Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-I_hO5bt1QImQjkGfOoCWjz_EeE.roa
File: 1-I_hO5bt1QImQjkGfOoCWjz_EeE.roa (raw, json)
Hash identifier: yVOsoV3yJ2B3NS6xPJkpc/bYU0gh14t4/0w2H7T8rs8=
Subject key identifier: F8:8F:E1:3B:96:ED:D5:02:26:42:39:06:7C:EA:02:5A:3C:FF:11:E1
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019421B1AE9FD7D7B6BB0B6F78E1E7267F29
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-I_hO5bt1QImQjkGfOoCWjz_EeE.roa
Signing time: Wed 01 Jan 2025 11:48:00 +0000
ROA not before: Wed 01 Jan 2025 11:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 176.57.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ae:9f:d7:d7:b6:bb:0b:6f:78:e1:e7:26:7f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 11:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f88fe13b96edd502264239067cea025a3cff11e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:b3:4f:49:c3:b5:44:f3:28:44:a6:09:a6:
ee:9a:db:18:48:c4:b4:b8:ca:83:34:7e:c7:43:f2:
c4:16:69:c8:35:89:9c:a4:af:7d:88:45:61:54:0b:
38:54:96:58:dc:5e:34:fc:97:45:ef:da:cb:b6:4c:
d7:90:40:1d:ac:df:d7:90:78:03:4f:2c:4a:a9:31:
11:82:1c:e8:84:33:ea:51:c0:5a:65:70:9d:48:87:
dd:ac:ef:b6:5a:6a:c8:1c:cf:e7:d4:4e:d5:f8:16:
8d:63:e5:8e:89:62:7a:81:52:29:ac:f6:c3:91:17:
18:a7:0e:e7:ef:7b:83:dc:c5:bd:b0:d1:63:04:83:
4e:ce:cd:f9:a0:78:f2:f0:1d:26:f8:df:bb:89:a0:
03:e3:f1:c0:8d:a6:7c:07:d1:05:8b:91:a5:d7:bf:
76:e8:9d:9f:3d:84:b4:43:75:52:72:53:32:db:7e:
28:b4:72:6c:de:53:ad:30:ac:78:6e:3b:30:31:9c:
e2:a1:74:96:cd:d1:29:41:13:67:db:26:3f:6b:79:
bd:e0:75:c3:8f:9d:4f:b5:35:97:e4:e4:a5:48:cc:
2f:32:00:70:f8:62:35:1a:b9:a1:09:0b:12:cc:2c:
75:69:2c:18:e6:66:47:52:15:7a:86:a5:bd:54:fd:
e7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8F:E1:3B:96:ED:D5:02:26:42:39:06:7C:EA:02:5A:3C:FF:11:E1
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-I_hO5bt1QImQjkGfOoCWjz_EeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.48.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:44:c4:21:11:0c:fe:03:04:3c:3c:e2:c8:9f:df:ef:fa:9e:
9c:e8:e3:f1:a0:2a:00:a8:71:c2:f5:2e:99:af:d8:d6:1d:8f:
d1:10:05:91:d0:04:92:50:b6:d4:f3:bf:30:a4:a0:52:44:8c:
d8:1e:a2:0b:71:d9:4b:df:aa:ff:96:b8:f8:d9:31:98:2f:2e:
24:30:20:7a:0d:99:c6:e0:85:a2:46:27:cc:96:76:b9:d7:fd:
f1:10:cc:1c:c7:d5:ea:db:d7:c1:a5:06:50:a3:59:13:db:8d:
cd:96:e7:60:9e:2b:e3:1f:9f:41:75:03:13:4a:75:b0:fa:46:
ed:3f:61:8b:2b:38:dd:35:10:c7:4a:91:43:8d:a5:dd:44:c1:
5f:7d:2b:88:ea:63:bc:01:b9:90:cf:a1:5b:48:9b:f4:98:1c:
9d:ad:93:b3:2c:4a:fe:1b:c6:fa:6e:1b:f8:04:10:4b:40:1a:
56:89:e2:21:c4:d3:af:2d:66:7c:ea:30:32:7f:24:b0:7e:a9:
21:48:a7:ea:d5:b7:c0:38:6a:e9:59:54:1b:62:5c:3d:f0:f1:
b2:4c:fe:20:5b:fb:3e:7b:d1:4e:19:20:17:f0:59:80:4a:fc:
01:8b:a2:6c:4d:5f:e0:99:a3:20:9d:00:54:70:70:f0:7b:d9:
10:ba:3d:b4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQhsa6f19e2uwtveOHnJn8pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjUwMTAxMTE0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODhmZTEzYjk2ZWRkNTAyMjY0MjM5MDY3Y2VhMDI1YTNjZmYxMWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDizT0nDtUTzKESmCabumtsYSMS0
uMqDNH7HQ/LEFmnINYmcpK99iEVhVAs4VJZY3F40/JdF79rLtkzXkEAdrN/XkHgD
TyxKqTERghzohDPqUcBaZXCdSIfdrO+2WmrIHM/n1E7V+BaNY+WOiWJ6gVIprPbD
kRcYpw7n73uD3MW9sNFjBINOzs35oHjy8B0m+N+7iaAD4/HAjaZ8B9EFi5Gl1792
6J2fPYS0Q3VSclMy234otHJs3lOtMKx4bjswMZzioXSWzdEpQRNn2yY/a3m94HXD
j51PtTWX5OSlSMwvMgBw+GI1GrmhCQsSzCx1aSwY5mZHUhV6hqW9VP3nmQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPiP4TuW7dUCJkI5BnzqAlo8/xHhMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvMS1JX2hPNWJ0MVFJbVFqa0dmT29DV2p6X0VlRS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNjUvMDA2MjQxLTgwOGQtNGE0OS1iMGNkLTU2MjQ0ZjQzMGRj
Yy8xL0ZmR1FkRlNOS2lsT1E0WFpYTloxSkpEdVJ0Yy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArA5MDAN
BgkqhkiG9w0BAQsFAAOCAQEAekTEIREM/gMEPDziyJ/f7/qenOjj8aAqAKhxwvUu
ma/Y1h2P0RAFkdAEklC21PO/MKSgUkSM2B6iC3HZS9+q/5a4+NkxmC8uJDAgeg2Z
xuCFokYnzJZ2udf98RDMHMfV6tvXwaUGUKNZE9uNzZbnYJ4r4x+fQXUDE0p1sPpG
7T9hiys43TUQx0qRQ42l3UTBX30riOpjvAG5kM+hW0ib9Jgcna2TsyxK/hvG+m4b
+AQQS0AaVoniIcTTry1mfOowMn8ksH6pIUin6tW3wDhq6VlUG2JcPfDxskz+IFv7
PnvRThkgF/BZgEr8AYuibE1f4JmjIJ0AVHBw8HvZELo9tA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:10:31 2025 by rpki-client