Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/i0jLZUHWlEbTjItngq0hMz6l6J0.roa
File: i0jLZUHWlEbTjItngq0hMz6l6J0.roa (raw, json)
Hash identifier: +fs8xaq1rUOg67Y/1DC1FdTxOQepuB3UaDQqJ+epLzo=
Subject key identifier: 8B:48:CB:65:41:D6:94:46:D3:8C:8B:67:82:AD:21:33:3E:A5:E8:9D
Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial: 019422FBA632362C154CFF3F53A39309096D
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/i0jLZUHWlEbTjItngq0hMz6l6J0.roa
Signing time: Wed 01 Jan 2025 17:48:24 +0000
ROA not before: Wed 01 Jan 2025 17:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206883
IP address blocks: 188.212.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a6:32:36:2c:15:4c:ff:3f:53:a3:93:09:09:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
Validity
Not Before: Jan 1 17:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b48cb6541d69446d38c8b6782ad21333ea5e89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f9:a6:21:72:19:b7:c8:fa:2a:04:e4:e1:95:
e1:1f:a3:d2:51:04:b2:7e:dd:43:5e:df:e1:14:f4:
03:78:4e:5c:8e:19:a1:ae:a6:ce:dd:6c:18:fb:0e:
c0:25:e8:5c:3d:13:cc:dc:f9:95:f3:27:c9:a7:9d:
2b:ee:b9:81:a7:1f:ee:72:ac:01:87:ee:29:02:2e:
76:cb:47:2e:aa:be:d8:1e:a0:83:f9:58:2f:ca:c4:
4f:74:62:ec:ad:16:4e:3b:3a:01:8d:2c:83:bb:ae:
99:08:b0:8c:e3:cf:08:d0:87:70:8c:56:1c:a3:54:
9b:b9:85:8c:49:78:dc:63:ac:29:34:19:e0:9e:2e:
d1:fa:23:ba:97:75:b1:30:15:c3:68:b7:8f:73:99:
bd:5e:53:49:96:58:32:78:a1:ed:f1:8c:27:ab:8b:
ab:a6:2a:19:f6:38:a8:89:77:4d:1c:db:7b:cd:3a:
8e:7c:0c:97:7e:1c:07:31:e1:df:1f:54:cc:aa:7b:
cd:fc:d7:7f:4f:27:8c:e8:fd:d6:ad:01:b5:c1:d2:
fe:b2:4e:04:d9:3d:00:9d:82:61:a3:79:91:fc:7a:
70:3f:1a:8d:08:0d:c1:b7:8c:eb:90:a3:a4:4a:05:
ab:b9:d0:5e:be:5e:07:e5:f4:a0:cf:66:f5:0e:ac:
d0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:48:CB:65:41:D6:94:46:D3:8C:8B:67:82:AD:21:33:3E:A5:E8:9D
X509v3 Authority Key Identifier:
keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/i0jLZUHWlEbTjItngq0hMz6l6J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.116.0/22
Signature Algorithm: sha256WithRSAEncryption
79:82:3c:b5:40:bf:0e:ef:80:01:87:19:23:7b:50:f4:d6:2e:
2d:b8:44:62:79:f7:3a:08:b7:a1:d0:80:bf:3a:81:b8:1d:f2:
85:27:a2:ce:fc:87:73:65:53:fa:67:1d:a6:bd:00:ab:8e:4c:
40:45:e3:81:5d:d0:04:2b:37:81:b0:20:ba:dc:a2:ae:33:ba:
2b:74:95:a7:f9:5a:64:4d:f4:0c:90:3d:af:31:02:68:20:10:
f2:95:0e:cc:a2:ef:13:01:d6:3b:45:5e:01:4d:ab:09:7c:84:
58:b2:cb:a6:e1:0e:97:12:08:6f:9a:d7:ca:19:64:b3:3e:b7:
c4:9b:41:04:e9:25:37:cf:20:a2:31:95:0f:87:3a:b9:cc:97:
c3:aa:0d:18:e2:8c:2f:5c:8c:84:31:b2:de:1f:c7:c1:0a:7e:
ae:d3:e1:48:15:03:99:be:22:8a:c3:80:fd:79:82:3f:57:59:
84:3f:e8:47:72:9c:fd:f5:48:78:8e:ea:da:95:7e:71:78:85:
ec:1e:ad:33:0d:7c:64:e7:f5:42:9e:fd:8d:71:6b:ab:ab:11:
8e:02:d0:2c:78:65:23:55:a3:20:3b:21:b0:bd:d4:39:96:36:
de:5c:e0:48:45:6d:70:dd:a5:6f:19:4e:42:6b:02:12:ad:b2:
f3:fb:88:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+6YyNiwVTP8/U6OTCQltMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx
NWQwNzMwHhcNMjUwMTAxMTc0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjQ4Y2I2NTQxZDY5NDQ2ZDM4YzhiNjc4MmFkMjEzMzNlYTVlODlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vmmIXIZt8j6KgTk4ZXhH6PSUQSy
ft1DXt/hFPQDeE5cjhmhrqbO3WwY+w7AJehcPRPM3PmV8yfJp50r7rmBpx/ucqwB
h+4pAi52y0cuqr7YHqCD+VgvysRPdGLsrRZOOzoBjSyDu66ZCLCM488I0IdwjFYc
o1SbuYWMSXjcY6wpNBngni7R+iO6l3WxMBXDaLePc5m9XlNJllgyeKHt8Ywnq4ur
pioZ9jioiXdNHNt7zTqOfAyXfhwHMeHfH1TMqnvN/Nd/TyeM6P3WrQG1wdL+sk4E
2T0AnYJho3mR/HpwPxqNCA3Bt4zrkKOkSgWrudBevl4H5fSgz2b1DqzQswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFItIy2VB1pRG04yLZ4KtITM+peidMB8GA1UdIwQY
MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt
ZWQxZjMwY2MxYzU3LzEvaTBqTFpVSFdsRWJUakl0bmdxMGhNejZsNkowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3
LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvNR0MA0G
CSqGSIb3DQEBCwUAA4IBAQB5gjy1QL8O74ABhxkje1D01i4tuERiefc6CLeh0IC/
OoG4HfKFJ6LO/IdzZVP6Zx2mvQCrjkxAReOBXdAEKzeBsCC63KKuM7ordJWn+Vpk
TfQMkD2vMQJoIBDylQ7Mou8TAdY7RV4BTasJfIRYssum4Q6XEghvmtfKGWSzPrfE
m0EE6SU3zyCiMZUPhzq5zJfDqg0Y4owvXIyEMbLeH8fBCn6u0+FIFQOZviKKw4D9
eYI/V1mEP+hHcpz99Uh4juralX5xeIXsHq0zDXxk5/VCnv2NcWurqxGOAtAseGUj
VaMgOyGwvdQ5ljbeXOBIRW1w3aVvGU5CawISrbLz+4hZ
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:54:55 2025 by rpki-client