Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ck7cvWCjcPaKJincnTMFS0nZ_lA.roa
File: ck7cvWCjcPaKJincnTMFS0nZ_lA.roa (raw, json)
Hash identifier: bDzHkJG3zO4FfxQpn8Tm1K0hVc+2yGflL28uwDaCLZY=
Subject key identifier: 72:4E:DC:BD:60:A3:70:F6:8A:26:29:DC:9D:33:05:4B:49:D9:FE:50
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C3838CDA3ACF8D76B035D85BF5900
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ck7cvWCjcPaKJincnTMFS0nZ_lA.roa
Signing time: Wed 01 Jan 2025 01:47:50 +0000
ROA not before: Wed 01 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201190
IP address blocks: 194.102.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:38:38:cd:a3:ac:f8:d7:6b:03:5d:85:bf:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=724edcbd60a370f68a2629dc9d33054b49d9fe50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ae:01:10:db:7d:5f:59:cb:65:1b:17:6e:d4:
b6:f0:d1:d3:01:2c:b6:4f:95:63:cc:af:ec:ee:5c:
71:39:3b:70:63:44:0e:1b:d8:44:14:85:ef:ba:b9:
12:9a:d1:f8:ef:59:33:6e:ed:34:34:07:1a:72:63:
5b:db:d1:f1:32:20:8e:52:da:b6:a5:a7:51:1e:9f:
fa:da:82:73:3e:84:3d:97:a3:f6:28:46:df:fa:ff:
53:6b:0c:41:a0:92:62:34:30:52:94:7c:59:5b:3c:
ed:2b:ea:0c:dd:31:ff:e1:e8:a6:92:69:c2:32:fc:
73:39:ed:f2:2a:18:fa:e9:cd:3a:b8:f6:b3:2a:99:
19:ad:99:7d:df:84:75:c5:64:59:dd:98:2a:63:57:
a1:03:a6:9f:5f:71:1b:20:e5:25:bf:4f:97:c9:e6:
b1:b1:86:91:a3:b2:46:56:7e:6c:9d:41:09:d5:00:
ff:ac:e4:d9:b9:3f:67:6c:3c:50:93:96:05:df:1d:
59:41:84:4e:19:24:95:09:50:17:96:52:0b:bd:bb:
a7:de:e7:7c:d6:3e:00:61:04:6c:4a:68:4e:8a:89:
60:ac:ae:61:e4:e4:2d:94:34:38:8b:a7:b3:58:98:
3f:50:cc:d8:ad:65:76:4b:1f:dd:76:d8:10:55:70:
f4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4E:DC:BD:60:A3:70:F6:8A:26:29:DC:9D:33:05:4B:49:D9:FE:50
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ck7cvWCjcPaKJincnTMFS0nZ_lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.34.0/24
Signature Algorithm: sha256WithRSAEncryption
81:97:0f:1f:b4:10:50:b3:72:93:d2:62:dd:0c:50:7a:3b:7d:
d2:65:ae:c9:81:3c:46:f8:49:79:cc:69:79:29:f1:9b:cf:a7:
d5:ec:ab:1b:6c:ba:47:fb:b9:1c:6e:00:62:d1:bc:3a:ed:b8:
3d:26:6d:8b:bd:63:87:c0:2b:22:f5:8d:29:fa:d7:a5:7c:43:
eb:a9:71:b8:f0:b9:8e:3f:bc:10:8f:3d:b9:40:66:fb:0c:72:
9b:9a:88:18:ec:45:13:7d:2f:7c:a1:88:38:2f:c3:e0:a5:32:
da:8d:f5:60:69:5a:33:cc:ae:78:6a:10:c7:e8:76:4f:14:31:
ef:0d:a8:ec:35:bb:cf:ac:4f:5b:b3:7a:a9:aa:d1:6e:aa:7f:
5f:eb:7c:47:d2:91:36:c5:85:46:8c:36:7e:02:ab:df:7b:ec:
8d:35:48:70:f6:44:64:b8:30:d0:fa:0e:aa:e4:ef:16:58:9d:
dc:10:6b:b5:be:66:22:0c:67:8a:c8:76:79:81:6b:c6:c9:a3:
fe:2c:03:94:eb:6a:5e:fa:70:dd:f6:99:c5:e8:d1:f3:b4:0b:
5d:7a:3a:5d:d0:60:65:5a:39:ae:c2:f3:75:26:71:b9:67:4f:
19:50:65:1f:de:db:70:69:40:d8:13:d8:62:58:17:ae:16:7d:
12:5a:8b:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjDg4zaOs+NdrA12Fv1kAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwMTAxMDE0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjRlZGNiZDYwYTM3MGY2OGEyNjI5ZGM5ZDMzMDU0YjQ5ZDlmZTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6q4BENt9X1nLZRsXbtS28NHTASy2
T5VjzK/s7lxxOTtwY0QOG9hEFIXvurkSmtH471kzbu00NAcacmNb29HxMiCOUtq2
padRHp/62oJzPoQ9l6P2KEbf+v9TawxBoJJiNDBSlHxZWzztK+oM3TH/4eimkmnC
MvxzOe3yKhj66c06uPazKpkZrZl934R1xWRZ3ZgqY1ehA6afX3EbIOUlv0+Xyeax
sYaRo7JGVn5snUEJ1QD/rOTZuT9nbDxQk5YF3x1ZQYROGSSVCVAXllILvbun3ud8
1j4AYQRsSmhOiolgrK5h5OQtlDQ4i6ezWJg/UMzYrWV2Sx/ddtgQVXD0xQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHJO3L1go3D2iiYp3J0zBUtJ2f5QMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvY2s3Y3ZXQ2pjUGFLSmluY25UTUZTMG5aX2xBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmYiMA0G
CSqGSIb3DQEBCwUAA4IBAQCBlw8ftBBQs3KT0mLdDFB6O33SZa7JgTxG+El5zGl5
KfGbz6fV7KsbbLpH+7kcbgBi0bw67bg9Jm2LvWOHwCsi9Y0p+telfEPrqXG48LmO
P7wQjz25QGb7DHKbmogY7EUTfS98oYg4L8PgpTLajfVgaVozzK54ahDH6HZPFDHv
DajsNbvPrE9bs3qpqtFuqn9f63xH0pE2xYVGjDZ+Aqvfe+yNNUhw9kRkuDDQ+g6q
5O8WWJ3cEGu1vmYiDGeKyHZ5gWvGyaP+LAOU62pe+nDd9pnF6NHztAtdejpd0GBl
WjmuwvN1JnG5Z08ZUGUf3ttwaUDYE9hiWBeuFn0SWoux
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:15 2025 by rpki-client