Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/FrTFYW5M_ab9flJ7V3pyHB_BwTc.roa
File: FrTFYW5M_ab9flJ7V3pyHB_BwTc.roa (raw, json)
Hash identifier: NxnC7B36GH3x4jSx1Ka7wwQPfYjpTfofspe7p8MI3Zk=
Subject key identifier: 16:B4:C5:61:6E:4C:FD:A6:FD:7E:52:7B:57:7A:72:1C:1F:C1:C1:37
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019420683B6E755971A72E82C6216A83FBBF
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/FrTFYW5M_ab9flJ7V3pyHB_BwTc.roa
Signing time: Wed 01 Jan 2025 05:48:09 +0000
ROA not before: Wed 01 Jan 2025 05:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26042
IP address blocks: 193.233.198.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3b:6e:75:59:71:a7:2e:82:c6:21:6a:83:fb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16b4c5616e4cfda6fd7e527b577a721c1fc1c137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:f6:03:71:ca:34:6c:74:0e:3a:57:47:3c:
c1:cb:24:20:1c:86:c2:a1:a2:c1:3a:4f:d8:11:f4:
4d:6b:53:11:62:ca:71:62:92:35:06:83:10:4d:fb:
d5:f5:69:ef:8d:43:f2:48:b2:ba:f2:71:e9:39:e9:
a0:b7:fe:8b:15:24:9b:f5:19:73:c0:9d:12:a0:1c:
4f:3a:11:5b:ca:f8:7d:f3:a4:6b:fe:13:64:07:87:
c0:28:ed:9c:2d:bf:48:39:37:39:86:8e:11:8d:9f:
81:cd:4f:b4:d3:7c:dd:62:6e:b7:fe:fb:1b:f4:93:
ea:b8:00:2d:13:7d:95:92:3d:35:1b:47:19:8a:fd:
17:ab:48:39:00:d1:bd:d2:24:55:03:02:32:c8:87:
21:d4:44:0b:1d:96:e1:6d:9c:1a:02:8b:9f:d4:db:
6e:76:5a:60:cb:5d:33:1c:13:a5:bb:48:9d:d2:c7:
db:ca:89:2d:71:ac:7a:be:af:17:28:e0:57:f9:d8:
12:77:0f:ae:b6:b1:16:3f:b1:15:67:6b:9b:c4:67:
72:f1:07:00:15:8f:be:5f:13:d1:74:13:6f:c4:c0:
58:0f:15:0b:cc:62:da:f2:74:de:37:b7:fb:cf:8c:
68:8f:61:60:ae:af:9c:76:18:25:45:a4:ff:e6:e1:
32:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B4:C5:61:6E:4C:FD:A6:FD:7E:52:7B:57:7A:72:1C:1F:C1:C1:37
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/FrTFYW5M_ab9flJ7V3pyHB_BwTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.198.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:c4:8e:61:a0:21:3c:fe:9c:44:14:41:91:ac:ec:17:d0:01:
e5:57:01:b7:6d:cf:d7:bb:12:ff:40:be:e8:42:2b:e1:e6:66:
53:eb:d9:e8:f6:b6:f8:e4:f9:34:cb:10:58:f2:70:e5:80:1f:
31:9e:ea:01:a5:35:ee:f8:30:5c:4a:cf:9c:b8:42:a7:ac:a9:
d1:75:07:ef:25:29:c2:ba:7b:f3:7b:9d:86:20:dc:08:e8:5a:
6e:da:d7:b5:43:c4:a9:30:25:3c:e6:28:ee:66:0b:8d:15:3c:
0a:d7:c8:57:b8:ca:ba:4c:2f:0b:19:38:74:e5:ba:92:ea:96:
2b:11:5e:6e:50:0c:85:06:8c:b5:de:52:ea:ec:e6:41:74:1a:
c8:d1:8b:a6:e9:de:62:6c:43:1a:4a:81:9f:c4:77:d4:12:45:
f3:c7:e3:05:c5:5f:19:39:36:ee:35:f3:85:c8:bb:9f:8d:b2:
cc:6e:0f:5a:ed:57:44:e4:f0:7b:6f:10:a6:03:81:7b:b7:c7:
c0:6a:57:c9:ed:07:c8:f9:86:73:da:9a:2e:65:5c:42:47:52:
20:60:d6:3d:76:80:90:09:6c:ab:ec:ca:68:c2:9d:b4:ae:2a:
a0:a8:70:62:75:86:93:c5:e7:6c:8e:89:81:b5:13:98:1b:a4:
8b:79:00:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaDtudVlxpy6CxiFqg/u/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjUwMTAxMDU0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmI0YzU2MTZlNGNmZGE2ZmQ3ZTUyN2I1NzdhNzIxYzFmYzFjMTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthj2A3HKNGx0DjpXRzzByyQgHIbC
oaLBOk/YEfRNa1MRYspxYpI1BoMQTfvV9WnvjUPySLK68nHpOemgt/6LFSSb9Rlz
wJ0SoBxPOhFbyvh986Rr/hNkB4fAKO2cLb9IOTc5ho4RjZ+BzU+003zdYm63/vsb
9JPquAAtE32Vkj01G0cZiv0Xq0g5ANG90iRVAwIyyIch1EQLHZbhbZwaAouf1Ntu
dlpgy10zHBOlu0id0sfbyoktcax6vq8XKOBX+dgSdw+utrEWP7EVZ2ubxGdy8QcA
FY++XxPRdBNvxMBYDxULzGLa8nTeN7f7z4xoj2Fgrq+cdhglRaT/5uEyrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBa0xWFuTP2m/X5Se1d6chwfwcE3MB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvRnJURllXNU1fYWI5ZmxKN1YzcHlIQl9Cd1RjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwenGMA0G
CSqGSIb3DQEBCwUAA4IBAQAMxI5hoCE8/pxEFEGRrOwX0AHlVwG3bc/XuxL/QL7o
Qivh5mZT69no9rb45Pk0yxBY8nDlgB8xnuoBpTXu+DBcSs+cuEKnrKnRdQfvJSnC
unvze52GINwI6Fpu2te1Q8SpMCU85ijuZguNFTwK18hXuMq6TC8LGTh05bqS6pYr
EV5uUAyFBoy13lLq7OZBdBrI0Yum6d5ibEMaSoGfxHfUEkXzx+MFxV8ZOTbuNfOF
yLufjbLMbg9a7VdE5PB7bxCmA4F7t8fAalfJ7QfI+YZz2pouZVxCR1IgYNY9doCQ
CWyr7Mpowp20riqgqHBidYaTxedsjomBtROYG6SLeQAz
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:10:12 2025 by rpki-client