Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/D6FQ_AOx7VEUAwBlUYJ5Pt1jupM.roa
File: D6FQ_AOx7VEUAwBlUYJ5Pt1jupM.roa (raw, json)
Hash identifier: 4lHXyj3pRBx2LFAwlRyUS6mFr8ntH6TaBTAezCtdNUI=
Subject key identifier: 0F:A1:50:FC:03:B1:ED:51:14:03:00:65:51:82:79:3E:DD:63:BA:93
Certificate issuer: /CN=0008589496bf86d2d0f8874b76cac843025bcd3b
Certificate serial: 019422203127012BE932669A71014AD8AF83
Authority key identifier: 00:08:58:94:96:BF:86:D2:D0:F8:87:4B:76:CA:C8:43:02:5B:CD:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/D6FQ_AOx7VEUAwBlUYJ5Pt1jupM.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 193.100.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:31:27:01:2b:e9:32:66:9a:71:01:4a:d8:af:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0008589496bf86d2d0f8874b76cac843025bcd3b
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fa150fc03b1ed51140300655182793edd63ba93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:54:07:d2:e6:31:da:a3:db:98:1b:84:dc:58:
c1:d4:26:b5:3e:0d:d0:ca:54:3c:89:e7:7a:92:3f:
78:3f:ad:f1:51:f2:70:86:85:bb:7d:c8:aa:24:1a:
92:ac:f1:ef:eb:b7:13:08:a0:4e:8f:48:04:1a:45:
17:21:f4:69:58:79:0b:a9:c5:65:19:99:85:38:e9:
2c:98:8a:24:f3:90:bd:12:da:b7:15:e6:e0:d4:52:
d7:ce:6a:68:18:9e:de:7e:7c:4f:ff:a1:54:6b:87:
dc:1a:fe:f6:04:dd:15:a0:3c:cc:33:ff:6c:ac:61:
e6:9a:ff:81:18:23:01:19:90:dd:10:2d:7a:33:31:
03:9f:4c:bd:d6:91:04:81:14:e8:ce:b0:09:e0:d3:
8a:57:2a:4d:3b:86:75:b2:e3:77:f6:f5:9a:b9:4a:
fa:c9:07:eb:19:ac:f4:3b:0a:e7:f3:bb:95:ff:d9:
5e:d8:a7:bd:71:09:2a:91:6c:b8:e6:31:d2:a4:03:
47:01:fb:f0:0b:c7:91:b1:45:22:b4:35:76:51:7e:
07:d8:9b:36:e8:ba:4c:0e:82:7c:39:41:6e:18:8e:
12:f8:8e:cc:57:3d:83:8d:7e:8b:eb:42:ec:31:ad:
97:a6:f8:c3:e3:72:6e:b8:2e:79:d0:d1:93:18:21:
bf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A1:50:FC:03:B1:ED:51:14:03:00:65:51:82:79:3E:DD:63:BA:93
X509v3 Authority Key Identifier:
keyid:00:08:58:94:96:BF:86:D2:D0:F8:87:4B:76:CA:C8:43:02:5B:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/D6FQ_AOx7VEUAwBlUYJ5Pt1jupM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.100.254.0/24
Signature Algorithm: sha256WithRSAEncryption
68:c1:34:cc:d7:42:62:7c:03:18:21:6a:2b:02:54:ed:ac:08:
db:8d:94:72:33:a1:60:b7:44:07:35:d5:c3:b4:25:4e:da:c1:
14:94:1a:a6:39:c8:38:67:c1:a2:e4:66:25:39:f5:c1:bf:ac:
c7:5f:ef:f2:b7:3b:88:e1:73:a0:13:85:cd:e6:32:c6:ad:2c:
2c:79:b6:04:ff:58:10:4f:5a:28:62:7e:15:a6:64:5d:5c:b2:
9f:65:9a:3c:f5:97:df:10:59:9c:86:d5:a6:fd:d1:ba:f0:fc:
bc:9f:7e:c1:08:9c:97:60:f3:9b:97:8c:ff:a7:97:53:d0:72:
3b:6d:71:6a:ed:c7:bb:a1:72:b5:d8:e6:32:05:50:8f:c6:05:
41:9d:8c:e1:42:da:7c:d8:fc:0a:c0:5f:24:84:d5:46:7f:1f:
f9:cd:6b:9e:b4:a1:e9:27:04:ea:fc:da:b2:fb:15:73:60:7a:
09:48:db:3d:ff:47:fb:f1:56:aa:50:28:16:ed:f8:3c:7b:84:
3c:dc:8f:64:1e:40:b2:dd:69:fc:c8:7c:e9:b6:11:7e:89:a6:
31:7a:fc:39:a8:a8:1e:74:b8:30:75:8b:30:9c:a2:63:73:5c:
96:12:92:da:9d:4a:c1:22:b2:39:4d:33:c1:f7:b9:b9:eb:77:
e9:9e:4d:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIDEnASvpMmaacQFK2K+DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMDg1ODk0OTZiZjg2ZDJkMGY4ODc0Yjc2Y2FjODQzMDI1
YmNkM2IwHhcNMjUwMTAxMTM0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmExNTBmYzAzYjFlZDUxMTQwMzAwNjU1MTgyNzkzZWRkNjNiYTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FQH0uYx2qPbmBuE3FjB1Ca1Pg3Q
ylQ8ied6kj94P63xUfJwhoW7fciqJBqSrPHv67cTCKBOj0gEGkUXIfRpWHkLqcVl
GZmFOOksmIok85C9Etq3Febg1FLXzmpoGJ7efnxP/6FUa4fcGv72BN0VoDzMM/9s
rGHmmv+BGCMBGZDdEC16MzEDn0y91pEEgRTozrAJ4NOKVypNO4Z1suN39vWauUr6
yQfrGaz0Owrn87uV/9le2Ke9cQkqkWy45jHSpANHAfvwC8eRsUUitDV2UX4H2Js2
6LpMDoJ8OUFuGI4S+I7MVz2DjX6L60LsMa2XpvjD43JuuC550NGTGCG/7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA+hUPwDse1RFAMAZVGCeT7dY7qTMB8GA1UdIwQY
MBaAFAAIWJSWv4bS0PiHS3bKyEMCW807MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUFoWWxKYV9odExRLUlkTGRzcklRd0pielRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9kMWMwNmEtZGZhNS00Yzc4LTk4MGEt
NmJlMmY0ZDI0Yzk2LzEvRDZGUV9BT3g3VkVVQXdCbFVZSjVQdDFqdXBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9kMWMwNmEtZGZhNS00Yzc4LTk4MGEtNmJlMmY0ZDI0Yzk2
LzEvQUFoWWxKYV9odExRLUlkTGRzcklRd0pielRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWT+MA0G
CSqGSIb3DQEBCwUAA4IBAQBowTTM10JifAMYIWorAlTtrAjbjZRyM6Fgt0QHNdXD
tCVO2sEUlBqmOcg4Z8Gi5GYlOfXBv6zHX+/ytzuI4XOgE4XN5jLGrSwsebYE/1gQ
T1ooYn4VpmRdXLKfZZo89ZffEFmchtWm/dG68Py8n37BCJyXYPObl4z/p5dT0HI7
bXFq7ce7oXK12OYyBVCPxgVBnYzhQtp82PwKwF8khNVGfx/5zWuetKHpJwTq/Nqy
+xVzYHoJSNs9/0f78VaqUCgW7fg8e4Q83I9kHkCy3Wn8yHzpthF+iaYxevw5qKge
dLgwdYswnKJjc1yWEpLanUrBIrI5TTPB97m563fpnk1T
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:33:46 2025 by rpki-client