Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/ECVhbk7HslDK7Yab6tRyfcUTM-w.roa
File: ECVhbk7HslDK7Yab6tRyfcUTM-w.roa (raw, json)
Hash identifier: Zu9vU6DdogZHy9494u0UUYh7x1SUMPG2Ju9mrOac5EY=
Subject key identifier: 10:25:61:6E:4E:C7:B2:50:CA:ED:86:9B:EA:D4:72:7D:C5:13:33:EC
Certificate issuer: /CN=16655e5595f5a3c071c12b179db9279dc7db0913
Certificate serial: 01942444F9018E18541527979889324C422B
Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/ECVhbk7HslDK7Yab6tRyfcUTM-w.roa
Signing time: Wed 01 Jan 2025 23:48:07 +0000
ROA not before: Wed 01 Jan 2025 23:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42198
IP address blocks: 194.26.237.0/24 maxlen: 24
2a11:c7c1:deec::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:f9:01:8e:18:54:15:27:97:98:89:32:4c:42:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913
Validity
Not Before: Jan 1 23:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1025616e4ec7b250caed869bead4727dc51333ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:d5:c3:b4:f2:2e:19:b1:e8:bd:64:90:f0:
5e:9f:a0:3a:44:52:d0:e9:52:76:be:8d:fa:27:95:
5a:84:d1:80:36:47:21:46:42:cd:77:50:d5:35:7e:
94:f8:12:68:fa:4b:d7:3f:dc:62:06:d0:72:cc:e2:
67:99:0f:22:09:06:ed:18:61:be:90:b1:7d:eb:f0:
4e:b5:69:c1:22:68:41:9a:47:44:dd:38:aa:ea:30:
86:4a:91:eb:b1:85:77:67:a6:07:5f:0e:91:0d:21:
28:66:3d:a6:2e:c6:65:e4:4b:54:ff:bc:86:e3:fc:
e8:45:0a:34:f0:86:08:e5:5a:d9:a3:11:cc:d8:59:
1e:74:a5:50:fa:f6:ea:51:5e:0b:cc:1c:15:88:28:
b1:1c:20:13:81:98:44:a1:f6:fc:b1:8c:55:06:c5:
49:fe:cf:04:da:1a:17:e6:ce:61:fc:e7:b0:f3:5b:
02:be:e0:dc:12:e4:09:59:9b:55:c3:2c:56:d7:18:
e1:fa:a6:72:69:40:e4:bb:9a:a1:48:fc:27:88:28:
6a:3b:bb:ad:f4:44:4a:b1:4c:c8:70:21:26:b1:66:
f9:e1:af:51:a0:75:8d:71:1e:60:ac:b8:0e:69:e6:
29:9a:c0:12:5f:07:c2:25:0c:fc:09:f1:fd:cf:26:
0a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:25:61:6E:4E:C7:B2:50:CA:ED:86:9B:EA:D4:72:7D:C5:13:33:EC
X509v3 Authority Key Identifier:
keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/ECVhbk7HslDK7Yab6tRyfcUTM-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.237.0/24
IPv6:
2a11:c7c1:deec::/48
Signature Algorithm: sha256WithRSAEncryption
13:c1:cd:62:b4:8c:20:c2:21:24:c2:65:5d:01:d4:e2:ca:25:
18:d1:68:32:c9:1f:50:d3:c2:65:09:d5:21:3c:b8:ef:65:a0:
e1:88:13:6b:0a:7f:b9:bd:8c:94:ed:a2:4d:c8:15:5b:97:00:
59:14:53:91:a4:aa:73:c4:f4:ce:14:da:2f:5b:33:74:4b:3a:
6c:a2:4d:c2:34:a9:42:61:2a:a1:6c:14:28:c5:09:7e:7d:ce:
4a:ba:04:5f:8b:36:47:12:bb:db:a3:0c:fe:94:16:71:d0:6f:
50:e1:d0:4e:cd:95:a7:e0:0e:29:70:22:36:c1:76:36:fd:52:
21:a1:4f:5b:c1:78:15:d5:0a:fb:13:ba:80:40:f1:72:49:e0:
25:90:04:f2:1c:47:7e:cb:39:1f:6f:fd:ee:d2:1c:d5:7f:54:
8d:74:ae:4c:6d:ae:04:6c:76:50:7f:a5:f4:f6:f5:a2:a5:ff:
44:01:e4:47:33:a0:1e:86:32:4c:34:d0:65:c9:0b:93:0f:c0:
78:ce:d7:ab:13:3d:02:ae:af:42:3e:70:cd:3f:23:0a:f0:04:
b6:7a:61:fb:58:ac:99:db:ab:e0:6c:f0:3c:a4:ac:85:9c:ca:
94:13:24:cd:fe:92:ba:c1:0b:30:d2:03:3a:ee:54:fb:b0:7c:
37:85:48:d0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQkRPkBjhhUFSeXmIkyTEIrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NjU1ZTU1OTVmNWEzYzA3MWMxMmIxNzlkYjkyNzlkYzdk
YjA5MTMwHhcNMjUwMTAxMjM0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDI1NjE2ZTRlYzdiMjUwY2FlZDg2OWJlYWQ0NzI3ZGM1MTMzM2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTHVw7TyLhmx6L1kkPBen6A6RFLQ
6VJ2vo36J5VahNGANkchRkLNd1DVNX6U+BJo+kvXP9xiBtByzOJnmQ8iCQbtGGG+
kLF96/BOtWnBImhBmkdE3Tiq6jCGSpHrsYV3Z6YHXw6RDSEoZj2mLsZl5EtU/7yG
4/zoRQo08IYI5VrZoxHM2FkedKVQ+vbqUV4LzBwViCixHCATgZhEofb8sYxVBsVJ
/s8E2hoX5s5h/Oew81sCvuDcEuQJWZtVwyxW1xjh+qZyaUDku5qhSPwniChqO7ut
9ERKsUzIcCEmsWb54a9RoHWNcR5grLgOaeYpmsASXwfCJQz8CfH9zyYKcQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBAlYW5Ox7JQyu2Gm+rUcn3FEzPsMB8GA1UdIwQY
MBaAFBZlXlWV9aPAccErF525J53H2wkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82NzE5Y2QtODY0YS00MmYwLTgxOGYt
ZGQ0ODA0ODQwZGQ2LzEvRUNWaGJrN0hzbERLN1lhYjZ0UnlmY1VUTS13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82NzE5Y2QtODY0YS00MmYwLTgxOGYtZGQ0ODA0ODQwZGQ2
LzEvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwhrtMA8E
AgACMAkDBwAqEcfB3uwwDQYJKoZIhvcNAQELBQADggEBABPBzWK0jCDCISTCZV0B
1OLKJRjRaDLJH1DTwmUJ1SE8uO9loOGIE2sKf7m9jJTtok3IFVuXAFkUU5GkqnPE
9M4U2i9bM3RLOmyiTcI0qUJhKqFsFCjFCX59zkq6BF+LNkcSu9ujDP6UFnHQb1Dh
0E7NlafgDilwIjbBdjb9UiGhT1vBeBXVCvsTuoBA8XJJ4CWQBPIcR37LOR9v/e7S
HNV/VI10rkxtrgRsdlB/pfT29aKl/0QB5EczoB6GMkw00GXJC5MPwHjO16sTPQKu
r0I+cM0/IwrwBLZ6YftYrJnbq+Bs8DykrIWcypQTJM3+krrBCzDSAzruVPuwfDeF
SNA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:43 2025 by rpki-client