Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/SReOpAhCLmuOcAyk55_tk_b6gzU.roa
File: SReOpAhCLmuOcAyk55_tk_b6gzU.roa (raw, json)
Hash identifier: HeVQ3nZoCRM6Iyc21jnOVqYiR72eDfZp5jwY3EJ/nAk=
Subject key identifier: 49:17:8E:A4:08:42:2E:6B:8E:70:0C:A4:E7:9F:ED:93:F6:FA:83:35
Certificate issuer: /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Certificate serial: 0194228E1013FA574A200B80D4E5CB6A3F91
Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/SReOpAhCLmuOcAyk55_tk_b6gzU.roa
Signing time: Wed 01 Jan 2025 15:48:42 +0000
ROA not before: Wed 01 Jan 2025 15:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211874
IP address blocks: 194.93.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:10:13:fa:57:4a:20:0b:80:d4:e5:cb:6a:3f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Validity
Not Before: Jan 1 15:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49178ea408422e6b8e700ca4e79fed93f6fa8335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:8f:36:be:4a:66:73:59:b5:f4:6b:f7:39:
8d:93:3f:d6:f4:7b:87:8c:2a:a3:24:25:52:94:f1:
ec:9f:02:b4:96:c7:3a:63:df:c8:2b:0a:4f:5d:d9:
cb:32:73:3e:f8:45:1f:21:25:8f:dd:eb:3e:c1:01:
a6:94:4a:63:b2:b4:96:06:7f:7c:3c:ea:63:d6:37:
71:28:34:c3:c5:ec:94:d7:c5:81:ba:b6:15:c5:49:
ce:7e:d8:41:24:89:84:e5:d2:48:4a:68:5e:27:b8:
0e:4b:77:8b:d3:34:76:d5:ae:08:46:34:e2:ef:7f:
34:72:25:58:45:cf:fc:46:7b:61:54:ba:f5:b4:c8:
49:bb:f4:1b:25:2f:c6:35:db:9b:97:31:c5:2c:1e:
e9:2c:2f:d7:d7:70:31:2e:69:98:76:65:a0:f3:a2:
db:76:a9:fd:b6:d2:05:41:49:63:50:0f:bf:1f:65:
2d:35:ab:07:54:b8:75:78:b5:b0:af:88:d0:5b:ca:
b4:95:6a:a8:78:99:6d:67:35:1f:45:89:69:16:8b:
3e:9e:c9:98:85:06:88:51:52:22:64:50:ce:53:64:
f5:64:df:40:21:a3:b2:d0:7c:4b:b9:be:52:1a:08:
6f:05:cb:2e:46:11:5f:9c:19:55:d0:61:30:99:31:
83:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:17:8E:A4:08:42:2E:6B:8E:70:0C:A4:E7:9F:ED:93:F6:FA:83:35
X509v3 Authority Key Identifier:
keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/SReOpAhCLmuOcAyk55_tk_b6gzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.44.0/22
Signature Algorithm: sha256WithRSAEncryption
25:62:e8:65:74:b4:68:f0:9b:97:27:3d:a4:fb:70:dc:26:c6:
fd:48:cd:5d:84:42:58:f8:56:0d:ad:98:ff:53:c6:35:95:f1:
99:e7:7a:5f:a0:ba:ed:0e:aa:11:ba:b0:32:37:15:33:14:67:
45:ed:6b:31:c9:26:ad:15:86:3e:2d:f1:30:7a:10:03:36:fa:
d4:f6:0a:0c:bd:cd:04:fe:b9:95:58:2f:28:9a:d8:75:fc:36:
26:6a:09:f1:79:df:af:b6:fa:72:ef:31:a4:d5:6a:d8:71:c3:
27:18:8a:8b:54:1c:8d:6b:0a:65:ec:42:47:d8:3d:61:0e:70:
dc:f4:71:70:fe:78:f8:da:cd:b5:73:00:19:7e:3f:a3:4a:48:
82:27:a6:18:5c:3a:ea:a9:9d:4e:e6:2b:a3:9a:07:3e:4c:2e:
d7:63:02:06:91:77:ad:8f:38:5f:3f:66:b7:0f:7f:36:7e:df:
36:e9:28:8b:0f:a2:b9:5e:39:39:a6:ed:40:64:a0:c8:73:fb:
87:0d:ac:8c:c2:74:8e:b1:eb:be:73:27:8b:75:c6:ff:7a:fe:
a7:22:97:7f:34:36:85:7a:7e:7e:7d:8f:b6:0b:f2:ae:26:a7:
5e:7b:f3:1d:40:e6:10:1b:06:0b:9c:71:4a:b2:96:76:78:ce:
34:8c:91:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijhAT+ldKIAuA1OXLaj+RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlOTY2ZGJlYjY0MTM4MmExNWY0NjdmNWEwM2U5YTk2ZmEx
ZGMxOTQwHhcNMjUwMTAxMTU0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTE3OGVhNDA4NDIyZTZiOGU3MDBjYTRlNzlmZWQ5M2Y2ZmE4MzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL+PNr5KZnNZtfRr9zmNkz/W9HuH
jCqjJCVSlPHsnwK0lsc6Y9/IKwpPXdnLMnM++EUfISWP3es+wQGmlEpjsrSWBn98
POpj1jdxKDTDxeyU18WBurYVxUnOfthBJImE5dJISmheJ7gOS3eL0zR21a4IRjTi
7380ciVYRc/8RnthVLr1tMhJu/QbJS/GNdublzHFLB7pLC/X13AxLmmYdmWg86Lb
dqn9ttIFQUljUA+/H2UtNasHVLh1eLWwr4jQW8q0lWqoeJltZzUfRYlpFos+nsmY
hQaIUVIiZFDOU2T1ZN9AIaOy0HxLub5SGghvBcsuRhFfnBlV0GEwmTGDpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEkXjqQIQi5rjnAMpOef7ZP2+oM1MB8GA1UdIwQY
MBaAFL6Wbb62QTgqFfRn9aA+mpb6HcGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnBadHZyWkJPQ29WOUdmMW9ENmFsdm9kd1pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lMjEyZDItZmI3Mi00OGNmLTg4MDYt
MTRiOGQzMGYxMzk3LzEvU1JlT3BBaENMbXVPY0F5azU1X3RrX2I2Z3pVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9lMjEyZDItZmI3Mi00OGNmLTg4MDYtMTRiOGQzMGYxMzk3
LzEvdnBadHZyWkJPQ29WOUdmMW9ENmFsdm9kd1pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwl0sMA0G
CSqGSIb3DQEBCwUAA4IBAQAlYuhldLRo8JuXJz2k+3DcJsb9SM1dhEJY+FYNrZj/
U8Y1lfGZ53pfoLrtDqoRurAyNxUzFGdF7WsxySatFYY+LfEwehADNvrU9goMvc0E
/rmVWC8omth1/DYmagnxed+vtvpy7zGk1WrYccMnGIqLVByNawpl7EJH2D1hDnDc
9HFw/nj42s21cwAZfj+jSkiCJ6YYXDrqqZ1O5iujmgc+TC7XYwIGkXetjzhfP2a3
D382ft826SiLD6K5Xjk5pu1AZKDIc/uHDayMwnSOseu+cyeLdcb/ev6nIpd/NDaF
en5+fY+2C/KuJqdee/MdQOYQGwYLnHFKspZ2eM40jJG3
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:12 2025 by rpki-client