Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/fYfPAQBzvZT0inndl5U3-AXAN54.roa
File: fYfPAQBzvZT0inndl5U3-AXAN54.roa (raw, json)
Hash identifier: POqz+mlPTW2fWhJ2CNR3zKmQ2svtl1lt+qDA6n9Ji4M=
Subject key identifier: 7D:87:CF:01:00:73:BD:94:F4:8A:79:DD:97:95:37:F8:05:C0:37:9E
Certificate issuer: /CN=722325ecf368c9148a7c41281d607fa6d804a0c9
Certificate serial: 019425FD5B1CD6AABF519B83B861BC35C5A0
Authority key identifier: 72:23:25:EC:F3:68:C9:14:8A:7C:41:28:1D:60:7F:A6:D8:04:A0:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciMl7PNoyRSKfEEoHWB_ptgEoMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/fYfPAQBzvZT0inndl5U3-AXAN54.roa
Signing time: Thu 02 Jan 2025 07:49:08 +0000
ROA not before: Thu 02 Jan 2025 07:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205893
IP address blocks: 194.15.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:5b:1c:d6:aa:bf:51:9b:83:b8:61:bc:35:c5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722325ecf368c9148a7c41281d607fa6d804a0c9
Validity
Not Before: Jan 2 07:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d87cf010073bd94f48a79dd979537f805c0379e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:a1:da:d2:7f:d7:cf:fe:79:fb:e9:18:61:
6d:1e:f4:04:fe:8e:74:70:0f:6c:34:45:2c:df:c4:
82:32:28:ee:31:69:34:66:ff:43:79:eb:c4:fd:24:
dd:00:1e:9c:d7:8a:8c:97:40:a8:73:da:01:41:59:
f5:78:fa:ae:ca:9f:76:32:73:9f:da:61:8e:e0:e3:
9a:7e:c0:f2:24:54:29:e5:1f:bf:2a:13:bc:fe:a5:
a2:21:a5:2c:50:55:5c:ae:20:a9:4f:f9:b4:14:b9:
84:bb:d4:3b:e9:b5:fe:7d:2f:85:0f:ef:54:ba:20:
33:d2:1a:4b:9c:91:20:55:0b:63:69:a4:bc:ff:6d:
b2:c5:e0:3a:3d:41:91:d5:42:1a:e3:c4:c3:ae:dc:
4d:c0:5b:28:4c:8b:e0:82:0a:69:5c:4c:6b:f8:2b:
81:28:01:d5:5a:44:c7:0c:c3:ac:53:3f:fe:67:4c:
ba:96:25:42:1f:af:1a:c2:c8:d8:f2:96:dc:d2:6f:
59:16:d5:90:b4:65:d3:e2:e0:ac:8b:10:31:2a:71:
be:18:ea:18:d2:00:14:cc:4f:8b:4a:14:46:51:cf:
86:76:ca:4a:2d:c0:08:53:c9:78:3c:72:4c:66:62:
39:bc:00:20:40:ee:54:fc:48:1d:9a:48:6e:50:a3:
cd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:87:CF:01:00:73:BD:94:F4:8A:79:DD:97:95:37:F8:05:C0:37:9E
X509v3 Authority Key Identifier:
keyid:72:23:25:EC:F3:68:C9:14:8A:7C:41:28:1D:60:7F:A6:D8:04:A0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciMl7PNoyRSKfEEoHWB_ptgEoMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/fYfPAQBzvZT0inndl5U3-AXAN54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/ciMl7PNoyRSKfEEoHWB_ptgEoMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.45.0/24
Signature Algorithm: sha256WithRSAEncryption
39:10:4b:49:94:99:f8:ed:bf:ea:88:de:c6:38:29:67:16:d1:
aa:8a:62:3a:4b:1a:1b:f4:07:77:59:61:33:1f:dc:7d:0f:ed:
30:59:9b:b0:c6:7d:18:fa:65:ad:80:3e:92:a1:7e:7d:58:81:
5e:22:1c:36:ec:ee:99:fc:8e:07:94:84:f6:7b:0f:3b:59:f7:
9e:1e:0f:8e:4b:37:df:c3:9f:0e:5e:9c:fa:d1:a0:70:0a:7d:
82:28:08:3b:d5:ba:83:0a:3b:c8:56:90:ba:a7:4c:77:22:e2:
9c:9e:b5:37:91:27:4b:e1:89:7b:de:73:48:33:71:2c:82:d9:
44:08:39:4c:6a:ea:24:8a:65:30:53:7e:1d:fa:9e:83:af:e7:
4e:c7:02:f3:55:6c:f1:83:ac:be:6f:45:c3:d3:45:cc:07:e0:
5a:9d:97:62:1b:45:7e:16:f9:2f:e6:da:66:93:eb:5a:cd:69:
50:b8:7f:fc:73:6d:47:fe:dd:14:d0:2b:97:18:ff:84:63:bc:
7a:56:33:b8:4c:7e:f7:5d:01:5b:3b:3c:df:06:12:7a:66:2b:
00:4c:b4:c2:be:d7:3b:d4:ab:5b:1b:db:08:71:2d:fc:9f:70:
50:fb:08:d0:8e:8d:b2:61:17:4a:23:d0:36:44:ac:b6:e3:91:
96:18:a0:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/Vsc1qq/UZuDuGG8NcWgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMjMyNWVjZjM2OGM5MTQ4YTdjNDEyODFkNjA3ZmE2ZDgw
NGEwYzkwHhcNMjUwMTAyMDc0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDg3Y2YwMTAwNzNiZDk0ZjQ4YTc5ZGQ5Nzk1MzdmODA1YzAzNzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDmh2tJ/18/+efvpGGFtHvQE/o50
cA9sNEUs38SCMijuMWk0Zv9DeevE/STdAB6c14qMl0Coc9oBQVn1ePquyp92MnOf
2mGO4OOafsDyJFQp5R+/KhO8/qWiIaUsUFVcriCpT/m0FLmEu9Q76bX+fS+FD+9U
uiAz0hpLnJEgVQtjaaS8/22yxeA6PUGR1UIa48TDrtxNwFsoTIvgggppXExr+CuB
KAHVWkTHDMOsUz/+Z0y6liVCH68awsjY8pbc0m9ZFtWQtGXT4uCsixAxKnG+GOoY
0gAUzE+LShRGUc+GdspKLcAIU8l4PHJMZmI5vAAgQO5U/EgdmkhuUKPNsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH2HzwEAc72U9Ip53ZeVN/gFwDeeMB8GA1UdIwQY
MBaAFHIjJezzaMkUinxBKB1gf6bYBKDJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lNbDdQTm95UlNLZkVFb0hXQl9wdGdFb01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xYzA2MmEtMDRkNC00YzA1LWEyZDIt
OTBiZGNjNGFhNWRiLzEvZllmUEFRQnp2WlQwaW5uZGw1VTMtQVhBTjU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8xYzA2MmEtMDRkNC00YzA1LWEyZDItOTBiZGNjNGFhNWRi
LzEvY2lNbDdQTm95UlNLZkVFb0hXQl9wdGdFb01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg8tMA0G
CSqGSIb3DQEBCwUAA4IBAQA5EEtJlJn47b/qiN7GOClnFtGqimI6Sxob9Ad3WWEz
H9x9D+0wWZuwxn0Y+mWtgD6SoX59WIFeIhw27O6Z/I4HlIT2ew87WfeeHg+OSzff
w58OXpz60aBwCn2CKAg71bqDCjvIVpC6p0x3IuKcnrU3kSdL4Yl73nNIM3EsgtlE
CDlMauokimUwU34d+p6Dr+dOxwLzVWzxg6y+b0XD00XMB+BanZdiG0V+Fvkv5tpm
k+tazWlQuH/8c21H/t0U0CuXGP+EY7x6VjO4TH73XQFbOzzfBhJ6ZisATLTCvtc7
1KtbG9sIcS38n3BQ+wjQjo2yYRdKI9A2RKy245GWGKAc
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:15:18 2025 by rpki-client