Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/v50wWhyCI7hTEJpByG9mHooOhqA.roa
File: v50wWhyCI7hTEJpByG9mHooOhqA.roa (raw, json)
Hash identifier: E6PQDvh39GUQ1c6SbkD744Bu9C+vTY8Ul4lMsKxnnNQ=
Subject key identifier: BF:9D:30:5A:1C:82:23:B8:53:10:9A:41:C8:6F:66:1E:8A:0E:86:A0
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 01942444C304EC1ABC424F7814405DC5063F
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/v50wWhyCI7hTEJpByG9mHooOhqA.roa
Signing time: Wed 01 Jan 2025 23:47:53 +0000
ROA not before: Wed 01 Jan 2025 23:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20675
IP address blocks: 193.41.83.0/24 maxlen: 24
195.42.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c3:04:ec:1a:bc:42:4f:78:14:40:5d:c5:06:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: Jan 1 23:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf9d305a1c8223b853109a41c86f661e8a0e86a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:06:01:7d:b6:0f:7a:b2:af:05:b4:e7:e1:
c0:d6:77:a8:ff:64:e8:ce:fc:36:57:00:12:e5:65:
ae:a3:dd:09:85:e4:08:ec:08:b4:a2:e3:ed:9a:27:
81:74:87:9c:ad:e7:38:b3:d6:92:84:43:d9:5a:ac:
16:fb:5d:30:2c:2a:ee:19:f8:14:6d:5d:59:e6:70:
41:3d:d5:f2:34:c2:a5:da:a7:a7:31:19:8e:00:04:
0e:7c:6e:95:f6:87:b0:60:24:b7:ac:6d:ee:da:c4:
96:8c:9c:32:1e:de:0e:8c:41:95:10:a6:48:eb:6d:
2b:21:01:20:12:94:94:26:8c:bb:02:0f:65:aa:ef:
a6:cb:71:39:6d:a1:a9:e9:73:38:90:dd:86:1d:fe:
85:6a:1e:70:e8:00:fb:05:f2:a6:9c:40:0c:96:15:
50:70:78:d6:97:42:5e:fe:b8:15:23:7d:66:30:59:
60:05:31:f1:00:99:6a:14:c7:9e:0e:f1:d6:08:0a:
66:a7:66:62:04:21:41:de:a0:4e:db:f6:26:28:7a:
2f:04:17:bc:e8:ac:0a:f8:0b:a2:7b:68:90:7b:56:
a1:35:bb:0e:3e:9d:84:ec:44:ea:ea:01:d0:0b:ae:
ad:df:b4:bc:6e:78:e6:2b:0e:42:74:45:c4:40:8a:
30:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9D:30:5A:1C:82:23:B8:53:10:9A:41:C8:6F:66:1E:8A:0E:86:A0
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/v50wWhyCI7hTEJpByG9mHooOhqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.83.0/24
195.42.250.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b3:a0:43:67:45:5a:24:65:89:69:8f:1d:5c:4c:42:11:5f:
63:ad:9e:65:e4:a3:72:60:72:8a:c5:c7:70:94:91:94:ad:fd:
5e:9d:8a:f7:e0:36:ef:21:11:08:43:65:d9:e3:89:40:78:93:
fa:08:dc:4b:2f:59:53:50:6c:ec:2c:5d:12:1c:5b:14:78:23:
15:ad:0e:d3:1b:84:c3:47:c2:e9:0d:a0:83:cc:a7:37:08:4a:
3b:29:d2:94:0b:1f:7c:7c:d4:ab:8b:bf:ee:a8:4d:a3:aa:87:
25:04:dc:08:2c:d1:21:54:84:79:8c:76:00:91:c4:ab:db:51:
7d:d3:9e:da:94:a9:44:6a:b0:e1:bc:59:9b:e5:50:c8:66:29:
28:2b:46:55:b1:81:de:12:28:ad:8e:40:2d:7c:53:2a:ab:bb:
99:eb:a4:98:d7:61:54:0f:76:d5:8f:16:4e:8e:6b:a8:16:aa:
18:0f:3c:4c:0a:6c:07:30:35:de:8a:45:e7:6e:cc:39:c1:42:
ce:f9:8a:32:5b:eb:7a:46:6e:c5:c2:0b:80:db:9e:44:bb:75:
e5:7e:62:51:90:b3:6e:e3:04:5e:18:fd:2e:86:1e:50:3e:da:
66:cb:15:ea:04:1f:a2:29:97:b8:07:ac:8a:48:c9:59:42:09:
30:0e:ad:23
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQkRMME7Bq8Qk94FEBdxQY/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYzRiNzg0ZDgxNjZlOGJkMGY0N2Q3MjBmZGU1ZmFlYzE2
NDViMzQwHhcNMjUwMTAxMjM0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjlkMzA1YTFjODIyM2I4NTMxMDlhNDFjODZmNjYxZThhMGU4NmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAIGAX22D3qyrwW05+HA1neo/2To
zvw2VwAS5WWuo90JheQI7Ai0ouPtmieBdIecrec4s9aShEPZWqwW+10wLCruGfgU
bV1Z5nBBPdXyNMKl2qenMRmOAAQOfG6V9oewYCS3rG3u2sSWjJwyHt4OjEGVEKZI
620rIQEgEpSUJoy7Ag9lqu+my3E5baGp6XM4kN2GHf6Fah5w6AD7BfKmnEAMlhVQ
cHjWl0Je/rgVI31mMFlgBTHxAJlqFMeeDvHWCApmp2ZiBCFB3qBO2/YmKHovBBe8
6KwK+Auie2iQe1ahNbsOPp2E7ETq6gHQC66t37S8bnjmKw5CdEXEQIowSwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL+dMFocgiO4UxCaQchvZh6KDoagMB8GA1UdIwQY
MBaAFAHEt4TYFm6L0PR9cg/eX67BZFs0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mMmI4NDAtMmM4NS00NjViLThiOTMt
NWI1YmViMTA1MTNiLzEvdjUwd1doeUNJN2hURUpwQnlHOW1Ib29PaHFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9mMmI4NDAtMmM4NS00NjViLThiOTMtNWI1YmViMTA1MTNi
LzEvQWNTM2hOZ1dib3ZROUgxeUQ5NWZyc0ZrV3pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwSlTAwQA
wyr6MA0GCSqGSIb3DQEBCwUAA4IBAQAcs6BDZ0VaJGWJaY8dXExCEV9jrZ5l5KNy
YHKKxcdwlJGUrf1enYr34DbvIREIQ2XZ44lAeJP6CNxLL1lTUGzsLF0SHFsUeCMV
rQ7TG4TDR8LpDaCDzKc3CEo7KdKUCx98fNSri7/uqE2jqoclBNwILNEhVIR5jHYA
kcSr21F9057alKlEarDhvFmb5VDIZikoK0ZVsYHeEiitjkAtfFMqq7uZ66SY12FU
D3bVjxZOjmuoFqoYDzxMCmwHMDXeikXnbsw5wULO+YoyW+t6Rm7FwguA255Eu3Xl
fmJRkLNu4wReGP0uhh5QPtpmyxXqBB+iKZe4B6yKSMlZQgkwDq0j
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:39 2025 by rpki-client