Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/kk1RvulsDSTUcsB-uonoLPTmX_c.roa
File: kk1RvulsDSTUcsB-uonoLPTmX_c.roa (raw, json)
Hash identifier: 8TFkWIExCyZU8KrfnY1OXWc5V95rzbge2YPptcmVOsY=
Subject key identifier: 92:4D:51:BE:E9:6C:0D:24:D4:72:C0:7E:BA:89:E8:2C:F4:E6:5F:F7
Certificate issuer: /CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Certificate serial: 01941F8C9BB27AD105EDB0D17AAF07180D17
Authority key identifier: 1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/kk1RvulsDSTUcsB-uonoLPTmX_c.roa
Signing time: Wed 01 Jan 2025 01:48:16 +0000
ROA not before: Wed 01 Jan 2025 01:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210808
IP address blocks: 176.100.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:9b:b2:7a:d1:05:ed:b0:d1:7a:af:07:18:0d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Validity
Not Before: Jan 1 01:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=924d51bee96c0d24d472c07eba89e82cf4e65ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:ee:bb:bc:53:b4:fb:44:fe:c7:1d:19:34:
7a:45:8c:6c:ad:86:c0:00:eb:d3:43:55:c2:a1:20:
a1:40:bc:3b:15:f3:a5:83:fd:23:08:3c:32:15:f4:
ff:44:e3:b0:6b:35:33:b6:bb:5d:cd:2d:a0:98:90:
4f:2f:df:10:7a:90:bb:33:76:f2:5d:d5:f8:18:52:
8b:78:c1:c1:e7:2a:f1:1c:15:a3:48:07:0d:5e:71:
55:21:c6:25:97:70:91:7e:5c:35:9d:be:98:73:22:
cc:9e:05:35:79:d5:e5:9d:54:53:03:2b:8e:3b:d8:
c1:9d:d9:ab:89:b0:c6:c5:8c:28:ad:b2:39:2d:3c:
8e:12:8d:ea:0c:f7:de:85:cc:1d:d7:a6:5a:b9:28:
09:9b:3a:11:91:a0:60:0a:f3:8d:e3:d0:33:db:bd:
6a:5b:e0:09:b3:3f:6e:c3:41:a0:db:5d:16:df:f8:
5b:b8:3f:03:48:d4:d5:cd:42:41:97:0e:ee:d3:78:
aa:25:b2:0e:aa:65:d1:06:cc:d6:e3:4b:46:ba:17:
7a:2a:1d:66:57:79:26:61:d2:d8:39:46:bb:e9:69:
d5:56:99:2e:e6:0b:f1:61:5e:41:82:33:dd:5c:aa:
5c:77:7a:0e:55:f5:9a:c5:a1:43:3b:62:05:79:a7:
f1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4D:51:BE:E9:6C:0D:24:D4:72:C0:7E:BA:89:E8:2C:F4:E6:5F:F7
X509v3 Authority Key Identifier:
keyid:1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/kk1RvulsDSTUcsB-uonoLPTmX_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.46.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f9:8d:db:71:21:95:19:a1:12:b8:7d:12:30:ba:6b:bf:9c:
5b:bb:11:8e:c6:3c:13:38:62:b6:6b:fe:db:7f:dd:67:68:79:
40:10:c5:6e:e2:dc:67:a0:2f:11:95:b7:02:6d:07:31:67:12:
30:04:22:9f:a8:ce:0a:ce:b3:40:35:72:3b:81:9e:00:68:84:
c0:34:1c:16:be:3f:38:c4:af:a7:29:8d:8b:89:a4:3b:af:1f:
ea:5d:01:25:3d:b8:a0:a9:74:63:5a:c0:b0:b7:53:4d:82:0c:
0a:56:f7:a3:7e:91:d9:c0:6c:76:44:b8:7a:74:a6:6a:67:a3:
e5:c1:6c:38:84:8e:80:47:fc:49:6b:a7:b0:71:d3:ff:47:47:
f7:85:15:44:f0:78:30:49:34:7d:32:08:1e:c9:c5:fa:3b:3d:
6f:d7:16:89:69:b0:10:5e:f4:af:a6:cd:5b:ca:5f:53:6d:83:
ea:55:74:65:ba:a5:1a:f2:14:b3:64:2d:3a:56:c4:59:3e:bd:
4b:53:e6:75:fe:5c:38:09:cd:f4:6f:85:5b:ab:2e:37:c7:eb:
cb:f7:d8:8b:c2:1c:9d:e0:90:09:9b:17:08:b8:a8:1a:13:90:
c1:07:c2:9b:b8:bb:1f:a1:b6:07:ab:6d:7f:9c:79:51:c5:9b:
ec:e8:ca:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjJuyetEF7bDReq8HGA0XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNTQ5ZmM1ZDY4Mjk4Nzg0YzZhNGM1YmM5OWFlN2QzMDE2
YTE4YTMwHhcNMjUwMTAxMDE0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjRkNTFiZWU5NmMwZDI0ZDQ3MmMwN2ViYTg5ZTgyY2Y0ZTY1ZmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtljuu7xTtPtE/scdGTR6RYxsrYbA
AOvTQ1XCoSChQLw7FfOlg/0jCDwyFfT/ROOwazUztrtdzS2gmJBPL98QepC7M3by
XdX4GFKLeMHB5yrxHBWjSAcNXnFVIcYll3CRflw1nb6YcyLMngU1edXlnVRTAyuO
O9jBndmribDGxYworbI5LTyOEo3qDPfehcwd16ZauSgJmzoRkaBgCvON49Az271q
W+AJsz9uw0Gg210W3/hbuD8DSNTVzUJBlw7u03iqJbIOqmXRBszW40tGuhd6Kh1m
V3kmYdLYOUa76WnVVpku5gvxYV5BgjPdXKpcd3oOVfWaxaFDO2IFeafxZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJJNUb7pbA0k1HLAfrqJ6Cz05l/3MB8GA1UdIwQY
MBaAFBxUn8XWgph4TGpMW8ma59MBahijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEZTZnhkYUNtSGhNYWt4Ynlacm4wd0ZxR0tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84NTRiZDMtNTA5OC00OTY0LWJiMzUt
NTI0MWUzMWNkOGRhLzEva2sxUnZ1bHNEU1RVY3NCLXVvbm9MUFRtWF9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84NTRiZDMtNTA5OC00OTY0LWJiMzUtNTI0MWUzMWNkOGRh
LzEvSEZTZnhkYUNtSGhNYWt4Ynlacm4wd0ZxR0tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGQuMA0G
CSqGSIb3DQEBCwUAA4IBAQB0+Y3bcSGVGaESuH0SMLprv5xbuxGOxjwTOGK2a/7b
f91naHlAEMVu4txnoC8RlbcCbQcxZxIwBCKfqM4KzrNANXI7gZ4AaITANBwWvj84
xK+nKY2LiaQ7rx/qXQElPbigqXRjWsCwt1NNggwKVvejfpHZwGx2RLh6dKZqZ6Pl
wWw4hI6AR/xJa6ewcdP/R0f3hRVE8HgwSTR9MggeycX6Oz1v1xaJabAQXvSvps1b
yl9TbYPqVXRluqUa8hSzZC06VsRZPr1LU+Z1/lw4Cc30b4Vbqy43x+vL99iLwhyd
4JAJmxcIuKgaE5DBB8KbuLsfobYHq21/nHlRxZvs6MoK
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:53 2025 by rpki-client