Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/t_lJAzfvjWKMyLKQMrioEk5d_0w.roa
File: t_lJAzfvjWKMyLKQMrioEk5d_0w.roa (raw, json)
Hash identifier: wl26VQmURsOv+pvsAOIbkvKehkFtkmgC21ZsAlFMTv4=
Subject key identifier: B7:F9:49:03:37:EF:8D:62:8C:C8:B2:90:32:B8:A8:12:4E:5D:FF:4C
Certificate issuer: /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial: 0194236A3DBCBC037CA11CE36679BC6B0E65
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/t_lJAzfvjWKMyLKQMrioEk5d_0w.roa
Signing time: Wed 01 Jan 2025 19:49:12 +0000
ROA not before: Wed 01 Jan 2025 19:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 193.38.176.0/24 maxlen: 24
193.38.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3d:bc:bc:03:7c:a1:1c:e3:66:79:bc:6b:0e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Validity
Not Before: Jan 1 19:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7f9490337ef8d628cc8b29032b8a8124e5dff4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:de:ee:fa:cd:f1:07:82:c9:cf:aa:cd:25:
07:e5:44:9b:19:24:92:60:f4:25:15:2a:14:38:21:
e5:98:f8:37:2f:e6:b4:73:2c:4f:f9:9e:44:3f:01:
9b:84:2c:d2:aa:cb:48:76:f5:8e:49:d5:78:9b:9e:
9b:10:c7:20:5f:f1:6d:7d:4f:d0:50:c4:39:ce:43:
9c:f8:7e:0b:a9:4f:df:cb:49:52:6c:ac:a5:99:80:
f4:8e:c0:08:09:48:0c:c4:e8:c1:a9:bb:ac:c9:0f:
aa:45:4c:00:be:73:e9:b0:33:28:e1:e7:f1:3e:ab:
46:cd:0f:68:85:03:1d:0b:ae:cf:d5:2a:ac:93:71:
b6:ec:b5:40:20:b7:49:44:01:35:59:67:b0:d9:cc:
f4:1b:cd:87:b0:72:9b:9f:62:70:89:66:60:27:86:
97:1a:7c:62:e9:5e:f6:f6:67:79:48:9a:c5:7e:a5:
a2:da:90:69:85:4e:df:95:98:dc:23:97:f5:db:4a:
32:98:3c:b6:22:c4:4c:5c:bc:b0:93:01:c1:a2:db:
f1:d4:1c:2a:f9:bf:77:e8:a4:e0:1d:e4:83:da:58:
4d:dd:ee:38:dd:7e:a8:38:62:e9:75:b5:94:2b:7e:
ca:a3:f5:ec:71:71:ba:ae:4e:82:ee:54:90:73:95:
da:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F9:49:03:37:EF:8D:62:8C:C8:B2:90:32:B8:A8:12:4E:5D:FF:4C
X509v3 Authority Key Identifier:
keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/t_lJAzfvjWKMyLKQMrioEk5d_0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.176.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:51:06:93:1a:f8:48:ae:2d:e5:18:88:9e:6d:08:99:4e:76:
aa:43:48:b7:f5:c6:76:ea:92:ce:98:79:34:57:8e:b3:49:ff:
d1:60:a0:25:5d:95:08:17:0a:37:e5:99:3e:b7:8c:11:d4:55:
a2:e2:31:90:1f:ac:ff:e4:80:ce:8d:5e:11:70:b9:c2:1b:b9:
0a:17:ad:a8:c6:db:db:53:76:60:3f:b4:41:94:d7:88:6b:96:
5a:ee:fa:dd:84:cb:f4:a8:e9:9a:64:fb:42:8a:12:9f:ac:a7:
35:0c:47:84:86:71:87:32:3e:16:dc:34:f9:92:7a:85:27:94:
fa:68:15:28:d9:da:00:cb:77:eb:54:31:07:db:27:c2:ed:53:
53:6f:c2:c4:7a:81:8d:1d:11:75:93:f4:1b:d2:46:64:c8:fa:
f3:7c:f2:c4:bd:e2:9e:28:a8:cd:ba:d4:0c:cc:59:0e:23:d8:
65:bd:b3:a8:a1:91:71:3a:cf:8a:2a:c1:63:f1:ab:b7:27:85:
a3:cf:52:18:88:21:5e:00:5b:3d:f2:c1:18:90:7d:a7:dc:1b:
a5:c4:44:59:f8:ff:57:5a:8a:61:74:bd:f1:72:3a:ab:8b:db:
90:7a:24:cf:7f:95:99:63:9a:ab:0e:11:81:8d:95:41:f6:5b:
f9:b8:92:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaj28vAN8oRzjZnm8aw5lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OWMzNTY2MzMzODhlOWJkODk3ZDAwMGEzZjM4YmMxZTU0
NmVmNGEwHhcNMjUwMTAxMTk0OTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2Y5NDkwMzM3ZWY4ZDYyOGNjOGIyOTAzMmI4YTgxMjRlNWRmZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz/e7vrN8QeCyc+qzSUH5USbGSSS
YPQlFSoUOCHlmPg3L+a0cyxP+Z5EPwGbhCzSqstIdvWOSdV4m56bEMcgX/FtfU/Q
UMQ5zkOc+H4LqU/fy0lSbKylmYD0jsAICUgMxOjBqbusyQ+qRUwAvnPpsDMo4efx
PqtGzQ9ohQMdC67P1Sqsk3G27LVAILdJRAE1WWew2cz0G82HsHKbn2JwiWZgJ4aX
Gnxi6V729md5SJrFfqWi2pBphU7flZjcI5f120oymDy2IsRMXLywkwHBotvx1Bwq
+b936KTgHeSD2lhN3e443X6oOGLpdbWUK37Ko/XscXG6rk6C7lSQc5Xa4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLf5SQM3741ijMiykDK4qBJOXf9MMB8GA1UdIwQY
MBaAFGWcNWYzOI6b2JfQAKPzi8HlRu9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTkt
M2M3ZTRmOTNlNDJiLzEvdF9sSkF6ZnZqV0tNeUxLUU1yaW9FazVkXzB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTktM2M3ZTRmOTNlNDJi
LzEvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSawMA0G
CSqGSIb3DQEBCwUAA4IBAQCjUQaTGvhIri3lGIiebQiZTnaqQ0i39cZ26pLOmHk0
V46zSf/RYKAlXZUIFwo35Zk+t4wR1FWi4jGQH6z/5IDOjV4RcLnCG7kKF62oxtvb
U3ZgP7RBlNeIa5Za7vrdhMv0qOmaZPtCihKfrKc1DEeEhnGHMj4W3DT5knqFJ5T6
aBUo2doAy3frVDEH2yfC7VNTb8LEeoGNHRF1k/Qb0kZkyPrzfPLEveKeKKjNutQM
zFkOI9hlvbOooZFxOs+KKsFj8au3J4Wjz1IYiCFeAFs98sEYkH2n3BulxERZ+P9X
WophdL3xcjqri9uQeiTPf5WZY5qrDhGBjZVB9lv5uJKd
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:33:43 2025 by rpki-client