Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/n_98iaRfzKj4vOYrmQ_k831JAdw.roa
File: n_98iaRfzKj4vOYrmQ_k831JAdw.roa (raw, json)
Hash identifier: SqRI4hO3biznmF5FIYkdgFtdslaDp4e4H1anWsCx4mY=
Subject key identifier: 9F:FF:7C:89:A4:5F:CC:A8:F8:BC:E6:2B:99:0F:E4:F3:7D:49:01:DC
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 01938C00D21A45E1AFD4BFC38EDF09201853
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/n_98iaRfzKj4vOYrmQ_k831JAdw.roa
Signing time: Tue 03 Dec 2024 10:11:24 +0000
ROA not before: Tue 03 Dec 2024 10:11:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213777
IP address blocks: 193.42.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:00:d2:1a:45:e1:af:d4:bf:c3:8e:df:09:20:18:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Dec 3 10:11:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fff7c89a45fcca8f8bce62b990fe4f37d4901dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:67:9c:94:67:d8:25:03:9e:28:7f:2d:9b:1f:
7f:d5:4e:34:53:d7:cd:ae:68:06:32:5c:d6:00:40:
00:6c:be:b0:bf:84:2f:6e:76:bd:d2:54:db:af:5f:
1a:95:4c:05:1e:68:74:cb:31:e0:2d:e9:b1:19:13:
de:94:86:e9:ae:e4:2c:4a:69:f7:ee:ca:31:2d:6b:
95:6f:d2:57:17:04:68:1d:7e:29:37:9e:b5:b2:65:
82:76:cc:c0:5b:56:0e:a8:64:0a:60:d8:80:12:c2:
3d:57:91:3f:ed:11:cc:53:c4:49:a8:50:e5:8b:cf:
77:92:b2:03:34:ed:17:e4:2b:76:90:81:80:e8:b0:
14:f3:53:bf:b0:99:1e:94:9a:12:85:2d:8b:38:0a:
5e:2d:09:e1:73:dd:14:a0:11:11:29:a5:10:98:1f:
a4:3f:9b:67:47:a6:86:2c:0f:23:6c:57:1c:d3:81:
ef:ff:2f:cf:9f:60:86:4b:52:5a:0d:95:77:14:2b:
8e:34:3e:4d:67:64:7e:45:d4:57:ae:3e:6e:c3:8a:
23:8d:ad:fd:e5:6f:8e:4e:83:69:5e:0c:2b:83:0d:
c2:06:58:f4:c1:32:5a:21:1f:0b:70:30:92:3c:9b:
24:9e:8f:4a:d5:ce:23:7b:17:50:d3:f0:7b:1b:7d:
76:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FF:7C:89:A4:5F:CC:A8:F8:BC:E6:2B:99:0F:E4:F3:7D:49:01:DC
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/n_98iaRfzKj4vOYrmQ_k831JAdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.210.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:5d:84:16:5a:2e:84:d4:6d:3c:51:13:c8:44:55:12:65:36:
f1:8f:ab:d9:03:eb:e4:06:77:9b:2d:c1:bb:eb:52:97:08:19:
ad:30:4a:06:57:57:6b:ec:63:8f:69:b4:ca:cc:2c:07:d2:7d:
a2:ac:e3:93:21:ee:02:cd:01:fb:ea:e1:e9:fb:7a:80:a9:67:
50:6f:68:21:f6:ad:1c:90:8f:c0:4f:1d:a6:10:3e:79:23:12:
d4:9b:41:0d:94:31:43:ba:57:fa:7d:b5:cb:af:85:cc:be:b6:
35:dc:1b:d4:23:ba:bb:37:fe:61:f3:8a:f5:74:75:dd:99:72:
a7:7f:e4:2c:f2:46:ae:59:9b:61:61:9b:d7:58:15:6b:0f:8f:
67:5d:e0:18:e6:61:5e:c2:69:b2:f2:1a:83:a8:f9:87:fc:e7:
8f:6c:17:32:e4:ad:09:d2:31:cc:30:76:a5:16:ac:47:d5:69:
b6:1a:28:f5:4f:7e:cc:35:e0:58:b4:29:71:d7:c3:61:90:cd:
cf:ba:39:dc:13:de:cc:ed:aa:1f:08:fa:19:4a:58:61:fc:07:
f9:56:d4:de:e3:5d:73:2a:5a:03:05:75:cd:91:c0:d5:4c:51:
b8:3d:11:a0:85:e4:af:6f:37:19:8d:5e:86:d1:63:f7:87:2b:
1a:3f:56:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOMANIaReGv1L/Djt8JIBhTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3
MDM4MTUwHhcNMjQxMjAzMTAxMTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmZmN2M4OWE0NWZjY2E4ZjhiY2U2MmI5OTBmZTRmMzdkNDkwMWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGeclGfYJQOeKH8tmx9/1U40U9fN
rmgGMlzWAEAAbL6wv4Qvbna90lTbr18alUwFHmh0yzHgLemxGRPelIbpruQsSmn3
7soxLWuVb9JXFwRoHX4pN561smWCdszAW1YOqGQKYNiAEsI9V5E/7RHMU8RJqFDl
i893krIDNO0X5Ct2kIGA6LAU81O/sJkelJoShS2LOApeLQnhc90UoBERKaUQmB+k
P5tnR6aGLA8jbFcc04Hv/y/Pn2CGS1JaDZV3FCuOND5NZ2R+RdRXrj5uw4ojja39
5W+OToNpXgwrgw3CBlj0wTJaIR8LcDCSPJskno9K1c4jexdQ0/B7G312cQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ//fImkX8yo+LzmK5kP5PN9SQHcMB8GA1UdIwQY
MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt
MzAxODlhNWE0ZWJhLzEvbl85OGlhUmZ6S2o0dk9Zcm1RX2s4MzFKQWR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh
LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSrSMA0G
CSqGSIb3DQEBCwUAA4IBAQAcXYQWWi6E1G08URPIRFUSZTbxj6vZA+vkBnebLcG7
61KXCBmtMEoGV1dr7GOPabTKzCwH0n2irOOTIe4CzQH76uHp+3qAqWdQb2gh9q0c
kI/ATx2mED55IxLUm0ENlDFDulf6fbXLr4XMvrY13BvUI7q7N/5h84r1dHXdmXKn
f+Qs8kauWZthYZvXWBVrD49nXeAY5mFewmmy8hqDqPmH/OePbBcy5K0J0jHMMHal
FqxH1Wm2Gij1T37MNeBYtClx18NhkM3PujncE97M7aofCPoZSlhh/Af5VtTe411z
KloDBXXNkcDVTFG4PRGgheSvbzcZjV6G0WP3hysaP1YX
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:24:41 2025 by rpki-client