Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/t4wVgx7wNN3oc6WeeeOmc7PxlxE.roa
File: t4wVgx7wNN3oc6WeeeOmc7PxlxE.roa (raw, json)
Hash identifier: Ss42kxMv3pvWQ6u2X6hxf8NmqUKWFMX9a13ZtwexxpQ=
Subject key identifier: B7:8C:15:83:1E:F0:34:DD:E8:73:A5:9E:79:E3:A6:73:B3:F1:97:11
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01941F8C989E8310C9F2E6297853ABB8CF9A
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/t4wVgx7wNN3oc6WeeeOmc7PxlxE.roa
Signing time: Wed 01 Jan 2025 01:48:15 +0000
ROA not before: Wed 01 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 195.114.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:98:9e:83:10:c9:f2:e6:29:78:53:ab:b8:cf:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b78c15831ef034dde873a59e79e3a673b3f19711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:5d:fd:c4:d3:84:65:00:87:49:d0:92:ca:
92:2d:60:e6:f1:b5:bd:d8:64:14:0d:4a:f5:0b:d2:
06:5d:de:6f:be:c2:4d:43:0b:a0:fe:e7:8b:a1:14:
63:6e:4a:a1:3a:e3:2c:49:86:ad:fb:08:b1:89:5f:
b0:4a:72:4f:4b:80:d2:bb:06:db:d7:2b:b3:0a:85:
17:88:b5:8c:03:b5:e8:b6:9b:a7:5d:0d:38:e9:b8:
7a:f5:17:74:f4:e3:2c:e8:53:29:69:8c:89:fa:dd:
d2:6c:71:71:9e:63:c7:93:44:f0:99:a9:2b:37:4d:
0c:2f:2e:cb:67:33:a4:41:68:af:90:7d:d6:9c:92:
29:49:26:5c:38:69:99:6c:77:7c:9f:3c:d1:62:1c:
3a:0f:66:b9:4e:23:26:b9:f0:8d:af:80:d0:ed:e7:
c8:68:c0:c4:cc:a5:4c:fa:bd:05:cd:33:6e:ef:4d:
43:de:f8:6b:ea:ce:65:9e:73:c4:c9:3f:15:db:ef:
42:fc:79:47:81:b0:bb:f9:0a:d4:4e:21:e0:d6:48:
28:ac:f4:56:44:36:f3:f1:42:1f:94:b8:97:fc:5c:
65:57:1a:7e:85:68:8c:d1:a7:33:23:d3:2b:87:26:
72:6d:9c:83:d6:7b:6e:68:3c:f3:51:4b:d4:e9:db:
b5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8C:15:83:1E:F0:34:DD:E8:73:A5:9E:79:E3:A6:73:B3:F1:97:11
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/t4wVgx7wNN3oc6WeeeOmc7PxlxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.197.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:c0:d3:ae:90:de:fa:10:d8:a9:04:b7:15:6e:d4:4a:1d:1f:
fb:04:cc:aa:ad:bc:97:bf:dc:49:f7:7b:52:50:8d:41:70:13:
87:24:4e:9f:98:43:53:de:f0:5e:53:87:fe:be:a1:b1:d1:08:
c0:03:69:8d:97:58:71:ec:90:eb:4a:44:3c:0a:5d:d2:c4:57:
b4:3c:af:5e:e0:87:92:4e:16:e8:13:1e:f8:54:81:d5:f7:53:
4a:fc:7a:22:3f:b3:3f:e0:cf:33:48:a9:fd:53:aa:1e:df:30:
32:0b:2c:21:f2:9b:bd:76:72:9d:d4:26:82:cb:54:6b:e9:fc:
55:df:22:e0:59:9f:fa:ef:84:16:40:4c:90:46:ba:70:07:56:
27:8b:2a:7e:fb:d1:36:0d:96:f4:03:76:00:0a:ed:0d:74:e7:
44:d7:dc:05:f0:e7:df:ad:18:b0:25:83:32:46:92:a9:55:8b:
4d:00:7c:7b:61:af:a3:d8:80:f4:0a:b2:69:7f:0b:c3:48:71:
9e:e0:07:4c:b8:9f:bd:6a:14:9c:e9:88:dd:62:52:a1:48:c9:
09:f1:3d:32:43:12:35:9c:1f:12:c7:57:e0:fe:82:44:34:13:
34:66:3b:5c:35:ff:9e:51:15:6b:3b:ff:16:b7:0c:6f:f5:b6:
ec:76:59:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjJiegxDJ8uYpeFOruM+aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjUwMTAxMDE0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzhjMTU4MzFlZjAzNGRkZTg3M2E1OWU3OWUzYTY3M2IzZjE5NzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpld/cTThGUAh0nQksqSLWDm8bW9
2GQUDUr1C9IGXd5vvsJNQwug/ueLoRRjbkqhOuMsSYat+wixiV+wSnJPS4DSuwbb
1yuzCoUXiLWMA7XotpunXQ046bh69Rd09OMs6FMpaYyJ+t3SbHFxnmPHk0Twmakr
N00MLy7LZzOkQWivkH3WnJIpSSZcOGmZbHd8nzzRYhw6D2a5TiMmufCNr4DQ7efI
aMDEzKVM+r0FzTNu701D3vhr6s5lnnPEyT8V2+9C/HlHgbC7+QrUTiHg1kgorPRW
RDbz8UIflLiX/FxlVxp+hWiM0aczI9MrhyZybZyD1ntuaDzzUUvU6du1FwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLeMFYMe8DTd6HOlnnnjpnOz8ZcRMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvdDR3Vmd4N3dOTjNvYzZXZWVlT21jN1B4bHhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw3LFMA0G
CSqGSIb3DQEBCwUAA4IBAQBdwNOukN76ENipBLcVbtRKHR/7BMyqrbyXv9xJ93tS
UI1BcBOHJE6fmENT3vBeU4f+vqGx0QjAA2mNl1hx7JDrSkQ8Cl3SxFe0PK9e4IeS
ThboEx74VIHV91NK/HoiP7M/4M8zSKn9U6oe3zAyCywh8pu9dnKd1CaCy1Rr6fxV
3yLgWZ/674QWQEyQRrpwB1Yniyp++9E2DZb0A3YACu0NdOdE19wF8OffrRiwJYMy
RpKpVYtNAHx7Ya+j2ID0CrJpfwvDSHGe4AdMuJ+9ahSc6YjdYlKhSMkJ8T0yQxI1
nB8Sx1fg/oJENBM0ZjtcNf+eURVrO/8Wtwxv9bbsdllk
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:12:58 2025 by rpki-client