Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/saL_JgI0PuLcRd2fgaRyuCRT4oQ.roa
File: saL_JgI0PuLcRd2fgaRyuCRT4oQ.roa (raw, json)
Hash identifier: TKYq5bkvZmNzmAS5U9vl5b3QXUiEmUHsR8998Y8ephk=
Subject key identifier: B1:A2:FF:26:02:34:3E:E2:DC:45:DD:9F:81:A4:72:B8:24:53:E2:84
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143B3D6D22A12CD4674CA1F38901DC6
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/saL_JgI0PuLcRd2fgaRyuCRT4oQ.roa
Signing time: Wed 01 Jan 2025 09:47:52 +0000
ROA not before: Wed 01 Jan 2025 09:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48690
IP address blocks: 195.187.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b3:d6:d2:2a:12:cd:46:74:ca:1f:38:90:1d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1a2ff2602343ee2dc45dd9f81a472b82453e284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:61:ed:19:ff:a4:7a:4f:19:b8:60:25:b3:a2:
df:e1:e7:13:51:5d:a3:a5:bf:f2:b4:d1:f6:cf:3d:
7c:1b:44:58:45:e6:82:e8:6b:36:a6:da:48:6d:31:
a0:9b:0d:05:56:ab:e3:47:19:78:d2:a1:29:a9:d5:
e8:98:17:5a:d3:56:72:4f:ce:a3:f4:48:c9:5d:eb:
43:0d:51:9b:9e:8d:12:43:94:ba:32:6c:27:e2:a3:
95:ed:63:7d:21:dd:7b:7b:81:d7:2e:6a:2b:78:13:
32:21:76:8c:52:33:31:f8:be:af:f1:fe:3c:d9:9b:
9f:c5:bf:71:2a:12:f2:f5:30:40:cf:4b:35:cc:62:
1b:04:3a:74:ce:b4:25:37:6f:25:29:c4:0d:92:ef:
be:4a:c2:6a:44:3c:39:27:3f:5b:f7:7b:82:2b:9e:
62:b5:2f:83:fe:10:91:a3:6d:fd:9a:46:33:a4:a7:
bd:d0:89:18:6e:e1:41:36:81:c3:36:00:28:15:9d:
1d:af:f2:51:6b:ca:fd:01:b7:6e:9a:42:2f:ad:99:
e3:de:ee:e2:f7:ee:86:3e:51:1b:6c:44:ac:3b:bf:
49:4c:ec:f1:5c:41:a4:55:cd:86:3c:e4:89:9e:29:
6c:85:87:9c:cd:8e:82:92:85:db:e3:86:4d:c9:bf:
28:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A2:FF:26:02:34:3E:E2:DC:45:DD:9F:81:A4:72:B8:24:53:E2:84
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/saL_JgI0PuLcRd2fgaRyuCRT4oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.187.141.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:7a:4c:f2:1f:da:40:40:dd:17:a0:ff:0b:82:0d:f8:74:ce:
0b:93:50:97:7b:18:3b:bb:ae:d5:37:c0:17:73:ff:e8:52:01:
ec:b1:af:9d:c0:fd:12:9d:2f:a2:51:cf:df:5f:06:a3:19:a7:
a6:cd:d5:9f:96:6e:ee:69:8c:aa:ed:bb:bf:a4:cc:47:b8:7f:
8a:63:3c:cb:b5:99:05:99:a8:d8:c7:9c:a5:33:b2:a0:9d:81:
4e:f8:d4:21:2b:0d:6b:cb:3f:ac:d5:26:3e:9a:e1:a0:22:3e:
5a:5f:de:5f:1b:c9:11:dc:c4:8c:1a:a7:da:2c:04:05:70:82:
a1:d6:8b:7c:cc:26:d9:14:25:c0:8c:de:a5:69:eb:51:5f:f9:
ef:c1:33:8e:65:f2:b6:a6:b5:a1:b3:6e:d3:6f:60:03:63:56:
b1:fb:da:61:3c:4d:fb:9b:5f:72:cc:e5:97:42:f7:0a:8d:d8:
2c:c7:28:f8:66:54:82:10:c2:c8:98:86:be:04:69:55:30:1a:
07:cb:fc:ed:4b:dc:b2:32:51:cf:dd:2d:63:1a:15:b0:71:ec:
17:a7:ee:61:8f:ed:cd:b3:1f:55:fb:47:62:22:5c:07:f1:22:
b1:ab:fb:6f:64:09:84:11:ad:08:c6:5b:e1:ad:26:68:2f:d9:
af:47:cd:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ7PW0ioSzUZ0yh84kB3GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw
MTE4OGYwHhcNMjUwMTAxMDk0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWEyZmYyNjAyMzQzZWUyZGM0NWRkOWY4MWE0NzJiODI0NTNlMjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WHtGf+kek8ZuGAls6Lf4ecTUV2j
pb/ytNH2zz18G0RYReaC6Gs2ptpIbTGgmw0FVqvjRxl40qEpqdXomBda01ZyT86j
9EjJXetDDVGbno0SQ5S6Mmwn4qOV7WN9Id17e4HXLmoreBMyIXaMUjMx+L6v8f48
2Zufxb9xKhLy9TBAz0s1zGIbBDp0zrQlN28lKcQNku++SsJqRDw5Jz9b93uCK55i
tS+D/hCRo239mkYzpKe90IkYbuFBNoHDNgAoFZ0dr/JRa8r9AbdumkIvrZnj3u7i
9+6GPlEbbESsO79JTOzxXEGkVc2GPOSJnilshYeczY6CkoXb44ZNyb8oXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLGi/yYCND7i3EXdn4GkcrgkU+KEMB8GA1UdIwQY
MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt
YzA2NzFiZjRjZjNlLzEvc2FMX0pnSTBQdUxjUmQyZmdhUnl1Q1JUNG9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl
LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7uNMA0G
CSqGSIb3DQEBCwUAA4IBAQANekzyH9pAQN0XoP8Lgg34dM4Lk1CXexg7u67VN8AX
c//oUgHssa+dwP0SnS+iUc/fXwajGaemzdWflm7uaYyq7bu/pMxHuH+KYzzLtZkF
majYx5ylM7KgnYFO+NQhKw1ryz+s1SY+muGgIj5aX95fG8kR3MSMGqfaLAQFcIKh
1ot8zCbZFCXAjN6laetRX/nvwTOOZfK2prWhs27Tb2ADY1ax+9phPE37m19yzOWX
QvcKjdgsxyj4ZlSCEMLImIa+BGlVMBoHy/ztS9yyMlHP3S1jGhWwcewXp+5hj+3N
sx9V+0diIlwH8SKxq/tvZAmEEa0IxlvhrSZoL9mvR82F
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:54:21 2025 by rpki-client