Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/QY55w9VHpRpbvo8wYLy6nPcwuLQ.roa
File: QY55w9VHpRpbvo8wYLy6nPcwuLQ.roa (raw, json)
Hash identifier: 4zcTEDj2Fd6qBGQsJeGY4kivjJ2QhoCIddRPWELS/3w=
Subject key identifier: 41:8E:79:C3:D5:47:A5:1A:5B:BE:8F:30:60:BC:BA:9C:F7:30:B8:B4
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01941F8C947358E5038933D28D2E3F943E39
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/QY55w9VHpRpbvo8wYLy6nPcwuLQ.roa
Signing time: Wed 01 Jan 2025 01:48:14 +0000
ROA not before: Wed 01 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 194.143.206.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:94:73:58:e5:03:89:33:d2:8d:2e:3f:94:3e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=418e79c3d547a51a5bbe8f3060bcba9cf730b8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:0e:83:59:2d:7e:60:8f:63:29:de:0c:e7:
59:3b:c5:08:b7:6c:e1:73:2e:da:7a:e1:6b:0e:46:
78:89:e0:0a:a4:c4:02:a2:79:f3:a6:2a:d8:b4:39:
b1:dd:07:9c:31:4e:7d:34:84:eb:b5:df:80:47:79:
76:e6:db:d1:da:5f:4f:80:e8:73:24:3c:36:34:67:
f1:78:2d:ae:e3:59:cf:11:19:c9:b5:7b:6a:84:68:
70:a2:5d:80:af:24:66:62:c9:72:2d:3d:c1:d6:59:
0d:e4:b9:4f:e2:6a:1a:a6:58:69:63:a4:98:57:4f:
cd:8f:18:2a:b0:fe:b6:3e:3f:3b:ac:34:68:ab:dd:
d6:6d:88:b3:f8:d4:ca:3f:1c:6b:6f:56:80:91:71:
42:43:19:65:48:81:6a:95:58:37:5c:62:d4:3d:78:
71:72:6e:78:ca:51:48:77:17:47:de:6d:4e:c8:b1:
88:b4:82:4a:f2:fb:1d:d6:5d:01:c1:ea:c3:90:5a:
dc:05:29:b5:45:16:eb:56:82:c2:d1:52:10:26:5f:
ad:28:dd:68:eb:62:a1:63:a2:f4:3e:82:29:a7:1c:
b8:fc:0a:ce:24:23:ca:80:28:77:84:ba:4a:8a:65:
2c:c0:60:5d:23:b8:8b:6e:92:a3:78:c3:e6:89:11:
0e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8E:79:C3:D5:47:A5:1A:5B:BE:8F:30:60:BC:BA:9C:F7:30:B8:B4
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/QY55w9VHpRpbvo8wYLy6nPcwuLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.206.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:01:f3:d4:2b:12:da:22:9b:81:97:27:95:5b:49:2f:4b:f2:
85:0d:ca:b1:67:3d:de:58:c2:70:11:5e:7f:3a:ae:d0:76:33:
7d:aa:9f:e5:f4:a5:b6:45:00:b1:76:71:9e:cf:a6:8f:fa:17:
d3:34:2c:25:44:c9:d0:83:93:6b:89:cc:c2:e0:0e:11:ca:f1:
5a:4d:c6:f8:f7:49:4a:ba:91:2c:c9:69:01:f9:0b:13:f8:e6:
bf:28:c7:0d:a6:c7:ae:90:6b:83:9e:00:81:bf:db:be:15:8b:
f9:7b:e1:39:53:32:27:d4:83:93:4f:c8:43:c5:b4:d8:24:ca:
f6:7a:f6:fc:1d:57:62:a8:5f:0c:32:ac:91:0c:0e:3a:b0:e9:
e2:64:98:19:9c:44:e7:e6:15:96:bd:9f:f6:bb:fc:b4:fe:50:
01:8e:12:71:c0:d3:3a:3f:21:3c:71:1b:c6:f9:73:e8:66:c3:
e0:41:85:44:cf:8e:7e:fe:69:e5:81:5d:18:85:b8:ab:ab:a3:
e4:02:85:43:e2:c0:f2:55:88:a9:83:b0:53:c1:19:96:e6:5f:
1d:2f:b6:93:8b:13:3c:f9:63:7c:58:87:36:1b:7a:48:7d:66:
da:a5:59:80:70:fb:56:17:fb:65:3d:98:ba:6d:c6:df:32:d1:
c7:9d:76:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjJRzWOUDiTPSjS4/lD45MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjUwMTAxMDE0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MThlNzljM2Q1NDdhNTFhNWJiZThmMzA2MGJjYmE5Y2Y3MzBiOGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00AOg1ktfmCPYyneDOdZO8UIt2zh
cy7aeuFrDkZ4ieAKpMQConnzpirYtDmx3QecMU59NITrtd+AR3l25tvR2l9PgOhz
JDw2NGfxeC2u41nPERnJtXtqhGhwol2AryRmYslyLT3B1lkN5LlP4moaplhpY6SY
V0/NjxgqsP62Pj87rDRoq93WbYiz+NTKPxxrb1aAkXFCQxllSIFqlVg3XGLUPXhx
cm54ylFIdxdH3m1OyLGItIJK8vsd1l0BwerDkFrcBSm1RRbrVoLC0VIQJl+tKN1o
62KhY6L0PoIppxy4/ArOJCPKgCh3hLpKimUswGBdI7iLbpKjeMPmiREOBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEGOecPVR6UaW76PMGC8upz3MLi0MB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvUVk1NXc5VkhwUnBidm84d1lMeTZuUGN3dUxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwo/OMA0G
CSqGSIb3DQEBCwUAA4IBAQCKAfPUKxLaIpuBlyeVW0kvS/KFDcqxZz3eWMJwEV5/
Oq7QdjN9qp/l9KW2RQCxdnGez6aP+hfTNCwlRMnQg5NriczC4A4RyvFaTcb490lK
upEsyWkB+QsT+Oa/KMcNpseukGuDngCBv9u+FYv5e+E5UzIn1IOTT8hDxbTYJMr2
evb8HVdiqF8MMqyRDA46sOniZJgZnETn5hWWvZ/2u/y0/lABjhJxwNM6PyE8cRvG
+XPoZsPgQYVEz45+/mnlgV0Yhbirq6PkAoVD4sDyVYipg7BTwRmW5l8dL7aTixM8
+WN8WIc2G3pIfWbapVmAcPtWF/tlPZi6bcbfMtHHnXaq
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:20 2025 by rpki-client