Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/aRZdBae0vWh1J6sn44sYIdyVlG8.roa
File: aRZdBae0vWh1J6sn44sYIdyVlG8.roa (raw, json)
Hash identifier: w9fqOKBIoaM9G2/C9dOdVNyy6b2w4OHx2wQuYWhSANs=
Subject key identifier: 69:16:5D:05:A7:B4:BD:68:75:27:AB:27:E3:8B:18:21:DC:95:94:6F
Certificate issuer: /CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Certificate serial: 019423D7D0FB3BFEABD7D62CDBE80A72DE64
Authority key identifier: 8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/aRZdBae0vWh1J6sn44sYIdyVlG8.roa
Signing time: Wed 01 Jan 2025 21:48:53 +0000
ROA not before: Wed 01 Jan 2025 21:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206356
IP address blocks: 194.48.228.0/22 maxlen: 24
2a0c:efc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:d0:fb:3b:fe:ab:d7:d6:2c:db:e8:0a:72:de:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Validity
Not Before: Jan 1 21:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69165d05a7b4bd687527ab27e38b1821dc95946f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:06:23:60:03:96:b4:fb:1a:db:74:79:00:
eb:b8:df:cb:99:a2:c5:e8:b9:c4:6e:27:54:a7:c6:
2c:06:b8:32:17:8e:1b:d1:55:6d:54:5a:74:4f:06:
cb:ff:c3:a8:d3:8a:8e:43:ed:c3:c3:ce:67:77:37:
c1:3b:db:e1:8f:32:17:b2:28:5d:c8:00:46:fb:00:
39:d8:7d:10:fd:bb:c4:11:9a:85:fd:78:92:2d:ca:
6b:1d:ee:ba:cc:c5:0d:28:49:93:d4:89:f2:dd:a6:
0e:b8:cb:6f:6b:d0:19:09:bc:0a:2a:e3:1b:fd:12:
b0:b8:5b:b8:98:4e:e5:0c:19:64:b1:f2:eb:13:a5:
b8:e0:1a:18:6f:e0:33:5a:46:5b:cc:9c:1a:f0:4f:
b8:b8:d0:bd:88:ed:1d:bc:91:b6:fb:8f:70:d5:a5:
27:54:99:df:b3:4a:ee:4f:da:93:00:71:06:5c:23:
3f:34:34:f4:d6:91:01:a3:b2:b9:5b:a9:1e:cb:ec:
d2:27:99:51:37:cc:a1:4c:de:49:0a:2b:08:85:30:
0b:86:f8:8d:5a:8f:e3:c2:52:cb:29:47:f1:e9:73:
2a:d5:14:d6:d4:02:83:80:a3:39:3a:ea:fb:69:48:
cf:d7:46:02:1d:73:1b:df:30:c5:56:22:62:c0:17:
d4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:16:5D:05:A7:B4:BD:68:75:27:AB:27:E3:8B:18:21:DC:95:94:6F
X509v3 Authority Key Identifier:
keyid:8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/aRZdBae0vWh1J6sn44sYIdyVlG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.228.0/22
IPv6:
2a0c:efc0::/29
Signature Algorithm: sha256WithRSAEncryption
c3:c8:34:f4:0e:1f:5e:0b:25:d3:f0:ba:fd:ae:73:89:df:a3:
d8:03:8c:f7:23:98:25:76:cc:69:af:b5:d8:5d:f7:6c:b2:cd:
57:4b:6b:5f:55:61:15:3a:4d:0d:10:aa:69:31:f8:6f:c5:7c:
96:63:92:df:af:f4:3a:85:35:8a:83:5a:55:68:94:0d:3b:ec:
75:56:ea:31:4a:ad:e6:80:00:99:12:15:33:2b:72:72:50:82:
fe:8f:92:15:e3:38:f3:0d:c1:09:53:83:b1:95:5e:cb:16:48:
ee:66:bb:e8:41:07:64:c9:88:55:ea:84:b1:15:4a:48:68:89:
75:57:36:cc:51:dd:e0:49:78:4e:53:fb:0f:22:f3:1c:3c:11:
ca:a0:5a:71:b6:4f:ba:37:72:0d:45:98:25:92:f7:1a:ca:69:
81:9e:8b:1d:3f:07:f6:84:c3:6d:c5:2a:28:ca:60:58:26:08:
e8:d1:c8:f4:fb:ef:f3:80:b9:b2:57:21:40:9a:0c:57:14:a0:
1e:7f:e2:bf:71:b3:4a:53:97:06:ac:69:91:2e:5d:86:eb:7d:
c9:b3:26:a8:22:01:86:52:bb:f0:00:64:a4:85:46:92:26:c9:
e2:a4:d0:0d:82:3e:2f:d3:cf:ac:b4:84:69:a2:d4:91:51:d0:
59:6e:fa:88
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQj19D7O/6r19Ys2+gKct5kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDUyNDM5Y2FjMjcxOWI2NGU4NWIyNmZmMGVhODQ2OGQ1
Nzk2MGUwHhcNMjUwMTAxMjE0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTE2NWQwNWE3YjRiZDY4NzUyN2FiMjdlMzhiMTgyMWRjOTU5NDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvagGI2ADlrT7Gtt0eQDruN/LmaLF
6LnEbidUp8YsBrgyF44b0VVtVFp0TwbL/8Oo04qOQ+3Dw85ndzfBO9vhjzIXsihd
yABG+wA52H0Q/bvEEZqF/XiSLcprHe66zMUNKEmT1Iny3aYOuMtva9AZCbwKKuMb
/RKwuFu4mE7lDBlksfLrE6W44BoYb+AzWkZbzJwa8E+4uNC9iO0dvJG2+49w1aUn
VJnfs0ruT9qTAHEGXCM/NDT01pEBo7K5W6key+zSJ5lRN8yhTN5JCisIhTALhviN
Wo/jwlLLKUfx6XMq1RTW1AKDgKM5Our7aUjP10YCHXMb3zDFViJiwBfUVQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGkWXQWntL1odSerJ+OLGCHclZRvMB8GA1UdIwQY
MBaAFIzVJDnKwnGbZOhbJv8OqEaNV5YOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5Va09jckNjWnRrNkZzbV93Nm9SbzFYbGc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jZDM3MTEtNzA4NC00YjE1LWJjMjUt
M2U0YTAyNmRmMDAwLzEvYVJaZEJhZTB2V2gxSjZzbjQ0c1lJZHlWbEc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jZDM3MTEtNzA4NC00YjE1LWJjMjUtM2U0YTAyNmRmMDAw
LzEvak5Va09jckNjWnRrNkZzbV93Nm9SbzFYbGc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwjDkMA0E
AgACMAcDBQMqDO/AMA0GCSqGSIb3DQEBCwUAA4IBAQDDyDT0Dh9eCyXT8Lr9rnOJ
36PYA4z3I5gldsxpr7XYXfdsss1XS2tfVWEVOk0NEKppMfhvxXyWY5Lfr/Q6hTWK
g1pVaJQNO+x1VuoxSq3mgACZEhUzK3JyUIL+j5IV4zjzDcEJU4OxlV7LFkjuZrvo
QQdkyYhV6oSxFUpIaIl1VzbMUd3gSXhOU/sPIvMcPBHKoFpxtk+6N3INRZglkvca
ymmBnosdPwf2hMNtxSooymBYJgjo0cj0++/zgLmyVyFAmgxXFKAef+K/cbNKU5cG
rGmRLl2G633JsyaoIgGGUrvwAGSkhUaSJsnipNANgj4v08+stIRpotSRUdBZbvqI
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:20 2025 by rpki-client