Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/c1QrykS-UcgDARjz71TJV9jsJ-c.roa
File: c1QrykS-UcgDARjz71TJV9jsJ-c.roa (raw, json)
Hash identifier: 7wYXv7WAwAWDC9LryUEQalnt+LGxhYnTRcxTyXD2F7E=
Subject key identifier: 73:54:2B:CA:44:BE:51:C8:03:01:18:F3:EF:54:C9:57:D8:EC:27:E7
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019537BF0F2DF116975F2BEA78DFF7F77DDB
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/c1QrykS-UcgDARjz71TJV9jsJ-c.roa
Signing time: Mon 24 Feb 2025 11:37:02 +0000
ROA not before: Mon 24 Feb 2025 11:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 194.102.105.0/24 maxlen: 24
217.156.64.0/24 maxlen: 24
217.156.65.0/24 maxlen: 24
217.156.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:bf:0f:2d:f1:16:97:5f:2b:ea:78:df:f7:f7:7d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Feb 24 11:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73542bca44be51c8030118f3ef54c957d8ec27e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:db:88:1c:f8:a6:c8:ef:65:b4:d7:83:e7:
d6:7b:4a:b3:95:a2:9a:f8:3b:ce:a0:1c:74:33:c7:
12:98:47:e9:a6:70:55:b5:d7:fd:b2:56:e0:c8:51:
5b:c8:8b:41:3a:50:29:27:af:d3:fa:89:39:63:88:
63:c8:e1:2b:99:19:3a:77:0d:5b:c8:0b:8a:22:1c:
68:e3:7c:fc:9e:be:48:fd:aa:bd:6b:ba:dd:33:3c:
8c:25:4e:52:34:72:c4:9f:d9:b6:b7:d0:ae:d7:0f:
8a:8f:40:91:fb:60:f5:ee:9a:9d:54:bf:e8:1e:37:
9f:0a:67:cb:9e:b2:8b:6f:b9:b6:a4:f1:f8:ff:f2:
da:55:7e:f1:7d:1c:bd:ad:ae:a5:f9:00:68:ff:cb:
71:b1:2b:ee:2b:69:01:8c:82:eb:bc:e1:23:2f:c1:
2c:ad:5a:4b:7f:ac:1a:79:de:dc:fa:1b:19:99:24:
50:81:73:b0:fa:b6:0f:9e:6d:c4:e6:a1:52:04:92:
d0:f2:b0:bd:4f:c8:75:6c:ee:d7:54:d7:27:8c:35:
55:bd:ac:b4:29:00:e5:40:36:72:ca:2b:2a:ec:aa:
73:09:1d:95:9e:8d:8f:b9:a7:a2:60:db:51:82:c0:
41:bf:73:db:15:75:e9:f4:10:8a:ca:c8:e8:6f:d6:
fe:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:54:2B:CA:44:BE:51:C8:03:01:18:F3:EF:54:C9:57:D8:EC:27:E7
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/c1QrykS-UcgDARjz71TJV9jsJ-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.105.0/24
217.156.64.0/23
217.156.123.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:dc:f7:a6:f2:02:ab:03:33:84:91:25:7e:f1:84:1d:22:eb:
60:39:b6:22:91:e2:b8:4c:b7:66:62:4b:21:ea:4a:1e:d1:66:
f5:96:bb:56:26:1a:0e:6a:14:9a:f2:2b:66:e1:b6:54:1f:d7:
76:36:2f:15:33:d6:6d:97:be:56:38:d9:d6:39:db:57:ed:a5:
e7:a8:47:96:4d:0c:45:c1:1e:f9:e8:1a:43:9e:c9:ca:5a:ed:
0d:27:17:ba:22:b1:24:e7:e3:4c:e5:cd:4d:b3:bc:c6:17:3d:
f5:ff:a7:59:4d:7c:1b:44:ff:fe:fa:0e:78:fb:47:b0:12:dd:
62:4c:be:e1:39:f2:3e:40:fb:70:5d:c4:e5:52:ce:98:07:1f:
c5:ad:cd:27:14:45:7b:f2:87:fe:3e:1a:36:a8:87:0f:0a:18:
2e:fa:21:bb:d1:bd:38:ee:9c:05:fa:c9:a8:6a:e3:8a:37:c8:
1e:b0:d4:8c:0d:a7:18:0e:72:77:f2:b7:8e:ed:0e:a3:a9:bd:
11:51:61:72:fe:e2:f3:f0:6a:fc:b3:1c:06:2e:cc:0c:ca:c8:
86:20:7f:a7:a2:3e:f4:a5:d6:ab:fd:f0:c1:88:a2:d9:90:45:
08:b5:c7:cd:5f:8a:ab:24:11:8e:d1:29:de:27:03:cf:4a:8e:
21:5b:22:f1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZU3vw8t8RaXXyvqeN/3933bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwMjI0MTEzNzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzU0MmJjYTQ0YmU1MWM4MDMwMTE4ZjNlZjU0Yzk1N2Q4ZWMyN2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXHbiBz4psjvZbTXg+fWe0qzlaKa
+DvOoBx0M8cSmEfppnBVtdf9slbgyFFbyItBOlApJ6/T+ok5Y4hjyOErmRk6dw1b
yAuKIhxo43z8nr5I/aq9a7rdMzyMJU5SNHLEn9m2t9Cu1w+Kj0CR+2D17pqdVL/o
HjefCmfLnrKLb7m2pPH4//LaVX7xfRy9ra6l+QBo/8txsSvuK2kBjILrvOEjL8Es
rVpLf6waed7c+hsZmSRQgXOw+rYPnm3E5qFSBJLQ8rC9T8h1bO7XVNcnjDVVvay0
KQDlQDZyyisq7KpzCR2Vno2PuaeiYNtRgsBBv3PbFXXp9BCKysjob9b+XQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHNUK8pEvlHIAwEY8+9UyVfY7CfnMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvYzFRcnlrUy1VY2dEQVJqejcxVEpWOWpzSi1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwmZpAwQB
2ZxAAwQA2Zx7MA0GCSqGSIb3DQEBCwUAA4IBAQAM3Pem8gKrAzOEkSV+8YQdIutg
ObYikeK4TLdmYksh6koe0Wb1lrtWJhoOahSa8itm4bZUH9d2Ni8VM9Ztl75WONnW
OdtX7aXnqEeWTQxFwR756BpDnsnKWu0NJxe6IrEk5+NM5c1Ns7zGFz31/6dZTXwb
RP/++g54+0ewEt1iTL7hOfI+QPtwXcTlUs6YBx/Frc0nFEV78of+Pho2qIcPChgu
+iG70b047pwF+smoauOKN8gesNSMDacYDnJ38reO7Q6jqb0RUWFy/uLz8Gr8sxwG
LswMysiGIH+noj70pdar/fDBiKLZkEUItcfNX4qrJBGO0SneJwPPSo4hWyLx
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:14 2025 by rpki-client