Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/9sqGPYj2kmPhs-twq95bbUkUW9s.roa
File: 9sqGPYj2kmPhs-twq95bbUkUW9s.roa (raw, json)
Hash identifier: +xb7+XiJTwNpBHY8QeifjjhjWqMX+rObx+Ijba3BztE=
Subject key identifier: F6:CA:86:3D:88:F6:92:63:E1:B3:EB:70:AB:DE:5B:6D:49:14:5B:DB
Certificate issuer: /CN=abd1baae21a27cadae9828d528e1d7557a168974
Certificate serial: 01941F8C720D14A743D0BF08F462D5826682
Authority key identifier: AB:D1:BA:AE:21:A2:7C:AD:AE:98:28:D5:28:E1:D7:55:7A:16:89:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9G6riGifK2umCjVKOHXVXoWiXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/9sqGPYj2kmPhs-twq95bbUkUW9s.roa
Signing time: Wed 01 Jan 2025 01:48:05 +0000
ROA not before: Wed 01 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62119
IP address blocks: 194.6.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:72:0d:14:a7:43:d0:bf:08:f4:62:d5:82:66:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd1baae21a27cadae9828d528e1d7557a168974
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6ca863d88f69263e1b3eb70abde5b6d49145bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:d0:26:32:ea:56:29:1e:50:9b:97:44:4a:
9b:c4:f8:cc:8c:e9:3d:0d:eb:94:34:74:88:0e:14:
6e:e4:ed:21:30:9f:fa:43:0e:bd:3f:82:8c:33:b0:
fd:62:a0:81:a9:b2:e8:fd:a7:fc:2f:20:5e:bc:38:
fd:15:c9:bb:a7:84:25:32:ad:c1:51:42:9a:2e:78:
e0:be:79:6d:39:bc:51:d6:c6:29:a5:f5:68:16:e4:
dc:63:e2:ad:2c:10:e1:8e:eb:61:e0:2d:0e:d9:c8:
48:86:c9:29:1c:77:0f:05:e4:af:e7:72:7f:78:c8:
6c:81:e7:4f:ea:7a:fd:5d:8a:2e:68:8a:eb:75:14:
cc:4d:14:b5:52:42:80:0f:fe:c3:e8:b3:1b:48:55:
b3:f3:50:e3:de:c2:f5:75:4f:39:6b:2d:b2:e8:f6:
e4:ea:b1:30:2f:eb:28:bf:52:a3:32:ef:f1:94:a1:
25:71:13:ee:17:4c:67:a5:cf:3d:e9:39:e1:b0:03:
33:63:9e:22:6d:06:be:41:d5:90:61:98:bd:7f:c8:
6d:e0:ee:b5:5f:f1:24:d8:e5:fc:27:77:8b:19:7b:
26:22:2b:af:e7:3d:14:67:5f:78:c0:c1:da:4c:31:
f3:ff:d4:0a:d3:18:61:22:91:c2:61:bf:07:f7:79:
c7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CA:86:3D:88:F6:92:63:E1:B3:EB:70:AB:DE:5B:6D:49:14:5B:DB
X509v3 Authority Key Identifier:
keyid:AB:D1:BA:AE:21:A2:7C:AD:AE:98:28:D5:28:E1:D7:55:7A:16:89:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9G6riGifK2umCjVKOHXVXoWiXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/9sqGPYj2kmPhs-twq95bbUkUW9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/q9G6riGifK2umCjVKOHXVXoWiXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.253.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:bd:d2:31:36:80:7a:33:25:4b:35:1d:67:f5:88:e5:26:f5:
b0:72:97:6b:a5:d8:12:13:9f:ee:36:0a:45:9c:89:9b:c2:ea:
5e:65:20:d9:63:21:41:b0:8c:5e:79:11:81:42:3f:f5:f9:6a:
70:bd:36:53:7b:89:64:d3:21:e6:f0:40:21:04:e1:92:38:16:
c9:8c:d8:6a:ea:8f:af:84:a3:59:73:70:40:cb:fd:da:60:74:
0a:73:e2:52:57:80:e2:ca:bb:c1:3d:f7:d0:73:4c:ed:77:1b:
2e:2f:05:9f:72:ff:d5:a2:da:32:5f:b3:20:dc:86:e3:ea:de:
73:e4:8f:e4:8e:15:88:a6:91:9f:87:5a:f8:ca:35:6b:87:59:
25:2b:c1:d1:70:f6:4d:a6:49:5c:dd:83:8d:1e:c8:bd:99:0a:
da:1d:ea:cb:dc:20:bb:1a:d9:d3:be:ee:9f:fa:cb:ce:b5:c3:
fb:0e:41:71:f6:6b:63:3e:44:39:9b:b8:f9:2f:d1:9b:d5:b8:
45:7e:ea:dd:c0:a4:ef:95:4d:1e:32:eb:1b:82:6f:6e:05:82:
8e:f8:86:29:2c:b4:aa:50:52:2f:25:1f:3d:72:3c:47:e5:cc:
fd:80:42:0b:4a:e2:23:4f:eb:dc:bc:21:00:5d:f0:6d:44:c2:
89:a5:7e:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjHINFKdD0L8I9GLVgmaCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZDFiYWFlMjFhMjdjYWRhZTk4MjhkNTI4ZTFkNzU1N2Ex
Njg5NzQwHhcNMjUwMTAxMDE0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmNhODYzZDg4ZjY5MjYzZTFiM2ViNzBhYmRlNWI2ZDQ5MTQ1YmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry/QJjLqVikeUJuXREqbxPjMjOk9
DeuUNHSIDhRu5O0hMJ/6Qw69P4KMM7D9YqCBqbLo/af8LyBevDj9Fcm7p4QlMq3B
UUKaLnjgvnltObxR1sYppfVoFuTcY+KtLBDhjuth4C0O2chIhskpHHcPBeSv53J/
eMhsgedP6nr9XYouaIrrdRTMTRS1UkKAD/7D6LMbSFWz81Dj3sL1dU85ay2y6Pbk
6rEwL+sov1KjMu/xlKElcRPuF0xnpc896TnhsAMzY54ibQa+QdWQYZi9f8ht4O61
X/Ek2OX8J3eLGXsmIiuv5z0UZ194wMHaTDHz/9QK0xhhIpHCYb8H93nH8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPbKhj2I9pJj4bPrcKveW21JFFvbMB8GA1UdIwQY
MBaAFKvRuq4honytrpgo1Sjh11V6Fol0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTlHNnJpR2lmSzJ1bUNqVktPSFhWWG9XaVhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zNzVlMDQtNWQ5ZC00NWY1LTgzMDUt
M2Y2OWY1YWI2MmNkLzEvOXNxR1BZajJrbVBocy10d3E5NWJiVWtVVzlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8zNzVlMDQtNWQ5ZC00NWY1LTgzMDUtM2Y2OWY1YWI2MmNk
LzEvcTlHNnJpR2lmSzJ1bUNqVktPSFhWWG9XaVhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgb9MA0G
CSqGSIb3DQEBCwUAA4IBAQDMvdIxNoB6MyVLNR1n9YjlJvWwcpdrpdgSE5/uNgpF
nImbwupeZSDZYyFBsIxeeRGBQj/1+WpwvTZTe4lk0yHm8EAhBOGSOBbJjNhq6o+v
hKNZc3BAy/3aYHQKc+JSV4DiyrvBPffQc0ztdxsuLwWfcv/VotoyX7Mg3Ibj6t5z
5I/kjhWIppGfh1r4yjVrh1klK8HRcPZNpklc3YONHsi9mQraHerL3CC7GtnTvu6f
+svOtcP7DkFx9mtjPkQ5m7j5L9Gb1bhFfurdwKTvlU0eMusbgm9uBYKO+IYpLLSq
UFIvJR89cjxH5cz9gEILSuIjT+vcvCEAXfBtRMKJpX7z
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:14 2025 by rpki-client