Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/1-d5J5W-VmdNEPvaUUIc9QmXJa7c.roa
File: 1-d5J5W-VmdNEPvaUUIc9QmXJa7c.roa (raw, json)
Hash identifier: WEje3N6tM8UQY4DTr2W4pxQIyOYapcmAGgNCDl+FllM=
Subject key identifier: F9:DE:49:E5:6F:95:99:D3:44:3E:F6:94:50:87:3D:42:65:C9:6B:B7
Certificate issuer: /CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Certificate serial: 01942444FB00688591238B0F7A9ED39108A8
Authority key identifier: 2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/1-d5J5W-VmdNEPvaUUIc9QmXJa7c.roa
Signing time: Wed 01 Jan 2025 23:48:07 +0000
ROA not before: Wed 01 Jan 2025 23:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47268
IP address blocks: 195.216.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:fb:00:68:85:91:23:8b:0f:7a:9e:d3:91:08:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Validity
Not Before: Jan 1 23:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9de49e56f9599d3443ef69450873d4265c96bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f9:e9:05:be:fb:cc:0e:64:21:89:24:ff:2a:
e9:a4:b6:b0:98:a9:40:69:c6:b7:47:bb:86:e0:ce:
22:40:19:1e:83:aa:fb:4f:69:1a:3f:18:b2:d0:98:
2d:ed:ed:54:47:8b:01:b1:8c:a1:ed:ed:b2:66:01:
a2:cc:ad:70:3c:05:4b:05:39:0c:20:4d:9c:a4:d1:
11:bd:d4:1d:3a:ea:e0:9b:5b:90:43:85:45:db:08:
86:2a:62:b4:a9:af:1c:2a:8c:78:32:00:74:63:8d:
7f:e1:cc:2d:58:e7:08:40:c9:20:72:4b:8f:90:c0:
80:9f:bb:3d:c9:74:65:1f:4a:f1:84:a9:73:63:45:
a7:0a:56:13:fb:ca:c9:c5:0a:46:85:92:33:43:ce:
55:b5:fd:19:21:ad:f9:cb:13:8c:60:8e:7d:52:44:
f7:a1:a2:d5:03:e7:f3:54:72:7d:9b:6e:5a:0c:b3:
16:72:8b:d3:30:82:55:79:0a:9a:9a:2d:6d:0a:48:
ef:a2:f3:ad:cc:46:f3:8b:bf:53:1c:ea:3a:af:90:
f7:37:55:dc:f0:5c:d6:9b:ba:88:bd:55:90:f5:2f:
9c:12:b6:eb:5b:cd:fc:95:3e:7d:69:87:73:49:80:
69:c3:75:cf:6f:da:66:f2:7f:5b:40:44:81:07:da:
f9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DE:49:E5:6F:95:99:D3:44:3E:F6:94:50:87:3D:42:65:C9:6B:B7
X509v3 Authority Key Identifier:
keyid:2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/1-d5J5W-VmdNEPvaUUIc9QmXJa7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.249.0/24
Signature Algorithm: sha256WithRSAEncryption
73:83:0d:ea:d8:a7:35:fa:1f:8c:de:6a:b8:b0:0d:b2:da:da:
3a:0f:14:cd:bd:65:da:97:a2:b6:e3:82:c2:ad:78:71:5d:c6:
7c:84:d6:8f:d7:e0:85:d8:d5:0e:98:1b:8c:bb:9c:f3:e7:90:
30:81:d1:a4:a6:83:28:30:81:ce:3d:29:cd:87:74:28:02:f4:
12:c4:73:2b:b7:cf:8e:57:d7:62:e2:46:3d:2f:78:e1:f0:32:
96:df:84:3d:d2:6b:fb:e8:9d:39:fc:69:84:3d:97:21:ef:b4:
28:cf:83:91:73:79:bf:78:f2:4c:a4:15:ff:9f:2b:65:bf:65:
59:1c:93:34:13:fe:ee:53:d6:f0:62:61:8a:ea:4a:9e:fa:f9:
05:69:f2:ff:af:0c:ce:1c:9f:b4:de:f2:2a:6d:57:d9:43:8b:
2f:c5:b7:fa:f8:8a:98:b7:b9:f2:21:93:f1:d8:37:17:27:26:
0e:7c:fd:72:79:79:6a:c6:85:3e:3d:93:b0:16:27:14:30:ab:
c7:5e:7e:60:4e:a0:8c:9b:17:c7:29:6f:3e:ba:7a:92:70:f7:
a6:2f:9c:5e:29:e6:79:a7:cb:1e:46:73:d8:81:32:fa:c4:73:
50:2a:85:c2:fd:02:49:e0:33:aa:a4:cc:cf:be:2e:fc:a4:aa:
02:12:e6:86
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQkRPsAaIWRI4sPep7TkQioMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMzE0YmMwMGE3ZTVhZTIzMzQ5ZTA1NDA2MjkzYTdkNjA2
MGNkYTEwHhcNMjUwMTAxMjM0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWRlNDllNTZmOTU5OWQzNDQzZWY2OTQ1MDg3M2Q0MjY1Yzk2YmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PnpBb77zA5kIYkk/yrppLawmKlA
aca3R7uG4M4iQBkeg6r7T2kaPxiy0Jgt7e1UR4sBsYyh7e2yZgGizK1wPAVLBTkM
IE2cpNERvdQdOurgm1uQQ4VF2wiGKmK0qa8cKox4MgB0Y41/4cwtWOcIQMkgckuP
kMCAn7s9yXRlH0rxhKlzY0WnClYT+8rJxQpGhZIzQ85Vtf0ZIa35yxOMYI59UkT3
oaLVA+fzVHJ9m25aDLMWcovTMIJVeQqami1tCkjvovOtzEbzi79THOo6r5D3N1Xc
8FzWm7qIvVWQ9S+cErbrW838lT59aYdzSYBpw3XPb9pm8n9bQESBB9r5iwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPneSeVvlZnTRD72lFCHPUJlyWu3MB8GA1UdIwQY
MBaAFC8xS8AKflriM0ngVAYpOn1gYM2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHpGTHdBcC1XdUl6U2VCVUJpazZmV0JnemFFLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jNWY0OWQtMTBiMC00ODE4LWEwYzQt
N2MwYjliMTlmY2ZiLzEvMS1kNUo1Vy1WbWRORVB2YVVVSWM5UW1YSmE3Yy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODkvYzVmNDlkLTEwYjAtNDgxOC1hMGM0LTdjMGI5YjE5ZmNm
Yi8xL0x6Rkx3QXAtV3VJelNlQlVCaWs2ZldCZ3phRS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMPY+TAN
BgkqhkiG9w0BAQsFAAOCAQEAc4MN6tinNfofjN5quLANstraOg8Uzb1l2peituOC
wq14cV3GfITWj9fghdjVDpgbjLuc8+eQMIHRpKaDKDCBzj0pzYd0KAL0EsRzK7fP
jlfXYuJGPS944fAylt+EPdJr++idOfxphD2XIe+0KM+DkXN5v3jyTKQV/58rZb9l
WRyTNBP+7lPW8GJhiupKnvr5BWny/68MzhyftN7yKm1X2UOLL8W3+viKmLe58iGT
8dg3FycmDnz9cnl5asaFPj2TsBYnFDCrx15+YE6gjJsXxylvPrp6knD3pi+cXinm
eafLHkZz2IEy+sRzUCqFwv0CSeAzqqTMz74u/KSqAhLmhg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:12:42 2025 by rpki-client