Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/5DBv9RBy0-ALdhnOZ9mL1Puy4-Y.roa
File: 5DBv9RBy0-ALdhnOZ9mL1Puy4-Y.roa (raw, json)
Hash identifier: aEYaKBsIdOUxFwnWgD/VnfwycMEFPEslMaW+CK0NuzE=
Subject key identifier: E4:30:6F:F5:10:72:D3:E0:0B:76:19:CE:67:D9:8B:D4:FB:B2:E3:E6
Certificate issuer: /CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Certificate serial: 019426D984C76DE817190639188C32DAFA03
Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/5DBv9RBy0-ALdhnOZ9mL1Puy4-Y.roa
Signing time: Thu 02 Jan 2025 11:49:37 +0000
ROA not before: Thu 02 Jan 2025 11:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 193.200.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:84:c7:6d:e8:17:19:06:39:18:8c:32:da:fa:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Validity
Not Before: Jan 2 11:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4306ff51072d3e00b7619ce67d98bd4fbb2e3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a5:9a:92:dd:57:49:fc:65:1e:d4:aa:23:06:
c8:2b:95:f4:61:c9:3f:88:39:a4:19:fb:da:fc:ec:
d7:88:32:05:b2:78:b1:61:c1:f9:8a:47:d0:ba:3e:
7d:1e:e3:60:e5:73:10:9b:17:22:69:11:31:46:8a:
09:9a:01:bf:67:f9:7b:8d:21:b5:02:93:9e:2e:21:
74:5c:ac:15:e5:84:b4:58:bc:63:82:99:13:4a:ff:
c7:c9:ab:a1:92:35:31:53:6b:91:02:ab:fe:38:ab:
23:60:c7:db:26:d2:82:48:8c:05:b3:de:c3:8f:a5:
6c:ea:3e:04:cf:5e:c0:5a:27:23:69:8e:92:8c:f5:
3d:90:24:3e:16:f8:34:30:e9:2a:ee:62:42:32:64:
44:b0:09:c0:0b:88:91:ee:52:07:25:e3:3f:85:af:
e2:c8:b0:f5:a0:a8:c2:84:bb:44:08:ce:dc:94:07:
c8:e9:83:1f:80:06:3e:53:f8:e7:9f:e7:4e:37:f4:
ee:d4:76:99:c3:da:c4:a4:36:ff:8a:55:b7:0a:8c:
86:57:2a:9c:39:a5:32:aa:f2:14:e6:20:6a:9c:8f:
dd:d8:31:c2:76:56:0d:4b:3b:16:3f:b9:c9:8e:a3:
29:61:fb:d1:3b:0e:c7:5f:16:44:3f:02:c5:b6:ac:
dd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:30:6F:F5:10:72:D3:E0:0B:76:19:CE:67:D9:8B:D4:FB:B2:E3:E6
X509v3 Authority Key Identifier:
keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/5DBv9RBy0-ALdhnOZ9mL1Puy4-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.191.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e7:c8:75:f7:59:b2:61:fd:01:47:55:f9:c0:48:39:e4:26:
4b:6c:11:d4:6a:2b:28:66:ce:21:96:b7:4f:4a:00:52:2d:48:
c6:47:56:72:65:cb:61:c2:b4:b7:9c:1c:36:b6:7e:bf:07:e4:
b3:08:85:d5:0f:91:67:0f:28:c3:b2:e2:69:ee:1d:40:0a:5a:
a9:08:69:dc:0c:ee:c1:a9:d8:99:da:4b:1f:e9:f2:87:9d:16:
93:b4:2f:9f:e4:59:42:1d:8c:14:86:e7:69:d8:d2:c7:94:4b:
19:b9:1b:ac:80:dd:87:ab:a9:9a:e3:e5:8c:28:62:01:cf:25:
73:54:c6:07:11:c8:4e:7b:f3:1e:3c:b6:41:f6:46:c7:40:c0:
09:52:ed:32:d4:bb:84:b3:2f:f5:55:e6:36:99:bc:bb:77:71:
59:83:ae:ee:a4:24:96:a6:57:28:aa:67:eb:bb:78:b4:a5:0f:
a0:1c:3c:66:8a:0b:4b:33:e2:da:8f:af:4d:c0:2e:1e:7e:85:
19:8b:fb:cf:8c:e2:44:b6:20:d2:33:80:da:6b:60:12:20:67:
7d:67:5f:62:c4:44:8d:ee:c1:fa:82:3c:3c:1d:5a:36:e7:8f:
71:6f:cf:ed:ec:7c:73:fd:fb:8e:5e:da:8c:b7:69:7c:eb:80:
c8:23:01:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2YTHbegXGQY5GIwy2voDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNDI1ZmRlNzQ3YWE3ZmVhOGU3YjMzNWI0NmM4OGQyMzg4
NTBhYmUwHhcNMjUwMTAyMTE0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDMwNmZmNTEwNzJkM2UwMGI3NjE5Y2U2N2Q5OGJkNGZiYjJlM2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aWakt1XSfxlHtSqIwbIK5X0Yck/
iDmkGfva/OzXiDIFsnixYcH5ikfQuj59HuNg5XMQmxciaRExRooJmgG/Z/l7jSG1
ApOeLiF0XKwV5YS0WLxjgpkTSv/HyauhkjUxU2uRAqv+OKsjYMfbJtKCSIwFs97D
j6Vs6j4Ez17AWicjaY6SjPU9kCQ+Fvg0MOkq7mJCMmREsAnAC4iR7lIHJeM/ha/i
yLD1oKjChLtECM7clAfI6YMfgAY+U/jnn+dON/Tu1HaZw9rEpDb/ilW3CoyGVyqc
OaUyqvIU5iBqnI/d2DHCdlYNSzsWP7nJjqMpYfvROw7HXxZEPwLFtqzdqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOQwb/UQctPgC3YZzmfZi9T7suPmMB8GA1UdIwQY
MBaAFMtCX950eqf+qOezNbRsiNI4hQq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYt
YmJmNzE5YzNjYTc0LzEvNURCdjlSQnkwLUFMZGhuT1o5bUwxUHV5NC1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYtYmJmNzE5YzNjYTc0
LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwci/MA0G
CSqGSIb3DQEBCwUAA4IBAQBp58h191myYf0BR1X5wEg55CZLbBHUaisoZs4hlrdP
SgBSLUjGR1ZyZcthwrS3nBw2tn6/B+SzCIXVD5FnDyjDsuJp7h1AClqpCGncDO7B
qdiZ2ksf6fKHnRaTtC+f5FlCHYwUhudp2NLHlEsZuRusgN2Hq6ma4+WMKGIBzyVz
VMYHEchOe/MePLZB9kbHQMAJUu0y1LuEsy/1VeY2mby7d3FZg67upCSWplcoqmfr
u3i0pQ+gHDxmigtLM+Laj69NwC4efoUZi/vPjOJEtiDSM4Daa2ASIGd9Z19ixESN
7sH6gjw8HVo2549xb8/t7Hxz/fuOXtqMt2l864DIIwGO
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:37:49 2025 by rpki-client