Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/c8vg0HClEXhcPioY22wCvZFQSNc.roa
File: c8vg0HClEXhcPioY22wCvZFQSNc.roa (raw, json)
Hash identifier: qmf3BkaUvFn3iXx2ay1H/G3dq4845AkTBF3dK41I618=
Subject key identifier: 73:CB:E0:D0:70:A5:11:78:5C:3E:2A:18:DB:6C:02:BD:91:50:48:D7
Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial: 019424456766951C517123368E26D0FB97F0
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/c8vg0HClEXhcPioY22wCvZFQSNc.roa
Signing time: Wed 01 Jan 2025 23:48:35 +0000
ROA not before: Wed 01 Jan 2025 23:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1935
IP address blocks: 164.81.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:67:66:95:1c:51:71:23:36:8e:26:d0:fb:97:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Validity
Not Before: Jan 1 23:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73cbe0d070a511785c3e2a18db6c02bd915048d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:cb:2e:10:1f:59:0e:c2:c6:10:15:9b:4e:
7e:7b:a2:07:27:12:c6:3d:f1:b3:c0:04:e0:92:08:
ba:20:42:6f:9f:6f:98:bf:99:9c:5a:12:63:9c:61:
88:fd:9b:a6:e0:63:f6:4c:0c:3e:69:a4:22:5d:b4:
16:2a:18:34:0e:c9:7c:9c:11:5f:9c:a1:08:db:a9:
ff:a0:fd:41:ad:ae:cb:b9:29:01:b8:47:1c:c2:c4:
b4:35:b2:fa:88:19:9d:11:db:33:5d:79:e7:db:c0:
91:7f:f4:f5:7e:51:db:cc:d1:e5:04:22:7b:d2:f7:
d0:54:98:e8:9a:78:97:14:39:7b:e1:91:b5:32:04:
06:46:35:46:91:f0:fb:3e:04:7d:07:b4:da:5d:3a:
24:4e:81:29:4f:ff:db:3b:47:82:d7:db:d9:e4:35:
94:92:2e:af:78:13:8e:7b:8c:d6:67:86:8b:28:d3:
17:44:30:2b:9a:2e:e1:c5:47:35:74:b0:13:d2:a7:
8b:c5:3a:45:50:1f:1d:a6:26:5e:bd:5c:a5:29:2f:
d6:33:e9:93:28:16:c8:70:54:a0:c0:bd:ce:57:94:
f5:b4:0b:ea:78:ea:19:1b:20:24:0b:d8:4a:0b:e5:
8a:df:f2:6d:65:d7:3e:01:60:72:10:57:93:c9:c9:
f5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CB:E0:D0:70:A5:11:78:5C:3E:2A:18:DB:6C:02:BD:91:50:48:D7
X509v3 Authority Key Identifier:
keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/c8vg0HClEXhcPioY22wCvZFQSNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.81.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:89:7c:ad:3f:ab:67:ff:56:50:44:c9:1a:23:2f:ca:8d:ea:
4a:bf:8e:84:c5:f6:99:48:b2:37:53:c5:19:75:d9:f4:bd:3a:
8c:b9:59:34:20:a0:f0:07:3c:0b:f3:99:af:78:b4:d3:20:18:
00:22:9e:c7:68:0f:e4:47:0f:70:9f:28:b3:36:dc:52:f7:2c:
fd:a2:16:b7:fb:af:ab:96:10:3a:78:d2:72:8e:df:48:f8:a1:
96:8a:68:82:a1:1f:62:f5:55:2b:54:40:0c:6d:52:c7:68:b4:
2d:44:61:e1:79:6a:d8:10:5b:7a:4a:c3:e4:f5:6c:7f:7f:49:
59:56:58:b8:0d:5a:81:d7:32:5f:90:4b:21:cf:23:42:0d:f7:
0f:5b:c6:27:73:10:11:7e:56:4e:16:8c:3d:35:cb:9c:31:d5:
c5:56:15:86:ee:1a:be:3b:7e:b3:9a:80:58:c1:de:80:a9:2b:
e3:a8:13:91:fc:8d:db:89:0b:1f:5d:25:3a:b6:52:9b:a2:63:
e6:7d:90:32:32:12:64:65:4b:eb:a3:6b:8a:de:61:2e:db:58:
6e:c1:cf:e1:58:21:63:c8:05:fc:34:9f:d8:70:2e:c3:3b:f5:
75:28:c6:8e:72:b9:04:96:4c:7f:76:dd:4f:ba:a1:da:26:7f:
ee:e4:73:f9
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQkRWdmlRxRcSM2jibQ+5fwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYmJmYTQ5ODc3YmM1ZDllNGNmNDQ2OTUwZmQxNDI3OTky
OWY0OWEwHhcNMjUwMTAxMjM0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2NiZTBkMDcwYTUxMTc4NWMzZTJhMThkYjZjMDJiZDkxNTA0OGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqrLLhAfWQ7CxhAVm05+e6IHJxLG
PfGzwATgkgi6IEJvn2+Yv5mcWhJjnGGI/Zum4GP2TAw+aaQiXbQWKhg0Dsl8nBFf
nKEI26n/oP1Bra7LuSkBuEccwsS0NbL6iBmdEdszXXnn28CRf/T1flHbzNHlBCJ7
0vfQVJjomniXFDl74ZG1MgQGRjVGkfD7PgR9B7TaXTokToEpT//bO0eC19vZ5DWU
ki6veBOOe4zWZ4aLKNMXRDArmi7hxUc1dLAT0qeLxTpFUB8dpiZevVylKS/WM+mT
KBbIcFSgwL3OV5T1tAvqeOoZGyAkC9hKC+WK3/JtZdc+AWByEFeTycn1FwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFHPL4NBwpRF4XD4qGNtsAr2RUEjXMB8GA1UdIwQY
MBaAFBy7+kmHe8XZ5M9EaVD9FCeZKfSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84NTFjYWMtZTFkOC00NTcxLTgyYTYt
NDZiZjc2MjYxOGU3LzEvYzh2ZzBIQ2xFWGhjUGlvWTIyd0N2WkZRU05jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy84NTFjYWMtZTFkOC00NTcxLTgyYTYtNDZiZjc2MjYxOGU3
LzEvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApFEwDQYJ
KoZIhvcNAQELBQADggEBAF6JfK0/q2f/VlBEyRojL8qN6kq/joTF9plIsjdTxRl1
2fS9Ooy5WTQgoPAHPAvzma94tNMgGAAinsdoD+RHD3CfKLM23FL3LP2iFrf7r6uW
EDp40nKO30j4oZaKaIKhH2L1VStUQAxtUsdotC1EYeF5atgQW3pKw+T1bH9/SVlW
WLgNWoHXMl+QSyHPI0IN9w9bxidzEBF+Vk4WjD01y5wx1cVWFYbuGr47frOagFjB
3oCpK+OoE5H8jduJCx9dJTq2UpuiY+Z9kDIyEmRlS+uja4reYS7bWG7Bz+FYIWPI
Bfw0n9hwLsM79XUoxo5yuQSWTH923U+6odomf+7kc/k=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:23 2025 by rpki-client