Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/l_EpL9DerXvkoi9mgtKAqNomA8k.roa
File: l_EpL9DerXvkoi9mgtKAqNomA8k.roa (raw, json)
Hash identifier: NYPx355N2XC2PNV7lGv0qgOFwLrFg0uF6l0cLL8mgHo=
Subject key identifier: 97:F1:29:2F:D0:DE:AD:7B:E4:A2:2F:66:82:D2:80:A8:DA:26:03:C9
Certificate issuer: /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Certificate serial: 01941FFA4EC3C6612528FC0B241B264D1A07
Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/l_EpL9DerXvkoi9mgtKAqNomA8k.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51242
IP address blocks: 193.239.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4e:c3:c6:61:25:28:fc:0b:24:1b:26:4d:1a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97f1292fd0dead7be4a22f6682d280a8da2603c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6c:15:5b:ff:d8:ad:02:f1:b2:66:9c:43:b7:
7b:f2:43:06:bd:91:2f:a0:e2:df:49:9d:d0:f0:39:
ef:8c:e6:c2:de:dd:1e:81:20:fb:f0:31:bc:bc:24:
d1:a4:16:43:3c:85:2b:a9:80:68:fe:dc:67:af:45:
a0:ba:71:71:a8:a0:14:e0:c8:9d:32:27:0a:80:3c:
a6:f8:ec:23:0b:9f:48:d7:7b:f2:74:ec:25:4b:b4:
c4:44:55:99:44:0c:4b:89:12:76:a5:08:85:b4:69:
2c:45:78:22:e0:14:7e:64:d8:ef:50:86:2d:06:dd:
82:dc:d7:be:5b:25:ce:7e:f7:7d:85:22:1a:32:f4:
5f:88:6e:09:d8:b3:45:93:39:29:4a:94:f1:c1:52:
fe:1f:ca:31:84:65:f4:25:d4:4b:ab:e4:8b:21:81:
03:48:8f:d8:ca:ef:6b:14:aa:9f:d8:72:b9:f8:e0:
00:2c:20:39:7a:ba:a4:b0:6c:ca:a5:42:0f:7c:8e:
cb:ce:d0:fb:dc:8a:3f:ff:db:6e:58:43:f5:77:d0:
36:1b:b5:35:42:8d:89:4b:ad:14:00:37:0b:70:9d:
93:40:cc:95:b1:7e:c7:86:a9:c3:c0:4c:69:43:39:
98:3a:00:93:e7:46:35:c5:cf:99:0f:8c:24:7b:3a:
35:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F1:29:2F:D0:DE:AD:7B:E4:A2:2F:66:82:D2:80:A8:DA:26:03:C9
X509v3 Authority Key Identifier:
keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/l_EpL9DerXvkoi9mgtKAqNomA8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.162.0/23
Signature Algorithm: sha256WithRSAEncryption
43:64:67:b6:71:c8:36:1a:0e:71:2f:1a:0f:cb:97:15:2b:00:
17:e1:49:1a:fe:e1:63:4e:81:2c:5c:0d:87:71:50:65:ed:95:
7a:46:01:15:5a:c3:4f:a6:9d:b4:9e:e4:59:a9:b5:f8:53:0d:
ad:a6:80:3d:88:c3:6e:85:d5:5a:5e:fd:30:47:78:d6:86:a7:
23:98:d3:82:bc:7b:e0:18:8e:1a:fd:f1:ec:5e:b9:54:62:82:
92:15:3c:2c:46:d9:73:f9:36:bf:98:50:d6:ea:91:fd:de:d7:
0c:bc:cc:a5:a6:58:e8:0a:8b:0b:25:8b:25:d7:b2:b0:f2:f2:
b1:9b:68:77:5f:1b:4c:38:d5:1f:4f:78:b8:a0:0a:33:07:01:
b5:69:c9:ae:e0:4a:ea:4d:fb:fb:58:31:c2:eb:a5:1e:c8:85:
fd:f7:f5:44:78:28:ab:93:5a:0c:0d:50:99:43:b1:c0:d2:02:
0f:df:b5:0d:ef:01:da:ee:10:9a:41:a4:82:9d:f9:85:df:12:
b5:fa:b5:35:99:64:44:f5:09:00:3c:4c:9d:19:86:b6:14:15:
10:08:cd:45:7e:77:43:b3:c3:3d:4c:82:96:c5:d4:5b:57:5f:
b7:8b:c2:5a:41:72:fc:c2:51:d0:27:43:a8:69:67:09:78:c7:
e3:e4:51:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+k7DxmElKPwLJBsmTRoHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNTFiNWI4MTMyZjllMzA3YjcxN2EzZTFlNTRkMWY3ZjQ1
YWU1MTcwHhcNMjUwMTAxMDM0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2YxMjkyZmQwZGVhZDdiZTRhMjJmNjY4MmQyODBhOGRhMjYwM2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGwVW//YrQLxsmacQ7d78kMGvZEv
oOLfSZ3Q8DnvjObC3t0egSD78DG8vCTRpBZDPIUrqYBo/txnr0WgunFxqKAU4Mid
MicKgDym+OwjC59I13vydOwlS7TERFWZRAxLiRJ2pQiFtGksRXgi4BR+ZNjvUIYt
Bt2C3Ne+WyXOfvd9hSIaMvRfiG4J2LNFkzkpSpTxwVL+H8oxhGX0JdRLq+SLIYED
SI/Yyu9rFKqf2HK5+OAALCA5erqksGzKpUIPfI7LztD73Io//9tuWEP1d9A2G7U1
Qo2JS60UADcLcJ2TQMyVsX7HhqnDwExpQzmYOgCT50Y1xc+ZD4wkezo1RwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJfxKS/Q3q175KIvZoLSgKjaJgPJMB8GA1UdIwQY
MBaAFI9RtbgTL54we3F6Ph5U0ff0WuUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajFHMXVCTXZuakI3Y1hvLUhsVFI5X1JhNVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kYTI0MjctYjMzYi00YjgxLWFmMzct
ZTIyNTFlNDg5Y2JiLzEvbF9FcEw5RGVyWHZrb2k5bWd0S0FxTm9tQThrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kYTI0MjctYjMzYi00YjgxLWFmMzctZTIyNTFlNDg5Y2Ji
LzEvajFHMXVCTXZuakI3Y1hvLUhsVFI5X1JhNVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwe+iMA0G
CSqGSIb3DQEBCwUAA4IBAQBDZGe2ccg2Gg5xLxoPy5cVKwAX4Uka/uFjToEsXA2H
cVBl7ZV6RgEVWsNPpp20nuRZqbX4Uw2tpoA9iMNuhdVaXv0wR3jWhqcjmNOCvHvg
GI4a/fHsXrlUYoKSFTwsRtlz+Ta/mFDW6pH93tcMvMylpljoCosLJYsl17Kw8vKx
m2h3XxtMONUfT3i4oAozBwG1acmu4ErqTfv7WDHC66UeyIX99/VEeCirk1oMDVCZ
Q7HA0gIP37UN7wHa7hCaQaSCnfmF3xK1+rU1mWRE9QkAPEydGYa2FBUQCM1FfndD
s8M9TIKWxdRbV1+3i8JaQXL8wlHQJ0OoaWcJeMfj5FHB
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:39:00 2025 by rpki-client