Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/9NhpD2GhK7nhCkw4Ln2hgR-a9FI.roa
File: 9NhpD2GhK7nhCkw4Ln2hgR-a9FI.roa (raw, json)
Hash identifier: +fqLpWLcEuKJBmzQK+NoGzgKFUXuG2sR0jOCjmaF7ws=
Subject key identifier: F4:D8:69:0F:61:A1:2B:B9:E1:0A:4C:38:2E:7D:A1:81:1F:9A:F4:52
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 0194274851A79C58B3C603544D721A1B344D
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/9NhpD2GhK7nhCkw4Ln2hgR-a9FI.roa
Signing time: Thu 02 Jan 2025 13:50:38 +0000
ROA not before: Thu 02 Jan 2025 13:50:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201091
IP address blocks: 217.11.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:51:a7:9c:58:b3:c6:03:54:4d:72:1a:1b:34:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Jan 2 13:50:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4d8690f61a12bb9e10a4c382e7da1811f9af452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:33:1b:91:6f:83:8c:11:83:e0:4e:4f:70:bf:
06:3a:64:64:94:a9:33:d2:d8:ba:bd:84:c5:76:7f:
9d:15:94:3b:9b:4c:d2:e8:c3:36:b6:5c:8e:03:13:
3a:6c:90:40:d3:af:40:61:60:ee:8a:73:88:c3:47:
2d:9a:c5:c5:5f:cd:60:97:48:d9:b0:51:aa:89:6a:
82:35:8b:53:ae:d5:f7:1f:57:42:79:87:74:a8:21:
3c:9b:1c:38:55:f1:bb:96:0b:2e:04:43:f1:75:25:
50:0e:08:25:2e:33:df:a5:bf:f2:8d:f3:c5:18:2f:
4a:54:58:24:a3:52:25:e0:a0:81:6a:26:ea:02:ae:
fc:b7:51:28:58:18:00:f2:2e:a6:2a:30:91:4b:ed:
dc:17:3e:af:b3:b8:a9:60:1c:eb:03:8b:0e:77:01:
ac:a3:e1:e4:c1:4d:d9:e7:92:0b:aa:23:d3:a9:08:
9a:36:c6:8a:7f:0c:f5:fe:c9:90:1d:77:1f:f2:58:
ba:f8:f7:fc:7e:a7:25:70:4c:9e:85:62:23:0e:86:
4c:d6:8d:d0:6c:3b:d8:2d:0d:c0:f4:33:73:6b:4c:
e2:f2:98:62:82:b1:32:b9:e7:e2:8f:17:da:2c:c9:
4a:65:3f:54:5a:ac:37:3d:ce:e3:dd:a5:cd:8b:72:
d8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D8:69:0F:61:A1:2B:B9:E1:0A:4C:38:2E:7D:A1:81:1F:9A:F4:52
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/9NhpD2GhK7nhCkw4Ln2hgR-a9FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.11.134.0/24
Signature Algorithm: sha256WithRSAEncryption
00:7f:33:a7:0f:3e:42:6e:41:3a:d6:73:08:92:e8:30:68:7a:
c1:4f:07:5c:39:a9:6e:7b:86:41:2f:fb:0a:41:26:b0:a8:87:
83:70:19:60:31:24:72:80:18:74:64:e2:83:52:c3:77:ac:01:
03:19:c4:31:41:a3:e7:50:a2:77:6d:e5:71:fd:9c:47:f6:35:
82:cc:0e:c0:7b:bc:fe:f4:4c:c8:e8:f4:19:84:e9:5b:e1:87:
ff:95:1e:71:4b:cd:fa:6b:01:30:e2:92:68:8c:ff:13:20:b0:
cc:7b:aa:70:01:28:27:d2:76:d0:15:88:5c:08:c7:09:11:e0:
a3:d0:05:5c:6d:50:c0:22:d8:55:3e:3e:3e:2c:21:8d:24:02:
e7:b4:d6:5d:07:ef:21:16:60:c7:9c:6e:a0:89:ac:5c:03:38:
31:e9:10:f5:a7:4b:5b:67:22:af:44:1c:7c:48:cd:2a:8a:be:
c7:cc:8b:3b:7f:07:c3:2d:1d:61:80:79:91:fd:ef:59:6f:7f:
dd:27:cc:9d:49:1d:a7:89:20:44:de:cd:f6:75:b2:e2:05:0f:
1e:6d:cd:77:fe:68:09:7e:30:6d:3c:32:72:2b:15:8f:cd:7a:
3f:82:29:31:fe:d1:08:7c:f3:a8:19:63:e5:ca:a1:cc:cc:b1:
18:90:0f:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSFGnnFizxgNUTXIaGzRNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMGExMjMxZDFjMjdhNzU0ZTQ2ZWYxMGU5MmE3MzBhZTE1
ZDBmNTUwHhcNMjUwMTAyMTM1MDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGQ4NjkwZjYxYTEyYmI5ZTEwYTRjMzgyZTdkYTE4MTFmOWFmNDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjMbkW+DjBGD4E5PcL8GOmRklKkz
0ti6vYTFdn+dFZQ7m0zS6MM2tlyOAxM6bJBA069AYWDuinOIw0ctmsXFX81gl0jZ
sFGqiWqCNYtTrtX3H1dCeYd0qCE8mxw4VfG7lgsuBEPxdSVQDgglLjPfpb/yjfPF
GC9KVFgko1Il4KCBaibqAq78t1EoWBgA8i6mKjCRS+3cFz6vs7ipYBzrA4sOdwGs
o+HkwU3Z55ILqiPTqQiaNsaKfwz1/smQHXcf8li6+Pf8fqclcEyehWIjDoZM1o3Q
bDvYLQ3A9DNza0zi8phigrEyuefijxfaLMlKZT9UWqw3Pc7j3aXNi3LYcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPTYaQ9hoSu54QpMOC59oYEfmvRSMB8GA1UdIwQY
MBaAFHAKEjHRwnp1TkbvEOkqcwrhXQ9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgt
YWI3OWEzNzg5ZjhmLzEvOU5ocEQyR2hLN25oQ2t3NExuMmhnUi1hOUZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgtYWI3OWEzNzg5Zjhm
LzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2QuGMA0G
CSqGSIb3DQEBCwUAA4IBAQAAfzOnDz5CbkE61nMIkugwaHrBTwdcOalue4ZBL/sK
QSawqIeDcBlgMSRygBh0ZOKDUsN3rAEDGcQxQaPnUKJ3beVx/ZxH9jWCzA7Ae7z+
9EzI6PQZhOlb4Yf/lR5xS836awEw4pJojP8TILDMe6pwASgn0nbQFYhcCMcJEeCj
0AVcbVDAIthVPj4+LCGNJALntNZdB+8hFmDHnG6giaxcAzgx6RD1p0tbZyKvRBx8
SM0qir7HzIs7fwfDLR1hgHmR/e9Zb3/dJ8ydSR2niSBE3s32dbLiBQ8ebc13/mgJ
fjBtPDJyKxWPzXo/gikx/tEIfPOoGWPlyqHMzLEYkA94
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:25 2025 by rpki-client