Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/DAyoRGxiyUSOri-3K-BVUpwpyYY.roa
File: DAyoRGxiyUSOri-3K-BVUpwpyYY.roa (raw, json)
Hash identifier: +KqrZCct6zjyTbHGPjBd2ldOfCdTDJvohDZemG1iB18=
Subject key identifier: 0C:0C:A8:44:6C:62:C9:44:8E:AE:2F:B7:2B:E0:55:52:9C:29:C9:86
Certificate issuer: /CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Certificate serial: 0194206833330666851839103C28C49BF35A
Authority key identifier: CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/DAyoRGxiyUSOri-3K-BVUpwpyYY.roa
Signing time: Wed 01 Jan 2025 05:48:07 +0000
ROA not before: Wed 01 Jan 2025 05:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206613
IP address blocks: 195.39.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:33:33:06:66:85:18:39:10:3c:28:c4:9b:f3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Validity
Not Before: Jan 1 05:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c0ca8446c62c9448eae2fb72be055529c29c986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:46:62:27:2f:3c:05:c5:15:91:64:e2:eb:
23:ac:4e:a3:eb:4e:6c:f2:6a:d3:56:89:f9:9e:ff:
c5:41:61:f0:12:e7:54:cc:16:2b:7f:ac:7a:7d:bb:
9d:95:2e:e0:c7:86:2b:b8:64:d9:6c:48:c7:ce:dc:
30:b2:55:97:d3:00:bb:9c:40:af:cf:c8:81:48:a0:
81:77:03:4a:64:03:55:c6:fb:61:8c:e5:8d:c9:1a:
0e:17:af:bc:b4:af:d1:21:07:43:35:80:7c:7a:f7:
bd:36:4b:76:ae:a5:8d:b1:13:43:db:b2:14:d5:ac:
31:64:64:26:d5:39:7a:1a:0d:a6:1e:7c:b8:c4:e1:
b1:d3:06:72:2a:ae:0e:4b:54:c1:25:24:45:57:24:
29:dd:ce:93:9b:da:81:da:51:fb:a8:ff:f3:91:43:
a2:0c:50:6b:2d:42:68:9b:7d:2d:35:bb:6c:6b:65:
62:8e:49:d0:0a:ea:b8:5c:58:bc:30:49:c3:ca:cd:
ef:12:30:a7:38:2a:1c:a3:6d:cc:9a:80:0d:28:41:
42:62:d8:1b:13:e1:7c:e4:1e:ae:e5:bf:06:25:38:
a1:ed:0a:d2:b5:af:ee:f4:16:50:86:19:53:3a:b4:
e6:64:de:58:84:ac:d9:34:17:f7:12:7b:b2:94:77:
cf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0C:A8:44:6C:62:C9:44:8E:AE:2F:B7:2B:E0:55:52:9C:29:C9:86
X509v3 Authority Key Identifier:
keyid:CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/DAyoRGxiyUSOri-3K-BVUpwpyYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.39.239.0/24
Signature Algorithm: sha256WithRSAEncryption
13:67:6a:57:8f:ee:f1:df:57:ae:77:76:1e:92:53:9b:fa:bc:
2b:74:e9:4d:f9:9a:ab:4f:13:e7:6a:6a:1f:f5:df:df:ae:f7:
94:d3:7d:ba:b2:c3:f4:71:de:b3:8a:f2:76:0a:9f:9a:84:d3:
46:28:5f:be:46:57:67:34:0f:c5:38:cd:01:39:ef:f3:89:47:
48:c5:2c:60:ba:3e:0b:86:8d:d5:de:1a:16:80:dd:07:a8:ff:
06:97:33:9d:33:c1:be:f7:6f:56:2f:4b:60:8d:ec:fc:43:70:
cc:64:d7:9a:a6:ed:60:35:54:17:2c:fc:23:f2:9f:91:12:e5:
18:94:91:90:fa:15:46:85:f1:d3:c9:5a:9d:0e:55:8b:5b:68:
a1:91:79:83:03:2a:c1:06:72:7f:5c:bc:f3:91:70:fb:7d:df:
e3:ff:0e:74:30:56:75:c3:ae:bd:d5:ad:55:e3:09:79:4e:d3:
4e:f6:f5:7a:07:22:9d:51:12:b3:aa:3c:2a:7c:61:6c:6b:0f:
ad:62:5f:81:db:8b:96:15:15:6d:04:62:63:66:e0:02:aa:b1:
fb:0f:17:0e:d4:2e:95:5c:55:19:d9:54:a5:32:be:53:4e:bc:
ec:14:82:36:3f:19:52:52:06:05:dd:35:2b:3c:54:93:e9:d2:
dd:58:2f:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaDMzBmaFGDkQPCjEm/NaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMTc5ZTg5YWFhMmQ1OWVlZTRiZDY4NThmYWU1YmIzZmRh
NzQ5NjEwHhcNMjUwMTAxMDU0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzBjYTg0NDZjNjJjOTQ0OGVhZTJmYjcyYmUwNTU1MjljMjljOTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY1GYicvPAXFFZFk4usjrE6j605s
8mrTVon5nv/FQWHwEudUzBYrf6x6fbudlS7gx4YruGTZbEjHztwwslWX0wC7nECv
z8iBSKCBdwNKZANVxvthjOWNyRoOF6+8tK/RIQdDNYB8eve9Nkt2rqWNsRND27IU
1awxZGQm1Tl6Gg2mHny4xOGx0wZyKq4OS1TBJSRFVyQp3c6Tm9qB2lH7qP/zkUOi
DFBrLUJom30tNbtsa2VijknQCuq4XFi8MEnDys3vEjCnOCoco23MmoANKEFCYtgb
E+F85B6u5b8GJTih7QrSta/u9BZQhhlTOrTmZN5YhKzZNBf3EnuylHfPLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAwMqERsYslEjq4vtyvgVVKcKcmGMB8GA1UdIwQY
MBaAFM4XnomqotWe7kvWhY+uW7P9p0lhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemhlZWlhcWkxWjd1UzlhRmo2NWJzXzJuU1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81OWU5ZGEtOWMyYy00MGNiLTlhNjUt
M2Q3OTY1NTM5YmM3LzEvREF5b1JHeGl5VVNPcmktM0stQlZVcHdweVlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy81OWU5ZGEtOWMyYy00MGNiLTlhNjUtM2Q3OTY1NTM5YmM3
LzEvemhlZWlhcWkxWjd1UzlhRmo2NWJzXzJuU1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyfvMA0G
CSqGSIb3DQEBCwUAA4IBAQATZ2pXj+7x31eud3YeklOb+rwrdOlN+ZqrTxPnamof
9d/frveU0326ssP0cd6zivJ2Cp+ahNNGKF++RldnNA/FOM0BOe/ziUdIxSxguj4L
ho3V3hoWgN0HqP8GlzOdM8G+929WL0tgjez8Q3DMZNeapu1gNVQXLPwj8p+REuUY
lJGQ+hVGhfHTyVqdDlWLW2ihkXmDAyrBBnJ/XLzzkXD7fd/j/w50MFZ1w6691a1V
4wl5TtNO9vV6ByKdURKzqjwqfGFsaw+tYl+B24uWFRVtBGJjZuACqrH7DxcO1C6V
XFUZ2VSlMr5TTrzsFII2PxlSUgYF3TUrPFST6dLdWC+j
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:02:18 2025 by rpki-client