Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/V0avlIfWr1Ry2dGFNI3vVU-t6qU.roa
File: V0avlIfWr1Ry2dGFNI3vVU-t6qU.roa (raw, json)
Hash identifier: 9Z/Tt+Wupiygby78OxWX59dKpP6JLPmGNyGTYRjbjHQ=
Subject key identifier: 57:46:AF:94:87:D6:AF:54:72:D9:D1:85:34:8D:EF:55:4F:AD:EA:A5
Certificate issuer: /CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Certificate serial: 01942143E0928C6C608A0B940A579C1FFFD1
Authority key identifier: 7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/V0avlIfWr1Ry2dGFNI3vVU-t6qU.roa
Signing time: Wed 01 Jan 2025 09:48:04 +0000
ROA not before: Wed 01 Jan 2025 09:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58043
IP address blocks: 194.76.244.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e0:92:8c:6c:60:8a:0b:94:0a:57:9c:1f:ff:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Validity
Not Before: Jan 1 09:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5746af9487d6af5472d9d185348def554fadeaa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:de:1e:56:44:75:f5:6e:d6:8b:9a:2b:2b:
2d:15:70:d7:c8:a2:a9:8c:89:a8:8c:80:c6:34:92:
4e:dd:56:04:83:13:df:d1:5f:23:0c:20:68:76:34:
8b:96:b1:20:0a:ec:46:82:c7:4a:86:01:d1:51:f1:
63:69:db:7a:86:ed:63:84:e2:bf:e7:65:e9:23:ce:
27:5c:ce:da:89:fa:bd:d3:0a:09:e2:97:65:8d:31:
c1:d8:7e:95:9e:20:59:88:a5:d4:72:b7:88:f7:00:
d7:a4:48:ea:a2:8f:db:af:2b:dc:9a:10:01:b1:93:
c6:9f:5c:3a:78:85:4b:86:83:c7:c1:fc:b8:11:45:
97:72:20:ac:2c:f6:e8:0f:8d:cf:cc:78:97:43:f5:
53:b1:51:f1:7e:a4:bc:35:a7:68:25:9d:10:ba:82:
a6:d7:18:75:9a:21:ae:5a:22:0c:2c:fd:b6:bd:b3:
a0:37:60:92:62:7e:41:33:c4:05:35:66:85:a5:d7:
5b:fe:89:45:50:de:9a:ce:57:d4:c9:ce:08:20:cf:
1a:ef:b1:83:17:1a:37:9d:55:cd:5e:c5:96:f5:1b:
8e:9d:ba:6a:aa:90:03:b6:16:7a:b1:23:7b:8f:dc:
5b:ef:25:81:81:7c:6e:55:9a:76:e2:d3:86:eb:b0:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:46:AF:94:87:D6:AF:54:72:D9:D1:85:34:8D:EF:55:4F:AD:EA:A5
X509v3 Authority Key Identifier:
keyid:7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/V0avlIfWr1Ry2dGFNI3vVU-t6qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.244.0/24
Signature Algorithm: sha256WithRSAEncryption
78:95:b6:17:f7:3a:ea:a5:3a:45:5c:9b:56:98:34:69:45:6a:
dd:68:89:78:9c:6f:73:d1:5b:42:fd:5a:4c:9d:3d:e4:3b:60:
f9:ab:0f:03:c6:37:b2:f8:18:8c:1b:eb:b9:fd:b6:c0:5e:11:
88:3d:4e:ef:c3:a1:6e:e1:f9:da:14:de:9a:f2:9e:4d:30:a9:
1e:4c:58:b2:19:1f:71:1a:28:8c:8c:28:36:a0:22:f7:01:98:
92:91:70:76:fb:e7:d3:1d:f5:f2:cc:41:de:3b:92:42:22:1d:
21:38:67:4a:c1:6c:2e:08:30:6f:84:4f:26:f8:77:63:4f:46:
42:e8:1f:ce:53:71:76:d1:97:b8:12:94:1c:b2:21:b3:52:9c:
42:dd:9b:59:29:a5:07:0c:2d:cd:f8:d9:82:64:ec:4a:e7:95:
4d:0e:ac:f5:ca:f5:e2:1a:69:b1:93:10:ea:b4:ba:b9:b6:e1:
b3:82:21:88:52:96:ed:0e:95:32:72:26:c4:12:9e:28:5d:56:
bc:49:15:4e:dc:de:a4:c8:9a:fe:d5:60:45:0c:89:92:54:53:
d7:e1:f1:43:80:8c:78:e1:1c:5d:e4:87:ff:43:6f:58:2c:4c:
b3:e7:23:2d:6d:64:5d:41:d9:fd:c3:1c:e0:5b:94:1f:bd:f4:
20:11:e2:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ+CSjGxgiguUClecH//RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZDE4YTZhNDk5MTBjYzMzMWRjOTExMTRhZTU5YjcxODVk
NWYzMGQwHhcNMjUwMTAxMDk0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzQ2YWY5NDg3ZDZhZjU0NzJkOWQxODUzNDhkZWY1NTRmYWRlYWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJreHlZEdfVu1ouaKystFXDXyKKp
jImojIDGNJJO3VYEgxPf0V8jDCBodjSLlrEgCuxGgsdKhgHRUfFjadt6hu1jhOK/
52XpI84nXM7aifq90woJ4pdljTHB2H6VniBZiKXUcreI9wDXpEjqoo/bryvcmhAB
sZPGn1w6eIVLhoPHwfy4EUWXciCsLPboD43PzHiXQ/VTsVHxfqS8NadoJZ0QuoKm
1xh1miGuWiIMLP22vbOgN2CSYn5BM8QFNWaFpddb/olFUN6azlfUyc4IIM8a77GD
Fxo3nVXNXsWW9RuOnbpqqpADthZ6sSN7j9xb7yWBgXxuVZp24tOG67AXMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFdGr5SH1q9UctnRhTSN71VPreqlMB8GA1UdIwQY
MBaAFH/RimpJkQzDMdyREUrlm3GF1fMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjlHS2FrbVJETU14M0pFUlN1V2JjWVhWOHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wOTQ3ZjItMjJjYS00N2NiLTg5YWQt
M2U1MGE1ZjAxOTk4LzEvVjBhdmxJZldyMVJ5MmRHRk5JM3ZWVS10NnFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8wOTQ3ZjItMjJjYS00N2NiLTg5YWQtM2U1MGE1ZjAxOTk4
LzEvZjlHS2FrbVJETU14M0pFUlN1V2JjWVhWOHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkz0MA0G
CSqGSIb3DQEBCwUAA4IBAQB4lbYX9zrqpTpFXJtWmDRpRWrdaIl4nG9z0VtC/VpM
nT3kO2D5qw8Dxjey+BiMG+u5/bbAXhGIPU7vw6Fu4fnaFN6a8p5NMKkeTFiyGR9x
GiiMjCg2oCL3AZiSkXB2++fTHfXyzEHeO5JCIh0hOGdKwWwuCDBvhE8m+HdjT0ZC
6B/OU3F20Ze4EpQcsiGzUpxC3ZtZKaUHDC3N+NmCZOxK55VNDqz1yvXiGmmxkxDq
tLq5tuGzgiGIUpbtDpUycibEEp4oXVa8SRVO3N6kyJr+1WBFDImSVFPX4fFDgIx4
4Rxd5If/Q29YLEyz5yMtbWRdQdn9wxzgW5QfvfQgEeJZ
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:17 2025 by rpki-client