Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/qJ22okdD8cK_emCAng8rI9cPrbU.roa
File: qJ22okdD8cK_emCAng8rI9cPrbU.roa (raw, json)
Hash identifier: WUQnBOwIu5J+Q0plEqLVlVFpmBiC7eLrEJFqZ2HqzGw=
Subject key identifier: A8:9D:B6:A2:47:43:F1:C2:BF:7A:60:80:9E:0F:2B:23:D7:0F:AD:B5
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143BDD45068ACC1F117DC07D819FDDC
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/qJ22okdD8cK_emCAng8rI9cPrbU.roa
Signing time: Wed 01 Jan 2025 09:47:55 +0000
ROA not before: Wed 01 Jan 2025 09:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202600
IP address blocks: 194.181.43.0/24 maxlen: 24
194.181.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:bd:d4:50:68:ac:c1:f1:17:dc:07:d8:19:fd:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a89db6a24743f1c2bf7a60809e0f2b23d70fadb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:c2:42:3b:31:ae:1c:72:8f:87:a3:56:99:
97:42:cd:a2:c2:85:99:9c:b4:de:3b:91:53:66:eb:
b0:85:85:58:77:5f:fe:16:27:a1:73:e9:ec:3d:97:
6d:42:0b:71:1c:e0:41:0f:63:34:3a:eb:72:a8:fc:
d1:ba:c7:c3:5c:d8:45:82:bf:be:4a:8c:50:3b:49:
27:fe:fd:ce:47:35:5b:9a:84:73:33:3d:93:b6:43:
86:0e:64:d5:5a:2f:2c:4f:ea:cc:87:5c:b7:8e:26:
f8:46:e3:8b:27:50:cd:50:40:6d:49:0e:91:2a:e7:
be:44:9f:ce:75:f6:0c:bd:b6:d7:34:2d:9e:ee:37:
4d:ad:1f:2b:4f:3d:96:78:ce:15:c7:9c:a9:ba:99:
ee:f1:d2:e2:ba:21:f4:16:2a:a2:fe:20:4f:0d:5b:
21:03:46:c8:35:76:7b:70:aa:44:be:28:9d:2f:8e:
05:65:e2:81:74:16:d4:88:e7:ad:7a:6e:8a:40:94:
ff:7c:4e:04:9b:f8:40:b7:f2:fc:fb:b4:24:01:a4:
25:3b:a1:9d:2c:ba:40:eb:2a:e8:29:e4:91:57:42:
90:d3:ef:81:49:0f:b5:e6:ca:16:4a:36:8b:67:9d:
e4:5b:45:38:db:2f:74:9c:db:0b:db:80:0e:a8:57:
03:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9D:B6:A2:47:43:F1:C2:BF:7A:60:80:9E:0F:2B:23:D7:0F:AD:B5
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/qJ22okdD8cK_emCAng8rI9cPrbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.181.43.0-194.181.44.255
Signature Algorithm: sha256WithRSAEncryption
8b:e8:67:91:77:d9:15:02:0b:33:1b:47:a6:b5:ec:9f:5a:20:
b4:43:8e:35:9e:3f:fc:48:48:da:44:21:cc:74:84:43:83:25:
07:07:7e:51:26:8c:aa:22:68:b3:14:70:cb:82:3e:a7:4b:43:
e1:57:70:69:eb:b9:4e:58:60:f5:28:fc:91:89:b5:63:5b:e0:
5e:ee:29:bf:4f:d0:04:b9:eb:7a:40:bc:54:37:a2:56:a5:3e:
c7:39:df:8d:e8:78:d2:c5:c0:77:98:21:48:4a:63:30:03:a3:
7c:0c:09:62:81:c1:58:75:3d:1f:4b:b1:22:bc:00:94:7c:cc:
80:8a:d2:67:f2:1f:a3:b9:b6:98:c7:bc:0e:1f:55:12:a8:fe:
18:16:fc:d6:3d:55:f8:a5:f9:89:78:f7:ad:eb:d8:dc:4e:33:
ae:fe:74:1e:61:a8:a9:2a:a0:ec:27:c5:1e:9a:51:98:9b:21:
e6:70:5e:7d:7a:ad:0d:9a:52:52:8f:73:30:57:35:0c:42:a6:
ee:cc:59:af:2f:0d:2b:c0:de:67:26:23:39:c9:d0:2d:f4:a5:
82:05:d2:d1:66:d1:63:76:4d:e4:26:77:6e:77:1a:ff:84:c7:
e7:aa:e6:0b:7b:91:66:fe:6f:49:52:27:d0:80:82:94:bf:51:
27:f5:bc:42
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQhQ73UUGiswfEX3AfYGf3cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw
MTE4OGYwHhcNMjUwMTAxMDk0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODlkYjZhMjQ3NDNmMWMyYmY3YTYwODA5ZTBmMmIyM2Q3MGZhZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfrCQjsxrhxyj4ejVpmXQs2iwoWZ
nLTeO5FTZuuwhYVYd1/+Fiehc+nsPZdtQgtxHOBBD2M0OutyqPzRusfDXNhFgr++
SoxQO0kn/v3ORzVbmoRzMz2TtkOGDmTVWi8sT+rMh1y3jib4RuOLJ1DNUEBtSQ6R
Kue+RJ/OdfYMvbbXNC2e7jdNrR8rTz2WeM4Vx5ypupnu8dLiuiH0Fiqi/iBPDVsh
A0bINXZ7cKpEviidL44FZeKBdBbUiOetem6KQJT/fE4Em/hAt/L8+7QkAaQlO6Gd
LLpA6yroKeSRV0KQ0++BSQ+15soWSjaLZ53kW0U42y90nNsL24AOqFcDbwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKidtqJHQ/HCv3pggJ4PKyPXD621MB8GA1UdIwQY
MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt
YzA2NzFiZjRjZjNlLzEvcUoyMm9rZEQ4Y0tfZW1DQW5nOHJJOWNQcmJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl
LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADCtSsD
BADCtSwwDQYJKoZIhvcNAQELBQADggEBAIvoZ5F32RUCCzMbR6a17J9aILRDjjWe
P/xISNpEIcx0hEODJQcHflEmjKoiaLMUcMuCPqdLQ+FXcGnruU5YYPUo/JGJtWNb
4F7uKb9P0AS563pAvFQ3olalPsc5343oeNLFwHeYIUhKYzADo3wMCWKBwVh1PR9L
sSK8AJR8zICK0mfyH6O5tpjHvA4fVRKo/hgW/NY9Vfil+Yl4963r2NxOM67+dB5h
qKkqoOwnxR6aUZibIeZwXn16rQ2aUlKPczBXNQxCpu7MWa8vDSvA3mcmIznJ0C30
pYIF0tFm0WN2TeQmd253Gv+Ex+eq5gt7kWb+b0lSJ9CAgpS/USf1vEI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:51:58 2025 by rpki-client