Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/giN_6FdawPpa4U_l8L6GI6SQrxU.roa
File: giN_6FdawPpa4U_l8L6GI6SQrxU.roa (raw, json)
Hash identifier: RqHHQJIozmk50JvefJWS+0ODDB8lkETbKjm2gNuR+7o=
Subject key identifier: 82:23:7F:E8:57:5A:C0:FA:5A:E1:4F:E5:F0:BE:86:23:A4:90:AF:15
Certificate issuer: /CN=087f59c36e22d1f90384f41da60705ac74d779ce
Certificate serial: 019423D727CD4D82D3FA8942D3DC5141E4BB
Authority key identifier: 08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/giN_6FdawPpa4U_l8L6GI6SQrxU.roa
Signing time: Wed 01 Jan 2025 21:48:10 +0000
ROA not before: Wed 01 Jan 2025 21:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42171
IP address blocks: 194.0.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:27:cd:4d:82:d3:fa:89:42:d3:dc:51:41:e4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087f59c36e22d1f90384f41da60705ac74d779ce
Validity
Not Before: Jan 1 21:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82237fe8575ac0fa5ae14fe5f0be8623a490af15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:8c:d8:9a:29:8e:13:b2:ba:10:f1:c1:1f:
16:be:30:19:ce:1d:1b:b7:9f:d8:dd:36:13:c5:2c:
c8:77:fe:84:03:16:83:a6:8d:b4:51:8b:d1:18:d4:
fe:a3:de:0e:0e:80:ca:34:be:29:7d:84:69:87:a9:
ed:3f:ed:ce:d2:54:6b:6e:1f:a4:ac:38:45:67:6f:
fc:54:45:09:8c:86:d7:3a:c6:ea:ed:af:19:77:95:
12:3a:f2:1d:a6:eb:b2:56:24:fa:e2:f9:3e:03:23:
da:0d:a0:2c:0b:b9:91:20:71:9d:b8:c1:a1:4e:f9:
3b:d7:b7:f3:99:23:16:4f:dc:8e:a3:a2:2b:62:94:
d9:ce:ad:9d:f4:2c:bb:a7:b5:5f:04:31:69:cf:34:
7c:f4:5f:05:7f:16:78:52:ee:21:b8:ad:9b:03:76:
f4:fc:e1:7e:4f:8b:52:d2:97:06:40:9c:d8:f2:2f:
df:30:16:70:3f:e9:b9:e5:6f:ab:da:e8:4b:c1:be:
68:23:47:c2:67:a8:1e:6f:c4:2b:3e:bb:a1:df:71:
e6:f7:74:d8:b6:17:c1:fa:f8:69:c5:e8:3b:01:18:
6e:ec:94:b9:84:2c:9d:7a:4b:55:b7:d9:1d:48:1c:
d4:5f:36:aa:8a:df:eb:70:05:cd:26:bf:d1:b4:fb:
20:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:23:7F:E8:57:5A:C0:FA:5A:E1:4F:E5:F0:BE:86:23:A4:90:AF:15
X509v3 Authority Key Identifier:
keyid:08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/giN_6FdawPpa4U_l8L6GI6SQrxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.128.0/24
Signature Algorithm: sha256WithRSAEncryption
71:1d:54:43:ec:f2:c4:41:24:52:e3:47:70:e4:39:82:e5:94:
61:82:cb:82:31:7b:14:72:6b:f8:e9:0a:49:0b:17:31:b1:b9:
be:c2:44:6a:2b:45:0b:46:cc:ac:5b:a9:01:a9:67:2b:db:ff:
c5:d0:28:67:e8:9e:2b:6f:7a:f0:a9:17:b3:fd:45:61:42:2f:
87:7a:e0:ae:4f:35:58:d2:7b:06:33:c9:8c:1d:e3:bc:73:d9:
b9:36:eb:ef:ee:d9:26:09:bb:9e:8c:d3:96:54:75:35:d9:3b:
db:58:43:26:a4:7b:23:5d:4a:12:b6:43:d2:bf:db:5f:ab:ab:
fe:dc:1c:af:fc:8b:f3:d9:fd:af:2b:0c:78:9f:b1:04:77:a8:
2c:68:3b:fa:90:11:e2:78:c9:2d:07:84:64:23:ae:30:29:85:
46:7b:d1:51:8a:74:5e:a0:90:44:52:8a:e6:6a:ec:46:2c:e3:
ac:35:45:1c:53:48:fe:fe:a4:f2:91:cf:d5:d0:bb:de:55:43:
11:f1:de:81:ae:dd:21:5c:2e:23:37:fe:d1:5a:fa:26:31:ad:
71:de:cc:74:7a:aa:c4:69:8f:8d:71:ea:5b:53:ff:31:88:4d:
b4:2c:4c:db:72:0d:93:47:66:df:4f:a2:cb:07:9d:c2:81:03:
31:ad:8a:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1yfNTYLT+olC09xRQeS7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4N2Y1OWMzNmUyMmQxZjkwMzg0ZjQxZGE2MDcwNWFjNzRk
Nzc5Y2UwHhcNMjUwMTAxMjE0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjIzN2ZlODU3NWFjMGZhNWFlMTRmZTVmMGJlODYyM2E0OTBhZjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj2M2JopjhOyuhDxwR8WvjAZzh0b
t5/Y3TYTxSzId/6EAxaDpo20UYvRGNT+o94ODoDKNL4pfYRph6ntP+3O0lRrbh+k
rDhFZ2/8VEUJjIbXOsbq7a8Zd5USOvIdpuuyViT64vk+AyPaDaAsC7mRIHGduMGh
Tvk717fzmSMWT9yOo6IrYpTZzq2d9Cy7p7VfBDFpzzR89F8FfxZ4Uu4huK2bA3b0
/OF+T4tS0pcGQJzY8i/fMBZwP+m55W+r2uhLwb5oI0fCZ6geb8QrPruh33Hm93TY
thfB+vhpxeg7ARhu7JS5hCydektVt9kdSBzUXzaqit/rcAXNJr/RtPsg7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIIjf+hXWsD6WuFP5fC+hiOkkK8VMB8GA1UdIwQY
MBaAFAh/WcNuItH5A4T0HaYHBax013nOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNTkzMDItMTZjNy00OTI3LWJjYTgt
YzA0YmUwMjAzN2U4LzEvZ2lOXzZGZGF3UHBhNFVfbDhMNkdJNlNRcnhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNTkzMDItMTZjNy00OTI3LWJjYTgtYzA0YmUwMjAzN2U4
LzEvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgCAMA0G
CSqGSIb3DQEBCwUAA4IBAQBxHVRD7PLEQSRS40dw5DmC5ZRhgsuCMXsUcmv46QpJ
Cxcxsbm+wkRqK0ULRsysW6kBqWcr2//F0Chn6J4rb3rwqRez/UVhQi+HeuCuTzVY
0nsGM8mMHeO8c9m5Nuvv7tkmCbuejNOWVHU12TvbWEMmpHsjXUoStkPSv9tfq6v+
3Byv/Ivz2f2vKwx4n7EEd6gsaDv6kBHieMktB4RkI64wKYVGe9FRinReoJBEUorm
auxGLOOsNUUcU0j+/qTykc/V0LveVUMR8d6Brt0hXC4jN/7RWvomMa1x3sx0eqrE
aY+NcepbU/8xiE20LEzbcg2TR2bfT6LLB53CgQMxrYqE
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:24:47 2025 by rpki-client