Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rdlHiY61MOsY-YHaiGibc_usrbc.roa
File: rdlHiY61MOsY-YHaiGibc_usrbc.roa (raw, json)
Hash identifier: y1OIFEPXtMK3/gISRCuAAF5bUNPo3WeQkEVAJBwus/w=
Subject key identifier: AD:D9:47:89:8E:B5:30:EB:18:F9:81:DA:88:68:9B:73:FB:AC:AD:B7
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C0DBFD18EF43180650E3061AD5359
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rdlHiY61MOsY-YHaiGibc_usrbc.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8614
IP address blocks: 193.231.172.0/24 maxlen: 24
217.156.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0d:bf:d1:8e:f4:31:80:65:0e:30:61:ad:53:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=add947898eb530eb18f981da88689b73fbacadb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:40:65:ca:f0:e0:6c:22:d2:6c:24:4e:5f:be:
13:41:e8:ab:a8:d5:a8:bc:8d:8b:33:16:78:f4:a7:
8f:3a:37:fd:fb:21:87:e9:b4:12:16:c6:aa:27:28:
83:29:ff:fe:19:75:f0:1d:59:69:42:47:36:41:ea:
86:de:72:b2:66:1c:e4:6c:91:58:03:56:8d:7e:e0:
0c:d5:57:42:08:6e:08:5e:ff:59:71:d4:17:45:57:
9b:f3:3c:a0:7b:02:22:d4:61:e8:e0:aa:92:11:8c:
df:1c:0f:fe:75:6c:67:41:75:e4:86:32:77:be:2a:
35:e1:51:95:e9:94:b8:32:c7:fb:4a:74:8a:a4:b0:
d1:a3:b2:5c:16:8e:73:91:c0:75:39:0c:1e:b3:15:
ab:d1:6f:f9:c2:32:76:bc:a8:75:7e:db:d7:ab:f9:
f7:d8:c1:13:56:3f:08:71:6a:c6:46:e3:48:bd:77:
77:d3:7a:18:f5:fa:a9:a8:a3:fd:08:e8:4d:af:61:
05:14:1d:89:c8:27:a0:0e:18:9e:55:1f:42:0d:29:
c9:4a:e0:30:eb:40:30:e4:a0:76:64:07:d5:36:7d:
bb:e6:9b:26:67:61:b5:4d:d9:8b:4c:25:2f:60:21:
a0:f5:42:f0:7c:cf:a8:27:ae:34:a4:a6:0e:68:24:
96:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D9:47:89:8E:B5:30:EB:18:F9:81:DA:88:68:9B:73:FB:AC:AD:B7
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rdlHiY61MOsY-YHaiGibc_usrbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.231.172.0/24
217.156.124.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:7e:dc:37:88:59:e4:d7:36:cc:8f:ce:f0:66:d8:86:2f:85:
fd:bc:6a:b9:9c:a2:99:05:15:42:da:67:74:56:72:80:03:a4:
9f:2e:e8:80:17:db:83:0c:44:31:5f:81:31:b2:fd:84:f1:c6:
96:6c:2a:e0:e1:7c:d5:af:4e:f1:66:23:65:d5:eb:bb:23:b8:
72:71:8c:b6:e8:8c:37:a3:83:4c:89:40:3e:12:70:6b:46:59:
bd:46:f0:36:cb:f8:3f:67:53:07:a3:64:6d:27:f7:4d:41:e7:
57:89:a6:ec:16:7f:b5:91:f6:b2:7f:7a:0f:30:d2:e5:f8:99:
b6:cf:9c:f4:9b:21:ab:23:4d:b3:48:41:6a:a0:61:78:6e:2d:
b3:a5:e5:96:fb:39:9b:cf:0a:30:db:aa:83:68:fc:5a:e5:4b:
64:54:57:6d:9b:99:b1:75:db:b3:ce:05:60:76:5c:ca:b2:fa:
57:2a:e8:ff:4d:a5:9e:f8:37:b7:b2:75:5e:32:90:f0:a4:87:
78:7c:fd:80:a0:94:b4:aa:42:f4:00:02:88:e3:45:24:7c:57:
38:a3:45:59:bb:60:12:ad:53:3f:c8:4e:78:7f:8c:c9:2f:47:
6c:5b:aa:10:fa:ea:ae:30:ad:48:aa:97:9a:47:1d:a2:57:20:
14:c2:e4:1b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQfjA2/0Y70MYBlDjBhrVNZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwMTAxMDE0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGQ5NDc4OThlYjUzMGViMThmOTgxZGE4ODY4OWI3M2ZiYWNhZGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EBlyvDgbCLSbCROX74TQeirqNWo
vI2LMxZ49KePOjf9+yGH6bQSFsaqJyiDKf/+GXXwHVlpQkc2QeqG3nKyZhzkbJFY
A1aNfuAM1VdCCG4IXv9ZcdQXRVeb8zygewIi1GHo4KqSEYzfHA/+dWxnQXXkhjJ3
vio14VGV6ZS4Msf7SnSKpLDRo7JcFo5zkcB1OQwesxWr0W/5wjJ2vKh1ftvXq/n3
2METVj8IcWrGRuNIvXd303oY9fqpqKP9COhNr2EFFB2JyCegDhieVR9CDSnJSuAw
60Aw5KB2ZAfVNn275psmZ2G1TdmLTCUvYCGg9ULwfM+oJ640pKYOaCSWTQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK3ZR4mOtTDrGPmB2ohom3P7rK23MB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvcmRsSGlZNjFNT3NZLVlIYWlHaWJjX3VzcmJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAweesAwQA
2Zx8MA0GCSqGSIb3DQEBCwUAA4IBAQC/ftw3iFnk1zbMj87wZtiGL4X9vGq5nKKZ
BRVC2md0VnKAA6SfLuiAF9uDDEQxX4Exsv2E8caWbCrg4XzVr07xZiNl1eu7I7hy
cYy26Iw3o4NMiUA+EnBrRlm9RvA2y/g/Z1MHo2RtJ/dNQedXiabsFn+1kfayf3oP
MNLl+Jm2z5z0myGrI02zSEFqoGF4bi2zpeWW+zmbzwow26qDaPxa5UtkVFdtm5mx
dduzzgVgdlzKsvpXKuj/TaWe+De3snVeMpDwpId4fP2AoJS0qkL0AAKI40UkfFc4
o0VZu2ASrVM/yE54f4zJL0dsW6oQ+uquMK1IqpeaRx2iVyAUwuQb
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:59 2025 by rpki-client