Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/f6uKeUIzMA-uVptKc1ueYhFBFxM.roa
File: f6uKeUIzMA-uVptKc1ueYhFBFxM.roa (raw, json)
Hash identifier: yRxjbOfn/yIPjsEZSwuKIczmA3RcTEjtjojH+74JQXs=
Subject key identifier: 7F:AB:8A:79:42:33:30:0F:AE:56:9B:4A:73:5B:9E:62:11:41:17:13
Certificate issuer: /CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Certificate serial: 01942520A9D5199AED96C325186D0ACC1914
Authority key identifier: 41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/f6uKeUIzMA-uVptKc1ueYhFBFxM.roa
Signing time: Thu 02 Jan 2025 03:48:05 +0000
ROA not before: Thu 02 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34253
IP address blocks: 194.242.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:a9:d5:19:9a:ed:96:c3:25:18:6d:0a:cc:19:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Validity
Not Before: Jan 2 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fab8a794233300fae569b4a735b9e6211411713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:d1:c4:a8:95:05:5e:a3:19:f9:43:29:dc:
0f:aa:45:30:a8:fd:45:fd:52:cc:c6:6d:ae:0d:c9:
8e:71:5a:09:fc:6d:84:c2:d0:17:39:5f:f6:3b:fd:
fb:47:09:91:dc:20:14:72:35:2d:01:35:39:ee:c8:
4c:69:ed:6b:e4:5f:2d:45:6c:20:eb:32:36:51:98:
5c:02:d3:ad:91:f7:98:12:46:a1:8e:8a:51:e1:a3:
82:c8:a6:e4:fd:52:0e:4c:05:ee:4b:6a:20:49:1b:
e2:12:f5:5f:b4:38:7b:8b:e7:1f:04:1e:9d:db:5a:
8e:98:39:49:5c:f2:de:7e:1f:17:11:8a:65:91:10:
3c:37:9b:df:83:33:8d:44:24:4e:34:de:71:69:6e:
27:ac:48:01:57:17:14:8a:f4:85:c2:06:54:37:48:
f0:8d:37:7c:3d:3a:0c:da:c6:78:3f:c1:f2:d5:dd:
ff:fa:f7:19:ea:9e:dd:87:03:f9:c7:3b:2a:38:c6:
db:5a:93:61:17:d8:4b:e9:92:61:3e:c7:da:4d:e2:
7b:68:0a:aa:59:c1:fe:ec:be:5e:bf:ca:ea:5d:cc:
01:5e:6c:51:54:bb:3b:78:3d:78:ac:b5:3d:12:4e:
ee:93:ab:c6:bd:d3:c7:6a:94:b4:26:e6:73:3c:68:
35:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AB:8A:79:42:33:30:0F:AE:56:9B:4A:73:5B:9E:62:11:41:17:13
X509v3 Authority Key Identifier:
keyid:41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/f6uKeUIzMA-uVptKc1ueYhFBFxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.55.0/24
Signature Algorithm: sha256WithRSAEncryption
75:9b:1d:c3:e7:75:59:5f:8f:bd:2c:ce:12:d2:df:b8:95:cd:
fe:47:35:e4:2e:7a:57:0b:be:a7:30:2d:3c:d6:1e:dc:40:a5:
5e:b9:76:27:2c:26:b5:b9:86:86:ce:dc:26:b0:9b:a2:79:da:
77:c0:0d:d9:5f:be:d3:b5:c9:9f:ae:c9:87:b9:eb:01:5d:78:
dc:43:8a:62:f5:61:cb:86:c7:4a:8c:14:5f:b7:d6:70:82:ae:
5a:84:58:3a:18:9e:6c:cf:d9:3f:14:c8:7e:41:44:2e:97:99:
2b:9f:90:ba:41:c6:a4:48:73:10:f5:62:8a:d0:49:d9:5d:eb:
0d:ab:10:ff:6f:ee:32:77:b1:6b:53:fb:0a:44:08:1a:ef:5f:
d2:cc:d3:a3:2a:ef:83:d6:77:06:a9:24:dc:ea:0e:98:35:b6:
00:b0:5e:38:07:43:f0:7c:32:21:30:fd:a6:3a:0c:64:11:32:
49:cf:77:64:53:d5:f1:a5:ff:5c:28:27:be:9a:d2:fe:5e:6b:
85:fd:c4:96:25:1e:70:83:29:b7:7f:38:bf:88:07:a6:18:f2:
82:b5:a2:60:d4:86:58:db:69:1a:21:91:ee:cf:ab:da:8c:86:
1b:84:ca:d7:e9:75:e2:78:cc:86:da:bc:56:da:70:a2:bc:86:
9c:94:af:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIKnVGZrtlsMlGG0KzBkUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZDBmOTE1Yzk1NGQ4M2I0YTFiZjE4NGNmYmMxMzhjNDdl
ZGE1MWUwHhcNMjUwMTAyMDM0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmFiOGE3OTQyMzMzMDBmYWU1NjliNGE3MzViOWU2MjExNDExNzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwITRxKiVBV6jGflDKdwPqkUwqP1F
/VLMxm2uDcmOcVoJ/G2EwtAXOV/2O/37RwmR3CAUcjUtATU57shMae1r5F8tRWwg
6zI2UZhcAtOtkfeYEkahjopR4aOCyKbk/VIOTAXuS2ogSRviEvVftDh7i+cfBB6d
21qOmDlJXPLefh8XEYplkRA8N5vfgzONRCRONN5xaW4nrEgBVxcUivSFwgZUN0jw
jTd8PToM2sZ4P8Hy1d3/+vcZ6p7dhwP5xzsqOMbbWpNhF9hL6ZJhPsfaTeJ7aAqq
WcH+7L5ev8rqXcwBXmxRVLs7eD14rLU9Ek7uk6vGvdPHapS0JuZzPGg1QQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH+rinlCMzAPrlabSnNbnmIRQRcTMB8GA1UdIwQY
MBaAFEHQ+RXJVNg7ShvxhM+8E4xH7aUeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWRENUZjbFUyRHRLR19HRXo3d1RqRWZ0cFI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82NjYwM2QtM2NiNC00NzMwLWI4OWMt
ZWU1MDBjM2ViODE5LzEvZjZ1S2VVSXpNQS11VnB0S2MxdWVZaEZCRnhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC82NjYwM2QtM2NiNC00NzMwLWI4OWMtZWU1MDBjM2ViODE5
LzEvUWRENUZjbFUyRHRLR19HRXo3d1RqRWZ0cFI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwvI3MA0G
CSqGSIb3DQEBCwUAA4IBAQB1mx3D53VZX4+9LM4S0t+4lc3+RzXkLnpXC76nMC08
1h7cQKVeuXYnLCa1uYaGztwmsJuiedp3wA3ZX77TtcmfrsmHuesBXXjcQ4pi9WHL
hsdKjBRft9Zwgq5ahFg6GJ5sz9k/FMh+QUQul5krn5C6QcakSHMQ9WKK0EnZXesN
qxD/b+4yd7FrU/sKRAga71/SzNOjKu+D1ncGqSTc6g6YNbYAsF44B0PwfDIhMP2m
OgxkETJJz3dkU9Xxpf9cKCe+mtL+XmuF/cSWJR5wgym3fzi/iAemGPKCtaJg1IZY
22kaIZHuz6vajIYbhMrX6XXieMyG2rxW2nCivIaclK/j
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:38:39 2025 by rpki-client