Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/dCfTqcxg62Lir67qVkgBChTuqA4.roa
File: dCfTqcxg62Lir67qVkgBChTuqA4.roa (raw, json)
Hash identifier: UBu+ymeFM9aQ8J18E3tvVpuPsYqEYn9P+xx2d6+/UxI=
Subject key identifier: 74:27:D3:A9:CC:60:EB:62:E2:AF:AE:EA:56:48:01:0A:14:EE:A8:0E
Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Certificate serial: 0194252155FC8B80F4CF248A8056563120F8
Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/dCfTqcxg62Lir67qVkgBChTuqA4.roa
Signing time: Thu 02 Jan 2025 03:48:49 +0000
ROA not before: Thu 02 Jan 2025 03:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6799
IP address blocks: 194.125.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:55:fc:8b:80:f4:cf:24:8a:80:56:56:31:20:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Validity
Not Before: Jan 2 03:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7427d3a9cc60eb62e2afaeea5648010a14eea80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f2:d4:56:86:a2:8d:df:0e:85:a4:a8:b5:74:
40:ae:05:4a:69:82:45:c8:91:89:c4:e4:64:4a:45:
53:f1:f3:4b:f3:17:2a:3c:c4:d2:bb:40:4d:d9:de:
f3:41:18:56:52:d3:f3:7d:b1:cd:aa:7f:b8:88:66:
66:20:66:ce:29:63:6b:d9:c2:d9:c7:44:b8:ba:07:
b2:7a:70:ec:71:ef:1c:91:b5:02:c9:63:74:d0:93:
28:8a:04:1e:2a:4b:45:df:85:e5:63:f3:fd:02:c1:
d7:54:3a:98:79:0d:76:62:c7:a0:19:73:48:6b:ae:
67:5f:14:27:8f:6b:f8:53:91:61:be:67:21:a9:af:
0b:a1:ff:ac:3b:1b:09:34:2c:8c:20:62:65:ce:8c:
50:0f:6a:c6:c2:07:32:98:71:29:f4:47:b3:08:b2:
73:be:3f:18:b8:b1:19:a6:4f:a6:be:9b:1e:68:f8:
20:09:d5:32:03:31:96:0f:e3:2c:39:0a:93:b6:bf:
40:32:d2:8a:79:c0:98:26:1a:5d:e0:d9:0e:97:4e:
e5:c1:a0:7f:2b:a3:0e:f0:51:28:4f:5b:3b:c6:ba:
ec:fb:ed:42:ce:64:83:27:b8:44:b7:83:c2:a8:6c:
57:29:da:1c:f6:a1:56:44:ea:f8:dc:15:5a:d0:d1:
c5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:27:D3:A9:CC:60:EB:62:E2:AF:AE:EA:56:48:01:0A:14:EE:A8:0E
X509v3 Authority Key Identifier:
keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/dCfTqcxg62Lir67qVkgBChTuqA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.125.252.0/23
Signature Algorithm: sha256WithRSAEncryption
83:d6:ea:ac:8a:18:1c:90:77:56:2c:44:ec:6e:34:46:79:58:
19:1d:cf:26:9f:30:79:95:8c:91:37:3e:6f:a5:49:1b:7c:f2:
32:e2:2d:87:a3:92:a8:05:d2:07:ad:34:d3:1a:ac:6b:74:38:
91:16:68:d0:81:87:47:5e:a6:99:20:39:55:2c:92:44:2f:3b:
0d:43:5b:da:31:6e:d1:cf:78:8a:76:b8:c1:27:8a:b9:c9:73:
1e:93:bb:7a:28:2a:ee:5f:9f:ed:9e:da:5b:b9:29:a5:1e:8e:
7f:68:8d:77:56:1b:a7:32:c5:82:99:65:e0:df:92:17:34:86:
c5:b7:17:fb:55:4f:64:78:c9:16:b7:64:ba:f1:63:15:b3:17:
81:c5:57:ee:2d:2e:08:5b:4c:17:8e:87:23:27:f0:a1:76:ed:
cb:7d:6e:cc:39:b2:1e:a0:ae:6c:4a:34:b0:16:a3:9a:1c:cd:
03:e9:47:14:c3:33:6e:35:aa:44:39:43:59:f4:72:6f:ca:fd:
cb:b1:d9:d3:e7:db:d5:43:bf:8a:20:4a:c0:e8:9e:02:0a:66:
05:8d:e3:ba:9c:7c:b9:67:b1:0c:08:54:9b:39:cd:5e:de:6b:
b4:2c:eb:e0:6e:6e:80:88:ba:38:71:11:48:79:c6:03:44:a4:
4d:a1:58:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIVX8i4D0zySKgFZWMSD4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOWNmZDE1NzQ0MWY2OTQyOGRkMWY2MzYxY2E0ZjRhZTQy
Y2IzOGEwHhcNMjUwMTAyMDM0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDI3ZDNhOWNjNjBlYjYyZTJhZmFlZWE1NjQ4MDEwYTE0ZWVhODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfLUVoaijd8OhaSotXRArgVKaYJF
yJGJxORkSkVT8fNL8xcqPMTSu0BN2d7zQRhWUtPzfbHNqn+4iGZmIGbOKWNr2cLZ
x0S4ugeyenDsce8ckbUCyWN00JMoigQeKktF34XlY/P9AsHXVDqYeQ12YsegGXNI
a65nXxQnj2v4U5Fhvmchqa8Lof+sOxsJNCyMIGJlzoxQD2rGwgcymHEp9EezCLJz
vj8YuLEZpk+mvpseaPggCdUyAzGWD+MsOQqTtr9AMtKKecCYJhpd4NkOl07lwaB/
K6MO8FEoT1s7xrrs++1CzmSDJ7hEt4PCqGxXKdoc9qFWROr43BVa0NHFCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHQn06nMYOti4q+u6lZIAQoU7qgOMB8GA1UdIwQY
MBaAFKuc/RV0QfaUKN0fY2HKT0rkLLOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83ZDMxNGUtNDJjZC00MmNlLTk4NWUt
OTU0ZjI2OTEzZjQzLzEvZENmVHFjeGc2MkxpcjY3cVZrZ0JDaFR1cUE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi83ZDMxNGUtNDJjZC00MmNlLTk4NWUtOTU0ZjI2OTEzZjQz
LzEvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwn38MA0G
CSqGSIb3DQEBCwUAA4IBAQCD1uqsihgckHdWLETsbjRGeVgZHc8mnzB5lYyRNz5v
pUkbfPIy4i2Ho5KoBdIHrTTTGqxrdDiRFmjQgYdHXqaZIDlVLJJELzsNQ1vaMW7R
z3iKdrjBJ4q5yXMek7t6KCruX5/tntpbuSmlHo5/aI13VhunMsWCmWXg35IXNIbF
txf7VU9keMkWt2S68WMVsxeBxVfuLS4IW0wXjocjJ/Chdu3LfW7MObIeoK5sSjSw
FqOaHM0D6UcUwzNuNapEOUNZ9HJvyv3LsdnT59vVQ7+KIErA6J4CCmYFjeO6nHy5
Z7EMCFSbOc1e3mu0LOvgbm6AiLo4cRFIecYDRKRNoVhs
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:38:46 2025 by rpki-client