Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/g0WRqx2paJ7yZRz18qUVax3-fV0.roa
File: g0WRqx2paJ7yZRz18qUVax3-fV0.roa (raw, json)
Hash identifier: bmYj1UQUjXiX0rrHrfepPd2uDK75h9Pp3fGbvEitwTs=
Subject key identifier: 83:45:91:AB:1D:A9:68:9E:F2:65:1C:F5:F2:A5:15:6B:1D:FE:7D:5D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195EC328B4FE1C3994FD761F492345643BA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/g0WRqx2paJ7yZRz18qUVax3-fV0.roa
Signing time: Mon 31 Mar 2025 12:34:50 +0000
ROA not before: Mon 31 Mar 2025 12:34:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43391
IP address blocks: 194.180.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:32:8b:4f:e1:c3:99:4f:d7:61:f4:92:34:56:43:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 31 12:34:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=834591ab1da9689ef2651cf5f2a5156b1dfe7d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f3:77:a6:fd:e9:af:46:1f:c3:75:ff:00:a1:
bc:9b:34:4b:46:1b:f2:56:0c:11:40:9e:83:08:6e:
34:90:8e:05:92:f1:78:db:18:30:df:13:0e:e3:be:
a5:a4:28:be:c9:04:49:3a:68:2c:21:ef:ee:2e:ac:
78:24:70:c3:ca:0b:b0:64:ac:fc:33:2b:01:f7:b5:
cc:31:d3:06:7a:b1:2f:d7:2f:f2:72:35:c6:8f:a6:
24:74:27:3a:3b:c0:42:8e:32:c5:03:bf:9e:b5:f7:
22:b9:9f:e8:81:ab:3e:b6:cc:0d:8c:2f:7d:95:be:
86:95:7f:b8:80:52:79:a7:ee:4a:72:ef:34:8c:75:
8f:97:95:e1:6c:71:db:c8:ba:88:d5:d1:a4:cc:73:
e9:af:6d:57:d8:18:51:d3:ce:c9:d9:ed:6e:5a:7d:
9a:9d:f3:90:c1:96:e8:e7:db:2d:d2:e5:8a:90:a2:
07:92:08:d6:a0:3f:cd:42:02:e1:51:c0:59:e2:42:
5e:f7:6b:73:41:df:66:ad:72:8e:00:6b:36:d4:ff:
ac:23:68:29:0c:ce:95:b6:41:e2:1c:7f:c4:3d:93:
87:6d:9a:80:cc:cd:a8:d5:0f:92:2e:aa:8e:98:3e:
67:d0:bc:88:9c:aa:d2:8c:44:1b:da:63:35:d8:f4:
f2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:45:91:AB:1D:A9:68:9E:F2:65:1C:F5:F2:A5:15:6B:1D:FE:7D:5D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/g0WRqx2paJ7yZRz18qUVax3-fV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.38.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:38:eb:f9:be:db:7a:34:a2:87:37:4c:fe:b4:96:79:7f:6f:
da:61:8f:66:f3:43:61:06:e5:9d:d4:2d:83:d5:86:2e:57:67:
22:7a:55:6a:57:a4:cd:79:a7:36:38:7d:9a:39:d1:d2:5e:7e:
a8:42:90:08:45:94:de:9c:2c:80:20:13:f0:a2:f5:ce:ff:b7:
18:01:82:4b:97:bb:dd:16:ba:37:f1:1c:94:16:e7:bb:f2:ea:
2a:e0:e7:82:25:07:60:9b:e1:77:bc:02:f4:c1:7a:2f:73:26:
e6:66:ae:39:b9:72:fe:66:bb:b8:95:04:68:cb:1c:4b:ac:bf:
b9:3e:cd:6a:34:d6:aa:a5:4f:30:80:ed:5b:7f:72:df:75:4b:
a5:65:07:a3:f4:4a:9a:09:36:4a:0c:89:9f:f8:34:cf:df:19:
61:53:51:60:dd:30:e9:a1:38:54:9e:05:a1:59:5c:ac:5f:5e:
55:1b:53:33:c4:8f:c0:29:c0:15:b0:e0:e4:5a:c1:4f:9f:43:
89:d1:1c:7e:3d:b5:93:e3:93:9b:e9:78:65:b3:d0:79:65:ee:
0a:79:f4:62:d1:39:be:39:50:71:00:50:01:86:94:08:78:e4:
32:82:38:2c:9b:de:76:e0:25:3a:6c:97:a9:2b:39:c9:f4:8d:
a4:0c:67:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXsMotP4cOZT9dh9JI0VkO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMzMxMTIzNDUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzQ1OTFhYjFkYTk2ODllZjI2NTFjZjVmMmE1MTU2YjFkZmU3ZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPN3pv3pr0Yfw3X/AKG8mzRLRhvy
VgwRQJ6DCG40kI4FkvF42xgw3xMO476lpCi+yQRJOmgsIe/uLqx4JHDDyguwZKz8
MysB97XMMdMGerEv1y/ycjXGj6YkdCc6O8BCjjLFA7+etfciuZ/ogas+tswNjC99
lb6GlX+4gFJ5p+5Kcu80jHWPl5XhbHHbyLqI1dGkzHPpr21X2BhR087J2e1uWn2a
nfOQwZbo59st0uWKkKIHkgjWoD/NQgLhUcBZ4kJe92tzQd9mrXKOAGs21P+sI2gp
DM6VtkHiHH/EPZOHbZqAzM2o1Q+SLqqOmD5n0LyInKrSjEQb2mM12PTyvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFINFkasdqWie8mUc9fKlFWsd/n1dMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvZzBXUnF4MnBhSjd5WlJ6MThxVVZheDMtZlYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrQmMA0G
CSqGSIb3DQEBCwUAA4IBAQChOOv5vtt6NKKHN0z+tJZ5f2/aYY9m80NhBuWd1C2D
1YYuV2cielVqV6TNeac2OH2aOdHSXn6oQpAIRZTenCyAIBPwovXO/7cYAYJLl7vd
Fro38RyUFue78uoq4OeCJQdgm+F3vAL0wXovcybmZq45uXL+Zru4lQRoyxxLrL+5
Ps1qNNaqpU8wgO1bf3LfdUulZQej9EqaCTZKDImf+DTP3xlhU1Fg3TDpoThUngWh
WVysX15VG1MzxI/AKcAVsODkWsFPn0OJ0Rx+PbWT45Ob6Xhls9B5Ze4KefRi0Tm+
OVBxAFABhpQIeOQygjgsm9524CU6bJepKznJ9I2kDGe7
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:44 2025 by rpki-client on console.sobornost.net