Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/zV9LNmGcv52EaJiYnvcEchkoyS4.roa
File: zV9LNmGcv52EaJiYnvcEchkoyS4.roa (raw, json)
Hash identifier: 7+tk5OKGsDgPRtMzzmdAb84WHEzjIJ3n9hyI8CnIig8=
Subject key identifier: CD:5F:4B:36:61:9C:BF:9D:84:68:98:98:9E:F7:04:72:19:28:C9:2E
Certificate issuer: /CN=89e21a2b8a25b971bdb741a0aae325992304194e
Certificate serial: 01941FFA098BE3117E8941EA62C3F7263286
Authority key identifier: 89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/zV9LNmGcv52EaJiYnvcEchkoyS4.roa
Signing time: Wed 01 Jan 2025 03:47:47 +0000
ROA not before: Wed 01 Jan 2025 03:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140543
IP address blocks: 193.25.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:09:8b:e3:11:7e:89:41:ea:62:c3:f7:26:32:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e21a2b8a25b971bdb741a0aae325992304194e
Validity
Not Before: Jan 1 03:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd5f4b36619cbf9d846898989ef704721928c92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:83:90:1e:4e:79:11:fc:25:e9:20:04:72:
e3:d0:c8:1b:b5:e7:bb:c2:ec:8c:21:ce:1d:f2:26:
59:c7:12:30:b7:67:63:7a:bc:53:d0:64:f1:19:e6:
40:28:5f:27:4f:cd:75:3a:9a:bd:23:3c:47:22:2f:
82:3a:bb:10:b5:55:bc:52:6b:a6:51:e2:f0:aa:4e:
25:d3:4c:83:35:52:42:0b:73:9e:e5:e6:45:1a:f9:
d8:e7:55:54:c1:c5:42:c7:d9:25:2e:67:12:cf:8b:
35:52:93:34:a1:68:5d:79:4b:db:3d:7b:59:1c:65:
4c:c8:f3:55:62:52:f6:2e:9e:e3:eb:e3:89:0b:bd:
83:c5:49:b1:d6:be:3f:41:22:d6:dd:ab:3b:bc:a4:
95:4f:bb:fe:d7:22:a2:e0:5c:92:3e:bf:15:d6:88:
65:62:77:9e:16:09:6e:39:b6:7f:c2:39:48:de:a4:
f4:2f:8f:3a:56:dd:d7:be:c0:41:70:14:39:b5:27:
a4:7b:c3:49:17:f3:5f:b9:46:b3:72:86:ac:d0:f3:
70:2b:f1:a8:83:ef:b1:7e:6a:11:3a:56:b1:87:61:
fa:cb:f6:4e:47:6d:a0:b5:f3:9f:46:15:51:18:07:
b5:f4:33:a7:1c:9d:d6:96:76:a4:0c:42:ea:b7:1c:
04:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5F:4B:36:61:9C:BF:9D:84:68:98:98:9E:F7:04:72:19:28:C9:2E
X509v3 Authority Key Identifier:
keyid:89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/zV9LNmGcv52EaJiYnvcEchkoyS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.253.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:c7:58:29:8a:3c:57:7b:5c:0a:6d:73:d0:db:8d:93:83:2e:
9b:5f:d6:36:95:1e:cd:b1:f4:18:a9:58:36:ef:32:87:ab:6a:
07:8d:79:56:b9:2f:94:83:31:52:57:54:fc:e5:7d:be:b6:47:
da:a4:d8:9f:02:12:6f:24:af:ed:fc:a4:a2:43:e1:ca:37:d2:
eb:32:7e:85:4d:fd:df:28:a7:f3:ba:89:de:74:87:2c:6e:2d:
00:71:56:ea:2a:8a:ae:82:2d:3f:4a:b5:5a:3c:bf:d0:e9:15:
cc:b5:d2:be:9f:ed:d4:7e:9c:10:2b:df:87:37:69:89:ad:52:
59:04:dd:1e:4f:ab:14:db:94:15:d0:00:2a:e0:96:56:de:22:
74:8f:45:41:d2:d9:31:8e:70:96:e2:a1:ab:5d:39:5e:22:5a:
d5:38:70:32:08:65:6e:58:e9:8d:ef:34:0c:f1:75:d9:87:a4:
11:a5:61:3e:f1:6c:fe:16:38:3a:be:51:84:7e:90:97:7e:d4:
4e:f3:89:0c:42:2d:c0:66:a9:33:f4:d0:e1:e1:90:59:2b:2e:
a3:f1:67:51:1c:45:2f:c9:11:44:31:3c:e0:55:09:6a:b9:f1:
f4:05:54:b2:7b:04:28:f4:87:b1:91:3f:c1:10:8c:b3:87:b8:
22:e3:df:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+gmL4xF+iUHqYsP3JjKGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZTIxYTJiOGEyNWI5NzFiZGI3NDFhMGFhZTMyNTk5MjMw
NDE5NGUwHhcNMjUwMTAxMDM0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDVmNGIzNjYxOWNiZjlkODQ2ODk4OTg5ZWY3MDQ3MjE5MjhjOTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5aDkB5OeRH8JekgBHLj0Mgbtee7
wuyMIc4d8iZZxxIwt2djerxT0GTxGeZAKF8nT811Opq9IzxHIi+COrsQtVW8Umum
UeLwqk4l00yDNVJCC3Oe5eZFGvnY51VUwcVCx9klLmcSz4s1UpM0oWhdeUvbPXtZ
HGVMyPNVYlL2Lp7j6+OJC72DxUmx1r4/QSLW3as7vKSVT7v+1yKi4FySPr8V1ohl
YneeFgluObZ/wjlI3qT0L486Vt3XvsBBcBQ5tSeke8NJF/NfuUazcoas0PNwK/Go
g++xfmoROlaxh2H6y/ZOR22gtfOfRhVRGAe19DOnHJ3WlnakDELqtxwEawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM1fSzZhnL+dhGiYmJ73BHIZKMkuMB8GA1UdIwQY
MBaAFIniGiuKJblxvbdBoKrjJZkjBBlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80MDY5OTEtNWJlMy00YTA1LWFjYjIt
MWFkNDdjY2QyZDlhLzEvelY5TE5tR2N2NTJFYUppWW52Y0VjaGtveVM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi80MDY5OTEtNWJlMy00YTA1LWFjYjItMWFkNDdjY2QyZDlh
LzEvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRn9MA0G
CSqGSIb3DQEBCwUAA4IBAQBNx1gpijxXe1wKbXPQ242Tgy6bX9Y2lR7NsfQYqVg2
7zKHq2oHjXlWuS+UgzFSV1T85X2+tkfapNifAhJvJK/t/KSiQ+HKN9LrMn6FTf3f
KKfzuonedIcsbi0AcVbqKoqugi0/SrVaPL/Q6RXMtdK+n+3UfpwQK9+HN2mJrVJZ
BN0eT6sU25QV0AAq4JZW3iJ0j0VB0tkxjnCW4qGrXTleIlrVOHAyCGVuWOmN7zQM
8XXZh6QRpWE+8Wz+Fjg6vlGEfpCXftRO84kMQi3AZqkz9NDh4ZBZKy6j8WdRHEUv
yRFEMTzgVQlqufH0BVSyewQo9IexkT/BEIyzh7gi498l
-----END CERTIFICATE-----
Generated at Fri Apr 11 03:14:19 2025 by rpki-client