Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/5q-qpxb1GyGk9Sgp4LudS6OTjwc.roa
File: 5q-qpxb1GyGk9Sgp4LudS6OTjwc.roa (raw, json)
Hash identifier: htmdV/6gyk+V9T2Y8asQTb68F6n0LmBwy+nMQ8/FChQ=
Subject key identifier: E6:AF:AA:A7:16:F5:1B:21:A4:F5:28:29:E0:BB:9D:4B:A3:93:8F:07
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0193BF832320DB787E432B5CE4A54874988C
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/5q-qpxb1GyGk9Sgp4LudS6OTjwc.roa
Signing time: Fri 13 Dec 2024 10:14:22 +0000
ROA not before: Fri 13 Dec 2024 10:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 194.38.48.0/24 maxlen: 24
194.38.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:83:23:20:db:78:7e:43:2b:5c:e4:a5:48:74:98:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Dec 13 10:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6afaaa716f51b21a4f52829e0bb9d4ba3938f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:e5:8a:3a:c3:5d:e0:f0:e6:44:df:23:78:
2d:b3:c5:87:8d:c5:f2:42:5a:4f:f5:0d:b4:9c:33:
e3:db:e3:10:20:38:54:fb:40:a7:b5:8b:dc:5f:57:
27:16:6b:32:de:db:5e:d5:5a:70:a6:fb:7b:6a:87:
69:a8:c6:47:1e:3a:66:0c:eb:78:47:ce:bd:2b:85:
21:99:32:e9:eb:f9:f7:d9:2b:df:36:42:f1:64:46:
d8:63:36:c4:73:86:c0:a3:94:e5:7a:43:72:db:99:
42:9d:a8:64:70:33:0a:18:d0:67:a6:84:b2:22:d0:
25:44:94:5b:f2:07:cc:41:b4:37:2c:70:0f:68:76:
ab:81:2a:d8:36:c5:cd:c7:ca:30:28:a7:0a:50:2a:
a3:a5:d3:a2:49:38:f0:6d:bc:2c:34:e6:ad:6f:78:
a3:10:d0:49:12:7a:60:e7:6c:41:1c:24:56:57:86:
ce:64:b2:99:d7:86:81:5c:17:eb:51:fd:a0:af:be:
21:21:54:1f:e7:71:1d:20:dc:65:97:d4:b7:51:c3:
27:24:f4:c2:06:e8:ec:93:31:df:e2:7f:41:74:8a:
1d:3d:4a:c6:0f:28:85:05:1f:24:90:58:e6:a8:77:
08:d4:f1:c9:c9:c0:14:ea:85:1f:d0:52:cf:1e:c8:
0c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AF:AA:A7:16:F5:1B:21:A4:F5:28:29:E0:BB:9D:4B:A3:93:8F:07
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/5q-qpxb1GyGk9Sgp4LudS6OTjwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.48.0/24
194.38.50.0/24
Signature Algorithm: sha256WithRSAEncryption
86:38:9b:b4:43:e4:04:ec:b3:59:3e:41:46:f0:7b:0e:ef:f4:
3a:37:d7:ec:e7:99:5e:58:2a:be:e5:dd:5f:28:f8:d4:01:1b:
30:88:f4:b1:25:f9:19:09:d8:8c:7b:37:db:38:82:29:7a:58:
fc:7b:27:48:57:97:15:d9:f3:b4:9e:c0:8d:7f:7f:8d:36:45:
f4:9c:c3:e3:a7:3e:3d:29:b6:a7:66:5c:db:38:1d:c7:e9:0d:
61:e4:06:bc:0e:c9:43:49:8f:e2:c6:b7:27:9c:2f:71:93:dc:
70:00:56:e8:f7:26:36:7a:5c:6e:aa:71:d7:40:f6:01:fd:34:
44:b8:d3:62:08:78:00:fc:62:ab:59:72:a6:73:5c:c5:6f:0f:
99:ab:61:6c:23:47:96:6b:d0:d5:52:ea:25:c0:22:71:15:d2:
ac:b2:eb:71:43:24:e8:c5:d6:f4:7e:52:95:40:db:cd:70:c1:
f8:7b:a3:79:60:01:b3:25:7a:80:4e:61:0e:af:72:e9:48:6d:
90:d3:97:89:b4:2a:8b:76:10:cc:13:48:53:3a:35:5a:f9:d3:
12:03:4d:ce:62:64:15:fb:6c:33:da:ad:78:ed:69:8b:fc:b5:
f8:5e:85:c0:e4:d8:7c:87:63:70:da:a9:b2:be:0b:ff:fb:aa:
62:49:cf:a9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZO/gyMg23h+Qytc5KVIdJiMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjQxMjEzMTAxNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmFmYWFhNzE2ZjUxYjIxYTRmNTI4MjllMGJiOWQ0YmEzOTM4ZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndvlijrDXeDw5kTfI3gts8WHjcXy
QlpP9Q20nDPj2+MQIDhU+0CntYvcX1cnFmsy3tte1Vpwpvt7aodpqMZHHjpmDOt4
R869K4UhmTLp6/n32SvfNkLxZEbYYzbEc4bAo5TlekNy25lCnahkcDMKGNBnpoSy
ItAlRJRb8gfMQbQ3LHAPaHargSrYNsXNx8owKKcKUCqjpdOiSTjwbbwsNOatb3ij
ENBJEnpg52xBHCRWV4bOZLKZ14aBXBfrUf2gr74hIVQf53EdINxll9S3UcMnJPTC
BujskzHf4n9BdIodPUrGDyiFBR8kkFjmqHcI1PHJycAU6oUf0FLPHsgMEQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOavqqcW9RshpPUoKeC7nUujk48HMB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvNXEtcXB4YjFHeUdrOVNncDRMdWRTNk9UandjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwiYwAwQA
wiYyMA0GCSqGSIb3DQEBCwUAA4IBAQCGOJu0Q+QE7LNZPkFG8HsO7/Q6N9fs55le
WCq+5d1fKPjUARswiPSxJfkZCdiMezfbOIIpelj8eydIV5cV2fO0nsCNf3+NNkX0
nMPjpz49KbanZlzbOB3H6Q1h5Aa8DslDSY/ixrcnnC9xk9xwAFbo9yY2elxuqnHX
QPYB/TREuNNiCHgA/GKrWXKmc1zFbw+Zq2FsI0eWa9DVUuolwCJxFdKssutxQyTo
xdb0flKVQNvNcMH4e6N5YAGzJXqATmEOr3LpSG2Q05eJtCqLdhDME0hTOjVa+dMS
A03OYmQV+2wz2q147WmL/LX4XoXA5Nh8h2Nw2qmyvgv/+6piSc+p
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:32 2025 by rpki-client