Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DabmQk-CLramHNbQyns1CogIjps.roa
File: DabmQk-CLramHNbQyns1CogIjps.roa (raw, json)
Hash identifier: eJeHu3qomCfOax6qjHGEf3r1WqoevqFZVaKQy6qC9Pw=
Subject key identifier: 0D:A6:E6:42:4F:82:2E:B6:A6:1C:D6:D0:CA:7B:35:0A:88:08:8E:9B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01949FD55920E0B651F2F4A00601E859F1D2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DabmQk-CLramHNbQyns1CogIjps.roa
Signing time: Sat 25 Jan 2025 23:39:06 +0000
ROA not before: Sat 25 Jan 2025 23:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214059
IP address blocks: 193.222.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9f:d5:59:20:e0:b6:51:f2:f4:a0:06:01:e8:59:f1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 25 23:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0da6e6424f822eb6a61cd6d0ca7b350a88088e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ea:17:90:54:2a:17:fa:bf:80:c2:7d:19:72:
d2:96:89:9e:1b:b2:6d:97:b1:7f:b6:69:fe:df:1a:
87:aa:54:97:d2:b1:02:a3:c1:b6:ef:fd:f9:8e:63:
dd:6d:ee:d7:03:78:6f:e4:a7:61:87:0e:a9:31:32:
28:51:6a:86:41:c3:99:97:d0:c2:d6:f3:25:c1:43:
49:36:e9:f6:88:f0:fd:52:25:a8:bf:06:0e:3c:e3:
40:73:c7:8b:ec:56:ab:ad:33:ed:e5:74:ba:26:45:
54:f4:41:8c:77:23:73:f1:ae:c9:9c:a0:4a:18:e5:
e3:d1:3e:88:f3:4c:e7:2c:a0:c5:bf:7e:ac:78:20:
a0:3f:87:c6:a8:37:d6:89:27:02:2e:fe:b5:89:52:
24:b5:cc:94:9f:d7:fd:69:ab:e5:83:ef:62:e7:a6:
ae:b8:42:78:9a:c7:5d:b2:20:9a:5c:a3:6a:06:5a:
93:b8:15:aa:10:46:bc:36:27:21:82:7b:dd:80:ce:
02:c1:ff:9b:0c:4e:89:bf:7e:81:35:06:a4:1b:df:
22:fd:00:12:ec:a6:24:07:a6:08:a1:88:5c:60:1b:
8e:cb:b2:fe:94:b2:b4:39:9a:81:0a:6e:d8:94:e4:
b5:77:62:1c:22:1c:30:59:7f:0c:aa:db:cd:cf:f5:
14:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A6:E6:42:4F:82:2E:B6:A6:1C:D6:D0:CA:7B:35:0A:88:08:8E:9B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DabmQk-CLramHNbQyns1CogIjps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.96.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f4:22:5d:a7:50:d6:ab:d3:34:c2:f4:17:2b:f2:8a:f8:c0:
c5:81:d2:05:ea:ba:95:ad:e6:7b:63:3d:8b:82:8b:b2:6d:e7:
5b:53:15:4c:7c:14:61:a1:68:f6:bc:56:a4:ea:98:cb:b0:9b:
13:ab:88:cd:f2:59:28:1d:d5:6f:fb:16:5d:3c:20:a6:f7:3b:
0b:67:b8:74:a6:c0:e3:2b:39:1b:08:f9:07:53:e2:6c:93:69:
8b:af:7e:d1:f7:3a:81:da:61:7a:97:d1:14:b0:50:7d:e7:f9:
bc:0b:70:45:5f:a1:b1:40:16:2b:0e:54:d4:ea:fb:66:de:69:
c8:03:f3:f8:3c:f5:83:03:b2:87:ed:9e:07:21:3f:b6:4b:3f:
6b:2b:72:17:ca:59:44:28:6d:d2:23:ce:35:8f:57:b1:01:10:
2d:ed:b2:02:f0:2c:c7:b8:a5:0a:10:ee:de:1f:1c:e6:ea:6b:
c7:9a:56:a4:20:1d:7c:e9:eb:61:a0:6c:e2:51:dd:75:ef:7c:
81:e1:e8:5e:8f:3d:12:71:3e:e0:71:24:0f:e1:5e:23:45:ac:
67:54:01:5b:f5:cc:0e:26:f6:3c:e1:12:b7:02:82:27:52:bd:
a5:a7:2c:e7:65:f3:7d:30:bc:d7:1c:49:9e:e6:a1:db:0c:7c:
c4:85:f8:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSf1Vkg4LZR8vSgBgHoWfHSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTI1MjMzOTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGE2ZTY0MjRmODIyZWI2YTYxY2Q2ZDBjYTdiMzUwYTg4MDg4ZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+oXkFQqF/q/gMJ9GXLSlomeG7Jt
l7F/tmn+3xqHqlSX0rECo8G27/35jmPdbe7XA3hv5Kdhhw6pMTIoUWqGQcOZl9DC
1vMlwUNJNun2iPD9UiWovwYOPONAc8eL7FarrTPt5XS6JkVU9EGMdyNz8a7JnKBK
GOXj0T6I80znLKDFv36seCCgP4fGqDfWiScCLv61iVIktcyUn9f9aavlg+9i56au
uEJ4msddsiCaXKNqBlqTuBWqEEa8NichgnvdgM4Cwf+bDE6Jv36BNQakG98i/QAS
7KYkB6YIoYhcYBuOy7L+lLK0OZqBCm7YlOS1d2IcIhwwWX8MqtvNz/UU3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA2m5kJPgi62phzW0Mp7NQqICI6bMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvRGFibVFrLUNMcmFtSE5iUXluczFDb2dJanBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd5gMA0G
CSqGSIb3DQEBCwUAA4IBAQBq9CJdp1DWq9M0wvQXK/KK+MDFgdIF6rqVreZ7Yz2L
gouybedbUxVMfBRhoWj2vFak6pjLsJsTq4jN8lkoHdVv+xZdPCCm9zsLZ7h0psDj
KzkbCPkHU+Jsk2mLr37R9zqB2mF6l9EUsFB95/m8C3BFX6GxQBYrDlTU6vtm3mnI
A/P4PPWDA7KH7Z4HIT+2Sz9rK3IXyllEKG3SI841j1exARAt7bIC8CzHuKUKEO7e
Hxzm6mvHmlakIB186ethoGziUd1173yB4ehejz0ScT7gcSQP4V4jRaxnVAFb9cwO
JvY84RK3AoInUr2lpyznZfN9MLzXHEme5qHbDHzEhfiv
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:34 2025 by rpki-client