Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/sH7ECpW3UYDGAiYpkUWXOz7HCRI.roa
File: sH7ECpW3UYDGAiYpkUWXOz7HCRI.roa (raw, json)
Hash identifier: YckHmfd2bRiOYkUUPO56qiqrIu2EWK3I8MNbpKxlcvA=
Subject key identifier: B0:7E:C4:0A:95:B7:51:80:C6:02:26:29:91:45:97:3B:3E:C7:09:12
Certificate issuer: /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Certificate serial: 019425FD7B420291DB3AFF5470B756CCF47E
Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/sH7ECpW3UYDGAiYpkUWXOz7HCRI.roa
Signing time: Thu 02 Jan 2025 07:49:16 +0000
ROA not before: Thu 02 Jan 2025 07:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62214
IP address blocks: 195.90.98.0/24 maxlen: 24
195.90.115.0/24 maxlen: 24
2a01:7d80:2400::/40 maxlen: 40
2a01:7d80:c000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:7b:42:02:91:db:3a:ff:54:70:b7:56:cc:f4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Validity
Not Before: Jan 2 07:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b07ec40a95b75180c60226299145973b3ec70912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:56:78:7b:49:01:7a:bc:9b:6c:3d:be:b2:b4:
1a:63:4b:10:b7:b3:31:39:e0:9b:db:8e:1c:91:0e:
29:c7:a1:bd:40:b4:c1:89:30:5a:e8:9e:09:c0:d6:
4e:78:a9:ed:62:8c:14:b0:f5:0f:15:b3:83:00:58:
cc:de:05:8d:af:42:4a:e6:e2:a0:2f:fd:b1:35:88:
1d:c5:d3:a8:00:0c:5b:36:b7:00:3e:68:2d:22:e3:
4f:d3:f3:3e:6f:1a:12:98:af:90:ff:22:e4:f9:62:
8f:52:d8:dd:0d:2b:46:b8:15:f4:df:7c:dd:db:20:
42:2d:1d:69:e7:1d:c7:49:ea:09:09:3b:70:79:b0:
bc:c7:9b:4c:2f:33:78:7b:95:aa:b2:cd:a8:03:99:
e5:23:aa:48:87:8f:93:b5:50:4e:ab:83:be:4c:94:
77:72:ab:ff:5f:9e:e7:35:f5:19:b4:7b:42:29:b3:
17:5a:12:95:e4:1a:ba:21:ac:77:c1:0d:0e:dd:81:
e8:26:b8:ef:2e:82:a3:cb:39:66:bf:08:e0:eb:8e:
39:0a:e2:43:6f:4d:76:60:00:f4:11:60:a6:36:cf:
0d:5d:03:c1:95:fc:10:af:7d:cf:92:84:5f:d4:e0:
eb:cb:43:b5:31:19:ad:f0:21:54:7c:7e:8a:e7:01:
a8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7E:C4:0A:95:B7:51:80:C6:02:26:29:91:45:97:3B:3E:C7:09:12
X509v3 Authority Key Identifier:
keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/sH7ECpW3UYDGAiYpkUWXOz7HCRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.90.98.0/24
195.90.115.0/24
IPv6:
2a01:7d80:2400::/40
2a01:7d80:c000::/40
Signature Algorithm: sha256WithRSAEncryption
40:f0:a4:bf:47:8b:b1:76:91:95:c4:fe:b9:57:ba:dd:d4:54:
f5:d8:a2:1f:31:03:1e:0a:fd:c9:8d:3d:89:89:a1:70:14:53:
33:5b:f7:6d:96:b8:30:9d:59:2f:e1:b1:5e:82:f3:07:26:90:
2e:6b:0c:85:51:32:60:34:6f:45:6a:4c:58:f9:53:2e:06:d4:
54:87:84:7f:19:49:a5:86:d6:cf:b8:06:60:63:dd:36:ab:37:
eb:23:36:8a:81:53:c3:b5:93:88:40:75:b8:d7:38:4e:12:fe:
07:41:a3:09:11:20:5a:53:fe:d2:eb:09:c0:fc:9e:49:63:bf:
5f:7b:95:4c:05:7c:b7:f6:ed:95:8e:61:90:1f:a7:10:f1:aa:
d7:b4:3a:38:a7:f3:af:a6:42:7b:fe:33:ab:17:a6:8f:c8:6d:
e3:6f:6b:fb:c3:88:0c:55:19:07:28:dc:e2:c2:dc:e9:d8:c2:
33:de:21:05:8d:93:59:bc:af:6b:35:84:6b:8b:3c:5f:a2:11:
17:45:e5:a9:d0:d6:65:72:6b:e4:7c:6f:b2:39:c1:92:be:3a:
ce:00:fb:67:13:33:68:b5:06:9f:dc:ab:a3:b8:47:85:9e:ce:
5c:0d:a3:3f:06:33:4a:20:41:d4:c3:3a:a3:f5:e3:75:13:ed:
24:85:a9:6d
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQl/XtCApHbOv9UcLdWzPR+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZThmNDFmNmIwMmI5M2Y4NWQxYTdiNDhiNDhjZmEzMjJm
MDg4ZjgwHhcNMjUwMTAyMDc0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDdlYzQwYTk1Yjc1MTgwYzYwMjI2Mjk5MTQ1OTczYjNlYzcwOTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lZ4e0kBerybbD2+srQaY0sQt7Mx
OeCb244ckQ4px6G9QLTBiTBa6J4JwNZOeKntYowUsPUPFbODAFjM3gWNr0JK5uKg
L/2xNYgdxdOoAAxbNrcAPmgtIuNP0/M+bxoSmK+Q/yLk+WKPUtjdDStGuBX033zd
2yBCLR1p5x3HSeoJCTtwebC8x5tMLzN4e5Wqss2oA5nlI6pIh4+TtVBOq4O+TJR3
cqv/X57nNfUZtHtCKbMXWhKV5Bq6Iax3wQ0O3YHoJrjvLoKjyzlmvwjg6445CuJD
b012YAD0EWCmNs8NXQPBlfwQr33PkoRf1ODry0O1MRmt8CFUfH6K5wGoTwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFLB+xAqVt1GAxgImKZFFlzs+xwkSMB8GA1UdIwQY
MBaAFOHo9B9rArk/hdGntItIz6Mi8Ij4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGVqMEgyc0N1VC1GMGFlMGkwalBveUx3aVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85YmE5NDAtMDA3OC00ZmQwLWFmZGUt
NTM3YTJiMGI0ZGRhLzEvc0g3RUNwVzNVWURHQWlZcGtVV1hPejdIQ1JJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85YmE5NDAtMDA3OC00ZmQwLWFmZGUtNTM3YTJiMGI0ZGRh
LzEvNGVqMEgyc0N1VC1GMGFlMGkwalBveUx3aVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQAw1piAwQA
w1pzMBYEAgACMBADBgAqAX2AJAMGACoBfYDAMA0GCSqGSIb3DQEBCwUAA4IBAQBA
8KS/R4uxdpGVxP65V7rd1FT12KIfMQMeCv3JjT2JiaFwFFMzW/dtlrgwnVkv4bFe
gvMHJpAuawyFUTJgNG9FakxY+VMuBtRUh4R/GUmlhtbPuAZgY902qzfrIzaKgVPD
tZOIQHW41zhOEv4HQaMJESBaU/7S6wnA/J5JY79fe5VMBXy39u2VjmGQH6cQ8arX
tDo4p/OvpkJ7/jOrF6aPyG3jb2v7w4gMVRkHKNziwtzp2MIz3iEFjZNZvK9rNYRr
izxfohEXReWp0NZlcmvkfG+yOcGSvjrOAPtnEzNotQaf3KujuEeFns5cDaM/BjNK
IEHUwzqj9eN1E+0khalt
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:10:34 2025 by rpki-client