Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/fDR4cU3XqJg4t0VKZWBpSExwqRA.roa
File: fDR4cU3XqJg4t0VKZWBpSExwqRA.roa (raw, json)
Hash identifier: sdNAH+4UVUlBbNGnVcweAz337i8Vp0M6ubrDrxe2cuk=
Subject key identifier: 7C:34:78:71:4D:D7:A8:98:38:B7:45:4A:65:60:69:48:4C:70:A9:10
Certificate issuer: /CN=41826ee90270fdd1423af8090726006718dfc6cf
Certificate serial: 019424B39E9FD61FDF763A8AE3D2B5F09B8D
Authority key identifier: 41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/fDR4cU3XqJg4t0VKZWBpSExwqRA.roa
Signing time: Thu 02 Jan 2025 01:48:58 +0000
ROA not before: Thu 02 Jan 2025 01:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9063
IP address blocks: 194.180.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:9e:9f:d6:1f:df:76:3a:8a:e3:d2:b5:f0:9b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41826ee90270fdd1423af8090726006718dfc6cf
Validity
Not Before: Jan 2 01:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c3478714dd7a89838b7454a656069484c70a910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:3b:3e:f7:19:48:c6:36:fa:47:8d:11:bd:
a8:2e:8d:58:3e:5a:4d:6c:77:1c:a6:94:8e:58:f4:
4c:3f:a0:17:da:3d:dd:da:15:08:c3:21:76:91:33:
9d:71:a1:5f:64:23:90:12:c8:b7:66:b0:e5:fb:f3:
11:1c:62:23:cf:71:2a:f2:ba:84:b3:7d:cf:0c:4e:
57:7d:dd:89:c3:d8:ac:69:10:89:dc:3c:1b:b1:84:
63:1c:f8:75:fb:e7:5a:00:ab:36:57:a5:6c:bd:e0:
04:24:26:78:1b:a0:79:a3:f8:32:6b:2b:5a:e2:8d:
c4:18:70:f5:c8:91:92:51:67:67:fa:8d:b3:47:65:
f3:4b:ff:8f:d9:39:3e:88:98:80:48:ff:a5:af:5b:
a8:b9:48:6d:54:e2:e3:42:b6:a9:4c:85:6d:9b:ae:
ce:c6:49:53:b2:e3:fa:5f:f1:35:b7:95:3a:43:4c:
1b:3c:d0:60:cf:71:c6:bc:3f:13:46:0e:fa:13:6a:
3b:18:4c:01:a9:a8:f2:d4:96:22:30:82:6a:33:83:
a1:b3:2e:ca:0e:df:a0:4d:da:ce:bc:92:50:71:0f:
16:35:ae:c5:74:ef:ec:de:ca:ce:24:fb:c6:f7:a1:
4e:78:f9:33:d4:31:26:fe:7c:36:51:1b:86:a0:77:
02:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:34:78:71:4D:D7:A8:98:38:B7:45:4A:65:60:69:48:4C:70:A9:10
X509v3 Authority Key Identifier:
keyid:41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/fDR4cU3XqJg4t0VKZWBpSExwqRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.160.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:40:42:75:c8:16:4c:e7:56:ab:9d:a2:cc:18:44:83:4b:c4:
34:e1:26:02:0a:73:18:55:d1:4e:5f:e4:db:4a:e1:79:af:6b:
ac:e1:33:7c:35:9c:1f:7c:12:8c:d6:24:d1:64:6c:f9:95:cc:
73:3d:f0:39:5e:b1:4a:9e:2a:6f:9c:13:18:9e:63:44:cf:c6:
77:68:f1:02:bd:f3:9c:25:1b:91:6a:52:82:76:86:91:9e:6c:
0b:43:01:84:76:dd:ff:7c:7d:b3:0c:98:c6:98:a1:7d:4c:7a:
d7:52:40:f7:55:81:10:c0:6c:ea:3f:f7:e2:cb:e1:91:ef:c8:
c9:1e:1e:5f:da:06:ba:ea:fa:bb:27:54:bf:1b:59:34:95:c0:
a0:d9:a0:1a:1d:a2:2f:cf:ea:b3:37:dd:52:4e:67:9d:85:0b:
e7:15:b8:7d:59:74:fd:0e:76:13:45:ae:45:df:5a:0a:1a:8b:
2f:d9:ac:93:ca:15:f7:80:3a:d3:51:97:77:6d:e7:1e:6a:e9:
c9:80:8f:59:1a:a0:8a:73:85:41:32:f4:00:ba:f0:16:82:2f:
95:aa:b3:be:ab:e2:e9:91:e2:92:6e:89:0c:2b:d4:38:e2:65:
4b:69:0e:78:63:b7:82:46:89:ae:e2:85:64:52:b6:30:8d:99:
f6:fb:21:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks56f1h/fdjqK49K18JuNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxODI2ZWU5MDI3MGZkZDE0MjNhZjgwOTA3MjYwMDY3MThk
ZmM2Y2YwHhcNMjUwMTAyMDE0ODU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzM0Nzg3MTRkZDdhODk4MzhiNzQ1NGE2NTYwNjk0ODRjNzBhOTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufc7PvcZSMY2+keNEb2oLo1YPlpN
bHccppSOWPRMP6AX2j3d2hUIwyF2kTOdcaFfZCOQEsi3ZrDl+/MRHGIjz3Eq8rqE
s33PDE5Xfd2Jw9isaRCJ3DwbsYRjHPh1++daAKs2V6VsveAEJCZ4G6B5o/gyayta
4o3EGHD1yJGSUWdn+o2zR2XzS/+P2Tk+iJiASP+lr1uouUhtVOLjQrapTIVtm67O
xklTsuP6X/E1t5U6Q0wbPNBgz3HGvD8TRg76E2o7GEwBqajy1JYiMIJqM4Ohsy7K
Dt+gTdrOvJJQcQ8WNa7FdO/s3srOJPvG96FOePkz1DEm/nw2URuGoHcCgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHw0eHFN16iYOLdFSmVgaUhMcKkQMB8GA1UdIwQY
MBaAFEGCbukCcP3RQjr4CQcmAGcY38bPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVlKdTZRSndfZEZDT3ZnSkJ5WUFaeGpmeHM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi83YjdjMzYtNjk4ZS00ODNhLWI5NDEt
ZWU1ODZkMzc1YTU4LzEvZkRSNGNVM1hxSmc0dDBWS1pXQnBTRXh3cVJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi83YjdjMzYtNjk4ZS00ODNhLWI5NDEtZWU1ODZkMzc1YTU4
LzEvUVlKdTZRSndfZEZDT3ZnSkJ5WUFaeGpmeHM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwrSgMA0G
CSqGSIb3DQEBCwUAA4IBAQAfQEJ1yBZM51arnaLMGESDS8Q04SYCCnMYVdFOX+Tb
SuF5r2us4TN8NZwffBKM1iTRZGz5lcxzPfA5XrFKnipvnBMYnmNEz8Z3aPECvfOc
JRuRalKCdoaRnmwLQwGEdt3/fH2zDJjGmKF9THrXUkD3VYEQwGzqP/fiy+GR78jJ
Hh5f2ga66vq7J1S/G1k0lcCg2aAaHaIvz+qzN91STmedhQvnFbh9WXT9DnYTRa5F
31oKGosv2ayTyhX3gDrTUZd3beceaunJgI9ZGqCKc4VBMvQAuvAWgi+VqrO+q+Lp
keKSbokMK9Q44mVLaQ54Y7eCRomu4oVkUrYwjZn2+yEJ
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:07:09 2025 by rpki-client