Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/ma10kWI1PiUmBnjZZdsu20JVWcE.roa
File: ma10kWI1PiUmBnjZZdsu20JVWcE.roa (raw, json)
Hash identifier: jNRh+1s+kkx04U4sH3v3rSIpTBgL5T0X08vSRFsU6Qk=
Subject key identifier: 99:AD:74:91:62:35:3E:25:26:06:78:D9:65:DB:2E:DB:42:55:59:C1
Certificate issuer: /CN=39374019a54d4bde23f0da28a252150d5cb473ad
Certificate serial: 0194266BA7D1C9416AB996AACF60046CD627
Authority key identifier: 39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/ma10kWI1PiUmBnjZZdsu20JVWcE.roa
Signing time: Thu 02 Jan 2025 09:49:37 +0000
ROA not before: Thu 02 Jan 2025 09:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211752
IP address blocks: 195.8.125.0/24 maxlen: 24
2a0a:fcc0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a7:d1:c9:41:6a:b9:96:aa:cf:60:04:6c:d6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39374019a54d4bde23f0da28a252150d5cb473ad
Validity
Not Before: Jan 2 09:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99ad749162353e25260678d965db2edb425559c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:2e:34:aa:7e:c9:7f:d9:05:90:41:06:73:
79:d4:41:3d:95:36:88:7b:9d:3b:3b:a4:30:5c:ab:
cd:58:e3:da:e4:a2:f2:af:62:9c:d7:9b:a6:05:f9:
0b:18:20:4a:58:ed:3b:3d:5e:85:e6:ac:f3:8b:7f:
9d:1b:00:fa:a9:5c:4e:dd:a7:e5:1c:02:92:ea:a0:
be:e8:b3:ae:18:fb:0f:14:2a:fc:f2:6c:6b:8a:e9:
44:58:a2:01:1e:f1:87:9b:c8:6a:d0:a2:84:f3:cc:
8c:95:c4:97:77:e0:d2:15:95:02:d4:15:09:1c:3b:
14:79:a6:2b:84:07:4c:84:c7:1b:6d:d2:c7:7b:92:
55:e3:21:5d:6a:d0:8f:f4:44:f0:86:0c:f5:fb:76:
84:73:b4:0d:96:ff:98:99:e8:ce:63:d1:08:77:39:
09:4a:d8:71:01:78:03:ce:3b:0b:18:09:06:32:16:
32:42:21:6c:7b:f1:38:89:33:b5:98:ef:af:f1:10:
43:53:c3:9b:5a:e1:25:e0:8a:78:db:a7:c0:f0:42:
c4:a6:2c:50:36:87:e0:2d:60:84:be:8c:b0:d3:c4:
d8:b1:b2:d0:5d:b1:0a:07:d6:9f:3d:73:c9:c5:7c:
6e:29:0b:6d:22:8c:2c:76:7c:93:b5:fe:bf:69:99:
27:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AD:74:91:62:35:3E:25:26:06:78:D9:65:DB:2E:DB:42:55:59:C1
X509v3 Authority Key Identifier:
keyid:39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/ma10kWI1PiUmBnjZZdsu20JVWcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.125.0/24
IPv6:
2a0a:fcc0::/29
Signature Algorithm: sha256WithRSAEncryption
9c:ee:b2:b5:7c:f4:b7:ff:a1:a7:67:60:ec:d9:75:93:6e:5a:
d4:e7:7a:06:9a:68:f9:9a:d1:2b:4d:4a:97:d5:46:5c:24:95:
af:51:61:1a:18:b2:84:77:5b:43:d9:69:5a:31:18:8e:d7:1d:
ab:49:7a:da:5d:71:21:83:77:2a:6c:7e:18:71:37:66:34:64:
70:10:c0:df:5b:a4:57:90:14:1f:82:47:2f:51:8c:78:78:39:
61:a4:c5:bd:35:1e:67:dc:6a:96:f1:2d:3d:3f:f6:b6:fc:fc:
bb:d8:22:ff:22:50:92:aa:38:1a:ab:d0:44:a0:12:43:74:20:
2d:2f:c9:62:3a:8c:fe:22:0c:d3:b2:a8:d5:71:ac:da:70:b5:
c5:c6:68:72:60:c3:c6:ba:01:ec:9e:5c:dc:43:2d:38:a6:00:
b3:a2:78:87:75:68:64:d8:80:c0:d7:9f:20:f1:8d:7a:06:34:
dc:f6:cf:6e:28:8d:69:14:68:cd:fa:df:73:d8:1d:87:2e:2a:
28:26:ab:e4:89:e2:70:53:01:21:60:2e:e3:40:d2:75:6f:c8:
6a:0e:87:be:62:cc:27:2f:f5:d9:0d:3d:f2:2d:72:7a:c1:ad:
26:18:7a:27:60:7f:3d:57:1a:9a:86:13:a9:2d:aa:8d:36:8f:
86:54:b2:20
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQma6fRyUFquZaqz2AEbNYnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5Mzc0MDE5YTU0ZDRiZGUyM2YwZGEyOGEyNTIxNTBkNWNi
NDczYWQwHhcNMjUwMTAyMDk0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWFkNzQ5MTYyMzUzZTI1MjYwNjc4ZDk2NWRiMmVkYjQyNTU1OWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+guNKp+yX/ZBZBBBnN51EE9lTaI
e507O6QwXKvNWOPa5KLyr2Kc15umBfkLGCBKWO07PV6F5qzzi3+dGwD6qVxO3afl
HAKS6qC+6LOuGPsPFCr88mxriulEWKIBHvGHm8hq0KKE88yMlcSXd+DSFZUC1BUJ
HDsUeaYrhAdMhMcbbdLHe5JV4yFdatCP9ETwhgz1+3aEc7QNlv+YmejOY9EIdzkJ
SthxAXgDzjsLGAkGMhYyQiFse/E4iTO1mO+v8RBDU8ObWuEl4Ip426fA8ELEpixQ
NofgLWCEvoyw08TYsbLQXbEKB9afPXPJxXxuKQttIowsdnyTtf6/aZknPwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJmtdJFiNT4lJgZ42WXbLttCVVnBMB8GA1UdIwQY
MBaAFDk3QBmlTUveI/DaKKJSFQ1ctHOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1RkQUdhVk5TOTRqOE5vb29sSVZEVnkwYzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81MDU3NTUtYzRhYi00OTA1LThiNDgt
YmJkMWFkNTNkYTQzLzEvbWExMGtXSTFQaVVtQm5qWlpkc3UyMEpWV2NFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny81MDU3NTUtYzRhYi00OTA1LThiNDgtYmJkMWFkNTNkYTQz
LzEvT1RkQUdhVk5TOTRqOE5vb29sSVZEVnkwYzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwwh9MA0E
AgACMAcDBQMqCvzAMA0GCSqGSIb3DQEBCwUAA4IBAQCc7rK1fPS3/6GnZ2Ds2XWT
blrU53oGmmj5mtErTUqX1UZcJJWvUWEaGLKEd1tD2WlaMRiO1x2rSXraXXEhg3cq
bH4YcTdmNGRwEMDfW6RXkBQfgkcvUYx4eDlhpMW9NR5n3GqW8S09P/a2/Py72CL/
IlCSqjgaq9BEoBJDdCAtL8liOoz+IgzTsqjVcazacLXFxmhyYMPGugHsnlzcQy04
pgCzoniHdWhk2IDA158g8Y16BjTc9s9uKI1pFGjN+t9z2B2HLiooJqvkieJwUwEh
YC7jQNJ1b8hqDoe+YswnL/XZDT3yLXJ6wa0mGHonYH89VxqahhOpLaqNNo+GVLIg
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:08:54 2025 by rpki-client