Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/qA9dHWC6g1Mf2FGuCg-UfT6dHa4.roa
File: qA9dHWC6g1Mf2FGuCg-UfT6dHa4.roa (raw, json)
Hash identifier: tu6gozK2xpe2ojLmfpogjmMhCMxCaqiedX62p8ai78g=
Subject key identifier: A8:0F:5D:1D:60:BA:83:53:1F:D8:51:AE:0A:0F:94:7D:3E:9D:1D:AE
Certificate issuer: /CN=27802685da734b157a2db9ccff76dd4e48911928
Certificate serial: 019425FD408967780D6B905D674B1DD2E955
Authority key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/qA9dHWC6g1Mf2FGuCg-UfT6dHa4.roa
Signing time: Thu 02 Jan 2025 07:49:01 +0000
ROA not before: Thu 02 Jan 2025 07:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50872
IP address blocks: 79.110.144.0/20 maxlen: 24
176.123.208.0/21 maxlen: 24
193.243.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:40:89:67:78:0d:6b:90:5d:67:4b:1d:d2:e9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27802685da734b157a2db9ccff76dd4e48911928
Validity
Not Before: Jan 2 07:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a80f5d1d60ba83531fd851ae0a0f947d3e9d1dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:97:4b:e2:e6:3f:70:1c:0a:6f:19:62:d1:
43:12:3b:72:7e:eb:29:2f:97:d2:bb:56:3d:fe:7f:
0a:72:ec:2e:ca:cc:0c:d1:10:34:63:32:de:25:cf:
c3:48:2e:29:41:25:11:ec:d8:1f:31:aa:5f:21:ec:
32:36:0c:a8:c6:0d:ad:2e:2f:66:24:e1:c6:f3:a8:
93:c7:42:45:8c:ac:e9:0a:7c:aa:fd:ee:77:4e:3a:
50:fd:fe:25:ea:ae:58:da:dc:5e:84:91:ed:c7:29:
6b:9b:dc:3a:4b:8d:30:4a:33:44:35:52:29:e9:e5:
62:5d:c0:5f:59:38:d6:2a:88:bc:7c:78:0e:fd:81:
fc:3e:94:29:47:a9:ef:e2:43:86:1b:2e:71:ac:e6:
d8:b5:fb:b8:09:cb:4c:6a:f8:d2:0a:91:8a:0c:7d:
08:7f:3c:5a:4f:92:10:24:09:d5:2d:08:0f:b3:08:
fc:47:51:3e:fd:9d:38:fe:fc:b4:6a:aa:b6:e7:d6:
e6:46:d0:8e:a2:c4:c6:5c:ee:62:83:80:78:98:7d:
ca:28:2e:f5:e9:5c:db:fa:9b:5b:e0:19:25:22:16:
a0:c4:f5:a8:aa:6f:c3:4a:c3:c4:c6:a2:2e:3d:1d:
0d:bd:79:46:d6:96:77:58:13:53:c3:f4:4f:f8:f1:
df:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0F:5D:1D:60:BA:83:53:1F:D8:51:AE:0A:0F:94:7D:3E:9D:1D:AE
X509v3 Authority Key Identifier:
keyid:27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/qA9dHWC6g1Mf2FGuCg-UfT6dHa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.144.0/20
176.123.208.0/21
193.243.168.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:bc:5f:94:8e:3d:14:9c:1a:57:fd:44:d8:f3:66:7f:1c:ec:
f8:f4:d1:ae:28:32:9e:90:af:84:78:68:c3:a0:48:cc:41:35:
bf:e3:17:5d:a8:07:0f:da:f3:22:0a:d8:b1:bc:41:d7:48:5d:
7a:28:aa:8d:52:be:1a:12:2f:cc:16:30:38:a7:c4:f4:fd:79:
94:a1:e5:10:f7:f4:4e:ae:d7:22:87:8d:37:56:81:b8:6a:85:
47:c0:81:5c:8b:71:ec:a9:4e:08:ed:dd:d9:80:a7:64:0f:f2:
ba:c9:25:04:b4:e3:06:5f:81:ad:71:2e:21:f3:c3:ab:7a:f3:
75:7d:47:c7:a4:b5:91:eb:0d:1c:bb:3f:0f:2e:24:11:4c:fc:
51:f1:fe:97:df:39:15:33:9b:81:ca:2b:92:19:c0:92:39:17:
77:ba:c2:60:e1:47:62:cd:f1:a6:60:2f:81:15:fc:a6:31:26:
0c:ea:5b:8c:eb:d6:d8:36:ca:98:c1:fb:83:56:d0:8b:98:f5:
a4:75:41:8a:55:f1:b8:71:0f:61:f9:5a:4e:42:16:19:ef:93:
a6:b7:70:49:3f:41:e1:40:4d:ae:45:7f:0e:0a:87:d9:51:bb:
30:62:f8:1f:d1:43:11:ca:8e:12:b8:e6:09:94:5e:19:f4:ac:
a9:4f:44:51
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQl/UCJZ3gNa5BdZ0sd0ulVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ODAyNjg1ZGE3MzRiMTU3YTJkYjljY2ZmNzZkZDRlNDg5
MTE5MjgwHhcNMjUwMTAyMDc0OTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODBmNWQxZDYwYmE4MzUzMWZkODUxYWUwYTBmOTQ3ZDNlOWQxZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL6XS+LmP3AcCm8ZYtFDEjtyfusp
L5fSu1Y9/n8KcuwuyswM0RA0YzLeJc/DSC4pQSUR7NgfMapfIewyNgyoxg2tLi9m
JOHG86iTx0JFjKzpCnyq/e53TjpQ/f4l6q5Y2txehJHtxylrm9w6S40wSjNENVIp
6eViXcBfWTjWKoi8fHgO/YH8PpQpR6nv4kOGGy5xrObYtfu4CctMavjSCpGKDH0I
fzxaT5IQJAnVLQgPswj8R1E+/Z04/vy0aqq259bmRtCOosTGXO5ig4B4mH3KKC71
6Vzb+ptb4BklIhagxPWoqm/DSsPExqIuPR0NvXlG1pZ3WBNTw/RP+PHfowIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKgPXR1guoNTH9hRrgoPlH0+nR2uMB8GA1UdIwQY
MBaAFCeAJoXac0sVei25zP923U5IkRkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZTVkNjUtNTkxMi00MThlLTljMDEt
MTIzYTg2ZDk0ODE4LzEvcUE5ZEhXQzZnMU1mMkZHdUNnLVVmVDZkSGE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi84ZTVkNjUtNTkxMi00MThlLTljMDEtMTIzYTg2ZDk0ODE4
LzEvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQET26QAwQD
sHvQAwQCwfOoMA0GCSqGSIb3DQEBCwUAA4IBAQB8vF+Ujj0UnBpX/UTY82Z/HOz4
9NGuKDKekK+EeGjDoEjMQTW/4xddqAcP2vMiCtixvEHXSF16KKqNUr4aEi/MFjA4
p8T0/XmUoeUQ9/ROrtcih403VoG4aoVHwIFci3HsqU4I7d3ZgKdkD/K6ySUEtOMG
X4GtcS4h88OrevN1fUfHpLWR6w0cuz8PLiQRTPxR8f6X3zkVM5uByiuSGcCSORd3
usJg4UdizfGmYC+BFfymMSYM6luM69bYNsqYwfuDVtCLmPWkdUGKVfG4cQ9h+VpO
QhYZ75Omt3BJP0HhQE2uRX8OCofZUbswYvgf0UMRyo4SuOYJlF4Z9KypT0RR
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:22:49 2025 by rpki-client