Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/pvCC0r4LUt3fsl1VHVQdfXh8Y18.roa
File: pvCC0r4LUt3fsl1VHVQdfXh8Y18.roa (raw, json)
Hash identifier: 7j0tvWV4dVH4uAAkH8k/IyIqfSMk5UZQp8CnBxjMpFY=
Subject key identifier: A6:F0:82:D2:BE:0B:52:DD:DF:B2:5D:55:1D:54:1D:7D:78:7C:63:5F
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 019425FD5F493A01AD0330135F9EDF48B552
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/pvCC0r4LUt3fsl1VHVQdfXh8Y18.roa
Signing time: Thu 02 Jan 2025 07:49:09 +0000
ROA not before: Thu 02 Jan 2025 07:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211447
IP address blocks: 193.200.194.0/24 maxlen: 24
2a0a:d6c0:194::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:5f:49:3a:01:ad:03:30:13:5f:9e:df:48:b5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 2 07:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6f082d2be0b52dddfb25d551d541d7d787c635f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3a:36:64:68:aa:bc:ab:9c:e9:6f:34:32:ea:
55:49:29:fd:7b:60:df:14:99:2a:96:b1:a2:cf:6e:
d6:61:59:f6:95:a4:1d:ce:a7:92:d1:20:16:d3:77:
2b:53:02:ee:de:f0:e3:6d:59:19:27:f1:59:01:7d:
c3:dc:d3:29:82:9c:c0:93:b5:d2:f3:b4:4e:a1:1a:
ac:07:bc:cc:ab:15:32:ba:0f:2b:eb:fb:39:d1:da:
22:b9:f0:a0:2c:5c:6c:a2:08:31:5c:ea:ec:64:a9:
2b:93:af:f1:09:ec:09:51:e3:13:a1:13:3d:a0:6f:
22:f6:b7:6d:97:af:91:e5:92:76:a2:a8:08:f4:99:
f3:93:fd:63:1a:36:c3:1b:0d:16:dd:2c:b9:37:84:
51:e7:3a:fa:12:b7:2c:a7:ef:e3:96:30:dc:c7:ce:
45:27:38:4c:a3:64:7f:98:25:2c:0e:aa:46:ef:e2:
7b:3d:b5:57:25:d9:8c:a7:25:c4:b1:bf:0f:67:56:
cf:5b:a3:d7:44:ba:b5:fe:87:7f:52:ae:eb:e9:95:
ba:61:e8:27:20:67:7d:d1:42:f3:4c:bd:98:90:56:
b5:94:04:a2:69:3a:0b:2f:f5:05:bc:d7:13:1e:74:
f8:9f:99:2c:57:33:8f:80:e8:0e:47:2a:67:37:1d:
ae:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F0:82:D2:BE:0B:52:DD:DF:B2:5D:55:1D:54:1D:7D:78:7C:63:5F
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/pvCC0r4LUt3fsl1VHVQdfXh8Y18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.194.0/24
IPv6:
2a0a:d6c0:194::/48
Signature Algorithm: sha256WithRSAEncryption
94:69:c1:fd:4f:9c:8f:70:f9:0e:9c:29:38:8b:b6:73:3f:47:
81:93:9d:d4:73:6b:17:76:b6:c4:5a:22:61:fc:31:f4:27:6e:
d2:fd:ae:52:ef:00:07:56:08:85:94:e7:13:8e:2a:64:db:e7:
e8:73:23:2e:2a:8b:62:58:00:12:c5:42:b4:0a:6a:44:13:0c:
43:b5:81:27:07:31:bd:0e:d0:6f:45:80:d6:dc:7d:f6:09:be:
b4:e6:07:0e:33:31:62:47:7f:38:c8:58:bb:64:f7:c4:c3:83:
c8:66:a0:1e:d3:4a:00:da:04:b2:af:27:19:ae:3e:50:c0:05:
ae:af:35:8d:df:3e:11:2c:eb:1d:ab:02:d9:91:da:f9:fe:9c:
28:9a:d0:31:71:3b:0f:33:1a:80:38:01:65:7d:a8:11:0f:6e:
d1:79:20:00:e3:8a:d8:34:36:f2:73:d3:e0:2b:93:cc:d4:a2:
f3:6b:c4:bf:24:b1:5c:ed:ed:11:b4:d5:a7:7b:83:c5:73:b4:
6e:30:ad:d3:f8:4f:51:3b:3a:ea:f2:00:4e:ad:c4:c5:2e:7e:
e1:3c:11:a9:47:98:48:df:33:8e:65:28:b1:b9:0d:1c:c7:5a:
91:3e:cc:47:6a:2b:2e:78:09:eb:9b:3f:e8:2c:22:e5:e4:38:
a4:fb:47:08
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQl/V9JOgGtAzATX57fSLVSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm
OGNiZDgwHhcNMjUwMTAyMDc0OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmYwODJkMmJlMGI1MmRkZGZiMjVkNTUxZDU0MWQ3ZDc4N2M2MzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDo2ZGiqvKuc6W80MupVSSn9e2Df
FJkqlrGiz27WYVn2laQdzqeS0SAW03crUwLu3vDjbVkZJ/FZAX3D3NMpgpzAk7XS
87ROoRqsB7zMqxUyug8r6/s50doiufCgLFxsoggxXOrsZKkrk6/xCewJUeMToRM9
oG8i9rdtl6+R5ZJ2oqgI9Jnzk/1jGjbDGw0W3Sy5N4RR5zr6Ercsp+/jljDcx85F
JzhMo2R/mCUsDqpG7+J7PbVXJdmMpyXEsb8PZ1bPW6PXRLq1/od/Uq7r6ZW6Yegn
IGd90ULzTL2YkFa1lASiaToLL/UFvNcTHnT4n5ksVzOPgOgORypnNx2uywIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKbwgtK+C1Ld37JdVR1UHX14fGNfMB8GA1UdIwQY
MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt
NjA5YTQ4YjJiMTRkLzEvcHZDQzByNExVdDNmc2wxVkhWUWRmWGg4WTE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk
LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwcjCMA8E
AgACMAkDBwAqCtbAAZQwDQYJKoZIhvcNAQELBQADggEBAJRpwf1PnI9w+Q6cKTiL
tnM/R4GTndRzaxd2tsRaImH8MfQnbtL9rlLvAAdWCIWU5xOOKmTb5+hzIy4qi2JY
ABLFQrQKakQTDEO1gScHMb0O0G9FgNbcffYJvrTmBw4zMWJHfzjIWLtk98TDg8hm
oB7TSgDaBLKvJxmuPlDABa6vNY3fPhEs6x2rAtmR2vn+nCia0DFxOw8zGoA4AWV9
qBEPbtF5IADjitg0NvJz0+Ark8zUovNrxL8ksVzt7RG01ad7g8VztG4wrdP4T1E7
OuryAE6txMUufuE8EalHmEjfM45lKLG5DRzHWpE+zEdqKy54CeubP+gsIuXkOKT7
Rwg=
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:02:25 2025 by rpki-client