Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/c9o5omZ6L0iy-4hOihQzK8OPns4.roa
File: c9o5omZ6L0iy-4hOihQzK8OPns4.roa (raw, json)
Hash identifier: 1kJZAp6d0yNMzeCujPn+gVtlVbLTFpBiKQFw2wsKEIc=
Subject key identifier: 73:DA:39:A2:66:7A:2F:48:B2:FB:88:4E:8A:14:33:2B:C3:8F:9E:CE
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 01941FFA250C69B5F237D6D22DF0F4DE2248
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/c9o5omZ6L0iy-4hOihQzK8OPns4.roa
Signing time: Wed 01 Jan 2025 03:47:54 +0000
ROA not before: Wed 01 Jan 2025 03:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197799
IP address blocks: 31.193.200.0/21 maxlen: 21
2a03:1e40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:25:0c:69:b5:f2:37:d6:d2:2d:f0:f4:de:22:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: Jan 1 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73da39a2667a2f48b2fb884e8a14332bc38f9ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:90:db:8d:11:78:ef:1c:03:ee:24:55:f7:
ac:04:e9:2d:fa:df:90:9c:8b:0c:a5:ca:71:d0:50:
14:39:43:59:d4:76:64:7f:07:f5:2a:96:e5:84:72:
4b:8b:b1:e7:72:fe:57:4a:52:32:54:7a:28:3c:d9:
fd:22:af:38:b3:18:f2:dd:10:8c:11:88:79:ab:88:
62:2f:95:9e:c0:c0:e1:1a:24:ad:19:d1:af:5f:49:
16:ec:9d:45:d0:3a:89:f0:75:a0:5a:f4:23:9e:72:
98:e3:0d:43:68:85:3b:a9:50:1a:5b:3b:3a:7f:5f:
71:19:1c:bf:e6:48:7a:1a:ac:8b:34:64:5f:d7:d0:
4e:d6:10:4e:32:7b:cd:5a:d4:02:84:cf:22:9b:da:
20:f0:04:ee:8e:a4:9e:97:1c:6a:26:99:26:0b:0b:
9d:3b:b7:ef:be:80:59:59:4f:70:9b:e5:6e:6e:8f:
a6:4e:d0:a2:cd:bc:ad:7a:d0:28:96:36:31:2d:5d:
a1:1f:6f:48:65:3d:7a:22:90:56:f3:60:d5:2e:74:
cd:67:3b:d8:8d:51:16:c3:0a:ee:55:0e:13:85:76:
e2:1c:04:7c:61:ee:66:8a:b8:0c:30:eb:3d:8c:db:
44:96:ea:9c:ba:1d:4b:55:9f:02:ce:c2:6d:51:9f:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DA:39:A2:66:7A:2F:48:B2:FB:88:4E:8A:14:33:2B:C3:8F:9E:CE
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/c9o5omZ6L0iy-4hOihQzK8OPns4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.200.0/21
IPv6:
2a03:1e40::/32
Signature Algorithm: sha256WithRSAEncryption
32:ea:e7:96:c4:f5:a8:67:e8:8f:52:a1:06:d8:09:f5:90:2a:
62:04:90:5a:61:59:db:3a:61:cf:a9:20:e7:05:0a:d4:e0:22:
06:ac:ad:8b:77:53:49:08:34:1d:b5:d3:16:ce:ff:33:2b:e2:
3d:37:8a:95:00:75:20:34:c7:08:8d:4e:55:5f:18:db:bb:ed:
73:88:b1:7a:78:a0:67:31:c4:f5:fc:aa:1e:37:d1:dc:85:1b:
25:c9:97:7b:a7:75:b5:71:be:ad:e6:46:03:64:6a:ff:35:34:
33:43:0c:67:6b:85:d0:82:0b:04:eb:32:ba:1c:be:a7:ca:70:
88:71:97:86:b2:bb:06:6f:fb:09:1d:4b:38:a9:68:dd:38:66:
5f:69:a5:a9:a8:93:0c:e3:43:07:1f:1f:66:d4:a0:fe:f8:0d:
e8:d0:7b:6f:d8:de:47:73:e1:67:80:b1:35:05:f7:cd:81:15:
29:bf:5e:83:07:95:41:ce:33:eb:b1:59:12:6a:55:4f:43:5a:
88:36:89:de:a1:c7:0f:bb:ea:f4:e1:9a:ea:f5:dd:2f:e1:6d:
0c:89:4e:ba:d2:b8:06:ad:65:2c:1b:2e:cd:c1:5d:34:c4:fb:
58:1b:61:b2:cc:ac:7f:7e:e2:ca:ef:76:95:fd:4f:86:73:6f:
2f:54:bd:63
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQf+iUMabXyN9bSLfD03iJIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZWM1Yzk0NWQwMzUzNWQ5NjczMDk1MTEwNTQ2YjFjOThl
NjE4NjAwHhcNMjUwMTAxMDM0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2RhMzlhMjY2N2EyZjQ4YjJmYjg4NGU4YTE0MzMyYmMzOGY5ZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/2Q240ReO8cA+4kVfesBOkt+t+Q
nIsMpcpx0FAUOUNZ1HZkfwf1KpblhHJLi7Hncv5XSlIyVHooPNn9Iq84sxjy3RCM
EYh5q4hiL5WewMDhGiStGdGvX0kW7J1F0DqJ8HWgWvQjnnKY4w1DaIU7qVAaWzs6
f19xGRy/5kh6GqyLNGRf19BO1hBOMnvNWtQChM8im9og8ATujqSelxxqJpkmCwud
O7fvvoBZWU9wm+Vubo+mTtCizbytetAoljYxLV2hH29IZT16IpBW82DVLnTNZzvY
jVEWwwruVQ4ThXbiHAR8Ye5mirgMMOs9jNtEluqcuh1LVZ8CzsJtUZ/BxQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHPaOaJmei9IsvuITooUMyvDj57OMB8GA1UdIwQY
MBaAFN/sXJRdA1NdlnMJURBUaxyY5hhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mNDA2YzMtMjc4OS00M2E1LWIxZDYt
ZGRkZGVmMjQxMjE2LzEvYzlvNW9tWjZMMGl5LTRoT2loUXpLOE9QbnM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mNDA2YzMtMjc4OS00M2E1LWIxZDYtZGRkZGVmMjQxMjE2
LzEvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDH8HIMA0E
AgACMAcDBQAqAx5AMA0GCSqGSIb3DQEBCwUAA4IBAQAy6ueWxPWoZ+iPUqEG2An1
kCpiBJBaYVnbOmHPqSDnBQrU4CIGrK2Ld1NJCDQdtdMWzv8zK+I9N4qVAHUgNMcI
jU5VXxjbu+1ziLF6eKBnMcT1/KoeN9HchRslyZd7p3W1cb6t5kYDZGr/NTQzQwxn
a4XQggsE6zK6HL6nynCIcZeGsrsGb/sJHUs4qWjdOGZfaaWpqJMM40MHHx9m1KD+
+A3o0Htv2N5Hc+FngLE1BffNgRUpv16DB5VBzjPrsVkSalVPQ1qINoneoccPu+r0
4Zrq9d0v4W0MiU660rgGrWUsGy7NwV00xPtYG2GyzKx/fuLK73aV/U+Gc28vVL1j
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:13 2025 by rpki-client