Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/aHBovjVMpwvxssKEvbEpA9BObJw.roa
File: aHBovjVMpwvxssKEvbEpA9BObJw.roa (raw, json)
Hash identifier: wz14KdExyQwr+znTPPlZJEdJgAHL8lp1Ci+VE40vMHQ=
Subject key identifier: 68:70:68:BE:35:4C:A7:0B:F1:B2:C2:84:BD:B1:29:03:D0:4E:6C:9C
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 01857130A2C5C517BAED0DAA769035321B79
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/aHBovjVMpwvxssKEvbEpA9BObJw.roa
Signing time: Mon 02 Jan 2023 06:34:50 +0000
ROA not before: Mon 02 Jan 2023 06:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197328
IP address blocks: 107.150.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:a2:c5:c5:17:ba:ed:0d:aa:76:90:35:32:1b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Jan 2 06:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=687068be354ca70bf1b2c284bdb12903d04e6c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:b6:14:b4:5f:b7:f3:0b:55:b2:11:56:8c:
05:21:95:a0:d5:7f:b6:1d:07:af:30:36:a5:dc:c6:
38:a6:31:42:7a:9a:5d:38:ef:ae:c5:72:0a:e8:aa:
5c:6c:31:23:31:f5:84:c2:2a:4d:9c:2e:7f:f6:b1:
3c:4b:41:c1:b0:10:7d:33:c6:9f:f3:49:f2:04:00:
7f:fa:94:d3:10:4d:8e:42:e4:eb:1e:5c:c2:4e:7a:
9c:7b:30:ea:0d:a5:c8:8e:1d:aa:15:2c:8b:23:81:
ee:a1:5a:43:cf:5c:c9:60:d2:c2:9f:68:cf:fc:e1:
ec:ad:b0:18:c0:96:b7:c9:49:e4:20:6e:2d:eb:39:
fa:94:72:2b:ef:f2:05:f7:17:65:6c:91:09:87:cd:
44:6f:42:85:46:91:7a:fa:eb:5a:99:74:3d:e2:05:
30:3a:77:5c:07:2b:cc:90:a0:24:e4:69:24:18:20:
d5:2e:4f:ef:ba:45:3f:94:91:95:32:70:8b:f8:3b:
3d:3d:4e:34:4f:18:d2:2d:9e:7f:12:3a:e9:f8:c9:
c0:66:c1:7d:47:45:f8:86:da:72:61:90:3d:32:ba:
87:c0:cd:ee:4f:e7:a0:32:c2:d0:d4:24:de:70:26:
f3:60:f6:1d:78:e0:ee:c0:3a:41:8f:67:ab:26:a8:
13:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:70:68:BE:35:4C:A7:0B:F1:B2:C2:84:BD:B1:29:03:D0:4E:6C:9C
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/aHBovjVMpwvxssKEvbEpA9BObJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.150.95.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b8:43:91:15:5e:fc:f5:f0:c6:93:f3:85:6e:d8:24:65:ad:
d3:aa:75:07:56:69:e2:c7:70:1d:dd:e2:56:9c:0b:3a:a4:d4:
69:dd:dc:c5:b4:8f:46:82:56:76:a9:a3:f0:55:ee:8a:44:e7:
20:42:16:63:3b:d5:87:d4:d5:f4:e8:97:3a:e3:8c:15:f3:8f:
af:29:6e:b9:d2:13:2b:34:11:43:88:7e:6e:f0:9c:8e:ed:4c:
b0:a0:8e:6b:df:af:da:e9:a8:df:1d:77:e1:60:2c:ba:c8:ac:
ff:9c:e4:db:a3:b3:10:9f:da:ce:40:c5:3d:01:cb:2b:76:e2:
22:0d:0d:f3:ee:f4:3d:e0:80:71:48:e4:98:6c:c7:71:a6:5b:
e7:10:a7:16:4a:83:3b:9c:8d:84:b0:a8:2a:d2:bf:22:34:45:
9e:bd:e1:94:f0:a3:d5:d4:50:f2:60:49:bf:99:a5:70:fe:5c:
3f:70:34:cc:56:ba:4b:b9:54:07:49:0d:5c:5b:1f:4c:db:fb:
82:e8:e6:0b:1a:4d:7b:12:07:5e:94:cf:50:90:4d:7b:a8:5a:
53:4d:28:ec:4f:b9:8d:3e:1e:d1:14:26:43:00:6f:c3:b6:f2:
f0:e2:c6:d0:b4:da:30:ac:a1:a2:ac:45:af:51:5e:89:b4:18:
d3:e1:2a:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxMKLFxRe67Q2qdpA1Mht5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZjM3NmRmNWY5ZWY0ODdjODJiMzFhODc1YzZhNDk2ZDc5
Y2EwZDcwHhcNMjMwMTAyMDYzNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODcwNjhiZTM1NGNhNzBiZjFiMmMyODRiZGIxMjkwM2QwNGU2YzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtq2FLRft/MLVbIRVowFIZWg1X+2
HQevMDal3MY4pjFCeppdOO+uxXIK6KpcbDEjMfWEwipNnC5/9rE8S0HBsBB9M8af
80nyBAB/+pTTEE2OQuTrHlzCTnqcezDqDaXIjh2qFSyLI4HuoVpDz1zJYNLCn2jP
/OHsrbAYwJa3yUnkIG4t6zn6lHIr7/IF9xdlbJEJh81Eb0KFRpF6+utamXQ94gUw
OndcByvMkKAk5GkkGCDVLk/vukU/lJGVMnCL+Ds9PU40TxjSLZ5/Ejrp+MnAZsF9
R0X4htpyYZA9MrqHwM3uT+egMsLQ1CTecCbzYPYdeODuwDpBj2erJqgTXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGhwaL41TKcL8bLChL2xKQPQTmycMB8GA1UdIwQY
MBaAFIDzdt9fnvSHyCsxqHXGpJbXnKDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BOMjMxLWU5SWZJS3pHb2RjYWtsdGVjb05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83OTVkZWQtZmNkZi00N2NmLWFmODMt
YTRiYzI4MTY2NDNhLzEvYUhCb3ZqVk1wd3Z4c3NLRXZiRXBBOUJPYkp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi83OTVkZWQtZmNkZi00N2NmLWFmODMtYTRiYzI4MTY2NDNh
LzEvZ1BOMjMxLWU5SWZJS3pHb2RjYWtsdGVjb05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5ZfMA0G
CSqGSIb3DQEBCwUAA4IBAQAJuEORFV789fDGk/OFbtgkZa3TqnUHVmnix3Ad3eJW
nAs6pNRp3dzFtI9GglZ2qaPwVe6KROcgQhZjO9WH1NX06Jc644wV84+vKW650hMr
NBFDiH5u8JyO7UywoI5r36/a6ajfHXfhYCy6yKz/nOTbo7MQn9rOQMU9AcsrduIi
DQ3z7vQ94IBxSOSYbMdxplvnEKcWSoM7nI2EsKgq0r8iNEWeveGU8KPV1FDyYEm/
maVw/lw/cDTMVrpLuVQHSQ1cWx9M2/uC6OYLGk17EgdelM9QkE17qFpTTSjsT7mN
Ph7RFCZDAG/DtvLw4sbQtNowrKGirEWvUV6JtBjT4SqQ
-----END CERTIFICATE-----
Generated at Wed Apr 30 06:29:35 2025 by rpki-client