Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/a86URqUjdV6NGR4_Rkuxzk9nvOQ.roa
File: a86URqUjdV6NGR4_Rkuxzk9nvOQ.roa (raw, json)
Hash identifier: QkDObpBQb/2gqaSVK2qoFjm69vfVIidcXe/y1fY7jKg=
Subject key identifier: 6B:CE:94:46:A5:23:75:5E:8D:19:1E:3F:46:4B:B1:CE:4F:67:BC:E4
Certificate issuer: /CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Certificate serial: 0194274824B21215EDA40BB11E9D36D4904B
Authority key identifier: 36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/a86URqUjdV6NGR4_Rkuxzk9nvOQ.roa
Signing time: Thu 02 Jan 2025 13:50:26 +0000
ROA not before: Thu 02 Jan 2025 13:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2852
IP address blocks: 158.196.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:24:b2:12:15:ed:a4:0b:b1:1e:9d:36:d4:90:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Validity
Not Before: Jan 2 13:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bce9446a523755e8d191e3f464bb1ce4f67bce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1d:42:5f:0c:e1:e0:bf:08:80:82:8b:67:24:
85:16:e4:e0:2d:f4:4e:22:de:c4:86:c5:b3:ea:56:
6f:70:f9:92:6c:e3:8f:b6:ba:ef:08:b3:7a:0d:7b:
24:88:b8:60:bb:24:65:e5:55:0d:65:4a:91:06:de:
c9:ab:29:7d:2e:60:87:d5:88:a8:46:91:48:b5:f1:
39:ba:c0:d7:d7:54:07:78:95:97:71:e7:d6:a8:b7:
b3:0b:59:bc:1b:31:0c:2d:51:d8:2e:ac:25:f7:da:
38:6f:10:16:8b:f8:5f:15:18:83:c5:47:10:06:7f:
29:1e:39:e8:c4:39:78:a2:6b:5d:4d:55:58:cb:fa:
82:46:67:20:40:22:fd:54:a7:00:f5:36:ce:27:59:
85:40:14:b9:7d:9b:90:ab:23:43:2d:9c:c6:91:c6:
b9:2c:83:12:c1:df:91:36:15:fc:3b:db:fa:3a:79:
e6:a0:53:91:32:dc:ef:1f:4f:37:c9:9c:89:87:3e:
55:0d:bf:38:12:c4:f0:ad:c5:48:15:76:e4:da:83:
39:cd:50:3a:92:37:19:1c:11:9f:e9:bf:52:21:19:
1d:3f:a4:44:fd:e4:30:10:9c:f8:e1:13:93:e6:53:
33:6b:7e:e9:86:90:98:1b:10:cb:29:c4:1e:1a:73:
2a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CE:94:46:A5:23:75:5E:8D:19:1E:3F:46:4B:B1:CE:4F:67:BC:E4
X509v3 Authority Key Identifier:
keyid:36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/a86URqUjdV6NGR4_Rkuxzk9nvOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.196.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:0c:1a:8c:8c:fa:d4:19:2f:99:78:18:06:d5:20:02:69:1a:
d0:8e:e9:66:67:2b:f3:83:5c:19:30:3a:9f:46:68:a3:eb:95:
19:cb:06:52:bd:5a:b3:d7:0b:7b:5d:d5:31:fa:8e:55:6c:e2:
87:39:39:2a:f3:63:7a:42:7d:8b:6e:65:94:f4:a0:b0:7f:56:
29:3b:67:26:a3:bd:40:66:a6:83:fe:63:ad:07:e4:ad:a0:ed:
77:78:d3:12:6a:7a:fb:e6:62:4e:de:b7:f8:26:a6:f6:d1:a1:
84:f2:a2:99:64:f2:73:23:a4:80:d6:69:2c:05:11:c1:da:73:
cb:29:05:52:9c:0b:58:53:ca:c9:22:61:11:b6:a0:cb:39:07:
41:d1:c9:b9:4c:3e:de:55:07:9e:9e:97:a7:87:4a:77:f3:36:
e9:97:dd:e2:92:59:1b:de:49:98:9b:36:7b:27:09:67:15:a7:
c8:23:5a:4e:b1:85:c6:aa:83:0a:43:20:a5:03:cb:22:17:2f:
65:a3:52:84:68:5a:62:e4:03:c7:88:4e:7e:91:40:cb:3a:a7:
ca:42:20:ed:34:77:95:24:d0:48:5a:ce:34:f2:78:a5:6d:05:
26:68:17:fe:7b:c0:12:13:93:9d:38:7e:24:91:71:88:c4:fe:
51:b3:04:fc
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQnSCSyEhXtpAuxHp021JBLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTZhYjE4ZTZiY2VkZTA4NTBiY2FhZWJkOTU5OTkzZTg0
MDg2ZWIwHhcNMjUwMTAyMTM1MDI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmNlOTQ0NmE1MjM3NTVlOGQxOTFlM2Y0NjRiYjFjZTRmNjdiY2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7R1CXwzh4L8IgIKLZySFFuTgLfRO
It7EhsWz6lZvcPmSbOOPtrrvCLN6DXskiLhguyRl5VUNZUqRBt7Jqyl9LmCH1Yio
RpFItfE5usDX11QHeJWXcefWqLezC1m8GzEMLVHYLqwl99o4bxAWi/hfFRiDxUcQ
Bn8pHjnoxDl4omtdTVVYy/qCRmcgQCL9VKcA9TbOJ1mFQBS5fZuQqyNDLZzGkca5
LIMSwd+RNhX8O9v6OnnmoFORMtzvH083yZyJhz5VDb84EsTwrcVIFXbk2oM5zVA6
kjcZHBGf6b9SIRkdP6RE/eQwEJz44ROT5lMza37phpCYGxDLKcQeGnMq7QIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFGvOlEalI3VejRkeP0ZLsc5PZ7zkMB8GA1UdIwQY
MBaAFDYWqxjmvO3ghQvKrr2VmZPoQIbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhhckdPYTg3ZUNGQzhxdXZaV1prLWhBaHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83ZDJmMzQtYWZmZC00ZDFjLWI0MTYt
YWFjMmViY2JmNWQ0LzEvYTg2VVJxVWpkVjZOR1I0X1JrdXh6azludk9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83ZDJmMzQtYWZmZC00ZDFjLWI0MTYtYWFjMmViY2JmNWQ0
LzEvTmhhckdPYTg3ZUNGQzhxdXZaV1prLWhBaHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnsQwDQYJ
KoZIhvcNAQELBQADggEBAH4MGoyM+tQZL5l4GAbVIAJpGtCO6WZnK/ODXBkwOp9G
aKPrlRnLBlK9WrPXC3td1TH6jlVs4oc5OSrzY3pCfYtuZZT0oLB/Vik7ZyajvUBm
poP+Y60H5K2g7Xd40xJqevvmYk7et/gmpvbRoYTyoplk8nMjpIDWaSwFEcHac8sp
BVKcC1hTyskiYRG2oMs5B0HRyblMPt5VB56el6eHSnfzNumX3eKSWRveSZibNnsn
CWcVp8gjWk6xhcaqgwpDIKUDyyIXL2WjUoRoWmLkA8eITn6RQMs6p8pCIO00d5Uk
0EhazjTyeKVtBSZoF/57wBITk504fiSRcYjE/lGzBPw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:41 2025 by rpki-client