Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/1-p8SrWJ5THOyKbL_R9fZqVDF5Lg.roa
File: 1-p8SrWJ5THOyKbL_R9fZqVDF5Lg.roa (raw, json)
Hash identifier: Dpj5AMuFNg0086YuEbRvx4oDSlmmrMJ7GujnIQgUfaA=
Subject key identifier: FA:9F:12:AD:62:79:4C:73:B2:29:B2:FF:47:D7:D9:A9:50:C5:E4:B8
Certificate issuer: /CN=9060c6f01df85d4a033f125653e1317b6f42864e
Certificate serial: 019427B52394EA648E0A761A5107F45B348D
Authority key identifier: 90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/1-p8SrWJ5THOyKbL_R9fZqVDF5Lg.roa
Signing time: Thu 02 Jan 2025 15:49:30 +0000
ROA not before: Thu 02 Jan 2025 15:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210962
IP address blocks: 194.26.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:23:94:ea:64:8e:0a:76:1a:51:07:f4:5b:34:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9060c6f01df85d4a033f125653e1317b6f42864e
Validity
Not Before: Jan 2 15:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa9f12ad62794c73b229b2ff47d7d9a950c5e4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:0e:2a:20:a9:c6:6d:e2:54:1e:55:06:b6:
bb:28:74:c5:24:0d:ee:1e:21:d9:d8:ff:44:e4:a6:
9e:03:29:93:52:57:73:20:7d:9d:f5:45:dd:92:2f:
c4:cc:1a:d7:46:1d:69:96:26:8c:f8:0c:38:42:ed:
e8:3f:d6:c5:50:dc:d9:81:df:44:c5:9f:6c:be:c4:
08:94:90:7f:43:d6:44:93:8a:ff:ef:9e:e6:45:9c:
1c:5c:04:b5:00:33:92:b1:e9:10:8e:24:aa:07:67:
0c:ac:9e:f7:96:0f:3e:f0:8d:2c:6f:be:94:0d:b4:
20:cf:35:c9:c3:49:f3:9f:49:5e:a3:94:ea:c1:16:
47:73:81:af:c9:74:d1:a8:a3:eb:2e:3a:7e:e8:a2:
37:2c:05:ba:fa:4e:ec:61:76:4f:fa:c7:72:8f:59:
13:61:dd:48:0d:c3:1e:b8:b9:2d:1e:cc:4b:fa:a3:
61:6e:b2:80:94:fd:03:b7:c5:99:42:51:c9:2a:e6:
03:73:ce:19:e3:4b:27:95:bb:d9:48:61:0d:c4:a7:
16:44:f9:05:cf:c5:98:d2:4e:2a:37:6c:99:e6:67:
8f:b8:c9:14:3a:e5:e7:78:b3:96:ba:dc:4f:0b:b7:
75:d8:c8:fe:ba:1e:58:01:29:b8:d0:90:04:07:a4:
cb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9F:12:AD:62:79:4C:73:B2:29:B2:FF:47:D7:D9:A9:50:C5:E4:B8
X509v3 Authority Key Identifier:
keyid:90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/1-p8SrWJ5THOyKbL_R9fZqVDF5Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.102.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b8:b8:50:a8:5b:65:3a:98:9e:bb:64:7c:0b:2d:1b:72:99:
cf:a7:7f:68:cb:9f:5b:3d:c5:fa:de:d9:e9:44:b2:cd:51:6f:
48:c6:68:e7:d0:c9:5c:eb:18:e1:07:e7:93:6a:14:33:9b:81:
5e:13:7f:85:75:35:14:fc:17:1a:7c:79:3f:9f:04:e5:ec:6f:
9e:e8:4f:99:66:bd:1d:79:87:75:14:86:67:32:14:7e:31:17:
9c:eb:53:2e:b9:6f:b1:ba:93:fd:34:b3:1a:ff:69:82:47:40:
b6:fe:48:b0:bd:1f:0f:7a:cb:a6:db:05:4d:23:3e:21:f5:d5:
cf:a5:bc:b1:15:48:d2:40:57:ce:35:86:18:7e:8a:66:5b:58:
b8:81:a9:da:9f:27:4c:4b:7c:96:06:30:36:53:91:60:ba:ae:
2a:c5:43:62:6a:cc:78:57:e5:cc:7f:36:1e:44:d5:2d:b2:39:
63:3f:c1:9b:73:ac:db:eb:c1:e2:d0:44:e1:a1:b9:ec:9b:b9:
03:d1:fd:87:d0:3a:63:72:ce:44:f8:45:ef:d1:51:58:9e:ac:
3f:d2:6c:75:c3:0d:13:67:46:db:3d:2a:e5:d5:cb:a8:ef:93:
94:fd:8c:0d:37:18:eb:0e:7b:ff:46:79:76:f6:b3:d9:3f:32:
ac:04:b6:4a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQntSOU6mSOCnYaUQf0WzSNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNjBjNmYwMWRmODVkNGEwMzNmMTI1NjUzZTEzMTdiNmY0
Mjg2NGUwHhcNMjUwMTAyMTU0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTlmMTJhZDYyNzk0YzczYjIyOWIyZmY0N2Q3ZDlhOTUwYzVlNGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowgOKiCpxm3iVB5VBra7KHTFJA3u
HiHZ2P9E5KaeAymTUldzIH2d9UXdki/EzBrXRh1pliaM+Aw4Qu3oP9bFUNzZgd9E
xZ9svsQIlJB/Q9ZEk4r/757mRZwcXAS1ADOSsekQjiSqB2cMrJ73lg8+8I0sb76U
DbQgzzXJw0nzn0leo5TqwRZHc4GvyXTRqKPrLjp+6KI3LAW6+k7sYXZP+sdyj1kT
Yd1IDcMeuLktHsxL+qNhbrKAlP0Dt8WZQlHJKuYDc84Z40snlbvZSGENxKcWRPkF
z8WY0k4qN2yZ5mePuMkUOuXneLOWutxPC7d12Mj+uh5YASm40JAEB6TLgQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPqfEq1ieUxzsimy/0fX2alQxeS4MB8GA1UdIwQY
MBaAFJBgxvAd+F1KAz8SVlPhMXtvQoZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0dERzhCMzRYVW9EUHhKV1UtRXhlMjlDaGs0LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82N2QwN2MtYTU2MS00NTdmLWEwNDQt
Y2UwYjhhNTFhNDUxLzEvMS1wOFNyV0o1VEhPeUtiTF9SOWZacVZERjVMZy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTkvNjdkMDdjLWE1NjEtNDU3Zi1hMDQ0LWNlMGI4YTUxYTQ1
MS8xL2tHREc4QjM0WFVvRFB4SldVLUV4ZTI5Q2hrNC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIaZjAN
BgkqhkiG9w0BAQsFAAOCAQEAgLi4UKhbZTqYnrtkfAstG3KZz6d/aMufWz3F+t7Z
6USyzVFvSMZo59DJXOsY4Qfnk2oUM5uBXhN/hXU1FPwXGnx5P58E5exvnuhPmWa9
HXmHdRSGZzIUfjEXnOtTLrlvsbqT/TSzGv9pgkdAtv5IsL0fD3rLptsFTSM+IfXV
z6W8sRVI0kBXzjWGGH6KZltYuIGp2p8nTEt8lgYwNlORYLquKsVDYmrMeFflzH82
HkTVLbI5Yz/Bm3Os2+vB4tBE4aG57Ju5A9H9h9A6Y3LORPhF79FRWJ6sP9JsdcMN
E2dG2z0q5dXLqO+TlP2MDTcY6w57/0Z5dvaz2T8yrAS2Sg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:33:23 2025 by rpki-client