Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/1-0L6QihwgCIdPcxlSZx30BVCxIU.roa
File: 1-0L6QihwgCIdPcxlSZx30BVCxIU.roa (raw, json)
Hash identifier: r/v9bB2/O8eoqo0SdsHJ+0cV0GGG/FpWoOUcPgNpIWM=
Subject key identifier: FB:42:FA:42:28:70:80:22:1D:3D:CC:65:49:9C:77:D0:15:42:C4:85
Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial: 019425FD9C9287C5C3222C87B5DA645E1B90
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/1-0L6QihwgCIdPcxlSZx30BVCxIU.roa
Signing time: Thu 02 Jan 2025 07:49:25 +0000
ROA not before: Thu 02 Jan 2025 07:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204163
IP address blocks: 194.152.213.0/24 maxlen: 24
194.152.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:9c:92:87:c5:c3:22:2c:87:b5:da:64:5e:1b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Validity
Not Before: Jan 2 07:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb42fa42287080221d3dcc65499c77d01542c485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:79:64:75:6d:6e:1f:23:39:d8:75:dc:2c:bd:
80:c4:54:a1:27:1b:1a:a6:ef:95:e8:43:d8:1c:3d:
bd:64:c9:63:f2:5c:29:5a:e0:20:03:08:6f:0a:4c:
50:94:d0:ff:c3:19:21:ac:24:98:9c:14:6b:77:2e:
7e:4b:db:4f:6c:5f:b8:a7:ec:5c:ac:46:1f:24:69:
4d:ce:c3:43:33:39:a7:73:35:26:d5:55:69:c6:88:
94:30:9c:37:42:43:e4:c9:13:ca:1a:5f:c8:7d:f9:
1f:46:68:e4:1d:15:83:da:8d:36:3e:da:83:08:37:
c2:4f:bb:13:3e:3d:b6:d9:27:4c:d2:96:91:2c:59:
03:e6:c7:94:14:0d:15:51:23:cc:c4:dd:e5:75:42:
18:85:61:bf:78:ed:90:2c:70:db:d9:a2:55:f7:69:
3a:13:48:48:bf:2f:a6:79:bf:27:00:36:9f:87:6d:
40:e4:08:41:23:4b:ea:e3:da:35:a2:83:dc:b3:90:
80:94:df:a8:00:9c:73:1f:c0:eb:ae:48:c2:72:44:
dd:ff:b3:c8:6a:c8:82:08:e0:8a:cd:31:4a:f8:69:
a8:f5:42:c0:a5:c4:73:3a:1e:87:0a:0c:83:36:83:
d6:60:57:6f:58:31:65:9f:23:8d:8d:ee:0e:27:7d:
92:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:42:FA:42:28:70:80:22:1D:3D:CC:65:49:9C:77:D0:15:42:C4:85
X509v3 Authority Key Identifier:
keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/1-0L6QihwgCIdPcxlSZx30BVCxIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.152.213.0/24
194.152.238.0/24
Signature Algorithm: sha256WithRSAEncryption
98:92:1c:f9:e4:15:4a:c7:b3:f2:ff:46:19:33:ac:ab:8c:d5:
e1:e8:60:0b:3b:7c:da:fc:ea:74:37:fc:bf:e3:27:cf:c0:e0:
99:93:c6:98:bc:26:33:e2:b1:59:98:c7:bb:b5:ba:43:a6:ba:
d0:b6:49:a9:c5:b1:10:88:f2:70:85:e9:2f:2c:01:7d:bf:32:
ec:e7:e0:3a:d7:7b:ba:11:3c:a6:38:59:6e:a1:1c:99:35:68:
1a:f7:83:d8:e3:5a:76:a4:49:c4:a6:38:d1:93:1c:64:a1:92:
c9:f6:5d:c0:fe:c8:03:81:e8:c9:71:27:ae:e0:85:17:71:f2:
f1:e3:1a:8f:2f:e8:d8:20:b5:b0:c4:ba:c1:81:c7:04:c1:6b:
c7:f2:68:1b:70:27:db:a3:40:42:87:9d:d4:5a:12:f2:67:6b:
da:a7:1b:e3:3b:57:8b:8a:13:99:89:84:33:27:94:a3:6b:6c:
05:35:08:c0:35:96:7d:66:a3:d2:cb:9c:2d:4f:f1:35:db:3f:
74:92:38:70:09:fa:8c:09:b6:af:a4:5c:8e:52:9d:9e:fb:df:
b4:88:b7:07:50:c9:21:4e:91:32:8e:bf:93:c2:c6:fa:e5:e4:
3a:08:5e:f2:3f:da:59:f6:3d:1d:35:68:fe:6c:44:e3:29:75:
4f:f5:14:e1
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZQl/ZySh8XDIiyHtdpkXhuQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMGY0ODcyYWQxYzFmNGZjYjIxM2I2YjJlZGIzODhhMmQ5
YzlhMjMwHhcNMjUwMTAyMDc0OTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjQyZmE0MjI4NzA4MDIyMWQzZGNjNjU0OTljNzdkMDE1NDJjNDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHlkdW1uHyM52HXcLL2AxFShJxsa
pu+V6EPYHD29ZMlj8lwpWuAgAwhvCkxQlND/wxkhrCSYnBRrdy5+S9tPbF+4p+xc
rEYfJGlNzsNDMzmnczUm1VVpxoiUMJw3QkPkyRPKGl/IffkfRmjkHRWD2o02PtqD
CDfCT7sTPj222SdM0paRLFkD5seUFA0VUSPMxN3ldUIYhWG/eO2QLHDb2aJV92k6
E0hIvy+meb8nADafh21A5AhBI0vq49o1ooPcs5CAlN+oAJxzH8DrrkjCckTd/7PI
asiCCOCKzTFK+Gmo9ULApcRzOh6HCgyDNoPWYFdvWDFlnyONje4OJ32SbwIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPtC+kIocIAiHT3MZUmcd9AVQsSFMB8GA1UdIwQY
MBaAFA4PSHKtHB9PyyE7ay7bOIotnJojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQt
YzAxZjgwYTFjODA1LzEvMS0wTDZRaWh3Z0NJZFBjeGxTWngzMEJWQ3hJVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzcvZGM1YTYyLTA2NGItNDViMC1iODlkLWMwMWY4MGExYzgw
NS8xL0RnOUljcTBjSDBfTElUdHJMdHM0aWkyY21pTS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMKY1QME
AMKY7jANBgkqhkiG9w0BAQsFAAOCAQEAmJIc+eQVSsez8v9GGTOsq4zV4ehgCzt8
2vzqdDf8v+Mnz8DgmZPGmLwmM+KxWZjHu7W6Q6a60LZJqcWxEIjycIXpLywBfb8y
7OfgOtd7uhE8pjhZbqEcmTVoGveD2ONadqRJxKY40ZMcZKGSyfZdwP7IA4HoyXEn
ruCFF3Hy8eMajy/o2CC1sMS6wYHHBMFrx/JoG3An26NAQoed1FoS8mdr2qcb4ztX
i4oTmYmEMyeUo2tsBTUIwDWWfWaj0sucLU/xNds/dJI4cAn6jAm2r6RcjlKdnvvf
tIi3B1DJIU6RMo6/k8LG+uXkOghe8j/aWfY9HTVo/mxE4yl1T/UU4Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:15:06 2025 by rpki-client