Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/dS0V9ViDJgbSNtLRJP9YxTSHE4Q.roa
File: dS0V9ViDJgbSNtLRJP9YxTSHE4Q.roa (raw, json)
Hash identifier: 9TZcKHrnJT3C4ck2R+mimbM1OXSVBfBa9HlRKckf5A8=
Subject key identifier: 75:2D:15:F5:58:83:26:06:D2:36:D2:D1:24:FF:58:C5:34:87:13:84
Certificate issuer: /CN=4853216ac9d921733bf3f484393a34495c0e2a67
Certificate serial: 019427B52B2226FD6945EB9D0D1ED58E612C
Authority key identifier: 48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/dS0V9ViDJgbSNtLRJP9YxTSHE4Q.roa
Signing time: Thu 02 Jan 2025 15:49:32 +0000
ROA not before: Thu 02 Jan 2025 15:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47566
IP address blocks: 195.244.24.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:2b:22:26:fd:69:45:eb:9d:0d:1e:d5:8e:61:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853216ac9d921733bf3f484393a34495c0e2a67
Validity
Not Before: Jan 2 15:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=752d15f558832606d236d2d124ff58c534871384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:df:4c:ab:04:89:df:b9:ce:21:a5:97:2c:
aa:08:ca:8e:28:c3:85:e9:62:bc:cf:c1:37:bf:c7:
27:5f:04:63:ea:4d:5a:eb:0d:1a:55:63:68:cf:c1:
a2:0d:dc:70:62:aa:38:ae:4c:69:a2:7c:1a:06:8a:
9f:3d:ff:14:79:3a:8c:3b:1c:8d:c3:cc:67:f7:5b:
76:75:68:c6:20:bf:89:5a:f8:7d:c6:1c:8e:81:ab:
8f:3a:38:04:a1:3c:ff:f9:f7:37:6d:ef:36:2c:d5:
44:54:cc:93:ce:87:f2:82:ab:1a:12:e0:0e:a9:50:
e2:b8:60:38:30:1b:26:d6:0b:8a:3b:6f:9f:53:c4:
b9:d9:8b:e9:81:6b:c5:c5:38:32:b8:47:19:a4:cd:
43:2f:d1:27:d2:21:f7:86:f0:a0:78:44:cb:4e:74:
ba:73:d7:2a:01:06:96:a0:f5:18:ef:97:61:fc:79:
16:8b:5e:83:b5:13:6c:71:3f:8a:c9:48:a6:f7:c0:
3a:f5:95:9c:fa:9a:71:86:3e:2f:20:b4:6d:ef:bf:
7c:8b:52:d1:35:44:ba:4f:1d:16:e2:48:f7:1e:53:
e4:4b:0e:95:51:be:38:a5:30:7d:73:ce:f0:41:e7:
d8:36:8f:85:6f:18:e6:f2:7d:c6:b2:33:2c:03:42:
ab:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2D:15:F5:58:83:26:06:D2:36:D2:D1:24:FF:58:C5:34:87:13:84
X509v3 Authority Key Identifier:
keyid:48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/dS0V9ViDJgbSNtLRJP9YxTSHE4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.24.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:13:1e:74:40:9d:46:2d:77:f1:4d:95:6e:12:f2:92:16:cc:
0c:38:84:0a:4d:6b:c7:12:1f:e0:68:c6:ee:34:8f:be:d8:95:
ae:2b:f5:4e:51:41:2e:70:97:cf:13:54:fa:21:26:dd:56:0e:
da:70:1d:99:80:87:fa:af:38:94:fd:ae:0d:46:60:ef:72:bb:
12:50:ab:09:2a:51:18:b0:8c:b8:06:b4:e7:3b:2e:db:42:db:
13:02:2b:58:d9:13:4e:a4:ce:7a:77:d0:a6:4c:55:89:d5:38:
76:17:87:7b:10:de:39:87:c9:5e:1a:40:d3:20:60:bb:e8:92:
ce:c0:63:a9:a8:3e:0a:5f:bc:95:cb:3f:20:ab:f2:41:bc:d4:
b3:8c:c7:5a:32:f1:7b:93:49:d1:50:12:2c:d7:3d:c2:11:63:
f7:74:3a:c2:9f:ec:47:b7:3b:99:1e:ab:37:d6:68:0b:fb:40:
22:fb:43:40:a3:f1:f4:d9:47:d2:96:79:c7:90:4f:4c:c7:b0:
93:8f:72:96:74:e3:ee:1a:f9:15:eb:58:5c:7c:af:a1:07:01:
59:de:4d:15:05:5f:d9:55:a3:f1:cf:67:76:7e:d6:8c:e8:ce:
d6:ec:0e:9c:ae:d8:c4:a5:35:7e:d4:f8:6b:d5:89:c6:73:c5:
13:1b:31:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntSsiJv1pReudDR7VjmEsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTMyMTZhYzlkOTIxNzMzYmYzZjQ4NDM5M2EzNDQ5NWMw
ZTJhNjcwHhcNMjUwMTAyMTU0OTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTJkMTVmNTU4ODMyNjA2ZDIzNmQyZDEyNGZmNThjNTM0ODcxMzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4TfTKsEid+5ziGllyyqCMqOKMOF
6WK8z8E3v8cnXwRj6k1a6w0aVWNoz8GiDdxwYqo4rkxponwaBoqfPf8UeTqMOxyN
w8xn91t2dWjGIL+JWvh9xhyOgauPOjgEoTz/+fc3be82LNVEVMyTzofygqsaEuAO
qVDiuGA4MBsm1guKO2+fU8S52YvpgWvFxTgyuEcZpM1DL9En0iH3hvCgeETLTnS6
c9cqAQaWoPUY75dh/HkWi16DtRNscT+KyUim98A69ZWc+ppxhj4vILRt7798i1LR
NUS6Tx0W4kj3HlPkSw6VUb44pTB9c87wQefYNo+Fbxjm8n3GsjMsA0KriwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHUtFfVYgyYG0jbS0ST/WMU0hxOEMB8GA1UdIwQY
MBaAFEhTIWrJ2SFzO/P0hDk6NElcDipnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kZmFkZTktMzI5NC00ZmFiLWI2MDct
MjgyOGM0OGUzNTk5LzEvZFMwVjlWaURKZ2JTTnRMUkpQOVl4VFNIRTRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9kZmFkZTktMzI5NC00ZmFiLWI2MDctMjgyOGM0OGUzNTk5
LzEvU0ZNaGFzblpJWE03OF9TRU9UbzBTVndPS21jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/QYMA0G
CSqGSIb3DQEBCwUAA4IBAQAsEx50QJ1GLXfxTZVuEvKSFswMOIQKTWvHEh/gaMbu
NI++2JWuK/VOUUEucJfPE1T6ISbdVg7acB2ZgIf6rziU/a4NRmDvcrsSUKsJKlEY
sIy4BrTnOy7bQtsTAitY2RNOpM56d9CmTFWJ1Th2F4d7EN45h8leGkDTIGC76JLO
wGOpqD4KX7yVyz8gq/JBvNSzjMdaMvF7k0nRUBIs1z3CEWP3dDrCn+xHtzuZHqs3
1mgL+0Ai+0NAo/H02UfSlnnHkE9Mx7CTj3KWdOPuGvkV61hcfK+hBwFZ3k0VBV/Z
VaPxz2d2ftaM6M7W7A6crtjEpTV+1Phr1YnGc8UTGzHt
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:54 2025 by rpki-client