42:c4:eb:
4d:1f:77:62:70:12:ca:39:d6:f4:4d:32:d8:49:18:
27:08:f5:49:a3:4c:c6:7d:d5:4a:4f:4f:d1:8c:18:
f4:d6:71:d5:26:27:16:8e:0f:c5:cd:5b:e1:54:a3:
98:f9:4c:84:59:47:51:cd:76:0d:75:36:11:2e:f9:
dd:96:60:ff:4b:89:ec:ef:d7:3f:d7:5c:83:0e:29:
85:0a:5e:71:04:49:52:ab:15:1f:6f:55:88:98:40:
52:2f:3e:ff:04:b3:e6:07:65:36:1e:6f:eb:27:b2:
80:f4:6b:b9:ac:f6:4e:b2:aa:b7:41:36:de:b2:0d:
24:85:4e:81:f3:f4:e1:5c:7f:b7:70:c9:9b:a5:f0:
52:bd:3a:ed:c6:75:5f:38:1f:61:0d:ad:7e:61:33:
b9:07:ac:42:f5:c0:c8:83:e3:0e:0f:30:91:4c:27:
78:f1:27:f1:96:31:9a:a6:4d:21:47:e6:41:7f:bb:
9e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:46:82:1C:A6:6A:2D:5F:79:39:5E:60:C1:37:D8:76:11:DB:03:A4
X509v3 Authority Key Identifier:
keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/r0aCHKZqLV95OV5gwTfYdhHbA6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.8.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:7b:78:a1:85:26:d2:1c:9e:1a:f5:66:65:8f:46:83:e0:84:
40:ba:75:8f:d9:29:c7:06:29:2d:eb:57:32:b5:bc:b6:a1:8c:
35:26:ae:b8:8f:13:63:fe:3c:97:f7:a9:bc:a8:72:8e:4f:a6:
72:f1:2d:a6:53:41:ea:75:8d:b9:c5:40:fc:cf:bc:4e:bd:cf:
34:c1:76:d6:3c:b3:7a:42:68:2d:46:ec:ce:14:ab:33:9e:a6:
e3:2f:31:fc:02:b4:74:a4:e6:07:fe:28:7a:f4:61:7a:c2:df:
de:bc:a9:cd:20:58:3b:65:58:e6:21:7a:cf:26:23:d9:a5:9f:
ff:26:41:f7:28:4d:da:d1:99:17:fd:65:1f:6e:ef:44:80:a6:
02:a6:28:56:18:dc:b6:71:50:6a:ed:35:e8:e7:8e:25:e3:1a:
9a:6f:21:f5:a5:93:65:ad:65:e0:5c:4c:e9:4d:e9:b1:24:c3:
46:c3:15:49:23:98:73:bd:86:14:78:11:17:2e:cf:06:d3:04:
62:75:72:9f:5a:46:06:b6:75:68:8b:20:1d:e1:b8:7f:85:bd:
75:f2:45:66:87:27:b7:59:97:e1:1f:e5:28:12:d1:6c:d7:0b:
1b:8c:5c:9d:2a:1c:1f:2b:2f:35:6f:35:cc:19:83:d4:22:f2:
47:7f:1d:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijdfLqkkiakt+QzBzN9XzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NWRkYjY3OGM0YzBkMGM0ODhlZmQzYjgzNjcxNDIxODlm
MzM1OGEwHhcNMjUwMTAxMTU0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjQ2ODIxY2E2NmEyZDVmNzkzOTVlNjBjMTM3ZDg3NjExZGIwM2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXjc5cjyqmFrUZk4TujGd9tJVI5A
gYmIIvGRHCrWKeAPP3eN3Y5NgPTPPgoho2QfikXOYvBXVPIwZA22jrZlLyu93mk/
ErVCxOtNH3dicBLKOdb0TTLYSRgnCPVJo0zGfdVKT0/RjBj01nHVJicWjg/FzVvh
VKOY+UyEWUdRzXYNdTYRLvndlmD/S4ns79c/11yDDimFCl5xBElSqxUfb1WImEBS
Lz7/BLPmB2U2Hm/rJ7KA9Gu5rPZOsqq3QTbesg0khU6B8/ThXH+3cMmbpfBSvTrt
xnVfOB9hDa1+YTO5B6xC9cDIg+MODzCRTCd48SfxljGapk0hR+ZBf7uegwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK9Gghymai1feTleYME32HYR2wOkMB8GA1UdIwQY
MBaAFEhd22eMTA0MSI79O4NnFCGJ8zWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUt
ZGViZmNkOWViMjBlLzEvcjBhQ0hLWnFMVjk1T1Y1Z3dUZllkaEhiQTZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUtZGViZmNkOWViMjBl
LzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbesIMA0G
CSqGSIb3DQEBCwUAA4IBAQCae3ihhSbSHJ4a9WZlj0aD4IRAunWP2SnHBikt61cy
tby2oYw1Jq64jxNj/jyX96m8qHKOT6Zy8S2mU0HqdY25xUD8z7xOvc80wXbWPLN6
QmgtRuzOFKsznqbjLzH8ArR0pOYH/ih69GF6wt/evKnNIFg7ZVjmIXrPJiPZpZ//
JkH3KE3a0ZkX/WUfbu9EgKYCpihWGNy2cVBq7TXo544l4xqabyH1pZNlrWXgXEzp
TemxJMNGwxVJI5hzvYYUeBEXLs8G0wRidXKfWkYGtnVoiyAd4bh/hb118kVmhye3
WZfhH+UoEtFs1wsbjFydKhwfKy81bzXMGYPUIvJHfx2y
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:59 2025 by rpki-client