Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/izjM53yq0wNLPGtqyDPNHg2tTJY.roa
File: izjM53yq0wNLPGtqyDPNHg2tTJY.roa (raw, json)
Hash identifier: 3csKPCCWN/1tgwX/LVYh92ZzINj653LwQ0yAAq8x6ZM=
Subject key identifier: 8B:38:CC:E7:7C:AA:D3:03:4B:3C:6B:6A:C8:33:CD:1E:0D:AD:4C:96
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428246F7AFDD6C048E4BA337857E9C3CA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/izjM53yq0wNLPGtqyDPNHg2tTJY.roa
Signing time: Thu 02 Jan 2025 17:51:03 +0000
ROA not before: Thu 02 Jan 2025 17:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33480
IP address blocks: 193.58.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:6f:7a:fd:d6:c0:48:e4:ba:33:78:57:e9:c3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b38cce77caad3034b3c6b6ac833cd1e0dad4c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:da:d1:34:41:30:b6:a7:9e:d1:b3:cc:6a:74:
0b:f2:96:dc:3e:a5:7e:33:8d:99:d7:0d:92:4d:c5:
3b:ce:05:a2:f7:b2:2a:41:ec:cf:ed:02:06:2e:b5:
e9:f1:46:d8:44:2e:3f:ce:4a:41:ac:b5:73:b4:f9:
54:9c:f5:6d:f0:85:be:65:06:6e:e2:81:81:28:6c:
57:35:af:df:ba:1b:21:57:68:e4:46:08:12:cb:2b:
93:cd:f2:e8:d9:d3:05:ba:17:29:3c:a1:f2:32:e5:
c0:94:7b:9c:6f:7e:2d:90:4b:f2:2a:77:11:42:53:
62:9c:73:f2:81:d7:94:56:59:d5:1a:12:22:59:f0:
1b:51:8b:93:44:cd:cb:12:88:db:bb:69:48:c9:e9:
fe:96:d4:82:b5:8f:aa:fd:21:60:ba:6b:24:c1:bf:
8b:2e:4d:33:7a:5e:e2:5f:64:37:1c:d6:e8:a1:0a:
34:9e:c2:ab:4e:81:83:7f:e1:12:80:98:64:37:ad:
f7:63:07:c5:f2:d5:23:1e:3f:e2:35:24:10:e3:df:
5f:32:22:04:83:8c:1e:41:d1:9f:d9:f9:9d:0b:6d:
7c:f0:c5:53:e4:a4:77:d9:42:00:f7:ae:75:ee:08:
90:02:4b:92:76:7d:de:57:1b:ac:7b:8c:80:9c:df:
45:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:38:CC:E7:7C:AA:D3:03:4B:3C:6B:6A:C8:33:CD:1E:0D:AD:4C:96
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/izjM53yq0wNLPGtqyDPNHg2tTJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.123.0/24
Signature Algorithm: sha256WithRSAEncryption
80:49:f5:2f:47:02:32:8d:f7:45:29:da:92:d6:7c:f6:9a:07:
f9:7e:12:67:16:ea:be:c4:ea:81:37:6f:10:d8:66:5b:2c:bb:
00:22:32:5c:6d:b5:37:5b:35:e8:66:f5:5d:75:6d:ef:b5:77:
da:a0:02:d0:6c:d2:75:c8:07:e0:23:a6:bb:92:6f:5c:a0:30:
a3:a1:71:b9:d3:17:e3:09:ae:8b:c2:e3:d2:44:97:4d:1b:17:
59:fd:32:39:b8:da:23:68:56:44:af:12:3a:3a:86:69:8a:d4:
9e:c0:51:b7:37:69:6a:9d:79:c9:83:63:5e:6c:09:ba:8d:64:
31:a0:80:80:01:3a:54:74:57:50:e6:77:2b:4c:6c:22:9d:5d:
40:a8:f5:65:50:e2:65:49:8a:6a:ee:24:b7:9a:57:94:25:3d:
08:9b:63:f2:02:94:67:30:84:17:db:21:6e:73:94:68:9f:31:
c4:5a:af:63:86:87:79:92:cf:9d:e0:57:45:c9:d6:dd:4e:cf:
9c:1b:7f:5b:99:6a:6b:c7:14:ca:ea:d9:6e:1e:d0:bf:5b:8b:
12:d8:19:97:f1:ee:c3:c1:62:88:46:82:53:8e:94:6a:e2:ed:
bc:9f:24:32:76:ca:e6:f2:c6:9d:35:16:e4:c4:6c:9c:2b:64:
fd:65:0e:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJG96/dbASOS6M3hX6cPKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjM4Y2NlNzdjYWFkMzAzNGIzYzZiNmFjODMzY2QxZTBkYWQ0Yzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+9rRNEEwtqee0bPManQL8pbcPqV+
M42Z1w2STcU7zgWi97IqQezP7QIGLrXp8UbYRC4/zkpBrLVztPlUnPVt8IW+ZQZu
4oGBKGxXNa/fuhshV2jkRggSyyuTzfLo2dMFuhcpPKHyMuXAlHucb34tkEvyKncR
QlNinHPygdeUVlnVGhIiWfAbUYuTRM3LEojbu2lIyen+ltSCtY+q/SFgumskwb+L
Lk0zel7iX2Q3HNbooQo0nsKrToGDf+ESgJhkN633YwfF8tUjHj/iNSQQ499fMiIE
g4weQdGf2fmdC2188MVT5KR32UIA96517giQAkuSdn3eVxuse4yAnN9FewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIs4zOd8qtMDSzxrasgzzR4NrUyWMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvaXpqTTUzeXEwd05MUEd0cXlEUE5IZzJ0VEpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTp7MA0G
CSqGSIb3DQEBCwUAA4IBAQCASfUvRwIyjfdFKdqS1nz2mgf5fhJnFuq+xOqBN28Q
2GZbLLsAIjJcbbU3WzXoZvVddW3vtXfaoALQbNJ1yAfgI6a7km9coDCjoXG50xfj
Ca6LwuPSRJdNGxdZ/TI5uNojaFZErxI6OoZpitSewFG3N2lqnXnJg2NebAm6jWQx
oICAATpUdFdQ5ncrTGwinV1AqPVlUOJlSYpq7iS3mleUJT0Im2PyApRnMIQX2yFu
c5RonzHEWq9jhod5ks+d4FdFydbdTs+cG39bmWprxxTK6tluHtC/W4sS2BmX8e7D
wWKIRoJTjpRq4u28nyQydsrm8sadNRbkxGycK2T9ZQ4p
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:13 2025 by rpki-client