Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/ToNoDqHmBCxHwC8wmsxDMouLtN8.roa
File: ToNoDqHmBCxHwC8wmsxDMouLtN8.roa (raw, json)
Hash identifier: Jzn/EvJdGz4dOAOWpLopuY8eabtyvNpGuj51flvS1Xg=
Subject key identifier: 4E:83:68:0E:A1:E6:04:2C:47:C0:2F:30:9A:CC:43:32:8B:8B:B4:DF
Certificate issuer: /CN=04d9bc828a566b06af4d765dfb5da5bc1d76c725
Certificate serial: 01856BDC9C8FCFBD7B2E123F9EBA379076B5
Authority key identifier: 04:D9:BC:82:8A:56:6B:06:AF:4D:76:5D:FB:5D:A5:BC:1D:76:C7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNm8gopWawavTXZd-12lvB12xyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/ToNoDqHmBCxHwC8wmsxDMouLtN8.roa
Signing time: Sun 01 Jan 2023 05:44:58 +0000
ROA not before: Sun 01 Jan 2023 05:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 193.219.118.0/24 maxlen: 24
2001:67c:788::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:9c:8f:cf:bd:7b:2e:12:3f:9e:ba:37:90:76:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d9bc828a566b06af4d765dfb5da5bc1d76c725
Validity
Not Before: Jan 1 05:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e83680ea1e6042c47c02f309acc43328b8bb4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:24:c2:f4:1f:8f:65:dc:e0:aa:c8:c2:e2:
a7:cd:e5:98:d4:c5:8a:36:a8:1b:0a:75:2f:55:70:
31:bf:04:45:01:aa:63:4b:33:f3:c7:ef:94:01:35:
70:cf:4b:53:1c:a6:ee:10:9c:5d:40:0b:4d:2b:78:
fd:9f:7b:2a:0d:57:17:50:08:52:31:2d:13:d3:80:
13:86:02:b7:c3:a5:2b:50:6f:47:c9:92:8d:1a:9f:
9d:bc:61:38:03:4e:a4:a1:b3:63:95:f4:b3:28:a7:
ea:22:8f:ec:77:41:e5:7d:a3:60:fd:47:fe:44:04:
2a:d1:f1:6a:95:13:1a:be:2c:26:4e:72:a7:eb:27:
76:69:37:bd:ec:2e:0d:e9:e0:66:41:0b:12:0c:0c:
c3:8b:33:2a:28:21:a8:9b:8d:69:3a:28:71:d0:10:
3b:0e:a2:3a:fe:5f:d8:d1:f3:f1:b6:cc:0c:de:64:
ee:6e:d9:94:1a:b5:87:df:e6:8e:98:6f:b1:79:37:
3f:f3:38:e1:2e:2f:6d:98:bc:bf:55:10:1c:4a:23:
e1:9e:df:74:d5:d1:76:17:4c:b6:da:cf:79:fb:1f:
2c:e9:82:b3:71:8f:6d:ee:53:5c:ab:5a:7f:45:87:
20:78:4f:1d:f8:59:0e:ea:bb:8e:eb:e6:2c:3b:f8:
7b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:83:68:0E:A1:E6:04:2C:47:C0:2F:30:9A:CC:43:32:8B:8B:B4:DF
X509v3 Authority Key Identifier:
keyid:04:D9:BC:82:8A:56:6B:06:AF:4D:76:5D:FB:5D:A5:BC:1D:76:C7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNm8gopWawavTXZd-12lvB12xyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/ToNoDqHmBCxHwC8wmsxDMouLtN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/BNm8gopWawavTXZd-12lvB12xyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.118.0/24
IPv6:
2001:67c:788::/48
Signature Algorithm: sha256WithRSAEncryption
40:44:97:be:5e:84:0d:2f:06:a0:be:dd:b8:2e:5e:1f:22:f4:
3b:88:01:72:da:1b:77:61:4b:15:34:e9:23:eb:1b:61:e1:fd:
e4:fd:93:b4:3b:0c:31:71:d0:fb:aa:6a:0c:8a:9d:9f:ae:cd:
fc:c5:b4:37:2e:a5:e4:2d:a6:89:b9:9c:33:91:b0:67:94:49:
09:de:d7:ab:70:3d:59:5e:08:8d:0d:2c:72:c8:74:a2:34:f2:
d1:40:72:a3:ba:6f:46:da:3e:00:3d:f1:af:71:e9:43:38:ab:
79:ec:c0:50:aa:f7:96:97:b1:6e:aa:d5:d3:3b:b4:e5:b0:60:
c2:7b:10:27:e2:e1:94:3a:84:99:63:e9:46:e9:60:57:e7:ef:
f2:c1:af:6a:ae:bf:f4:8d:bd:34:3b:c8:8c:4b:67:bf:2a:2b:
ca:88:c9:7a:44:ef:66:30:73:89:64:65:e8:12:c4:93:23:81:
5f:ea:e6:c6:3e:5e:bd:5b:ab:ed:a7:54:e1:06:24:f6:9b:cd:
66:0f:53:ab:4a:f1:6e:f7:65:4e:5b:8b:c9:7c:61:dd:12:f7:
06:86:42:86:74:dc:9f:cc:f1:7d:c0:05:6f:7e:c5:29:f9:58:
25:d2:1b:6e:f1:b3:cf:d1:25:51:b4:2b:d0:36:0f:f0:24:b4:
14:aa:59:78
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVr3JyPz717LhI/nro3kHa1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZDliYzgyOGE1NjZiMDZhZjRkNzY1ZGZiNWRhNWJjMWQ3
NmM3MjUwHhcNMjMwMTAxMDU0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTgzNjgwZWExZTYwNDJjNDdjMDJmMzA5YWNjNDMzMjhiOGJiNGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzEkwvQfj2Xc4KrIwuKnzeWY1MWK
NqgbCnUvVXAxvwRFAapjSzPzx++UATVwz0tTHKbuEJxdQAtNK3j9n3sqDVcXUAhS
MS0T04AThgK3w6UrUG9HyZKNGp+dvGE4A06kobNjlfSzKKfqIo/sd0HlfaNg/Uf+
RAQq0fFqlRMaviwmTnKn6yd2aTe97C4N6eBmQQsSDAzDizMqKCGom41pOihx0BA7
DqI6/l/Y0fPxtswM3mTubtmUGrWH3+aOmG+xeTc/8zjhLi9tmLy/VRAcSiPhnt90
1dF2F0y22s95+x8s6YKzcY9t7lNcq1p/RYcgeE8d+FkO6ruO6+YsO/h71QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE6DaA6h5gQsR8AvMJrMQzKLi7TfMB8GA1UdIwQY
MBaAFATZvIKKVmsGr012XftdpbwddsclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk5tOGdvcFdhd2F2VFhaZC0xMmx2QjEyeHlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi83MjQzNWItN2U3ZS00NDdiLWFjMjQt
OTgyYzQyOWQ0MTU2LzEvVG9Ob0RxSG1CQ3hId0M4d21zeERNb3VMdE44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi83MjQzNWItN2U3ZS00NDdiLWFjMjQtOTgyYzQyOWQ0MTU2
LzEvQk5tOGdvcFdhd2F2VFhaZC0xMmx2QjEyeHlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwdt2MA8E
AgACMAkDBwAgAQZ8B4gwDQYJKoZIhvcNAQELBQADggEBAEBEl75ehA0vBqC+3bgu
Xh8i9DuIAXLaG3dhSxU06SPrG2Hh/eT9k7Q7DDFx0PuqagyKnZ+uzfzFtDcupeQt
pom5nDORsGeUSQne16twPVleCI0NLHLIdKI08tFAcqO6b0baPgA98a9x6UM4q3ns
wFCq95aXsW6q1dM7tOWwYMJ7ECfi4ZQ6hJlj6UbpYFfn7/LBr2quv/SNvTQ7yIxL
Z78qK8qIyXpE72Ywc4lkZegSxJMjgV/q5sY+Xr1bq+2nVOEGJPabzWYPU6tK8W73
ZU5bi8l8Yd0S9waGQoZ03J/M8X3ABW9+xSn5WCXSG27xs8/RJVG0K9A2D/AktBSq
WXg=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:34 2025 by rpki-client