Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/e156A2TTFNsUHYceE64LHXFN6g0.roa
File: e156A2TTFNsUHYceE64LHXFN6g0.roa (raw, json)
Hash identifier: nO0mYNmn3X/br3j4EpG5tdC2In3Gz3kRvtjW6m8kRsM=
Subject key identifier: 7B:5E:7A:03:64:D3:14:DB:14:1D:87:1E:13:AE:0B:1D:71:4D:EA:0D
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 01942747E7CAB6CABEA3E11ECE376D7A1324
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/e156A2TTFNsUHYceE64LHXFN6g0.roa
Signing time: Thu 02 Jan 2025 13:50:11 +0000
ROA not before: Thu 02 Jan 2025 13:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216313
IP address blocks: 194.11.26.0/24 maxlen: 24
2a13:cd80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e7:ca:b6:ca:be:a3:e1:1e:ce:37:6d:7a:13:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Jan 2 13:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b5e7a0364d314db141d871e13ae0b1d714dea0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:05:cb:45:00:98:b6:fa:d4:d7:a8:c0:5e:23:
f1:5c:d1:44:5b:4c:33:45:b7:67:73:06:70:11:cb:
8c:d2:64:2a:d1:b5:47:48:86:2a:03:82:06:1f:a5:
99:7c:1f:09:d1:48:d0:26:32:7c:ae:ac:89:2e:5a:
11:c0:18:cd:c5:32:68:45:5b:77:f6:58:9e:e6:ff:
22:5a:5b:8f:18:30:32:a8:11:2b:30:0c:86:38:9f:
46:d4:fb:de:99:c8:7b:bc:21:fa:90:85:51:b0:4a:
7c:57:39:ac:1d:1d:23:06:4e:cf:02:4f:b0:77:14:
97:fd:16:99:59:37:63:50:82:1f:a7:0d:33:d3:80:
68:16:63:ec:4f:0e:4a:56:2e:6a:fc:50:d0:cb:37:
3d:ba:0d:e1:39:a9:24:4b:15:a5:b9:92:2b:df:8f:
de:b1:4d:28:0b:22:27:01:02:ae:1e:f9:66:42:5a:
38:9f:b6:02:0c:b7:f5:b9:5a:27:ea:e5:45:93:4d:
72:e9:5e:78:13:02:1f:cf:5a:54:23:32:44:fe:92:
89:91:05:69:8b:16:be:0b:3d:89:98:bc:d0:83:83:
9f:de:d6:11:2c:b2:ea:eb:22:eb:bc:7e:be:af:33:
38:c7:a4:3e:5d:27:43:0e:c2:ce:03:d3:99:c7:13:
31:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5E:7A:03:64:D3:14:DB:14:1D:87:1E:13:AE:0B:1D:71:4D:EA:0D
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/e156A2TTFNsUHYceE64LHXFN6g0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.26.0/24
IPv6:
2a13:cd80::/32
Signature Algorithm: sha256WithRSAEncryption
7d:98:54:b2:f8:1e:30:5c:96:b7:83:7c:2e:97:b2:93:42:3d:
0a:48:00:4b:32:e8:c6:4a:44:ae:d9:35:58:d9:24:d6:73:fa:
7a:e7:49:bf:fe:28:83:bb:b8:ec:fe:68:0e:34:04:0e:e1:e3:
32:42:9a:21:63:11:d5:cd:4f:6b:d6:5c:35:c0:83:28:9e:2f:
8f:9d:df:3e:ee:67:e9:fc:2c:26:5b:77:94:3a:13:44:bd:56:
a6:f4:54:9c:e6:c7:d7:1a:92:57:4b:bc:b1:cb:ee:09:b8:16:
a9:3c:b0:a0:da:e8:fe:22:1a:37:4f:a8:8d:9f:29:8a:f0:c9:
84:6f:14:a8:78:f0:6b:3d:fd:92:2b:73:7d:f3:2b:7b:73:bb:
a4:16:30:d9:1e:0b:57:61:79:77:38:96:bc:a2:e9:d8:1e:88:
f8:27:ae:23:91:59:dc:d0:5e:0d:fc:c1:86:dd:68:b4:8c:46:
a1:e5:e1:9d:08:2b:96:d7:73:79:3b:4a:fc:70:92:05:fc:4f:
41:4e:5b:db:c3:a5:d9:a1:07:1a:d9:2d:c8:41:cd:26:ab:b2:
6f:34:e6:fa:54:3d:a0:90:3e:81:e0:e7:01:7b:68:9d:97:aa:
8f:f1:46:f7:62:07:31:2f:47:8c:fd:c6:b0:dc:10:37:b1:3e:
82:76:53:3c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQnR+fKtsq+o+EezjdtehMkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTQ4NTBjN2FiMzBiYmI4YWY4MGRjZjlhYWJjNmI5NTFh
YTY1YTQwHhcNMjUwMTAyMTM1MDExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjVlN2EwMzY0ZDMxNGRiMTQxZDg3MWUxM2FlMGIxZDcxNGRlYTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgXLRQCYtvrU16jAXiPxXNFEW0wz
RbdncwZwEcuM0mQq0bVHSIYqA4IGH6WZfB8J0UjQJjJ8rqyJLloRwBjNxTJoRVt3
9lie5v8iWluPGDAyqBErMAyGOJ9G1Pvemch7vCH6kIVRsEp8VzmsHR0jBk7PAk+w
dxSX/RaZWTdjUIIfpw0z04BoFmPsTw5KVi5q/FDQyzc9ug3hOakkSxWluZIr34/e
sU0oCyInAQKuHvlmQlo4n7YCDLf1uVon6uVFk01y6V54EwIfz1pUIzJE/pKJkQVp
ixa+Cz2JmLzQg4Of3tYRLLLq6yLrvH6+rzM4x6Q+XSdDDsLOA9OZxxMxcwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHteegNk0xTbFB2HHhOuCx1xTeoNMB8GA1UdIwQY
MBaAFPikhQx6swu7ivgNz5qrxrlRqmWkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LU0ZESHF6Qzd1Sy1BM1BtcXZHdVZHcVphUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvMzg5NjlkLTcyNzYtNGYyNy05ZTFj
LTcyODZhYzBhOTA3Yi8xL2UxNTZBMlRURk5zVUhZY2VFNjRMSFhGTjZnMC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzEvMzg5NjlkLTcyNzYtNGYyNy05ZTFjLTcyODZhYzBhOTA3
Yi8xLzEtS1NGREhxekM3dUstQTNQbXF2R3VWR3FaYVEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBADCCxow
DQQCAAIwBwMFACoTzYAwDQYJKoZIhvcNAQELBQADggEBAH2YVLL4HjBclreDfC6X
spNCPQpIAEsy6MZKRK7ZNVjZJNZz+nrnSb/+KIO7uOz+aA40BA7h4zJCmiFjEdXN
T2vWXDXAgyieL4+d3z7uZ+n8LCZbd5Q6E0S9Vqb0VJzmx9cakldLvLHL7gm4Fqk8
sKDa6P4iGjdPqI2fKYrwyYRvFKh48Gs9/ZIrc33zK3tzu6QWMNkeC1dheXc4lryi
6dgeiPgnriORWdzQXg38wYbdaLSMRqHl4Z0IK5bXc3k7SvxwkgX8T0FOW9vDpdmh
BxrZLchBzSarsm805vpUPaCQPoHg5wF7aJ2Xqo/xRvdiBzEvR4z9xrDcEDexPoJ2
Uzw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:15 2025 by rpki-client