Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/50013a-fb19-45cf-ad8a-326c1e370bcf/1/9I-u6ADQVIEsYEnt-98udkV7KQs.roa
File: 9I-u6ADQVIEsYEnt-98udkV7KQs.roa (raw, json)
Hash identifier: G/Ydupvv9a8XmxtOC6F7xHpIIcne60flzttt+W4vJNA=
Subject key identifier: F4:8F:AE:E8:00:D0:54:81:2C:60:49:ED:FB:DF:2E:76:45:7B:29:0B
Certificate issuer: /CN=820625b669e89a75ae78df0081d6f01b67c7b3cf
Certificate serial: 0194258F4A920604F5509D5A1BDBB292DF3B
Authority key identifier: 82:06:25:B6:69:E8:9A:75:AE:78:DF:00:81:D6:F0:1B:67:C7:B3:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ggYltmnomnWueN8AgdbwG2fHs88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/50013a-fb19-45cf-ad8a-326c1e370bcf/1/9I-u6ADQVIEsYEnt-98udkV7KQs.roa
Signing time: Thu 02 Jan 2025 05:48:55 +0000
ROA not before: Thu 02 Jan 2025 05:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56655
IP address blocks: 194.110.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4a:92:06:04:f5:50:9d:5a:1b:db:b2:92:df:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=820625b669e89a75ae78df0081d6f01b67c7b3cf
Validity
Not Before: Jan 2 05:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f48faee800d054812c6049edfbdf2e76457b290b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:44:2d:e5:00:63:a3:b4:a7:33:48:c6:45:c7:
d7:d9:d2:a1:e4:9e:93:a6:31:c0:c3:c9:7c:b0:35:
6e:aa:eb:b7:d1:72:13:69:b5:a6:40:61:f3:fc:86:
60:b5:e3:fa:f3:6d:b1:f6:76:fc:f8:ab:62:ff:cb:
bb:56:92:3d:7e:4b:ee:1e:33:00:cb:ac:21:e9:43:
e7:bf:ab:a1:af:9d:10:00:41:f2:c9:f9:35:c6:83:
16:6e:6a:5d:0d:f7:34:ac:c4:f7:9f:15:1a:77:27:
3d:eb:c3:bb:06:8b:e1:23:f3:b4:91:cd:11:10:b7:
a9:34:f3:45:e2:df:37:32:28:77:47:fe:c5:31:01:
87:0b:7d:c1:1f:ae:12:b3:91:fa:f8:26:ec:70:d3:
11:80:51:77:4c:4c:4f:c7:2d:e8:fe:3a:69:b8:22:
75:cc:ab:44:c6:4f:d6:51:cb:bc:02:ca:db:41:b4:
b3:6a:3b:50:1d:f4:ec:c2:62:bf:f3:ad:f5:3c:ce:
bd:cd:66:b8:f4:87:7f:c3:05:de:2b:0c:6c:de:db:
b4:17:a3:53:e9:31:57:ea:ed:a5:40:20:97:5e:9a:
e8:88:41:f2:69:03:8f:7c:2f:cd:63:52:b1:f3:ff:
0f:b0:8f:81:e5:e4:79:61:76:b6:c7:5a:6d:54:53:
26:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8F:AE:E8:00:D0:54:81:2C:60:49:ED:FB:DF:2E:76:45:7B:29:0B
X509v3 Authority Key Identifier:
keyid:82:06:25:B6:69:E8:9A:75:AE:78:DF:00:81:D6:F0:1B:67:C7:B3:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggYltmnomnWueN8AgdbwG2fHs88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/50013a-fb19-45cf-ad8a-326c1e370bcf/1/9I-u6ADQVIEsYEnt-98udkV7KQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/50013a-fb19-45cf-ad8a-326c1e370bcf/1/ggYltmnomnWueN8AgdbwG2fHs88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.207.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:b6:a9:a9:30:26:a1:59:34:12:3d:db:97:eb:83:a2:f2:61:
5f:a2:82:5d:5d:d6:d5:a8:6d:ba:55:f3:40:6b:c8:a4:62:11:
9c:be:5a:6d:e4:5e:d7:18:ba:31:25:dd:c6:8f:b6:4b:f0:ce:
d4:e5:48:52:c2:9b:6e:ec:ad:8b:19:85:cf:c6:fc:5d:96:14:
bd:c5:d2:28:4e:77:e1:50:fe:37:4f:0e:84:92:ea:2f:64:17:
b4:b9:bb:c4:61:72:e1:15:e9:c7:3f:e6:d0:93:9e:8a:2e:b7:
45:00:48:90:26:29:10:d9:56:ca:a9:2e:f6:2d:19:d8:30:cd:
9c:7f:91:8e:af:f6:c6:c9:4f:af:46:0b:6f:0e:55:ed:c5:b4:
92:81:5b:34:9d:e8:29:0e:a7:c6:aa:74:b0:65:da:52:bf:91:
ab:f2:fa:a9:b5:d0:ce:84:aa:8f:28:5c:e7:fc:99:80:e1:87:
3a:61:69:2c:ed:45:28:8b:37:e8:5b:b1:1d:ae:cc:b0:d7:4f:
14:3f:82:c9:c7:4e:f3:80:1f:95:1a:ad:b2:3f:a3:6d:e0:3a:
9a:2b:0b:70:1b:68:9c:01:73:82:ae:a0:3a:e6:ce:84:c7:24:
98:75:30:e6:f2:73:b8:12:11:ce:01:0e:65:1a:e5:c2:2a:d0:
91:ee:0a:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj0qSBgT1UJ1aG9uykt87MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMDYyNWI2NjllODlhNzVhZTc4ZGYwMDgxZDZmMDFiNjdj
N2IzY2YwHhcNMjUwMTAyMDU0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDhmYWVlODAwZDA1NDgxMmM2MDQ5ZWRmYmRmMmU3NjQ1N2IyOTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0Qt5QBjo7SnM0jGRcfX2dKh5J6T
pjHAw8l8sDVuquu30XITabWmQGHz/IZgteP6822x9nb8+Kti/8u7VpI9fkvuHjMA
y6wh6UPnv6uhr50QAEHyyfk1xoMWbmpdDfc0rMT3nxUadyc968O7BovhI/O0kc0R
ELepNPNF4t83Mih3R/7FMQGHC33BH64Ss5H6+CbscNMRgFF3TExPxy3o/jppuCJ1
zKtExk/WUcu8AsrbQbSzajtQHfTswmK/8631PM69zWa49Id/wwXeKwxs3tu0F6NT
6TFX6u2lQCCXXproiEHyaQOPfC/NY1Kx8/8PsI+B5eR5YXa2x1ptVFMmowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPSPrugA0FSBLGBJ7fvfLnZFeykLMB8GA1UdIwQY
MBaAFIIGJbZp6Jp1rnjfAIHW8Btnx7PPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2dZbHRtbm9tbld1ZU44QWdkYndHMmZIczg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81MDAxM2EtZmIxOS00NWNmLWFkOGEt
MzI2YzFlMzcwYmNmLzEvOUktdTZBRFFWSUVzWUVudC05OHVka1Y3S1FzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC81MDAxM2EtZmIxOS00NWNmLWFkOGEtMzI2YzFlMzcwYmNm
LzEvZ2dZbHRtbm9tbld1ZU44QWdkYndHMmZIczg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwm7PMA0G
CSqGSIb3DQEBCwUAA4IBAQC2tqmpMCahWTQSPduX64Oi8mFfooJdXdbVqG26VfNA
a8ikYhGcvlpt5F7XGLoxJd3Gj7ZL8M7U5UhSwptu7K2LGYXPxvxdlhS9xdIoTnfh
UP43Tw6EkuovZBe0ubvEYXLhFenHP+bQk56KLrdFAEiQJikQ2VbKqS72LRnYMM2c
f5GOr/bGyU+vRgtvDlXtxbSSgVs0negpDqfGqnSwZdpSv5Gr8vqptdDOhKqPKFzn
/JmA4Yc6YWks7UUoizfoW7Edrsyw108UP4LJx07zgB+VGq2yP6Nt4DqaKwtwG2ic
AXOCrqA65s6ExySYdTDm8nO4EhHOAQ5lGuXCKtCR7gpP
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:52:00 2025 by rpki-client