Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/iRKQaDksCLDeAQtwp0YKQ3SovAI.roa
File: iRKQaDksCLDeAQtwp0YKQ3SovAI.roa (raw, json)
Hash identifier: wixldrtyd3fdUQpeC4X4fRGfwA4fNIJXJhW2tQSWdew=
Subject key identifier: 89:12:90:68:39:2C:08:B0:DE:01:0B:70:A7:46:0A:43:74:A8:BC:02
Certificate issuer: /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Certificate serial: 019468F4A730E5154AFA9F022AC13D9D2F4C
Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/iRKQaDksCLDeAQtwp0YKQ3SovAI.roa
Signing time: Wed 15 Jan 2025 07:54:11 +0000
ROA not before: Wed 15 Jan 2025 07:54:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210107
IP address blocks: 194.1.184.0/24 maxlen: 24
194.1.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:68:f4:a7:30:e5:15:4a:fa:9f:02:2a:c1:3d:9d:2f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Validity
Not Before: Jan 15 07:54:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89129068392c08b0de010b70a7460a4374a8bc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b2:ba:ea:16:db:56:5b:81:f2:88:ce:b1:be:
97:26:23:56:af:3d:1b:b9:9d:03:a7:f3:aa:78:d3:
92:d6:48:89:aa:73:07:ec:e4:16:28:68:d4:b2:4c:
87:be:25:da:50:f2:2a:c5:78:a1:ec:40:57:40:2c:
9b:fa:c9:63:f9:60:0d:d8:b9:05:f6:e8:01:a1:cb:
4d:f0:b2:4c:77:fe:ed:25:db:9e:aa:fc:97:a9:04:
38:e8:d0:69:16:24:50:6f:d0:9b:e8:44:21:3f:24:
b4:94:ab:93:99:63:ad:a1:cd:6a:fa:a9:7a:ba:93:
f4:b8:48:69:77:ab:55:0c:f0:07:06:7a:65:d3:6a:
96:48:8b:f4:b5:c2:09:a4:59:7c:7c:eb:f1:da:f3:
2b:26:5c:65:d9:2f:4c:56:b6:da:f4:00:a6:c0:25:
ce:6c:a0:3a:7d:18:1d:e7:a9:02:48:ab:7f:97:89:
2b:38:1d:15:c2:cc:27:57:66:70:a7:c1:5b:bb:d5:
7e:b8:08:8a:6c:2d:26:ba:e7:68:df:f2:db:3a:9b:
50:7f:d7:d8:2e:cf:6b:79:8a:90:a2:17:2f:7f:ba:
71:c8:b8:4a:61:50:5a:63:b4:9d:69:de:e3:a6:bd:
67:45:77:40:20:9b:2c:06:65:1a:93:c1:31:db:d9:
a8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:12:90:68:39:2C:08:B0:DE:01:0B:70:A7:46:0A:43:74:A8:BC:02
X509v3 Authority Key Identifier:
keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/iRKQaDksCLDeAQtwp0YKQ3SovAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.184.0/24
194.1.192.0/24
Signature Algorithm: sha256WithRSAEncryption
19:de:66:0b:6b:b4:e6:79:d2:f5:6a:99:b1:93:10:c8:a5:8b:
51:e4:f1:d5:5a:b0:79:ae:2a:12:0e:22:31:6f:30:6b:d3:e1:
f4:f9:98:03:87:7f:0b:7d:33:11:ad:6a:d5:a8:ba:ac:c3:f8:
bf:cf:ca:fa:0e:80:da:f1:16:30:9a:f7:c9:da:15:0a:e9:76:
9a:27:7a:69:78:d4:58:d8:47:24:a9:a2:10:72:9c:52:a7:c7:
d0:8c:d1:d5:ea:76:2f:87:a1:bf:fb:52:b6:27:bc:66:41:63:
76:ef:69:c4:28:34:22:7a:3b:c7:35:2f:49:a5:22:b3:3c:19:
c0:d7:09:89:55:47:67:38:9b:23:44:4c:86:27:45:2c:d8:b1:
b4:82:48:9f:05:fb:d5:63:e3:bb:18:cd:70:0e:7b:54:1c:44:
9b:87:f7:1a:ba:64:54:7f:58:88:1d:cf:3f:15:8c:ec:fd:46:
7d:da:7c:e0:36:c3:77:8f:6c:12:98:b9:a4:5a:df:c0:cf:fc:
d4:84:b1:4f:20:65:0d:08:3e:16:1e:e5:fc:b9:8d:32:88:26:
0f:dd:20:ec:01:d3:3c:d3:a8:cc:27:93:f1:7e:69:49:91:aa:
fd:5f:64:12:59:c8:b3:fa:0e:0d:48:8f:c4:5b:94:0c:78:c2:
97:bf:20:1d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZRo9Kcw5RVK+p8CKsE9nS9MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMTNmMmMyZDA2YzY0Yjg5NTQ1N2FiNTBmYzQ5MjAyODNh
NDljYzcwHhcNMjUwMTE1MDc1NDExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTEyOTA2ODM5MmMwOGIwZGUwMTBiNzBhNzQ2MGE0Mzc0YThiYzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9rK66hbbVluB8ojOsb6XJiNWrz0b
uZ0Dp/OqeNOS1kiJqnMH7OQWKGjUskyHviXaUPIqxXih7EBXQCyb+slj+WAN2LkF
9ugBoctN8LJMd/7tJdueqvyXqQQ46NBpFiRQb9Cb6EQhPyS0lKuTmWOtoc1q+ql6
upP0uEhpd6tVDPAHBnpl02qWSIv0tcIJpFl8fOvx2vMrJlxl2S9MVrba9ACmwCXO
bKA6fRgd56kCSKt/l4krOB0VwswnV2Zwp8Fbu9V+uAiKbC0muudo3/LbOptQf9fY
Ls9reYqQohcvf7pxyLhKYVBaY7Sdad7jpr1nRXdAIJssBmUak8Ex29moZwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIkSkGg5LAiw3gELcKdGCkN0qLwCMB8GA1UdIwQY
MBaAFJIT8sLQbGS4lUV6tQ/EkgKDpJzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8zMWE2YTQtOGE5ZC00N2EyLThmYmIt
YjlkZmYzZTdhMzJlLzEvaVJLUWFEa3NDTERlQVF0d3AwWUtRM1NvdkFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8zMWE2YTQtOGE5ZC00N2EyLThmYmItYjlkZmYzZTdhMzJl
LzEva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwgG4AwQA
wgHAMA0GCSqGSIb3DQEBCwUAA4IBAQAZ3mYLa7TmedL1apmxkxDIpYtR5PHVWrB5
rioSDiIxbzBr0+H0+ZgDh38LfTMRrWrVqLqsw/i/z8r6DoDa8RYwmvfJ2hUK6Xaa
J3ppeNRY2EckqaIQcpxSp8fQjNHV6nYvh6G/+1K2J7xmQWN272nEKDQiejvHNS9J
pSKzPBnA1wmJVUdnOJsjREyGJ0Us2LG0gkifBfvVY+O7GM1wDntUHESbh/caumRU
f1iIHc8/FYzs/UZ92nzgNsN3j2wSmLmkWt/Az/zUhLFPIGUNCD4WHuX8uY0yiCYP
3SDsAdM806jMJ5PxfmlJkar9X2QSWciz+g4NSI/EW5QMeMKXvyAd
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:26 2025 by rpki-client