Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/tDDvO4ewPeixYnF0BIHSLyjo8w4.roa
File: tDDvO4ewPeixYnF0BIHSLyjo8w4.roa (raw, json)
Hash identifier: 2D9w4MUI/GtrAMc5KswKAPRyDxDgFgv99Z5MGOrURSw=
Subject key identifier: B4:30:EF:3B:87:B0:3D:E8:B1:62:71:74:04:81:D2:2F:28:E8:F3:0E
Certificate issuer: /CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Certificate serial: 019420686A43669423F7AED5656863E10348
Authority key identifier: 1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/tDDvO4ewPeixYnF0BIHSLyjo8w4.roa
Signing time: Wed 01 Jan 2025 05:48:21 +0000
ROA not before: Wed 01 Jan 2025 05:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32693
IP address blocks: 193.135.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:6a:43:66:94:23:f7:ae:d5:65:68:63:e1:03:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Validity
Not Before: Jan 1 05:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b430ef3b87b03de8b16271740481d22f28e8f30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c7:a1:ac:97:38:34:fd:4c:57:0c:44:0f:32:
fe:e4:34:de:6f:9f:2b:ac:42:8b:d0:0b:96:08:ac:
ff:88:4e:8a:f9:bd:e7:d6:22:3a:92:5b:d4:1b:5c:
aa:86:c2:e3:15:8e:d6:73:1f:55:9a:f3:14:76:03:
05:2b:80:56:6a:ce:ee:ae:80:f9:61:58:94:6c:5e:
24:7c:33:25:7b:fd:b1:3d:88:85:56:01:ff:cf:54:
98:bf:ad:02:73:f0:60:f0:7d:e2:fa:24:94:72:a1:
88:e1:27:9d:50:01:1a:00:db:08:17:0b:cc:e5:8d:
18:0b:97:0b:b9:0e:be:03:5f:2f:54:93:96:2a:bb:
c0:90:6b:ae:43:6b:26:8d:d1:55:7f:3d:ce:e9:5f:
51:c9:47:f5:a8:d9:e0:41:10:07:3e:96:38:73:4b:
d9:6a:da:7f:de:77:39:9c:e9:ec:6a:30:69:70:dd:
f5:bb:c5:e4:8b:10:c5:b2:b2:c0:76:27:ba:dd:58:
ef:97:84:29:45:31:cb:75:70:a6:c8:0b:4f:ab:e6:
09:6b:a3:d1:80:e0:4e:90:96:0d:aa:e5:dd:4e:dd:
fc:43:ab:1e:8d:95:75:40:94:e6:32:6b:6a:79:dc:
27:08:a7:61:7b:ce:bf:f4:5a:3e:d6:f1:a4:a2:82:
e4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:30:EF:3B:87:B0:3D:E8:B1:62:71:74:04:81:D2:2F:28:E8:F3:0E
X509v3 Authority Key Identifier:
keyid:1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/tDDvO4ewPeixYnF0BIHSLyjo8w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.118.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:8d:a3:6d:44:a2:be:ed:86:86:66:e0:6e:46:a4:0d:48:a5:
6e:45:32:98:18:24:c8:35:ce:50:bd:0f:3a:b3:4b:95:1d:4d:
a4:bc:df:00:79:84:10:84:c8:cc:33:da:47:af:0d:42:01:cd:
bd:7a:86:7e:88:cd:f6:4c:37:b1:8c:0a:22:8e:2b:67:57:18:
e8:71:7d:6f:c1:46:ea:80:ff:ae:db:e9:10:2c:c7:4e:4d:a4:
fe:75:d8:2f:cf:d5:ba:51:0d:5c:5d:92:33:c2:af:89:9d:1d:
00:71:ec:97:2c:90:13:d0:2d:f4:9a:cd:87:0e:d4:10:3d:50:
2a:e4:b4:1b:9a:4a:f1:41:4c:fb:4f:96:82:57:bc:93:5f:b7:
52:44:5d:5e:14:3c:fd:e6:e4:f1:03:47:19:0a:65:d4:2c:7b:
b5:55:32:60:db:e4:d1:b0:91:f3:96:6b:34:eb:61:3d:a3:7d:
80:bd:aa:53:a7:af:e1:72:3f:c4:dd:b5:12:ed:6e:39:f2:1b:
67:aa:90:29:c0:5e:6c:ef:e2:3c:c8:7c:30:f1:44:ca:67:36:
2d:c9:c4:6d:13:6b:8a:af:de:d4:17:21:ee:cc:1e:71:6d:71:
b0:6a:a0:d6:52:b5:22:2a:30:a7:49:a6:9b:fa:2f:1b:53:99:
1e:a0:9c:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaGpDZpQj967VZWhj4QNIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDQ4NDhiZmVmNzI0ZTI2YWJlZDNjNjVlNGU4Zjk1MDhm
YjE3OTYwHhcNMjUwMTAxMDU0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDMwZWYzYjg3YjAzZGU4YjE2MjcxNzQwNDgxZDIyZjI4ZThmMzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMehrJc4NP1MVwxEDzL+5DTeb58r
rEKL0AuWCKz/iE6K+b3n1iI6klvUG1yqhsLjFY7Wcx9VmvMUdgMFK4BWas7uroD5
YViUbF4kfDMle/2xPYiFVgH/z1SYv60Cc/Bg8H3i+iSUcqGI4SedUAEaANsIFwvM
5Y0YC5cLuQ6+A18vVJOWKrvAkGuuQ2smjdFVfz3O6V9RyUf1qNngQRAHPpY4c0vZ
atp/3nc5nOnsajBpcN31u8XkixDFsrLAdie63Vjvl4QpRTHLdXCmyAtPq+YJa6PR
gOBOkJYNquXdTt38Q6sejZV1QJTmMmtqedwnCKdhe86/9Fo+1vGkooLkYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLQw7zuHsD3osWJxdASB0i8o6PMOMB8GA1UdIwQY
MBaAFBwEhIv+9yTiar7Txl5Oj5UI+xeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFTRWlfNzNKT0pxdnRQR1hrNlBsUWo3RjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny82NzI2MjktYTBlMi00NzZmLWFlYWQt
ZWUzODBiODJjZmNhLzEvdEREdk80ZXdQZWl4WW5GMEJJSFNMeWpvOHc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny82NzI2MjktYTBlMi00NzZmLWFlYWQtZWUzODBiODJjZmNh
LzEvSEFTRWlfNzNKT0pxdnRQR1hrNlBsUWo3RjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYd2MA0G
CSqGSIb3DQEBCwUAA4IBAQBejaNtRKK+7YaGZuBuRqQNSKVuRTKYGCTINc5QvQ86
s0uVHU2kvN8AeYQQhMjMM9pHrw1CAc29eoZ+iM32TDexjAoijitnVxjocX1vwUbq
gP+u2+kQLMdOTaT+ddgvz9W6UQ1cXZIzwq+JnR0AceyXLJAT0C30ms2HDtQQPVAq
5LQbmkrxQUz7T5aCV7yTX7dSRF1eFDz95uTxA0cZCmXULHu1VTJg2+TRsJHzlms0
62E9o32AvapTp6/hcj/E3bUS7W458htnqpApwF5s7+I8yHww8UTKZzYtycRtE2uK
r97UFyHuzB5xbXGwaqDWUrUiKjCnSaab+i8bU5keoJyf
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:20:41 2025 by rpki-client