Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/9qJ2qCMH8lpsE2-phq-dIrQ57CY.roa
File: 9qJ2qCMH8lpsE2-phq-dIrQ57CY.roa (raw, json)
Hash identifier: WdhyGpssttqpcG9ze4xYfPzeHqHFMaF5YOOXaKoHfJ8=
Subject key identifier: F6:A2:76:A8:23:07:F2:5A:6C:13:6F:A9:86:AF:9D:22:B4:39:EC:26
Certificate issuer: /CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741
Certificate serial: 01942747C7C34DF9D7E98F06E6AE0D627217
Authority key identifier: EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/9qJ2qCMH8lpsE2-phq-dIrQ57CY.roa
Signing time: Thu 02 Jan 2025 13:50:03 +0000
ROA not before: Thu 02 Jan 2025 13:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207713
IP address blocks: 193.32.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c7:c3:4d:f9:d7:e9:8f:06:e6:ae:0d:62:72:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741
Validity
Not Before: Jan 2 13:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6a276a82307f25a6c136fa986af9d22b439ec26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e0:3f:be:8e:dd:ba:44:fa:89:ae:e1:6a:b2:
eb:3e:7e:30:0e:26:f1:83:84:69:c5:16:45:68:05:
0a:d0:90:b5:0c:62:0c:3a:27:8b:06:d3:d7:ec:df:
c5:74:4d:3f:a7:d1:9e:4c:ad:96:70:7f:a0:4a:c9:
e0:be:b4:19:c7:4b:80:6a:96:1b:97:f2:f4:58:48:
de:75:f6:3b:aa:69:fb:eb:f4:a1:aa:46:4d:c4:24:
15:21:40:c5:6f:d6:db:a7:9e:d9:6f:46:e9:a5:3a:
8a:a2:30:d0:87:b8:d2:74:8f:59:91:2d:ad:34:e4:
73:75:84:00:87:ba:98:48:07:a6:c2:8b:4b:49:9d:
6d:fe:be:fe:4b:eb:81:69:50:b3:a7:e9:c8:ac:47:
e0:be:a8:1e:fd:c0:ef:ff:9f:07:eb:5a:22:a0:da:
12:d0:e0:b3:69:58:59:c5:af:7f:bc:ab:39:e8:c3:
75:bf:f7:25:4a:1e:3c:c1:f4:3e:3e:b8:ee:7c:00:
8c:f8:19:f5:53:b6:b0:51:cf:0b:ab:eb:06:e5:de:
ed:2c:37:e1:65:91:59:c8:50:c6:2a:73:79:b6:a7:
64:5f:de:2b:aa:7b:32:46:1c:29:b0:55:08:f3:a6:
94:ee:c7:88:11:2a:8f:67:7a:8a:67:52:71:c6:3a:
30:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A2:76:A8:23:07:F2:5A:6C:13:6F:A9:86:AF:9D:22:B4:39:EC:26
X509v3 Authority Key Identifier:
keyid:EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/9qJ2qCMH8lpsE2-phq-dIrQ57CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.176.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:c3:87:7d:10:7c:93:5d:e6:ff:d7:f6:6b:de:e0:da:02:b3:
72:a9:14:97:a5:dc:45:38:ed:14:6e:61:12:0c:24:ad:48:11:
55:96:e1:d9:32:18:29:65:61:c9:6f:6f:d6:29:d5:18:42:b3:
ed:4d:a0:e9:fa:ac:02:15:4e:70:60:58:12:49:b1:a4:55:f1:
a3:08:fb:f2:02:8a:ff:16:29:31:6e:81:9c:17:b1:90:8b:7b:
0e:b3:8c:4a:c0:f0:53:5b:82:ea:0b:63:92:ad:2e:bf:68:91:
d3:08:6f:15:9c:2e:44:0e:2d:c1:9b:bf:1c:3d:6d:52:31:3c:
02:e1:7d:b8:41:a3:99:09:06:aa:7c:ca:21:b7:b2:24:61:23:
17:5e:ff:c7:83:de:42:d0:a3:9c:7b:86:86:5b:04:05:bf:3b:
a0:11:27:2f:e1:5c:ea:40:77:5a:56:c9:81:91:34:13:5d:1a:
75:42:d5:ed:f9:43:8f:82:54:74:c9:88:6f:a5:90:6b:87:21:
01:38:31:ee:06:8a:0d:1b:1e:36:3c:8a:3e:c1:04:3b:71:e8:
c6:47:e6:5b:cb:24:34:49:b6:8e:a8:76:48:40:71:2d:af:98:
fc:02:43:14:a0:f8:d5:84:e3:ab:05:ee:11:c0:95:3f:98:a8:
ef:e2:6a:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR8fDTfnX6Y8G5q4NYnIXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZjdjYTlmZmFmZTcyYTMwOTY2ZjdlNDNkOTJiNThlNzc0
Y2U3NDEwHhcNMjUwMTAyMTM1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmEyNzZhODIzMDdmMjVhNmMxMzZmYTk4NmFmOWQyMmI0MzllYzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOA/vo7dukT6ia7harLrPn4wDibx
g4RpxRZFaAUK0JC1DGIMOieLBtPX7N/FdE0/p9GeTK2WcH+gSsngvrQZx0uAapYb
l/L0WEjedfY7qmn76/ShqkZNxCQVIUDFb9bbp57Zb0bppTqKojDQh7jSdI9ZkS2t
NORzdYQAh7qYSAemwotLSZ1t/r7+S+uBaVCzp+nIrEfgvqge/cDv/58H61oioNoS
0OCzaVhZxa9/vKs56MN1v/clSh48wfQ+PrjufACM+Bn1U7awUc8Lq+sG5d7tLDfh
ZZFZyFDGKnN5tqdkX94rqnsyRhwpsFUI86aU7seIESqPZ3qKZ1Jxxjow5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPaidqgjB/JabBNvqYavnSK0OewmMB8GA1UdIwQY
MBaAFOz3yp/6/nKjCWb35D2StY53TOdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1BmS25fci1jcU1KWnZma1BaSzFqbmRNNTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zMjc3OWQtMzY1Ni00NGMwLThhYjUt
OTgxZmJiMzQ0MmRkLzEvOXFKMnFDTUg4bHBzRTItcGhxLWRJclE1N0NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8zMjc3OWQtMzY1Ni00NGMwLThhYjUtOTgxZmJiMzQ0MmRk
LzEvN1BmS25fci1jcU1KWnZma1BaSzFqbmRNNTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSCwMA0G
CSqGSIb3DQEBCwUAA4IBAQCdw4d9EHyTXeb/1/Zr3uDaArNyqRSXpdxFOO0UbmES
DCStSBFVluHZMhgpZWHJb2/WKdUYQrPtTaDp+qwCFU5wYFgSSbGkVfGjCPvyAor/
FikxboGcF7GQi3sOs4xKwPBTW4LqC2OSrS6/aJHTCG8VnC5EDi3Bm78cPW1SMTwC
4X24QaOZCQaqfMoht7IkYSMXXv/Hg95C0KOce4aGWwQFvzugEScv4VzqQHdaVsmB
kTQTXRp1QtXt+UOPglR0yYhvpZBrhyEBODHuBooNGx42PIo+wQQ7cejGR+ZbyyQ0
SbaOqHZIQHEtr5j8AkMUoPjVhOOrBe4RwJU/mKjv4mra
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:31:10 2025 by rpki-client