Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/P0vR8NFOqzUM0n5-PTdZVFTAC8Q.roa
File: P0vR8NFOqzUM0n5-PTdZVFTAC8Q.roa (raw, json)
Hash identifier: A8zEAcViYD9RWk/au7+yPQfR19Sh9DoooPV1RyNftPE=
Subject key identifier: 3F:4B:D1:F0:D1:4E:AB:35:0C:D2:7E:7E:3D:37:59:54:54:C0:0B:C4
Certificate issuer: /CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Certificate serial: 019423D74990931AF9885FE5CB75F613A620
Authority key identifier: 96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/P0vR8NFOqzUM0n5-PTdZVFTAC8Q.roa
Signing time: Wed 01 Jan 2025 21:48:19 +0000
ROA not before: Wed 01 Jan 2025 21:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198293
IP address blocks: 81.162.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:49:90:93:1a:f9:88:5f:e5:cb:75:f6:13:a6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Validity
Not Before: Jan 1 21:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f4bd1f0d14eab350cd27e7e3d37595454c00bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:49:43:68:b0:af:f9:b7:f3:b9:f4:b0:c0:
20:23:49:aa:1d:95:6c:aa:ca:4a:4e:5c:71:32:10:
c6:6b:69:9e:fe:26:b6:20:f3:58:66:fe:08:e6:bf:
53:50:50:1b:c4:ea:96:f4:e7:46:d0:83:76:5c:8d:
57:5e:b7:65:57:b4:57:a3:9f:2b:59:7b:24:03:53:
da:ef:32:85:ba:89:ae:3a:3a:4a:00:ba:e1:48:73:
c6:de:aa:f1:36:60:dc:46:4a:31:4d:69:4e:61:a3:
ce:57:c3:23:93:8d:9e:52:b7:d9:91:ec:42:e1:cb:
ae:14:c3:82:58:0c:76:93:53:ad:7b:b0:10:6c:bb:
74:7f:44:72:6f:09:b5:8d:8e:41:08:ed:ed:10:bc:
61:77:29:01:3c:6a:fc:ac:a5:6b:67:63:68:71:85:
32:a4:09:fc:e8:89:dc:01:d5:24:a0:36:73:aa:3d:
e1:76:32:b4:7c:b7:d8:f2:d3:85:9b:b9:7c:b9:e4:
f8:09:6b:eb:5c:76:cb:c9:b7:11:ab:91:0b:6f:0e:
a4:b6:e7:ba:7a:37:3b:35:1a:88:d8:71:2d:ac:6c:
57:3b:8d:32:a2:e7:ed:6f:b2:2f:fd:5c:20:52:27:
62:2d:61:1f:a5:21:3a:ce:39:3a:e6:0e:38:95:0e:
94:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4B:D1:F0:D1:4E:AB:35:0C:D2:7E:7E:3D:37:59:54:54:C0:0B:C4
X509v3 Authority Key Identifier:
keyid:96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/P0vR8NFOqzUM0n5-PTdZVFTAC8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.162.64.0/20
Signature Algorithm: sha256WithRSAEncryption
41:56:d6:d2:8e:18:e8:e3:d2:03:6b:28:a4:b9:5e:fa:42:67:
6f:f0:a2:c4:3c:0a:d4:74:28:cf:52:a6:03:36:ab:24:81:df:
76:a3:b2:40:1f:61:37:ac:8b:3d:0a:6e:fd:0d:a2:c0:ba:bd:
85:43:d5:42:2a:8b:ba:14:54:f4:4c:18:72:b0:b6:f3:ec:81:
8f:de:e9:d8:fa:14:5b:bd:64:6e:a7:fb:cc:fd:55:71:c2:ee:
2b:c5:17:81:9b:12:a7:2d:fa:1c:8c:3d:6f:db:40:66:27:de:
1e:94:1a:1b:ba:83:7d:89:97:7d:1b:af:dc:0f:bc:a3:19:1d:
f5:fd:ac:73:f9:60:3c:1c:70:ba:e1:ad:16:17:cd:5e:e5:7b:
7a:eb:3e:01:71:64:cb:36:58:60:28:fa:6d:43:35:9b:14:2b:
6d:90:72:a1:81:03:40:7a:f4:f5:f6:b7:88:a5:22:b1:0c:d3:
1b:ff:9c:24:89:55:d4:6c:15:cc:90:b5:a3:e6:bc:fe:e9:cf:
55:ae:85:6d:7c:4f:e2:95:81:31:f1:7a:ce:aa:d5:63:c6:d4:
97:28:15:1c:49:12:db:fa:42:39:eb:63:a2:f9:e7:5e:c6:9a:
43:47:f6:d3:00:dd:74:14:08:48:b1:ce:e4:87:3a:50:6b:61:
69:3c:b2:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj10mQkxr5iF/ly3X2E6YgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YTI4Y2NjMzA5MTViNWM3MzEyODBhOGMxY2E2N2ZlNjAw
OTU0ZWUwHhcNMjUwMTAxMjE0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjRiZDFmMGQxNGVhYjM1MGNkMjdlN2UzZDM3NTk1NDU0YzAwYmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhBJQ2iwr/m387n0sMAgI0mqHZVs
qspKTlxxMhDGa2me/ia2IPNYZv4I5r9TUFAbxOqW9OdG0IN2XI1XXrdlV7RXo58r
WXskA1Pa7zKFuomuOjpKALrhSHPG3qrxNmDcRkoxTWlOYaPOV8Mjk42eUrfZkexC
4cuuFMOCWAx2k1Ote7AQbLt0f0Rybwm1jY5BCO3tELxhdykBPGr8rKVrZ2NocYUy
pAn86IncAdUkoDZzqj3hdjK0fLfY8tOFm7l8ueT4CWvrXHbLybcRq5ELbw6ktue6
ejc7NRqI2HEtrGxXO40youftb7Iv/VwgUidiLWEfpSE6zjk65g44lQ6U3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD9L0fDRTqs1DNJ+fj03WVRUwAvEMB8GA1UdIwQY
MBaAFJaijMwwkVtccxKAqMHKZ/5gCVTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHFLTXpEQ1JXMXh6RW9Db3djcG5fbUFKVk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82YTJhYTktMGVhMS00MGQ2LWI4YTct
NjUxYjcxN2Y4YTlhLzEvUDB2UjhORk9xelVNMG41LVBUZFpWRlRBQzhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82YTJhYTktMGVhMS00MGQ2LWI4YTctNjUxYjcxN2Y4YTlh
LzEvbHFLTXpEQ1JXMXh6RW9Db3djcG5fbUFKVk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUaJAMA0G
CSqGSIb3DQEBCwUAA4IBAQBBVtbSjhjo49IDayikuV76Qmdv8KLEPArUdCjPUqYD
Nqskgd92o7JAH2E3rIs9Cm79DaLAur2FQ9VCKou6FFT0TBhysLbz7IGP3unY+hRb
vWRup/vM/VVxwu4rxReBmxKnLfocjD1v20BmJ94elBobuoN9iZd9G6/cD7yjGR31
/axz+WA8HHC64a0WF81e5Xt66z4BcWTLNlhgKPptQzWbFCttkHKhgQNAevT19reI
pSKxDNMb/5wkiVXUbBXMkLWj5rz+6c9VroVtfE/ilYEx8XrOqtVjxtSXKBUcSRLb
+kI562Oi+edexppDR/bTAN10FAhIsc7khzpQa2FpPLLY
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:13 2025 by rpki-client