Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/iR0uUSaMDVk4rmeuVyPGVkdcqLE.roa
File: iR0uUSaMDVk4rmeuVyPGVkdcqLE.roa (raw, json)
Hash identifier: sZZwxXoDC2HK33lHhgW538/xHmH0s3/1MpPlRdA51Ic=
Subject key identifier: 89:1D:2E:51:26:8C:0D:59:38:AE:67:AE:57:23:C6:56:47:5C:A8:B1
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019420685EB662523C729EA921DB5816E375
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/iR0uUSaMDVk4rmeuVyPGVkdcqLE.roa
Signing time: Wed 01 Jan 2025 05:48:18 +0000
ROA not before: Wed 01 Jan 2025 05:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398343
IP address blocks: 193.233.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5e:b6:62:52:3c:72:9e:a9:21:db:58:16:e3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=891d2e51268c0d5938ae67ae5723c656475ca8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:46:94:db:f4:da:13:5b:33:5f:05:6e:05:0d:
d2:b8:88:a1:d8:bd:33:2c:86:7f:08:be:bc:78:c0:
d9:73:4d:d0:36:98:54:2a:9d:4b:df:af:bb:e5:c3:
7a:1e:ab:19:0a:24:a3:89:d8:f9:5b:18:5b:34:d0:
ff:39:dc:15:fa:66:47:66:5e:51:6a:4a:09:da:32:
39:97:37:42:3c:40:b9:28:0b:6d:7f:a9:88:8f:e1:
6e:3c:16:43:fb:26:22:6f:c6:cb:3a:99:58:b2:f1:
08:56:2e:50:01:81:10:0d:8e:48:ab:5e:33:d8:ac:
ef:f0:d2:c8:1f:a8:08:59:ea:77:fd:2f:2e:8b:69:
37:1e:c3:3f:0c:43:63:b4:63:11:4d:bb:d0:c3:fb:
37:3c:e0:d0:1f:a2:8d:ae:88:0f:0f:7a:17:51:99:
bb:dc:d6:2f:1f:53:cf:6b:5d:f9:29:a0:03:30:32:
5d:2b:e0:a6:29:12:24:ea:af:fe:87:8f:ba:a2:49:
58:24:d1:26:27:16:df:5c:c1:42:83:95:be:fc:13:
e3:c7:d2:0a:0f:47:e3:e9:a0:06:e8:a1:8f:b0:5b:
d8:1c:4c:9a:69:c4:99:dc:36:ae:51:3b:e6:63:77:
97:4d:e1:93:bb:b1:47:3e:dc:b1:31:90:a3:87:76:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1D:2E:51:26:8C:0D:59:38:AE:67:AE:57:23:C6:56:47:5C:A8:B1
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/iR0uUSaMDVk4rmeuVyPGVkdcqLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.204.0/22
Signature Algorithm: sha256WithRSAEncryption
18:8f:00:64:72:cc:62:a9:9d:26:c6:fd:b0:3c:b0:26:7b:84:
5b:e0:01:ef:1e:1c:ee:30:80:4e:d2:af:30:d9:88:d3:14:a5:
13:69:42:4f:45:37:7f:5b:82:52:ed:f6:f4:ad:3c:ae:05:90:
95:9d:4e:9c:b2:78:10:72:7b:ca:3c:01:c0:b7:19:50:28:50:
46:dd:7c:bf:57:0d:45:81:5d:63:b5:19:f4:19:42:30:e9:af:
10:cf:14:48:27:23:40:db:37:db:c4:86:62:94:be:52:1e:ee:
89:fb:da:09:db:e5:a8:10:f0:aa:16:6f:8d:c5:01:a2:b4:eb:
80:35:80:57:1a:0f:7d:18:48:12:76:86:75:9b:1a:2c:ad:f2:
58:31:82:b5:09:e0:bd:10:ab:55:73:0b:82:92:74:7a:c5:45:
1a:34:da:94:fb:b1:f9:80:7d:f8:a8:67:2a:60:09:53:d8:e2:
8a:56:91:5e:ce:f5:42:83:f2:de:61:88:bc:91:90:fe:cc:17:
ab:a8:5c:4a:2c:2c:35:07:37:43:16:37:af:74:eb:3c:72:77:
ab:42:90:3f:21:85:43:50:75:9a:e5:7c:87:6e:fc:72:df:e3:
83:8b:6d:f1:1f:da:e3:1d:57:47:1a:e9:19:51:ed:5d:09:9a:
ee:f8:d7:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaF62YlI8cp6pIdtYFuN1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjUwMTAxMDU0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTFkMmU1MTI2OGMwZDU5MzhhZTY3YWU1NzIzYzY1NjQ3NWNhOGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kaU2/TaE1szXwVuBQ3SuIih2L0z
LIZ/CL68eMDZc03QNphUKp1L36+75cN6HqsZCiSjidj5WxhbNND/OdwV+mZHZl5R
akoJ2jI5lzdCPEC5KAttf6mIj+FuPBZD+yYib8bLOplYsvEIVi5QAYEQDY5Iq14z
2Kzv8NLIH6gIWep3/S8ui2k3HsM/DENjtGMRTbvQw/s3PODQH6KNrogPD3oXUZm7
3NYvH1PPa135KaADMDJdK+CmKRIk6q/+h4+6oklYJNEmJxbfXMFCg5W+/BPjx9IK
D0fj6aAG6KGPsFvYHEyaacSZ3DauUTvmY3eXTeGTu7FHPtyxMZCjh3ZobQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIkdLlEmjA1ZOK5nrlcjxlZHXKixMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvaVIwdVVTYU1EVms0cm1ldVZ5UEdWa2RjcUxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwenMMA0G
CSqGSIb3DQEBCwUAA4IBAQAYjwBkcsxiqZ0mxv2wPLAme4Rb4AHvHhzuMIBO0q8w
2YjTFKUTaUJPRTd/W4JS7fb0rTyuBZCVnU6csngQcnvKPAHAtxlQKFBG3Xy/Vw1F
gV1jtRn0GUIw6a8QzxRIJyNA2zfbxIZilL5SHu6J+9oJ2+WoEPCqFm+NxQGitOuA
NYBXGg99GEgSdoZ1mxosrfJYMYK1CeC9EKtVcwuCknR6xUUaNNqU+7H5gH34qGcq
YAlT2OKKVpFezvVCg/LeYYi8kZD+zBerqFxKLCw1BzdDFjevdOs8cnerQpA/IYVD
UHWa5XyHbvxy3+ODi23xH9rjHVdHGukZUe1dCZru+Nf3
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:44 2025 by rpki-client