Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/11v4ujiE85pODnajO4MIvDa-EEI.roa
File: 11v4ujiE85pODnajO4MIvDa-EEI.roa (raw, json)
Hash identifier: 899jJDpYjGC19E0C+sSPG4BflRjWNeXH81Y2tQUCHZ0=
Subject key identifier: D7:5B:F8:BA:38:84:F3:9A:4E:0E:76:A3:3B:83:08:BC:36:BE:10:42
Certificate issuer: /CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Certificate serial: 019423D72CFBEBE79C61FCB62924E243A9D7
Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/11v4ujiE85pODnajO4MIvDa-EEI.roa
Signing time: Wed 01 Jan 2025 21:48:11 +0000
ROA not before: Wed 01 Jan 2025 21:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59480
IP address blocks: 95.215.220.0/23 maxlen: 24
2001:67c:1038::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:2c:fb:eb:e7:9c:61:fc:b6:29:24:e2:43:a9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Validity
Not Before: Jan 1 21:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d75bf8ba3884f39a4e0e76a33b8308bc36be1042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4d:34:c2:8a:3b:16:fc:7f:a6:11:99:fb:1e:
db:e7:00:37:03:09:88:cd:e5:bb:aa:8f:0f:d3:a0:
8d:0a:b8:35:10:69:4c:81:7a:b6:ac:8f:02:ce:3d:
20:66:c5:10:d8:94:09:d3:0c:07:5c:03:d8:7e:fd:
ca:9a:0b:24:22:b9:45:6e:29:14:2d:04:6f:01:02:
4f:86:b9:c1:0e:2a:15:13:6a:5c:73:72:1d:96:6b:
f5:03:7c:78:d2:dd:e7:ba:03:58:cd:5e:a2:3b:6a:
43:a2:c0:0f:88:41:8d:63:68:d7:f9:39:bb:30:d0:
da:6e:90:5b:e1:fc:6a:94:d3:aa:16:a9:51:31:3c:
a3:e6:c7:1c:af:74:aa:59:29:25:f3:54:a9:a3:08:
a6:42:7c:55:be:c8:21:e0:e9:3b:a1:de:2a:fb:df:
7d:cf:d5:06:87:90:14:0c:02:6e:81:51:5b:aa:22:
8e:f0:2d:a5:6d:63:0c:e4:26:2e:95:a0:e9:f4:ff:
cc:b7:19:1e:7f:dc:57:70:e7:31:51:75:ea:9f:16:
d2:d1:48:95:f4:4c:51:fa:47:fa:bf:a7:be:40:3a:
72:3f:84:1a:07:1c:a4:26:1f:bf:26:68:6c:99:41:
79:87:95:17:ff:a8:c7:63:71:07:ed:14:dc:79:01:
4a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5B:F8:BA:38:84:F3:9A:4E:0E:76:A3:3B:83:08:BC:36:BE:10:42
X509v3 Authority Key Identifier:
keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/11v4ujiE85pODnajO4MIvDa-EEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.220.0/23
IPv6:
2001:67c:1038::/48
Signature Algorithm: sha256WithRSAEncryption
84:5c:fe:67:d3:df:96:c9:d1:5a:cc:0d:92:ba:a9:34:5f:8c:
1a:ab:3f:0d:f7:a4:38:bd:93:b4:89:07:4e:62:9a:5d:89:53:
e1:d8:5a:57:40:84:ae:08:dc:ca:b4:98:55:dc:3b:40:6c:9b:
82:4c:23:df:27:0a:29:70:af:9b:8f:78:18:97:97:7a:3e:f4:
72:b3:33:2c:b1:77:c1:d1:74:57:eb:0b:45:dc:6a:da:0c:7b:
f7:e7:1f:ad:76:68:62:4d:b0:e3:88:05:c6:05:20:72:94:a9:
c6:d5:21:bf:bd:23:56:d4:04:45:1d:bc:ea:83:ea:76:e2:81:
ad:4b:f2:f3:ad:1a:61:66:6f:3a:af:22:9f:73:36:b7:18:ab:
59:d0:c0:8e:41:96:61:8a:ae:09:79:cf:95:16:82:18:3f:39:
46:da:87:f0:92:c1:68:af:b6:d8:ef:36:23:c3:26:e9:91:a9:
94:34:c1:aa:95:41:85:1a:84:fe:ed:5a:b0:20:ca:f6:7b:bd:
55:44:e3:1d:6d:f6:82:ce:b6:e6:44:48:a3:a0:6c:b6:25:d6:
ac:1a:1c:8f:cb:5c:66:32:4b:d1:21:1c:eb:aa:7c:ef:4d:84:
f0:18:7d:b8:8a:c4:66:f8:14:29:30:7e:31:f4:ec:9c:db:79:
74:bf:2e:bd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQj1yz76+ecYfy2KSTiQ6nXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNDg1ODc1Yzg0NzBlNmFhY2RjOTQ3NDIxMDVmMzBjNTk3
YWMyYmIwHhcNMjUwMTAxMjE0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzViZjhiYTM4ODRmMzlhNGUwZTc2YTMzYjgzMDhiYzM2YmUxMDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3k00woo7Fvx/phGZ+x7b5wA3AwmI
zeW7qo8P06CNCrg1EGlMgXq2rI8Czj0gZsUQ2JQJ0wwHXAPYfv3KmgskIrlFbikU
LQRvAQJPhrnBDioVE2pcc3Idlmv1A3x40t3nugNYzV6iO2pDosAPiEGNY2jX+Tm7
MNDabpBb4fxqlNOqFqlRMTyj5sccr3SqWSkl81SpowimQnxVvsgh4Ok7od4q+999
z9UGh5AUDAJugVFbqiKO8C2lbWMM5CYulaDp9P/Mtxkef9xXcOcxUXXqnxbS0UiV
9ExR+kf6v6e+QDpyP4QaBxykJh+/JmhsmUF5h5UX/6jHY3EH7RTceQFKwQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNdb+Lo4hPOaTg52ozuDCLw2vhBCMB8GA1UdIwQY
MBaAFPJIWHXIRw5qrNyUdCEF8wxZesK7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGtoWWRjaEhEbXFzM0pSMElRWHpERmw2d3JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81YTNmMGItODZmNS00MDZlLTkxZDUt
OGZkNGMwMjQ0ODhlLzEvMTF2NHVqaUU4NXBPRG5hak80TUl2RGEtRUVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81YTNmMGItODZmNS00MDZlLTkxZDUtOGZkNGMwMjQ0ODhl
LzEvOGtoWWRjaEhEbXFzM0pSMElRWHpERmw2d3JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBX9fcMA8E
AgACMAkDBwAgAQZ8EDgwDQYJKoZIhvcNAQELBQADggEBAIRc/mfT35bJ0VrMDZK6
qTRfjBqrPw33pDi9k7SJB05iml2JU+HYWldAhK4I3Mq0mFXcO0Bsm4JMI98nCilw
r5uPeBiXl3o+9HKzMyyxd8HRdFfrC0XcatoMe/fnH612aGJNsOOIBcYFIHKUqcbV
Ib+9I1bUBEUdvOqD6nbiga1L8vOtGmFmbzqvIp9zNrcYq1nQwI5BlmGKrgl5z5UW
ghg/OUbah/CSwWivttjvNiPDJumRqZQ0waqVQYUahP7tWrAgyvZ7vVVE4x1t9oLO
tuZESKOgbLYl1qwaHI/LXGYyS9EhHOuqfO9NhPAYfbiKxGb4FCkwfjH07JzbeXS/
Lr0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:12 2025 by rpki-client