Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/CH-MNJ62x7kM2_t2iuWi-Pl441k.roa
File: CH-MNJ62x7kM2_t2iuWi-Pl441k.roa (raw, json)
Hash identifier: HaFXnQzr7MPgH+K0peJzoRzHcSdMpsIno7S1dDVTYls=
Subject key identifier: 08:7F:8C:34:9E:B6:C7:B9:0C:DB:FB:76:8A:E5:A2:F8:F9:78:E3:59
Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731
Certificate serial: 0194228DD239F2D0F413A216CC0462E3F6E8
Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/CH-MNJ62x7kM2_t2iuWi-Pl441k.roa
Signing time: Wed 01 Jan 2025 15:48:27 +0000
ROA not before: Wed 01 Jan 2025 15:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39527
IP address blocks: 93.113.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d2:39:f2:d0:f4:13:a2:16:cc:04:62:e3:f6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731
Validity
Not Before: Jan 1 15:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=087f8c349eb6c7b90cdbfb768ae5a2f8f978e359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9f:71:2f:3c:99:3e:c1:3c:9b:37:e0:2c:9e:
4d:83:fe:d7:aa:61:b6:8e:b2:9b:71:e8:07:33:35:
90:77:6c:53:d2:e4:74:d0:69:55:f5:72:e6:54:25:
d7:42:26:ab:0c:d0:55:3c:62:12:40:f2:20:9b:fc:
a1:55:49:6c:59:7c:2a:fd:1a:d5:ae:6a:f0:6a:82:
2d:13:db:fe:b7:83:65:56:87:37:0b:e8:31:49:ec:
89:2d:fb:e9:46:99:ab:72:92:b6:6d:2d:f0:8b:a2:
c9:d3:73:a5:4e:61:43:b1:5b:04:4a:cd:71:3d:ba:
cb:64:6d:ea:88:a8:3d:e0:6d:4c:7d:01:ed:97:ed:
87:9d:35:06:18:91:e1:c8:1d:d6:7d:d5:dd:f7:d2:
bb:16:9d:24:b2:fe:ed:d3:5d:cd:b8:14:0f:da:54:
c5:b8:3e:af:3f:d8:04:56:2c:f8:f4:3c:2b:e0:6b:
fb:16:8b:5a:74:6e:5d:49:4a:ee:83:5c:11:95:f6:
d0:b8:28:b2:2b:9b:79:61:ad:55:0e:73:20:65:15:
63:7a:64:be:03:28:75:e2:1b:be:37:12:e2:4e:83:
48:1c:8e:bd:04:5d:2c:81:c9:45:b4:12:d9:ee:4b:
7c:50:6b:4b:9e:f7:33:98:7a:ef:da:b6:8e:94:d5:
f6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7F:8C:34:9E:B6:C7:B9:0C:DB:FB:76:8A:E5:A2:F8:F9:78:E3:59
X509v3 Authority Key Identifier:
keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/CH-MNJ62x7kM2_t2iuWi-Pl441k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.128.0/24
Signature Algorithm: sha256WithRSAEncryption
98:1f:75:07:9b:ac:fb:16:1e:30:49:9d:1d:1b:c1:8c:36:a3:
f1:a7:21:ba:b6:14:0f:fc:ef:2c:d2:d4:37:46:8f:75:5a:5c:
45:68:b8:7f:7a:02:38:74:ca:cc:21:b3:bc:40:f5:ba:4d:11:
70:7d:1a:93:f9:32:25:cd:25:7c:54:3b:94:5e:d5:36:c8:45:
4a:0a:ac:9d:c2:e5:19:77:f0:dd:cc:48:d8:30:33:75:7f:44:
a1:76:61:9d:aa:0f:7c:d3:23:64:74:d0:c9:17:e5:53:06:69:
94:50:b7:a0:b6:c7:af:2e:e8:20:b8:91:93:f1:50:f2:21:ca:
88:e8:25:ab:3a:79:e4:4c:90:fe:f5:d4:72:46:06:b8:d2:83:
89:cf:3a:95:4d:64:3e:76:c4:94:29:43:25:6e:27:17:32:f6:
39:c1:76:88:75:f9:22:bc:6f:40:d6:9a:63:61:06:e7:b0:03:
16:95:84:98:d9:33:b5:e7:8a:5d:36:32:9c:40:b7:70:8b:59:
04:c9:68:6c:04:13:d5:10:9d:6b:90:0c:46:f3:97:e9:46:e3:
f8:65:b5:92:3b:f0:6d:02:75:e6:46:c5:aa:db:ef:d7:f9:b1:
b1:8a:71:c0:8e:d3:3a:b0:77:53:2f:c4:30:2a:36:62:44:73:
2f:84:b9:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijdI58tD0E6IWzARi4/boMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz
NjE3MzEwHhcNMjUwMTAxMTU0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODdmOGMzNDllYjZjN2I5MGNkYmZiNzY4YWU1YTJmOGY5NzhlMzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ9xLzyZPsE8mzfgLJ5Ng/7XqmG2
jrKbcegHMzWQd2xT0uR00GlV9XLmVCXXQiarDNBVPGISQPIgm/yhVUlsWXwq/RrV
rmrwaoItE9v+t4NlVoc3C+gxSeyJLfvpRpmrcpK2bS3wi6LJ03OlTmFDsVsESs1x
PbrLZG3qiKg94G1MfQHtl+2HnTUGGJHhyB3WfdXd99K7Fp0ksv7t013NuBQP2lTF
uD6vP9gEViz49Dwr4Gv7FotadG5dSUrug1wRlfbQuCiyK5t5Ya1VDnMgZRVjemS+
Ayh14hu+NxLiToNIHI69BF0sgclFtBLZ7kt8UGtLnvczmHrv2raOlNX2EQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAh/jDSetse5DNv7dorlovj5eONZMB8GA1UdIwQY
MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt
ODQyODU4MTIyYmJjLzEvQ0gtTU5KNjJ4N2tNMl90Mml1V2ktUGw0NDFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj
LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXGAMA0G
CSqGSIb3DQEBCwUAA4IBAQCYH3UHm6z7Fh4wSZ0dG8GMNqPxpyG6thQP/O8s0tQ3
Ro91WlxFaLh/egI4dMrMIbO8QPW6TRFwfRqT+TIlzSV8VDuUXtU2yEVKCqydwuUZ
d/DdzEjYMDN1f0ShdmGdqg980yNkdNDJF+VTBmmUULegtsevLugguJGT8VDyIcqI
6CWrOnnkTJD+9dRyRga40oOJzzqVTWQ+dsSUKUMlbicXMvY5wXaIdfkivG9A1ppj
YQbnsAMWlYSY2TO154pdNjKcQLdwi1kEyWhsBBPVEJ1rkAxG85fpRuP4ZbWSO/Bt
AnXmRsWq2+/X+bGxinHAjtM6sHdTL8QwKjZiRHMvhLnQ
-----END CERTIFICATE-----
Generated at Tue Apr 8 20:58:24 2025 by rpki-client