Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/S9_pIBHq75Wq7oGW-jAli5gxMaE.roa
File: S9_pIBHq75Wq7oGW-jAli5gxMaE.roa (raw, json)
Hash identifier: cpq5fUvjVAhKKLO06wh9HRGgk0x/xpun3Cli9g36l8w=
Subject key identifier: 4B:DF:E9:20:11:EA:EF:95:AA:EE:81:96:FA:30:25:8B:98:31:31:A1
Certificate issuer: /CN=d89f16f5749243378f814c94b24034d74b3927df
Certificate serial: 01941FFA9F4784683380FF19FB51B7E32815
Authority key identifier: D8:9F:16:F5:74:92:43:37:8F:81:4C:94:B2:40:34:D7:4B:39:27:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2J8W9XSSQzePgUyUskA010s5J98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/S9_pIBHq75Wq7oGW-jAli5gxMaE.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215915
IP address blocks: 117.18.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9f:47:84:68:33:80:ff:19:fb:51:b7:e3:28:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89f16f5749243378f814c94b24034d74b3927df
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bdfe92011eaef95aaee8196fa30258b983131a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:57:fa:3d:b3:87:3b:46:3a:77:93:bb:75:f5:
50:9f:bf:37:52:4d:6a:f2:c0:36:30:14:eb:2e:09:
9a:25:87:18:c1:36:0c:1f:3a:36:be:66:76:38:30:
17:07:7f:7d:86:77:eb:96:88:87:df:9f:26:22:49:
53:4b:66:92:b0:6d:fc:7b:64:4c:38:db:be:31:44:
af:31:b2:bc:0d:60:67:4b:e3:3a:93:c0:dd:07:47:
a2:84:36:00:ab:22:2c:bf:a3:2c:de:7a:d3:42:3e:
74:da:e2:bd:0b:75:81:20:48:5e:c6:c7:e9:da:88:
57:db:14:7b:4a:3e:14:44:ad:ec:76:fc:7b:a2:96:
9f:a4:10:e4:d9:89:4e:f6:fa:7a:42:61:c2:c4:f5:
25:1d:70:b8:66:d3:6c:cc:0a:51:43:9d:c7:1c:80:
cc:e5:1a:f0:92:56:28:a7:64:12:e7:0d:d1:9c:ef:
3b:8f:b0:07:a1:0b:48:ee:b1:ca:9c:80:a5:4f:96:
2a:2a:09:d0:4e:ca:ca:8d:4c:cd:1d:3c:a2:92:5c:
10:26:0e:23:c6:4d:62:e8:d0:a9:b4:95:33:6c:e8:
ee:bb:9c:f0:3a:2d:12:f4:29:b5:ba:ee:85:11:9f:
48:45:7e:07:ab:9b:dd:37:bd:90:64:8f:7f:a7:4b:
e9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DF:E9:20:11:EA:EF:95:AA:EE:81:96:FA:30:25:8B:98:31:31:A1
X509v3 Authority Key Identifier:
keyid:D8:9F:16:F5:74:92:43:37:8F:81:4C:94:B2:40:34:D7:4B:39:27:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2J8W9XSSQzePgUyUskA010s5J98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/S9_pIBHq75Wq7oGW-jAli5gxMaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.18.102.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:87:05:c2:fe:77:78:c4:25:e8:14:18:58:bf:72:5c:e7:76:
11:fc:26:d3:aa:0f:ee:cd:a8:6e:df:05:50:4e:43:64:35:fc:
ba:34:f4:dc:63:23:65:41:d5:1b:75:5e:fa:19:99:81:bf:46:
07:02:bf:0a:05:be:ae:b0:63:e4:ac:07:bb:f0:9b:e7:3b:a7:
9a:83:58:de:d1:ac:74:95:7d:94:fd:20:bf:87:98:bd:58:80:
40:ba:c1:95:99:bc:5c:cc:d1:78:db:ac:0a:02:6e:cb:10:ac:
a0:8a:c2:b6:a6:23:09:15:70:68:97:2e:fe:da:99:ec:6e:ff:
11:73:74:07:73:b3:c0:44:aa:20:aa:91:3a:a4:59:f5:0f:e7:
56:6b:ac:d7:c1:c7:30:6e:a9:05:8c:1c:24:b7:1a:fd:eb:eb:
ab:78:f4:a2:fa:e8:1f:b8:c2:74:3d:38:f3:8c:9e:3e:91:c5:
22:a8:1e:d1:ba:e4:6f:b5:7c:84:5d:7f:74:04:ce:4c:43:5f:
40:52:c2:be:53:ce:3a:a0:51:02:4b:97:d8:30:7e:30:38:38:
f4:b1:e6:88:a6:41:95:3f:44:4e:ae:46:c5:11:15:70:4d:fc:
91:fe:72:e0:de:70:73:25:50:92:15:af:15:41:19:1a:cf:a6:
fe:b9:a2:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+p9HhGgzgP8Z+1G34ygVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OWYxNmY1NzQ5MjQzMzc4ZjgxNGM5NGIyNDAzNGQ3NGIz
OTI3ZGYwHhcNMjUwMTAxMDM0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmRmZTkyMDExZWFlZjk1YWFlZTgxOTZmYTMwMjU4Yjk4MzEzMWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVf6PbOHO0Y6d5O7dfVQn783Uk1q
8sA2MBTrLgmaJYcYwTYMHzo2vmZ2ODAXB399hnfrloiH358mIklTS2aSsG38e2RM
ONu+MUSvMbK8DWBnS+M6k8DdB0eihDYAqyIsv6Ms3nrTQj502uK9C3WBIEhexsfp
2ohX2xR7Sj4URK3sdvx7opafpBDk2YlO9vp6QmHCxPUlHXC4ZtNszApRQ53HHIDM
5RrwklYop2QS5w3RnO87j7AHoQtI7rHKnIClT5YqKgnQTsrKjUzNHTyiklwQJg4j
xk1i6NCptJUzbOjuu5zwOi0S9Cm1uu6FEZ9IRX4Hq5vdN72QZI9/p0vpKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEvf6SAR6u+Vqu6BlvowJYuYMTGhMB8GA1UdIwQY
MBaAFNifFvV0kkM3j4FMlLJANNdLOSffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMko4VzlYU1NRemVQZ1V5VXNrQTAxMHM1Sjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83OTdlNjUtM2RhMC00ZDZlLWI2OTUt
MzQ2YmQ5NzNjODQzLzEvUzlfcElCSHE3NVdxN29HVy1qQWxpNWd4TWFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi83OTdlNjUtM2RhMC00ZDZlLWI2OTUtMzQ2YmQ5NzNjODQz
LzEvMko4VzlYU1NRemVQZ1V5VXNrQTAxMHM1Sjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdRJmMA0G
CSqGSIb3DQEBCwUAA4IBAQAehwXC/nd4xCXoFBhYv3Jc53YR/CbTqg/uzahu3wVQ
TkNkNfy6NPTcYyNlQdUbdV76GZmBv0YHAr8KBb6usGPkrAe78JvnO6eag1je0ax0
lX2U/SC/h5i9WIBAusGVmbxczNF426wKAm7LEKygisK2piMJFXBoly7+2pnsbv8R
c3QHc7PARKogqpE6pFn1D+dWa6zXwccwbqkFjBwktxr96+urePSi+ugfuMJ0PTjz
jJ4+kcUiqB7RuuRvtXyEXX90BM5MQ19AUsK+U846oFECS5fYMH4wODj0seaIpkGV
P0ROrkbFERVwTfyR/nLg3nBzJVCSFa8VQRkaz6b+uaJA
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:16:39 2025 by rpki-client