Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/sMegHqU7UUGqCYG93dUiBfzhiKY.roa
File: sMegHqU7UUGqCYG93dUiBfzhiKY.roa (raw, json)
Hash identifier: Uew37Hsz2ZJ9NI8mYh/emEGauK92oIRApPEXx6MkFec=
Subject key identifier: B0:C7:A0:1E:A5:3B:51:41:AA:09:81:BD:DD:D5:22:05:FC:E1:88:A6
Certificate issuer: /CN=165b56e55b6fefbc20db4ace6fd756c73d741f9c
Certificate serial: 01942068241413D4BEDD015D9E6B49786A3F
Authority key identifier: 16:5B:56:E5:5B:6F:EF:BC:20:DB:4A:CE:6F:D7:56:C7:3D:74:1F:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FltW5Vtv77wg20rOb9dWxz10H5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/sMegHqU7UUGqCYG93dUiBfzhiKY.roa
Signing time: Wed 01 Jan 2025 05:48:03 +0000
ROA not before: Wed 01 Jan 2025 05:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44396
IP address blocks: 194.48.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:24:14:13:d4:be:dd:01:5d:9e:6b:49:78:6a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165b56e55b6fefbc20db4ace6fd756c73d741f9c
Validity
Not Before: Jan 1 05:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0c7a01ea53b5141aa0981bdddd52205fce188a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:70:96:31:74:dd:ba:dc:e7:f5:77:90:2f:9c:
18:c7:62:cc:57:e7:a6:50:54:50:da:e4:d9:6f:7f:
81:9c:4f:6d:f3:58:91:e8:6b:71:a9:d9:34:ad:b8:
e6:81:3f:5c:a7:c0:06:87:89:48:05:57:bf:dd:df:
00:34:27:46:90:69:87:29:f1:ee:eb:f6:56:1b:85:
36:52:15:19:3f:74:0f:50:3b:4d:9f:1b:25:35:cd:
a5:61:f1:f9:7c:a2:36:55:bf:1c:fa:a1:4f:eb:27:
3e:85:25:03:f2:a2:10:a6:0a:dd:b0:e9:e3:d8:0a:
bd:3b:b6:b2:6a:76:3a:9d:6b:58:49:79:a7:60:71:
09:64:ea:55:26:56:5d:45:24:94:32:8b:9d:a2:cb:
79:82:3f:24:0d:5c:e4:80:bd:2f:ed:85:29:ba:80:
82:fb:c7:a8:36:58:d5:84:f5:76:fd:44:17:57:db:
00:19:01:95:b5:70:1c:ec:7d:51:bf:cc:ef:b6:e8:
e0:11:ef:91:08:1b:2c:92:b9:4d:dd:b6:3f:d3:ab:
6e:64:73:f0:d4:47:0a:b1:2a:81:df:5d:71:dd:92:
c4:a6:9f:bf:bf:cc:05:bd:b2:18:d9:90:1e:d6:5f:
bc:82:5d:dc:96:09:2f:76:0a:d9:ce:b4:95:27:04:
30:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C7:A0:1E:A5:3B:51:41:AA:09:81:BD:DD:D5:22:05:FC:E1:88:A6
X509v3 Authority Key Identifier:
keyid:16:5B:56:E5:5B:6F:EF:BC:20:DB:4A:CE:6F:D7:56:C7:3D:74:1F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FltW5Vtv77wg20rOb9dWxz10H5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/sMegHqU7UUGqCYG93dUiBfzhiKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.206.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a5:e3:e2:3f:26:81:a7:8e:8e:ac:6d:28:0b:40:7b:e2:d6:
e4:02:de:b6:02:36:b9:dd:7e:ad:3c:d2:ba:72:96:1e:3e:3c:
2b:2a:0f:e4:32:41:32:c8:b2:84:9b:c5:02:a0:a7:04:28:35:
b1:06:5a:ee:32:26:31:ea:66:64:91:5d:76:2a:16:6b:34:30:
82:ca:46:bc:5a:3a:cf:34:f7:f7:04:ed:82:a9:11:36:d5:0e:
09:8a:6e:c7:e9:34:3b:82:3e:5b:bc:be:b0:0a:dc:59:a4:f8:
b2:1c:b0:2c:34:c3:48:70:04:c0:ba:15:cb:06:0f:ad:34:24:
02:e3:27:b5:41:46:1a:89:f1:5a:e2:11:c7:97:bd:d0:f3:f5:
c5:de:7c:d5:cc:dd:f1:96:9d:60:42:fe:89:0d:56:43:35:f7:
30:17:2d:fb:1a:49:7a:f3:07:67:ba:16:e5:ce:a4:fd:e2:e0:
e0:05:1f:31:b6:8f:3b:76:e0:8b:53:d6:dc:ff:1b:30:a9:a5:
f6:a3:dc:62:4d:0e:ff:01:4a:fc:80:ff:05:6c:9b:59:23:01:
0c:23:31:c2:69:f2:d0:81:42:88:52:0a:a7:6c:02:d1:60:76:
6f:aa:db:89:87:98:52:a5:99:77:df:ac:5d:8e:47:41:d1:fb:
24:3b:eb:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaCQUE9S+3QFdnmtJeGo/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NWI1NmU1NWI2ZmVmYmMyMGRiNGFjZTZmZDc1NmM3M2Q3
NDFmOWMwHhcNMjUwMTAxMDU0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGM3YTAxZWE1M2I1MTQxYWEwOTgxYmRkZGQ1MjIwNWZjZTE4OGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHCWMXTdutzn9XeQL5wYx2LMV+em
UFRQ2uTZb3+BnE9t81iR6Gtxqdk0rbjmgT9cp8AGh4lIBVe/3d8ANCdGkGmHKfHu
6/ZWG4U2UhUZP3QPUDtNnxslNc2lYfH5fKI2Vb8c+qFP6yc+hSUD8qIQpgrdsOnj
2Aq9O7ayanY6nWtYSXmnYHEJZOpVJlZdRSSUMoudost5gj8kDVzkgL0v7YUpuoCC
+8eoNljVhPV2/UQXV9sAGQGVtXAc7H1Rv8zvtujgEe+RCBsskrlN3bY/06tuZHPw
1EcKsSqB311x3ZLEpp+/v8wFvbIY2ZAe1l+8gl3clgkvdgrZzrSVJwQwJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLDHoB6lO1FBqgmBvd3VIgX84YimMB8GA1UdIwQY
MBaAFBZbVuVbb++8INtKzm/XVsc9dB+cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmx0VzVWdHY3N3dnMjByT2I5ZFd4ejEwSDV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81Zjc5M2QtOTdmOS00YWJhLTliYTEt
YjVkMTNhMDE4OWE1LzEvc01lZ0hxVTdVVUdxQ1lHOTNkVWlCZnpoaUtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81Zjc5M2QtOTdmOS00YWJhLTliYTEtYjVkMTNhMDE4OWE1
LzEvRmx0VzVWdHY3N3dnMjByT2I5ZFd4ejEwSDV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjDOMA0G
CSqGSIb3DQEBCwUAA4IBAQCSpePiPyaBp46OrG0oC0B74tbkAt62Aja53X6tPNK6
cpYePjwrKg/kMkEyyLKEm8UCoKcEKDWxBlruMiYx6mZkkV12KhZrNDCCyka8WjrP
NPf3BO2CqRE21Q4Jim7H6TQ7gj5bvL6wCtxZpPiyHLAsNMNIcATAuhXLBg+tNCQC
4ye1QUYaifFa4hHHl73Q8/XF3nzVzN3xlp1gQv6JDVZDNfcwFy37Gkl68wdnuhbl
zqT94uDgBR8xto87duCLU9bc/xswqaX2o9xiTQ7/AUr8gP8FbJtZIwEMIzHCafLQ
gUKIUgqnbALRYHZvqtuJh5hSpZl336xdjkdB0fskO+tw
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:17:38 2025 by rpki-client