Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/KDzLGK1Ms1rQ3Sinf5MNoTfrlLk.roa
File: KDzLGK1Ms1rQ3Sinf5MNoTfrlLk.roa (raw, json)
Hash identifier: bPUt0It2HOIJBVKWWo3dmSTmayPGgOml6jz8Zt5aBJ8=
Subject key identifier: 28:3C:CB:18:AD:4C:B3:5A:D0:DD:28:A7:7F:93:0D:A1:37:EB:94:B9
Certificate issuer: /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial: 01942144111D14BFC1AB1359A4FBBD4E9F56
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/KDzLGK1Ms1rQ3Sinf5MNoTfrlLk.roa
Signing time: Wed 01 Jan 2025 09:48:16 +0000
ROA not before: Wed 01 Jan 2025 09:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6453
IP address blocks: 193.103.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:11:1d:14:bf:c1:ab:13:59:a4:fb:bd:4e:9f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Validity
Not Before: Jan 1 09:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=283ccb18ad4cb35ad0dd28a77f930da137eb94b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:14:e7:69:07:63:5b:6a:47:19:ea:44:4e:
63:c5:90:5f:28:ef:c7:25:7f:d3:7b:1a:08:9c:4e:
cd:e4:b0:20:8b:4b:10:6f:1a:b7:3b:37:12:4d:ac:
6e:33:54:c9:44:88:e9:ea:96:c1:19:38:54:ed:6d:
28:b7:f3:39:79:1c:e2:f0:4f:c6:60:ee:97:0e:d0:
ce:6e:2d:af:ca:0a:ab:eb:d7:ed:fb:51:46:21:93:
5c:0d:06:9f:c4:f0:2c:ae:3f:b0:a0:61:6c:83:32:
0e:e9:3c:60:98:cc:b6:56:a5:95:60:42:40:1a:4c:
ed:5b:6f:a4:d5:30:6f:86:b0:0a:28:ee:8d:42:2b:
7b:d4:07:5e:57:9c:45:1b:98:d1:03:97:53:f6:9a:
ad:da:f6:1f:2e:44:0d:32:37:e4:8a:c5:48:dd:4f:
f3:63:7f:a7:ef:64:1f:28:37:25:5f:9a:21:9e:37:
f5:7b:81:37:d7:2e:fa:be:9f:07:d6:fa:b3:6d:f8:
c2:af:50:6c:f1:4c:46:d9:ee:04:04:54:b3:5d:b6:
c5:cc:31:bc:2d:ba:60:3f:83:5c:0c:bd:4b:2c:c1:
df:51:18:10:86:24:5b:8a:be:22:53:71:24:09:c0:
0f:e0:5c:d7:31:8a:d4:5e:c3:4d:ce:b0:bd:b1:86:
ab:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3C:CB:18:AD:4C:B3:5A:D0:DD:28:A7:7F:93:0D:A1:37:EB:94:B9
X509v3 Authority Key Identifier:
keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/KDzLGK1Ms1rQ3Sinf5MNoTfrlLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.103.193.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:0f:e0:57:a6:ed:28:de:f0:14:10:8e:39:2f:81:7f:b3:81:
41:3c:61:de:0e:71:c3:c5:b4:b5:4e:b8:4b:de:03:dd:75:5b:
d2:0d:00:b4:a8:4d:c7:73:08:50:70:c6:f9:73:23:3e:66:76:
14:09:79:86:2b:5d:bc:4d:a6:17:7e:33:67:28:eb:3a:b7:72:
fe:9d:aa:35:37:75:a5:b6:b0:2c:94:97:0f:2a:4b:91:42:5e:
69:0c:8d:6f:9b:cb:37:4e:e9:2d:4f:d5:8c:9d:b0:60:d0:53:
05:7c:8f:29:a3:e0:56:88:0b:d6:d2:1a:a5:eb:27:cc:85:6b:
92:62:4c:a0:f4:92:df:a0:64:1e:3a:60:a0:b2:3c:48:f1:e1:
44:cc:79:d8:ad:99:13:54:37:5f:0b:74:eb:07:9f:e1:8c:c6:
39:68:57:e1:96:65:82:29:3e:7a:5c:7d:60:f1:eb:48:84:3e:
9c:cf:08:30:1d:96:12:bf:75:bd:3e:b7:c6:de:f4:c5:45:f6:
b4:c8:44:b4:d6:24:4b:9b:c2:06:5a:51:c4:5a:14:9f:e2:8a:
a8:04:17:56:cd:7c:f0:fb:1f:a9:39:33:06:4c:6d:bb:84:de:
b9:b1:c1:4c:ef:5f:86:95:02:7b:48:df:80:9a:62:a8:62:17:
a4:ad:7f:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRBEdFL/BqxNZpPu9Tp9WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNjY0YjkyNGU0ZWEwMjdjMWMzYTA3NzBkZjFmZjgwYjFk
NTY4ZmEwHhcNMjUwMTAxMDk0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODNjY2IxOGFkNGNiMzVhZDBkZDI4YTc3ZjkzMGRhMTM3ZWI5NGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQsU52kHY1tqRxnqRE5jxZBfKO/H
JX/TexoInE7N5LAgi0sQbxq3OzcSTaxuM1TJRIjp6pbBGThU7W0ot/M5eRzi8E/G
YO6XDtDObi2vygqr69ft+1FGIZNcDQafxPAsrj+woGFsgzIO6TxgmMy2VqWVYEJA
GkztW2+k1TBvhrAKKO6NQit71AdeV5xFG5jRA5dT9pqt2vYfLkQNMjfkisVI3U/z
Y3+n72QfKDclX5ohnjf1e4E31y76vp8H1vqzbfjCr1Bs8UxG2e4EBFSzXbbFzDG8
LbpgP4NcDL1LLMHfURgQhiRbir4iU3EkCcAP4FzXMYrUXsNNzrC9sYarHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCg8yxitTLNa0N0op3+TDaE365S5MB8GA1UdIwQY
MBaAFK5mS5JOTqAnwcOgdw3x/4Cx1Wj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm1aTGtrNU9vQ2ZCdzZCM0RmSF9nTEhWYVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9lMmY4NDYtODU4Mi00MDkzLWFlOTMt
MDRjNTM5N2ZlNWY4LzEvS0R6TEdLMU1zMXJRM1NpbmY1TU5vVGZybExrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9lMmY4NDYtODU4Mi00MDkzLWFlOTMtMDRjNTM5N2ZlNWY4
LzEvcm1aTGtrNU9vQ2ZCdzZCM0RmSF9nTEhWYVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWfBMA0G
CSqGSIb3DQEBCwUAA4IBAQA8D+BXpu0o3vAUEI45L4F/s4FBPGHeDnHDxbS1TrhL
3gPddVvSDQC0qE3HcwhQcMb5cyM+ZnYUCXmGK128TaYXfjNnKOs6t3L+nao1N3Wl
trAslJcPKkuRQl5pDI1vm8s3TuktT9WMnbBg0FMFfI8po+BWiAvW0hql6yfMhWuS
Ykyg9JLfoGQeOmCgsjxI8eFEzHnYrZkTVDdfC3TrB5/hjMY5aFfhlmWCKT56XH1g
8etIhD6czwgwHZYSv3W9PrfG3vTFRfa0yES01iRLm8IGWlHEWhSf4oqoBBdWzXzw
+x+pOTMGTG27hN65scFM71+GlQJ7SN+AmmKoYhekrX+i
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:20:05 2025 by rpki-client