Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gZa4TLAp0A1rchGJN9aqqN4V8O0.roa
File: gZa4TLAp0A1rchGJN9aqqN4V8O0.roa (raw, json)
Hash identifier: Y9tTzJ+QJPjB/KXaZ/xNum9nBxfaQCI3DSgDgNHZwSM=
Subject key identifier: 81:96:B8:4C:B0:29:D0:0D:6B:72:11:89:37:D6:AA:A8:DE:15:F0:ED
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C2BE7EEC76ABB9A75329553C51241
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gZa4TLAp0A1rchGJN9aqqN4V8O0.roa
Signing time: Wed 01 Jan 2025 01:47:47 +0000
ROA not before: Wed 01 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50252
IP address blocks: 193.226.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2b:e7:ee:c7:6a:bb:9a:75:32:95:53:c5:12:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8196b84cb029d00d6b72118937d6aaa8de15f0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:cf:4c:0e:98:0d:92:e5:e5:b6:19:85:cc:
31:4f:1a:56:72:48:0c:66:22:e2:8a:15:c6:68:6b:
d8:3b:3e:4e:dd:69:2e:3f:cc:f5:78:43:77:71:a9:
89:d5:6a:b6:04:67:fe:5e:d1:21:99:4a:f8:4e:bf:
5b:0e:12:a2:d0:91:0e:14:f0:87:f4:0e:a0:49:ce:
68:e7:2e:a9:4b:4d:7c:c0:d3:d2:e6:36:1b:f4:e9:
22:3d:a9:26:7f:59:40:0a:4e:a4:ce:da:35:d3:7b:
51:43:36:ef:82:b6:4b:28:e3:47:08:1d:30:6d:fb:
66:83:61:05:ee:58:07:38:14:e3:ce:15:6d:93:50:
8b:7e:ac:fb:89:d9:ad:7c:ca:18:1b:68:7a:b8:62:
5a:c6:02:d3:34:26:9f:a5:68:63:d2:4a:23:0f:e8:
83:cc:6a:e4:d9:e3:60:2e:31:11:55:81:68:5d:52:
26:05:cb:46:5d:e9:50:f5:e1:e6:e8:e2:20:8d:80:
25:e6:85:a2:3e:3f:d3:61:34:d6:07:16:92:79:a8:
c4:e9:83:d1:6b:78:a4:ba:97:8c:44:4d:fd:e7:05:
c8:97:7c:09:6d:ac:4c:38:6c:b8:0b:80:8d:c0:d4:
ab:77:25:4f:6a:c1:c6:42:02:e8:5e:05:17:f4:b2:
b1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:96:B8:4C:B0:29:D0:0D:6B:72:11:89:37:D6:AA:A8:DE:15:F0:ED
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gZa4TLAp0A1rchGJN9aqqN4V8O0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.226.121.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:5f:e3:21:c4:cd:df:68:28:72:8d:6b:5f:ad:af:38:93:55:
ff:46:8e:a0:64:77:40:e9:12:8f:cc:29:7e:72:1a:e3:73:b6:
d8:c8:23:9a:dc:bc:1e:7b:61:5a:4e:31:2f:d7:0b:94:60:8c:
6b:93:e9:f7:ab:38:2e:e8:9e:78:57:cf:33:24:e8:b6:82:8b:
ea:ed:f3:76:f3:a9:fe:86:43:1c:5f:8d:59:08:20:00:58:78:
5b:9b:80:bb:9c:4e:99:cf:23:3f:50:69:1d:46:59:b2:c1:1f:
93:f7:6a:ee:4f:c8:e0:50:08:b7:a7:3c:aa:48:60:b3:d6:cc:
3c:9b:5d:39:dd:db:fa:58:a0:88:8a:4e:1e:53:3a:a2:bd:60:
75:75:5f:6c:16:2f:af:6e:1c:e3:0e:6d:34:b1:99:24:db:27:
88:5c:05:7e:ee:e5:95:20:94:85:f0:b6:1e:c4:38:17:64:64:
12:f4:9b:94:f2:99:b4:83:f7:81:32:9b:25:d1:b2:08:49:ef:
05:8d:00:7e:75:41:5d:0e:bc:e9:6b:ae:04:23:bc:e7:ad:c8:
b9:21:81:c4:84:b1:4f:f2:92:0c:77:a3:79:a6:18:9f:e8:8c:
15:f8:ff:61:d8:45:1d:b9:6a:02:74:17:50:2c:59:64:5c:5a:
d5:5d:77:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjCvn7sdqu5p1MpVTxRJBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwMTAxMDE0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTk2Yjg0Y2IwMjlkMDBkNmI3MjExODkzN2Q2YWFhOGRlMTVmMGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MvPTA6YDZLl5bYZhcwxTxpWckgM
ZiLiihXGaGvYOz5O3WkuP8z1eEN3camJ1Wq2BGf+XtEhmUr4Tr9bDhKi0JEOFPCH
9A6gSc5o5y6pS018wNPS5jYb9OkiPakmf1lACk6kzto103tRQzbvgrZLKONHCB0w
bftmg2EF7lgHOBTjzhVtk1CLfqz7idmtfMoYG2h6uGJaxgLTNCafpWhj0kojD+iD
zGrk2eNgLjERVYFoXVImBctGXelQ9eHm6OIgjYAl5oWiPj/TYTTWBxaSeajE6YPR
a3ikupeMRE395wXIl3wJbaxMOGy4C4CNwNSrdyVPasHGQgLoXgUX9LKxjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIGWuEywKdANa3IRiTfWqqjeFfDtMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvZ1phNFRMQXAwQTFyY2hHSk45YXFxTjRWOE8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweJ5MA0G
CSqGSIb3DQEBCwUAA4IBAQC3X+MhxM3faChyjWtfra84k1X/Ro6gZHdA6RKPzCl+
chrjc7bYyCOa3Lwee2FaTjEv1wuUYIxrk+n3qzgu6J54V88zJOi2govq7fN286n+
hkMcX41ZCCAAWHhbm4C7nE6ZzyM/UGkdRlmywR+T92ruT8jgUAi3pzyqSGCz1sw8
m1053dv6WKCIik4eUzqivWB1dV9sFi+vbhzjDm00sZkk2yeIXAV+7uWVIJSF8LYe
xDgXZGQS9JuU8pm0g/eBMpsl0bIISe8FjQB+dUFdDrzpa64EI7znrci5IYHEhLFP
8pIMd6N5phif6IwV+P9h2EUduWoCdBdQLFlkXFrVXXeY
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:41 2025 by rpki-client