Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/c4nEiNEeJD2vFf8wumBi1yYvs6E.roa
File: c4nEiNEeJD2vFf8wumBi1yYvs6E.roa (raw, json)
Hash identifier: aF0QKy6JcPOas0fgNBBJCKQQxMBB/xZccd3mvICIadY=
Subject key identifier: 73:89:C4:88:D1:1E:24:3D:AF:15:FF:30:BA:60:62:D7:26:2F:B3:A1
Certificate issuer: /CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
Certificate serial: 01941F8C4E6AD898F8C01566AE7EA78B9A8A
Authority key identifier: 16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/c4nEiNEeJD2vFf8wumBi1yYvs6E.roa
Signing time: Wed 01 Jan 2025 01:47:56 +0000
ROA not before: Wed 01 Jan 2025 01:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35574
IP address blocks: 194.187.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4e:6a:d8:98:f8:c0:15:66:ae:7e:a7:8b:9a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
Validity
Not Before: Jan 1 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7389c488d11e243daf15ff30ba6062d7262fb3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:a6:b9:b9:67:06:6f:5b:72:d6:99:30:c5:
16:90:4c:22:a8:95:d8:0b:6f:60:8e:3b:e7:dd:b5:
d8:fd:1e:0f:9b:28:54:a7:70:9d:bf:29:12:62:60:
f2:79:81:3f:d7:0f:77:04:4b:0a:17:8a:86:92:a7:
c5:3f:89:5b:1d:3e:d9:3e:c6:ed:1c:93:a0:97:b3:
88:7e:fc:43:b1:3b:b2:1c:7f:7e:88:a5:ba:fb:b2:
f3:71:8b:ac:93:f3:9f:6a:40:50:86:0d:96:52:df:
cb:7e:39:77:a4:27:70:d8:51:53:cd:82:62:f4:49:
06:73:e8:11:5c:a1:14:3c:54:ba:84:80:03:30:51:
d5:00:ef:2b:11:d1:0c:91:98:56:e5:59:3a:1b:97:
c9:dd:33:48:a8:f5:07:5c:ba:34:fc:1b:31:cd:4d:
fd:8c:08:da:96:45:65:20:0c:5e:ab:f1:d9:b9:53:
0d:93:1d:dd:56:11:53:06:2a:96:3d:4a:bb:9b:7e:
98:66:d7:a6:96:8f:15:f5:91:fb:b0:e5:6f:a7:35:
cc:38:d8:39:04:02:2a:9c:30:f0:41:56:56:65:58:
e2:69:7a:2a:0b:90:e1:c7:2f:08:ad:96:21:45:f5:
c0:af:4a:a5:66:87:20:fe:e8:65:89:f1:01:dd:a7:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:89:C4:88:D1:1E:24:3D:AF:15:FF:30:BA:60:62:D7:26:2F:B3:A1
X509v3 Authority Key Identifier:
keyid:16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/c4nEiNEeJD2vFf8wumBi1yYvs6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.172.0/22
Signature Algorithm: sha256WithRSAEncryption
af:67:9d:dd:06:6d:ed:e7:3a:6d:d8:f5:9d:4b:c8:c7:33:07:
5f:c4:4c:13:92:4e:de:b4:7e:56:2b:9b:9e:58:cd:cf:8d:fd:
5f:16:31:6f:a4:6c:98:8c:ae:02:6c:67:a4:f7:be:19:3b:b3:
f4:09:37:d5:d8:77:9e:04:e6:f4:fd:f1:a5:38:62:33:a8:72:
fc:b0:c9:5a:ae:a6:43:a4:62:fd:c4:94:e3:47:75:bb:02:47:
04:cf:16:ea:f8:26:f3:fe:6d:d4:41:de:f2:4c:41:bf:0c:9c:
30:ef:96:d1:33:6d:76:80:98:08:3d:4e:74:aa:a0:f2:d1:01:
47:94:e8:54:d9:f2:5f:d9:9c:e2:59:59:d5:b2:51:39:06:0b:
06:86:16:4b:78:b2:b1:f3:b4:8a:a0:5b:51:63:95:f4:d4:5a:
4c:42:cc:5b:5d:61:13:c7:cc:d4:4a:82:ed:c4:59:c4:52:0f:
8d:62:50:b5:04:d8:02:85:06:35:92:96:70:86:fa:ff:11:22:
47:7d:46:db:07:58:5c:37:97:fd:0b:d2:cf:0d:72:60:7f:47:
a6:b6:08:48:61:b2:73:a5:2e:cd:f4:22:99:ac:f2:06:3f:d1:
5b:24:c6:10:21:3f:ad:df:67:5a:05:84:51:00:df:ab:61:40:
ec:c6:ae:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjE5q2Jj4wBVmrn6ni5qKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmE5ODY2OTgwMDVkNTdlN2I5MmY3YTM4ZDIxOWJiYjgw
ZmUxZmYwHhcNMjUwMTAxMDE0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Mzg5YzQ4OGQxMWUyNDNkYWYxNWZmMzBiYTYwNjJkNzI2MmZiM2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BGmublnBm9bctaZMMUWkEwiqJXY
C29gjjvn3bXY/R4PmyhUp3CdvykSYmDyeYE/1w93BEsKF4qGkqfFP4lbHT7ZPsbt
HJOgl7OIfvxDsTuyHH9+iKW6+7LzcYusk/OfakBQhg2WUt/Lfjl3pCdw2FFTzYJi
9EkGc+gRXKEUPFS6hIADMFHVAO8rEdEMkZhW5Vk6G5fJ3TNIqPUHXLo0/BsxzU39
jAjalkVlIAxeq/HZuVMNkx3dVhFTBiqWPUq7m36YZtemlo8V9ZH7sOVvpzXMONg5
BAIqnDDwQVZWZVjiaXoqC5Dhxy8IrZYhRfXAr0qlZocg/uhlifEB3afCkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHOJxIjRHiQ9rxX/MLpgYtcmL7OhMB8GA1UdIwQY
MBaAFBZqmGaYAF1X57kvejjSGbu4D+H/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1xWVpwZ0FYVmZudVM5Nk9OSVp1N2dQNGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kN2RlZTYtYzc0My00MmQ3LTkwNjAt
ZGM3NzYyNTRjYmY2LzEvYzRuRWlORWVKRDJ2RmY4d3VtQmkxeVl2czZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9kN2RlZTYtYzc0My00MmQ3LTkwNjAtZGM3NzYyNTRjYmY2
LzEvRm1xWVpwZ0FYVmZudVM5Nk9OSVp1N2dQNGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwrusMA0G
CSqGSIb3DQEBCwUAA4IBAQCvZ53dBm3t5zpt2PWdS8jHMwdfxEwTkk7etH5WK5ue
WM3Pjf1fFjFvpGyYjK4CbGek974ZO7P0CTfV2HeeBOb0/fGlOGIzqHL8sMlarqZD
pGL9xJTjR3W7AkcEzxbq+Cbz/m3UQd7yTEG/DJww75bRM212gJgIPU50qqDy0QFH
lOhU2fJf2ZziWVnVslE5BgsGhhZLeLKx87SKoFtRY5X01FpMQsxbXWETx8zUSoLt
xFnEUg+NYlC1BNgChQY1kpZwhvr/ESJHfUbbB1hcN5f9C9LPDXJgf0emtghIYbJz
pS7N9CKZrPIGP9FbJMYQIT+t32daBYRRAN+rYUDsxq5F
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:26:08 2025 by rpki-client