Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/9t22owOYC7Mw8jA_t9_7gDwHF1o.roa
File: 9t22owOYC7Mw8jA_t9_7gDwHF1o.roa (raw, json)
Hash identifier: iV2EeKk18zEE+h5tJ2D8tk3awOGzeRIEDnvnGsDqR3g=
Subject key identifier: F6:DD:B6:A3:03:98:0B:B3:30:F2:30:3F:B7:DF:FB:80:3C:07:17:5A
Certificate issuer: /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Certificate serial: 01941F8C3FB0F0130A811F7EF26A228E0461
Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/9t22owOYC7Mw8jA_t9_7gDwHF1o.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209947
IP address blocks: 212.119.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3f:b0:f0:13:0a:81:1f:7e:f2:6a:22:8e:04:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6ddb6a303980bb330f2303fb7dffb803c07175a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:77:cd:23:eb:4d:dd:24:13:fe:76:bd:75:46:
6f:b2:84:4b:b9:a2:03:0c:18:36:9f:09:96:b0:57:
4f:4a:a4:a8:39:d6:f8:0c:de:ef:a3:c4:05:68:c1:
04:5a:5e:a8:38:5a:93:f2:6e:93:d6:b0:ef:46:2c:
fb:20:2e:85:03:3d:85:4f:c8:2f:0e:21:67:25:2b:
58:48:f0:07:31:d6:75:40:4a:51:cc:9d:b2:14:d8:
c5:b5:0a:d8:7f:68:b4:f0:fe:11:4a:09:9b:43:5e:
96:32:57:61:a2:b7:77:58:35:bb:02:cb:43:f7:2a:
56:e6:0a:44:ff:6e:af:44:25:d2:27:e5:06:75:ce:
1e:34:94:04:9f:b8:39:8e:64:eb:1a:9b:93:59:01:
d5:7e:fb:8f:23:a5:f2:2d:e7:fc:b5:c2:12:6a:38:
58:a5:bb:df:4d:6d:86:ba:c4:f6:d4:9d:4c:45:99:
be:6a:07:34:98:90:f2:d5:79:1e:9c:75:91:e5:c3:
13:f0:3e:61:35:38:23:8c:60:66:e1:b3:5a:19:70:
6a:49:c3:f9:d3:5e:12:57:ca:e3:ae:c3:d9:85:54:
e9:11:94:c1:e0:a2:73:40:cd:34:be:c6:05:d7:56:
c6:95:d4:b7:f4:9c:c4:d4:5f:9b:aa:57:6a:4a:81:
a5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DD:B6:A3:03:98:0B:B3:30:F2:30:3F:B7:DF:FB:80:3C:07:17:5A
X509v3 Authority Key Identifier:
keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/9t22owOYC7Mw8jA_t9_7gDwHF1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.119.36.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:21:82:97:99:ef:b1:ce:bd:06:f7:2b:03:a9:32:c7:ce:47:
82:46:0b:eb:2f:ea:69:b8:57:0e:41:1b:c5:e3:87:d1:5e:e8:
7a:31:36:f1:ac:90:fb:8f:f6:99:4e:f1:1f:4f:d7:2e:f8:b4:
9c:66:d4:44:08:6a:6e:a7:0b:08:e2:96:c2:d6:a1:49:6c:ef:
3e:55:90:75:da:35:6e:d6:ec:d6:84:b3:8e:ad:0f:d6:2d:0f:
80:65:03:72:79:29:98:ff:b2:1b:19:5b:0a:d8:f3:b6:d7:1c:
9d:b6:f3:f2:9a:57:a2:07:5f:43:95:03:f2:b7:8b:52:94:26:
dc:b7:3d:3f:51:53:8c:3d:a3:2c:31:65:b5:cc:e0:c1:54:1f:
d7:99:95:d0:b3:10:82:f1:02:13:5f:91:2c:e0:bd:0a:76:60:
90:53:e5:af:cc:c3:7e:ca:5a:6f:9b:a2:d0:81:59:57:2c:08:
12:6d:fb:1b:61:29:c5:e7:9d:20:13:75:f9:1a:af:79:bf:86:
2f:d5:6b:0e:bc:d6:df:de:56:20:f5:51:9f:1b:cd:5c:89:69:
c2:50:94:e5:df:68:39:51:f6:df:6a:c5:e4:ae:14:ad:f3:bf:
5a:26:3d:a7:6e:22:d3:07:82:4d:76:86:64:d6:70:e4:b1:34:
63:af:88:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjD+w8BMKgR9+8moijgRhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjgzODgzNzJkYzMzMmM3Y2M2Zjc3NjZhZDc4ZDU4YTIz
YjI1NDQwHhcNMjUwMTAxMDE0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmRkYjZhMzAzOTgwYmIzMzBmMjMwM2ZiN2RmZmI4MDNjMDcxNzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3fNI+tN3SQT/na9dUZvsoRLuaID
DBg2nwmWsFdPSqSoOdb4DN7vo8QFaMEEWl6oOFqT8m6T1rDvRiz7IC6FAz2FT8gv
DiFnJStYSPAHMdZ1QEpRzJ2yFNjFtQrYf2i08P4RSgmbQ16WMldhord3WDW7AstD
9ypW5gpE/26vRCXSJ+UGdc4eNJQEn7g5jmTrGpuTWQHVfvuPI6XyLef8tcISajhY
pbvfTW2GusT21J1MRZm+agc0mJDy1XkenHWR5cMT8D5hNTgjjGBm4bNaGXBqScP5
014SV8rjrsPZhVTpEZTB4KJzQM00vsYF11bGldS39JzE1F+bqldqSoGlawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPbdtqMDmAuzMPIwP7ff+4A8BxdaMB8GA1UdIwQY
MBaAFAP4OINy3DMsfMb3dmrXjViiOyVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9nNGczTGNNeXg4eHZkMmF0ZU5XS0k3SlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85ZTExNjUtYzYxMC00OTg4LWE0OWQt
OTQ1NTg1OGU5YzA2LzEvOXQyMm93T1lDN013OGpBX3Q5XzdnRHdIRjFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85ZTExNjUtYzYxMC00OTg4LWE0OWQtOTQ1NTg1OGU5YzA2
LzEvQV9nNGczTGNNeXg4eHZkMmF0ZU5XS0k3SlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1HckMA0G
CSqGSIb3DQEBCwUAA4IBAQA6IYKXme+xzr0G9ysDqTLHzkeCRgvrL+ppuFcOQRvF
44fRXuh6MTbxrJD7j/aZTvEfT9cu+LScZtRECGpupwsI4pbC1qFJbO8+VZB12jVu
1uzWhLOOrQ/WLQ+AZQNyeSmY/7IbGVsK2PO21xydtvPymleiB19DlQPyt4tSlCbc
tz0/UVOMPaMsMWW1zODBVB/XmZXQsxCC8QITX5Es4L0KdmCQU+WvzMN+ylpvm6LQ
gVlXLAgSbfsbYSnF550gE3X5Gq95v4Yv1WsOvNbf3lYg9VGfG81ciWnCUJTl32g5
UfbfasXkrhSt879aJj2nbiLTB4JNdoZk1nDksTRjr4h9
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:21:10 2025 by rpki-client