Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/785tweZ-YHn9U8-ha0ja24xwcz4.roa
File: 785tweZ-YHn9U8-ha0ja24xwcz4.roa (raw, json)
Hash identifier: IyUKM9NcNfmMwS9a6wdhdtqxjfkAp93tgTjqGCn2gAU=
Subject key identifier: EF:CE:6D:C1:E6:7E:60:79:FD:53:CF:A1:6B:48:DA:DB:8C:70:73:3E
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 0194228DD17C4FEA17D048317AAEB4661EA9
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/785tweZ-YHn9U8-ha0ja24xwcz4.roa
Signing time: Wed 01 Jan 2025 15:48:26 +0000
ROA not before: Wed 01 Jan 2025 15:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135391
IP address blocks: 194.59.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d1:7c:4f:ea:17:d0:48:31:7a:ae:b4:66:1e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Jan 1 15:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efce6dc1e67e6079fd53cfa16b48dadb8c70733e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:64:25:60:a5:5c:9c:70:3e:14:bf:b5:4e:0b:
06:dc:b7:d4:bb:d4:42:39:30:fb:aa:ef:21:bd:48:
63:9d:58:ad:61:dc:90:2a:b4:a1:69:94:3d:f5:4a:
74:ac:07:fe:6f:aa:dd:5a:3e:a8:67:f7:b3:6f:ff:
3c:8d:53:3f:61:36:0b:2a:70:d9:c0:f0:bd:04:31:
56:44:13:64:67:73:7b:fe:b3:6d:a4:00:d2:c9:ef:
6d:5e:ce:b9:4a:32:77:85:7c:66:36:82:df:1f:88:
a6:f6:21:03:b3:0d:22:ce:aa:d2:1c:61:13:e2:08:
f4:06:16:05:fe:25:35:b2:cf:b3:7a:d7:83:20:f9:
b4:f6:0c:7f:a4:9c:d7:25:b1:ec:ef:de:e4:b7:d3:
ba:17:57:8b:e1:1c:80:8e:d3:be:82:1f:88:21:22:
d7:0a:1e:c5:3a:74:1b:3a:ce:d0:84:0e:ec:1a:37:
7e:a7:4f:0f:a3:66:dc:44:3f:6a:75:9e:5e:e1:84:
53:69:a6:d9:81:71:3d:fa:c5:f3:4c:19:e7:bb:9f:
37:da:34:9e:82:0a:52:a3:1d:7b:21:8f:9c:ff:1b:
2f:c7:2b:96:0f:13:b9:11:55:2a:c0:65:e8:8e:86:
11:8e:87:69:7b:4b:10:72:5e:62:e9:10:f4:a5:3f:
50:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CE:6D:C1:E6:7E:60:79:FD:53:CF:A1:6B:48:DA:DB:8C:70:73:3E
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/785tweZ-YHn9U8-ha0ja24xwcz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.6.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b1:10:42:fe:33:c5:a6:5d:35:d2:b8:7e:c8:1d:79:03:48:
7a:a6:5e:e5:e1:51:f2:a5:60:59:90:bb:a5:88:28:8a:b7:42:
68:b8:57:1c:6c:13:93:fe:9c:84:43:28:6c:c6:84:c5:65:76:
de:92:90:6d:f0:9c:4c:24:a3:6c:ff:d0:a3:f3:16:ab:68:85:
d1:83:ba:cc:af:e5:04:c5:9e:81:4d:d0:16:7e:b9:d1:88:0e:
0c:fc:cb:16:5d:2e:59:92:29:e5:01:93:8e:6a:e2:3e:b3:c9:
19:94:04:a9:bd:00:39:de:99:b7:fe:36:5e:eb:a7:3d:9a:5a:
cb:51:ea:8c:cf:53:cc:5c:b1:c3:33:70:50:93:ee:d7:35:0d:
d9:62:22:ae:07:b9:8f:17:de:a9:05:06:59:0e:4d:1f:3f:ef:
09:1f:a3:20:2d:28:ec:41:24:aa:4b:f4:a7:bc:b6:af:9d:85:
b3:10:d4:b8:63:ba:ae:8f:43:d1:2d:46:4f:a4:ef:61:8e:9e:
58:43:31:d8:a6:03:fd:64:ba:73:4b:50:a5:59:a4:72:6d:89:
b0:3e:9f:97:46:e8:2e:31:e5:15:21:f5:88:48:3c:2c:4e:5d:
30:8d:8e:67:05:7f:43:47:ac:bd:66:0e:ee:51:bc:1a:78:50:
d7:7b:2b:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijdF8T+oX0Egxeq60Zh6pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3
YTI2NmEwHhcNMjUwMTAxMTU0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmNlNmRjMWU2N2U2MDc5ZmQ1M2NmYTE2YjQ4ZGFkYjhjNzA3MzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGQlYKVcnHA+FL+1TgsG3LfUu9RC
OTD7qu8hvUhjnVitYdyQKrShaZQ99Up0rAf+b6rdWj6oZ/ezb/88jVM/YTYLKnDZ
wPC9BDFWRBNkZ3N7/rNtpADSye9tXs65SjJ3hXxmNoLfH4im9iEDsw0izqrSHGET
4gj0BhYF/iU1ss+zeteDIPm09gx/pJzXJbHs797kt9O6F1eL4RyAjtO+gh+IISLX
Ch7FOnQbOs7QhA7sGjd+p08Po2bcRD9qdZ5e4YRTaabZgXE9+sXzTBnnu5832jSe
ggpSox17IY+c/xsvxyuWDxO5EVUqwGXojoYRjodpe0sQcl5i6RD0pT9QCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO/ObcHmfmB5/VPPoWtI2tuMcHM+MB8GA1UdIwQY
MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt
YWRhNWMyMGUzZjdiLzEvNzg1dHdlWi1ZSG45VTgtaGEwamEyNHh3Y3o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi
LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjsGMA0G
CSqGSIb3DQEBCwUAA4IBAQB7sRBC/jPFpl010rh+yB15A0h6pl7l4VHypWBZkLul
iCiKt0JouFccbBOT/pyEQyhsxoTFZXbekpBt8JxMJKNs/9Cj8xaraIXRg7rMr+UE
xZ6BTdAWfrnRiA4M/MsWXS5ZkinlAZOOauI+s8kZlASpvQA53pm3/jZe66c9mlrL
UeqMz1PMXLHDM3BQk+7XNQ3ZYiKuB7mPF96pBQZZDk0fP+8JH6MgLSjsQSSqS/Sn
vLavnYWzENS4Y7quj0PRLUZPpO9hjp5YQzHYpgP9ZLpzS1ClWaRybYmwPp+XRugu
MeUVIfWISDwsTl0wjY5nBX9DR6y9Zg7uUbwaeFDXeytA
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:20 2025 by rpki-client