Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/h4op3eZJF6DbCeJgHLJUzEOKOrw.roa
File: h4op3eZJF6DbCeJgHLJUzEOKOrw.roa (raw, json)
Hash identifier: C2/O+I72H3DB271MlVh6NRVpu8iLEHRO772ocbfhFlg=
Subject key identifier: 87:8A:29:DD:E6:49:17:A0:DB:09:E2:60:1C:B2:54:CC:43:8A:3A:BC
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0194E107505C1B97916ED0BD7C45507EF270
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/h4op3eZJF6DbCeJgHLJUzEOKOrw.roa
Signing time: Fri 07 Feb 2025 15:29:00 +0000
ROA not before: Fri 07 Feb 2025 15:29:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62005
IP address blocks: 193.168.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e1:07:50:5c:1b:97:91:6e:d0:bd:7c:45:50:7e:f2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Feb 7 15:29:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=878a29dde64917a0db09e2601cb254cc438a3abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2d:c9:cd:b5:a9:89:ab:48:d5:ab:07:ff:13:
6e:b4:88:ff:9f:9d:7d:b9:38:78:fd:21:33:3f:d7:
61:e5:76:81:2b:81:f8:3a:c6:55:c5:7e:a3:2d:8a:
89:eb:e1:45:9f:a5:c1:9c:ea:b7:c7:73:43:7a:9a:
8c:ec:c9:e9:4a:fd:6f:c1:c9:69:c0:ad:41:84:8d:
0f:de:b5:f3:d2:f1:6c:dd:a4:fe:4a:90:73:0b:43:
16:40:16:f5:6e:3f:6f:23:67:76:a2:95:c7:2a:16:
49:72:f6:6d:8b:63:08:c3:1e:d4:35:8c:66:4e:dc:
68:a7:fd:c5:39:4d:63:d6:8d:d6:48:aa:65:33:bc:
0b:9b:f4:3d:c9:83:64:e3:12:e8:94:99:49:26:ba:
76:fb:9b:d3:42:34:14:d0:df:14:c5:40:e4:2e:b1:
79:c6:11:32:f9:a6:a2:0e:46:58:bd:86:dc:27:38:
e8:c2:1d:ff:71:39:d2:15:a7:83:52:d3:30:e4:7c:
5e:98:94:d3:4b:e2:54:05:ff:cc:af:38:a1:87:c2:
b4:32:29:00:f9:51:cf:44:24:e4:96:ae:61:21:4b:
41:c4:a8:2b:43:79:1d:a4:39:f1:a2:3a:18:72:b1:
ad:cb:e5:26:00:02:2e:ea:7e:a2:6c:94:a1:82:2a:
df:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8A:29:DD:E6:49:17:A0:DB:09:E2:60:1C:B2:54:CC:43:8A:3A:BC
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/h4op3eZJF6DbCeJgHLJUzEOKOrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.203.0/24
Signature Algorithm: sha256WithRSAEncryption
23:4c:7a:5e:83:6b:48:65:ad:32:b5:2c:a3:b8:11:29:8b:03:
f8:14:a0:dd:c6:ab:21:8a:81:25:63:96:0b:ed:1f:10:bd:df:
b6:d8:3b:fd:a4:9d:0b:c1:c1:6f:7c:77:97:1a:84:21:56:df:
bd:d9:20:75:b3:97:a0:fe:30:2d:bc:5c:69:37:34:31:17:34:
36:26:d7:93:74:75:29:31:a7:dc:23:16:9d:6b:1d:0e:d2:1a:
0d:64:32:82:a0:55:0e:54:46:20:1c:ad:8b:29:74:7b:75:f6:
3f:a1:88:6d:56:4c:48:1c:43:e1:66:8c:d4:3e:89:c2:72:e4:
22:5d:56:ce:0f:5c:20:f7:28:e0:2c:a4:ff:8e:33:e0:ae:43:
ae:6e:35:74:67:6b:66:c8:cf:38:62:ac:48:26:95:c7:57:5b:
b3:2d:20:0d:da:a5:c5:3d:c6:69:cf:9d:53:ab:0a:75:16:c6:
c7:c2:78:24:10:8f:97:25:8a:c8:ef:b2:a9:43:96:e7:aa:0c:
24:6d:b6:b7:ed:16:dd:b4:c7:a3:fb:7e:74:9d:a3:50:d1:d8:
d2:68:17:5b:13:d1:09:ca:da:c7:21:ec:b8:a5:96:8f:8b:c9:
c0:9e:8e:62:86:ea:ac:fa:c1:7d:1b:de:c4:ec:6f:0c:70:32:
4d:c4:21:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZThB1BcG5eRbtC9fEVQfvJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjUwMjA3MTUyOTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzhhMjlkZGU2NDkxN2EwZGIwOWUyNjAxY2IyNTRjYzQzOGEzYWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky3JzbWpiatI1asH/xNutIj/n519
uTh4/SEzP9dh5XaBK4H4OsZVxX6jLYqJ6+FFn6XBnOq3x3NDepqM7MnpSv1vwclp
wK1BhI0P3rXz0vFs3aT+SpBzC0MWQBb1bj9vI2d2opXHKhZJcvZti2MIwx7UNYxm
Ttxop/3FOU1j1o3WSKplM7wLm/Q9yYNk4xLolJlJJrp2+5vTQjQU0N8UxUDkLrF5
xhEy+aaiDkZYvYbcJzjowh3/cTnSFaeDUtMw5HxemJTTS+JUBf/Mrzihh8K0MikA
+VHPRCTklq5hIUtBxKgrQ3kdpDnxojoYcrGty+UmAAIu6n6ibJShgirfIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIeKKd3mSReg2wniYByyVMxDijq8MB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvaDRvcDNlWkpGNkRiQ2VKZ0hMSlV6RU9LT3J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwajLMA0G
CSqGSIb3DQEBCwUAA4IBAQAjTHpeg2tIZa0ytSyjuBEpiwP4FKDdxqshioElY5YL
7R8Qvd+22Dv9pJ0LwcFvfHeXGoQhVt+92SB1s5eg/jAtvFxpNzQxFzQ2JteTdHUp
MafcIxadax0O0hoNZDKCoFUOVEYgHK2LKXR7dfY/oYhtVkxIHEPhZozUPonCcuQi
XVbOD1wg9yjgLKT/jjPgrkOubjV0Z2tmyM84YqxIJpXHV1uzLSAN2qXFPcZpz51T
qwp1FsbHwngkEI+XJYrI77KpQ5bnqgwkbba37RbdtMej+350naNQ0djSaBdbE9EJ
ytrHIey4pZaPi8nAno5ihuqs+sF9G97E7G8McDJNxCFQ
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:44:21 2025 by rpki-client