Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/CRGhbBrd8rm_fFrDE2Ioy1N5NRQ.roa
File: CRGhbBrd8rm_fFrDE2Ioy1N5NRQ.roa (raw, json)
Hash identifier: VH5biAOV6Cy5Giu5m8tHzDNkXlFYhr3VGlYSiMF6VIE=
Subject key identifier: 09:11:A1:6C:1A:DD:F2:B9:BF:7C:5A:C3:13:62:28:CB:53:79:35:14
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 0194266BC01FE7E931F676218ADE077A84E9
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/CRGhbBrd8rm_fFrDE2Ioy1N5NRQ.roa
Signing time: Thu 02 Jan 2025 09:49:43 +0000
ROA not before: Thu 02 Jan 2025 09:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207590
IP address blocks: 94.154.1.0/24 maxlen: 24
94.154.1.1/32 maxlen: 32
2a0f:f3c0::/29 maxlen: 29
2a0f:f3c0::/48 maxlen: 48
2a0f:f3c0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c0:1f:e7:e9:31:f6:76:21:8a:de:07:7a:84:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: Jan 2 09:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0911a16c1addf2b9bf7c5ac3136228cb53793514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:dd:f8:75:71:26:41:f3:bb:3b:67:d8:73:
3a:59:aa:1b:54:60:7e:55:a3:9f:34:02:0e:7f:d0:
09:16:a1:33:56:8b:64:3d:a6:eb:ca:74:c9:1b:99:
d9:fb:0e:b3:cb:a4:6e:22:f9:39:68:b4:fd:66:bf:
0c:e8:6c:7e:74:b7:85:cc:02:e3:ee:f2:50:d7:80:
60:55:99:bb:55:44:a4:f6:c3:7a:52:36:76:ec:7e:
bb:86:de:87:55:dc:3b:56:dc:0f:ef:82:7c:e5:23:
0d:1f:01:2c:32:26:93:6a:90:e8:d0:c8:c8:f3:fd:
a3:86:20:d4:0e:39:5b:c6:61:39:5f:e1:a7:89:ad:
88:d3:58:68:28:ea:7a:06:83:82:e0:5d:96:e8:30:
5c:88:4e:60:78:0e:9f:3c:f8:a5:75:32:f7:80:94:
d7:83:35:d4:86:ab:6e:d1:df:38:9f:4b:67:f3:6b:
ed:fb:42:9c:b1:0b:85:98:a4:07:29:e2:e6:87:58:
df:cb:d8:fe:3f:42:26:e7:f1:b0:4a:c8:84:3b:a3:
99:57:8e:3a:94:a0:a1:e4:70:95:9d:65:1f:e0:82:
f6:63:01:b0:04:81:a5:76:86:4c:7a:fe:a8:a3:1b:
ea:8a:7c:d1:df:0e:71:48:da:14:3a:a9:c7:f9:9a:
1e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:11:A1:6C:1A:DD:F2:B9:BF:7C:5A:C3:13:62:28:CB:53:79:35:14
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/CRGhbBrd8rm_fFrDE2Ioy1N5NRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.1.0/24
IPv6:
2a0f:f3c0::/29
Signature Algorithm: sha256WithRSAEncryption
9c:0b:9b:01:1a:1e:22:1e:56:80:af:74:e0:78:f4:60:95:25:
5b:ce:3c:2a:ff:5c:80:fc:56:11:92:c5:8e:28:3e:db:4b:07:
92:30:4e:de:7b:d4:f2:19:30:d9:a5:98:ea:65:9c:d1:a3:9e:
84:04:41:85:cb:89:3f:56:96:35:aa:6d:c8:8b:01:b6:a6:a2:
c8:b7:ec:de:30:d9:5c:67:6b:b5:5b:b7:e6:2d:4c:d1:65:d1:
0a:8d:41:b0:58:18:74:9e:14:12:4e:a4:5d:fb:67:85:85:ef:
74:54:33:b2:4d:5b:7e:28:2a:21:7b:18:eb:cc:1b:e0:95:cd:
4d:5e:5e:77:ff:1b:17:58:73:02:1f:ed:11:22:fc:ae:88:71:
35:44:fb:98:f4:d5:1c:2f:e5:29:11:72:0b:86:c9:ae:0a:08:
43:3b:93:68:05:9e:05:a1:6e:48:72:ca:4e:2b:ca:77:95:95:
af:40:76:9c:e2:cb:da:a0:de:3a:08:6e:18:9c:cd:73:94:e8:
78:ee:6a:1e:f9:f8:d3:60:a0:71:ad:b5:06:d6:10:44:08:02:
fd:ea:9b:a1:eb:28:31:4b:46:05:3f:b0:cd:dc:e8:65:20:b6:
48:35:f2:31:bf:74:97:87:75:67:2e:ef:32:37:fd:fe:7f:08:
02:3b:eb:4e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQma8Af5+kx9nYhit4HeoTpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YTNlYjE3NWY3YjU3OTA2YzgwZjUwOGUxNWY2M2UwM2Yw
YjdlZjgwHhcNMjUwMTAyMDk0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTExYTE2YzFhZGRmMmI5YmY3YzVhYzMxMzYyMjhjYjUzNzkzNTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnULd+HVxJkHzuztn2HM6WaobVGB+
VaOfNAIOf9AJFqEzVotkPabrynTJG5nZ+w6zy6RuIvk5aLT9Zr8M6Gx+dLeFzALj
7vJQ14BgVZm7VUSk9sN6UjZ27H67ht6HVdw7VtwP74J85SMNHwEsMiaTapDo0MjI
8/2jhiDUDjlbxmE5X+Gnia2I01hoKOp6BoOC4F2W6DBciE5geA6fPPildTL3gJTX
gzXUhqtu0d84n0tn82vt+0KcsQuFmKQHKeLmh1jfy9j+P0Im5/GwSsiEO6OZV446
lKCh5HCVnWUf4IL2YwGwBIGldoZMev6ooxvqinzR3w5xSNoUOqnH+ZoeywIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAkRoWwa3fK5v3xawxNiKMtTeTUUMB8GA1UdIwQY
MBaAFMSj6xdfe1eQbID1COFfY+A/C374MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1Zjkt
ZmNiNGQyMGJjZDc1LzEvQ1JHaGJCcmQ4cm1fZkZyREUySW95MU41TlJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1ZjktZmNiNGQyMGJjZDc1
LzEveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXpoBMA0E
AgACMAcDBQMqD/PAMA0GCSqGSIb3DQEBCwUAA4IBAQCcC5sBGh4iHlaAr3TgePRg
lSVbzjwq/1yA/FYRksWOKD7bSweSME7ee9TyGTDZpZjqZZzRo56EBEGFy4k/VpY1
qm3IiwG2pqLIt+zeMNlcZ2u1W7fmLUzRZdEKjUGwWBh0nhQSTqRd+2eFhe90VDOy
TVt+KCohexjrzBvglc1NXl53/xsXWHMCH+0RIvyuiHE1RPuY9NUcL+UpEXILhsmu
CghDO5NoBZ4FoW5IcspOK8p3lZWvQHac4svaoN46CG4YnM1zlOh47moe+fjTYKBx
rbUG1hBECAL96puh6ygxS0YFP7DN3OhlILZINfIxv3SXh3VnLu8yN/3+fwgCO+tO
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:53:32 2025 by rpki-client