Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/1-qQlotRrXepjFLse866qb9YXnC4.roa
File: 1-qQlotRrXepjFLse866qb9YXnC4.roa (raw, json)
Hash identifier: sIqJkRDFKsL6ID6jKqMPpfbXEWIag19g+6JC0LaO33E=
Subject key identifier: FA:A4:25:A2:D4:6B:5D:EA:63:14:BB:1E:F3:AE:AA:6F:D6:17:9C:2E
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018AEA4D2A060DAD2E01F33CE3FA43150AC8
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/1-qQlotRrXepjFLse866qb9YXnC4.roa
Signing time: Sun 01 Oct 2023 08:14:00 +0000
ROA not before: Sun 01 Oct 2023 08:14:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 195.133.202.0/23 maxlen: 24
213.159.12.0/23 maxlen: 24
195.133.208.0/23 maxlen: 24
194.58.64.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ea:4d:2a:06:0d:ad:2e:01:f3:3c:e3:fa:43:15:0a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Oct 1 08:14:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=faa425a2d46b5dea6314bb1ef3aeaa6fd6179c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cd:9b:c5:3b:c1:e4:3a:0f:50:b0:1a:02:a0:
86:08:30:46:3a:4c:60:f1:ce:a6:0c:f4:e5:bc:04:
f0:03:d5:d4:83:22:74:36:29:c0:a5:48:8b:18:08:
e4:2c:36:d9:2d:90:e9:b0:e8:ab:8d:79:0c:a8:5e:
07:f5:a7:5a:54:85:5e:b9:17:dc:8d:79:f1:8a:b2:
41:3f:f3:bd:7d:cd:7b:55:98:c3:bd:e4:e5:86:72:
b4:1f:c1:19:e5:2f:e7:7e:4e:60:a4:d2:aa:dd:80:
28:12:22:a6:1a:74:e9:40:67:4a:48:85:ca:99:82:
f8:6c:07:02:b6:0a:97:1d:dd:d0:d1:29:0d:5a:ff:
6f:0b:87:55:ca:35:14:7e:dc:f5:56:6c:bb:4b:ca:
53:e4:9c:2a:ef:f7:52:a3:b9:70:90:ee:e1:78:53:
49:92:cc:34:b1:fc:b1:d4:b6:00:6f:3d:ef:88:c0:
3d:70:22:2e:86:c1:6f:6c:eb:63:be:a4:d6:28:3b:
db:23:fa:05:0d:8c:87:56:41:39:5b:0c:14:68:67:
5e:47:8b:39:6f:26:09:6d:97:38:1a:32:0f:1c:5b:
92:85:b6:98:11:07:19:71:39:ab:b4:08:c2:f2:f4:
aa:84:81:ac:b0:70:15:17:27:05:90:91:fd:59:cc:
18:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A4:25:A2:D4:6B:5D:EA:63:14:BB:1E:F3:AE:AA:6F:D6:17:9C:2E
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/1-qQlotRrXepjFLse866qb9YXnC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.64.0/23
195.133.202.0/23
195.133.208.0/23
213.159.12.0/23
Signature Algorithm: sha256WithRSAEncryption
77:7b:fa:00:cb:7a:4c:e1:d6:ff:d2:7c:de:20:65:08:5d:f3:
65:34:a0:25:40:4e:c2:47:cd:e1:22:9f:85:ef:09:7d:b6:3d:
1f:c2:26:27:52:e6:d9:f2:f9:ab:2a:bd:78:89:37:00:2c:51:
92:4d:f0:67:32:05:3c:54:a2:a2:b1:78:a9:ce:a7:5c:1f:24:
53:e5:c8:b1:42:ba:da:1e:e2:d2:91:5e:94:02:2b:93:f6:25:
45:98:c1:00:c8:79:ff:03:f8:36:8d:30:19:87:a9:ee:3b:c3:
de:bd:c9:06:52:34:d7:35:6b:be:8a:12:8d:59:cf:87:93:c8:
07:1c:a0:c9:f4:cd:46:9d:e2:8a:b7:67:bd:c8:bf:b3:c4:65:
2e:f8:d0:d2:e0:0a:a8:1b:98:b1:bb:e5:96:c0:45:34:01:4a:
ce:fb:0f:b2:6e:e3:76:ae:bd:f2:5d:17:18:05:dd:77:ef:98:
f3:8c:a6:0c:67:b0:77:dd:28:49:cf:26:15:cc:cc:a7:3a:a6:
39:53:d5:8e:f5:b1:da:6e:5b:11:c5:3f:ed:25:84:60:63:18:
00:31:cd:20:bc:d5:49:aa:43:ae:99:3b:7f:b7:3e:af:32:80:
02:aa:12:2d:bb:0a:bf:1a:04:06:55:6f:2a:d0:88:ee:b0:cf:
65:52:e6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 23:29:54 2025 by rpki-client