Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/1-DVzJoS3vOJPmgjlH9hd2b25IC0.roa
File: 1-DVzJoS3vOJPmgjlH9hd2b25IC0.roa (raw, json)
Hash identifier: ZhrTMhUV4sHhyoVsR9aF9HG/oIRN8p5N/Yf6Wavtxpk=
Subject key identifier: F8:35:73:26:84:B7:BC:E2:4F:9A:08:E5:1F:D8:5D:D9:BD:B9:20:2D
Certificate issuer: /CN=8ec18203c255a1d0bf1587542c7626f26738d6c1
Certificate serial: 01942747B0F9063634A684B55E0725E786FA
Authority key identifier: 8E:C1:82:03:C2:55:A1:D0:BF:15:87:54:2C:76:26:F2:67:38:D6:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsGCA8JVodC_FYdULHYm8mc41sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/1-DVzJoS3vOJPmgjlH9hd2b25IC0.roa
Signing time: Thu 02 Jan 2025 13:49:57 +0000
ROA not before: Thu 02 Jan 2025 13:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6799
IP address blocks: 94.232.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b0:f9:06:36:34:a6:84:b5:5e:07:25:e7:86:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec18203c255a1d0bf1587542c7626f26738d6c1
Validity
Not Before: Jan 2 13:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f835732684b7bce24f9a08e51fd85dd9bdb9202d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:73:1e:51:d1:06:20:11:83:bc:36:8a:70:43:
ce:2b:da:8b:9e:d8:9b:31:d6:f2:cf:ca:4b:2e:cb:
c3:b8:8c:68:b6:80:5c:49:60:03:6a:44:57:92:87:
38:4b:96:db:da:38:4f:fa:77:f8:70:30:d4:65:ac:
36:cd:cb:69:5b:38:4c:f9:dd:ed:b1:9a:9b:4b:15:
ae:cf:89:8a:b5:51:7c:fc:a5:04:cb:ae:90:3d:ce:
3a:19:b3:3f:06:43:3f:fa:83:2e:7a:61:5c:c6:fe:
82:49:f3:95:a7:2e:07:03:be:84:a4:4b:39:b4:ed:
fe:64:8f:82:fa:71:42:61:c4:c0:0b:b6:0f:b5:46:
a1:0d:45:0e:4b:57:49:3d:db:47:6d:b9:39:4d:da:
8a:ab:a3:07:9e:17:d9:dc:a6:81:c5:14:22:0b:f7:
b5:be:aa:c6:15:f8:d3:d4:3b:78:e0:28:57:78:85:
74:e2:e7:48:ea:39:a9:21:41:10:22:50:6a:ec:52:
9e:02:72:8a:ce:f8:62:bb:f4:dd:26:e1:e1:3e:6c:
ad:c6:0d:65:5a:55:54:8e:be:6c:97:7a:e9:b4:ab:
6e:42:24:bc:5d:7c:36:30:dd:97:3c:6d:13:0e:8d:
33:6e:c8:b2:bf:48:23:61:c2:f4:6d:a5:cd:74:bf:
e5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:35:73:26:84:B7:BC:E2:4F:9A:08:E5:1F:D8:5D:D9:BD:B9:20:2D
X509v3 Authority Key Identifier:
keyid:8E:C1:82:03:C2:55:A1:D0:BF:15:87:54:2C:76:26:F2:67:38:D6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsGCA8JVodC_FYdULHYm8mc41sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/1-DVzJoS3vOJPmgjlH9hd2b25IC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/6519e0-b327-454e-bb7a-1a3be24b76db/1/jsGCA8JVodC_FYdULHYm8mc41sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.80.0/21
Signature Algorithm: sha256WithRSAEncryption
93:e5:2e:07:33:95:e6:89:72:28:7f:46:5f:90:72:0d:38:d1:
bd:cd:bb:99:96:87:d6:0e:2b:2a:10:7e:9a:8f:73:21:e3:2e:
e7:f4:fc:8e:10:c1:a9:f9:60:9b:a1:39:d6:6a:23:1a:96:4b:
ed:c2:8c:f6:d3:34:51:4c:4b:4f:88:6f:5a:e3:25:5b:9a:c2:
03:9c:82:8d:93:fc:5b:be:b7:73:7c:e0:0c:ff:36:ae:0a:52:
16:ff:45:85:9f:23:3c:52:98:bc:33:15:7b:67:94:3b:0e:7f:
f7:d8:48:86:aa:72:ad:53:9c:8b:ee:6f:da:53:1f:6e:71:f4:
57:7b:95:86:42:7a:12:41:3e:08:26:88:36:86:33:7d:8f:fd:
30:ae:d6:b9:19:d3:2b:79:2b:04:9e:13:1a:d2:e4:c9:48:ba:
39:91:e1:4f:db:c4:92:30:d7:f5:cd:f7:c9:9c:de:2d:92:09:
d9:9f:e7:db:05:53:3a:b1:2b:39:05:fb:b9:56:3e:c5:8f:84:
05:dd:9b:a9:fc:07:39:4c:f1:1d:38:8d:11:41:0c:3f:0f:88:
4d:c7:ae:bf:83:4d:77:5e:b6:b9:c8:f7:cb:ce:30:6a:36:b9:
1d:5e:71:7a:d2:0e:d2:ac:18:70:8f:9b:a0:81:df:a6:de:ef:
ad:1b:35:d3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQnR7D5BjY0poS1Xgcl54b6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzE4MjAzYzI1NWExZDBiZjE1ODc1NDJjNzYyNmYyNjcz
OGQ2YzEwHhcNMjUwMTAyMTM0OTU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODM1NzMyNjg0YjdiY2UyNGY5YTA4ZTUxZmQ4NWRkOWJkYjkyMDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXMeUdEGIBGDvDaKcEPOK9qLntib
Mdbyz8pLLsvDuIxotoBcSWADakRXkoc4S5bb2jhP+nf4cDDUZaw2zctpWzhM+d3t
sZqbSxWuz4mKtVF8/KUEy66QPc46GbM/BkM/+oMuemFcxv6CSfOVpy4HA76EpEs5
tO3+ZI+C+nFCYcTAC7YPtUahDUUOS1dJPdtHbbk5TdqKq6MHnhfZ3KaBxRQiC/e1
vqrGFfjT1Dt44ChXeIV04udI6jmpIUEQIlBq7FKeAnKKzvhiu/TdJuHhPmytxg1l
WlVUjr5sl3rptKtuQiS8XXw2MN2XPG0TDo0zbsiyv0gjYcL0baXNdL/ldQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPg1cyaEt7ziT5oI5R/YXdm9uSAtMB8GA1UdIwQY
MBaAFI7BggPCVaHQvxWHVCx2JvJnONbBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNHQ0E4SlZvZENfRllkVUxIWW04bWM0MXNFLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC82NTE5ZTAtYjMyNy00NTRlLWJiN2Et
MWEzYmUyNGI3NmRiLzEvMS1EVnpKb1Mzdk9KUG1namxIOWhkMmIyNUlDMC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzAvNjUxOWUwLWIzMjctNDU0ZS1iYjdhLTFhM2JlMjRiNzZk
Yi8xL2pzR0NBOEpWb2RDX0ZZZFVMSFltOG1jNDFzRS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA17oUDAN
BgkqhkiG9w0BAQsFAAOCAQEAk+UuBzOV5olyKH9GX5ByDTjRvc27mZaH1g4rKhB+
mo9zIeMu5/T8jhDBqflgm6E51mojGpZL7cKM9tM0UUxLT4hvWuMlW5rCA5yCjZP8
W763c3zgDP82rgpSFv9FhZ8jPFKYvDMVe2eUOw5/99hIhqpyrVOci+5v2lMfbnH0
V3uVhkJ6EkE+CCaINoYzfY/9MK7WuRnTK3krBJ4TGtLkyUi6OZHhT9vEkjDX9c33
yZzeLZIJ2Z/n2wVTOrErOQX7uVY+xY+EBd2bqfwHOUzxHTiNEUEMPw+ITceuv4NN
d162ucj3y84waja5HV5xetIO0qwYcI+boIHfpt7vrRs10w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:49:34 2025 by rpki-client