Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa
File: qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa (raw, json)
Hash identifier: VC0ta9yHeOo8J3uD8UnwND0HnJaoM4RiZS63UZ+noSE=
Subject key identifier: A9:9E:B1:90:83:C9:77:2F:A2:76:04:E0:B0:51:2D:5A:69:13:C3:AB
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 019423D795946AE2B379358F410BFD63C82C
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa
Signing time: Wed 01 Jan 2025 21:48:38 +0000
ROA not before: Wed 01 Jan 2025 21:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2200
IP address blocks: 147.210.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:95:94:6a:e2:b3:79:35:8f:41:0b:fd:63:c8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Jan 1 21:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a99eb19083c9772fa27604e0b0512d5a6913c3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:94:6b:9f:03:a2:10:e5:19:2c:fa:d2:04:15:
85:d1:b9:94:e3:14:07:1e:4e:a9:41:59:3f:01:fd:
db:e0:27:53:75:22:f2:4c:dc:3c:43:a1:7e:54:9c:
06:f5:c7:fa:3a:14:e2:b4:59:52:29:68:88:3b:0e:
60:24:82:64:fb:d3:d2:fb:c4:b2:c9:80:fc:97:e1:
8d:fd:a4:c0:4b:d6:f7:19:49:8a:4e:ef:d5:8e:50:
63:01:e7:ab:b4:da:b3:1e:be:ab:e7:a3:7a:a6:39:
f9:a5:53:2b:e9:83:85:08:35:38:0c:f1:cd:1b:5e:
09:31:21:d7:a9:0c:ac:ef:22:f8:2f:b4:11:1b:05:
4d:43:fe:6f:6c:6d:1a:33:f3:bb:9f:2a:9b:29:47:
f3:80:5c:68:20:4b:f2:ac:22:75:61:6a:23:3f:76:
e3:63:22:07:9b:18:c5:fa:ba:1c:6f:9d:2a:0c:be:
4f:85:3f:4a:77:cd:49:c2:77:48:46:be:f2:6d:77:
f1:57:83:74:93:8e:04:fb:24:43:7f:f7:3a:80:69:
76:54:9e:6f:11:2b:fc:9d:c0:b8:12:17:08:23:e3:
64:4e:c1:57:96:4b:a0:ee:e9:a3:36:77:44:0d:a1:
a8:99:02:f5:a7:a6:1a:6f:13:30:4f:7d:5c:d0:46:
b9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9E:B1:90:83:C9:77:2F:A2:76:04:E0:B0:51:2D:5A:69:13:C3:AB
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/qZ6xkIPJdy-idgTgsFEtWmkTw6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.210.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4f:7a:0f:9d:a2:ab:64:1c:13:24:ae:ea:66:68:bb:1c:de:65:
d3:ef:6b:06:09:b9:7a:a3:f0:56:62:b7:37:95:1d:e1:55:67:
1e:32:61:dd:24:39:82:fc:25:69:29:3e:8d:93:40:19:23:a7:
eb:00:c8:78:8b:be:17:5f:c6:1d:6e:5c:c1:f9:90:fe:21:d6:
d5:44:9b:29:93:60:2d:f3:af:11:20:32:9d:57:64:b1:67:e5:
13:cc:1e:aa:4d:ce:ca:f1:5e:ec:98:2f:74:93:a6:97:0d:dd:
74:c0:1d:0a:89:70:b7:bd:32:8c:5a:ca:0a:7f:fa:b2:85:23:
07:82:3a:39:6a:23:b5:92:89:10:ab:6a:5b:08:2b:7a:27:d6:
6e:2e:15:be:38:28:e1:0c:68:b4:a6:7d:41:b9:bb:cb:63:45:
d3:4f:59:cd:e6:d1:fa:af:f6:86:2f:7b:b8:01:15:09:fa:66:
9a:33:a4:b8:a4:2b:7c:1a:00:06:f2:06:22:30:9c:c2:6a:bd:
47:ba:26:09:40:85:75:01:d0:a5:66:ac:5a:24:1a:e9:05:dd:
58:5a:6f:04:bb:c2:e7:0d:a8:5b:85:c0:9c:0e:eb:44:4c:b3:
d5:ca:8f:76:34:46:1f:5e:95:e7:6c:23:38:fa:08:ea:79:6d:
5c:c7:35:2c
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQj15WUauKzeTWPQQv9Y8gsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMWYxMzg4MmRkMDZkMDk4ZWM0OWE3NTkxMDEzMjliMWYy
MDFmMWQwHhcNMjUwMTAxMjE0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTllYjE5MDgzYzk3NzJmYTI3NjA0ZTBiMDUxMmQ1YTY5MTNjM2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5RrnwOiEOUZLPrSBBWF0bmU4xQH
Hk6pQVk/Af3b4CdTdSLyTNw8Q6F+VJwG9cf6OhTitFlSKWiIOw5gJIJk+9PS+8Sy
yYD8l+GN/aTAS9b3GUmKTu/VjlBjAeertNqzHr6r56N6pjn5pVMr6YOFCDU4DPHN
G14JMSHXqQys7yL4L7QRGwVNQ/5vbG0aM/O7nyqbKUfzgFxoIEvyrCJ1YWojP3bj
YyIHmxjF+rocb50qDL5PhT9Kd81JwndIRr7ybXfxV4N0k44E+yRDf/c6gGl2VJ5v
ESv8ncC4EhcII+NkTsFXlkug7umjNndEDaGomQL1p6YabxMwT31c0Ea5LQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFKmesZCDyXcvonYE4LBRLVppE8OrMB8GA1UdIwQY
MBaAFBIfE4gt0G0JjsSadZEBMpsfIB8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUt
MGQyNzc2NzM3NGVjLzEvcVo2eGtJUEpkeS1pZGdUZ3NGRXRXbWtUdzZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUtMGQyNzc2NzM3NGVj
LzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk9IwDQYJ
KoZIhvcNAQELBQADggEBAE96D52iq2QcEySu6mZouxzeZdPvawYJuXqj8FZitzeV
HeFVZx4yYd0kOYL8JWkpPo2TQBkjp+sAyHiLvhdfxh1uXMH5kP4h1tVEmymTYC3z
rxEgMp1XZLFn5RPMHqpNzsrxXuyYL3STppcN3XTAHQqJcLe9Moxaygp/+rKFIweC
OjlqI7WSiRCralsIK3on1m4uFb44KOEMaLSmfUG5u8tjRdNPWc3m0fqv9oYve7gB
FQn6ZpozpLikK3waAAbyBiIwnMJqvUe6JglAhXUB0KVmrFokGukF3VhabwS7wucN
qFuFwJwO60RMs9XKj3Y0Rh9eledsIzj6COp5bVzHNSw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:12 2025 by rpki-client