Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/1FpMBsPrVN8R5-0MCBOPZs_nETM.roa
File: 1FpMBsPrVN8R5-0MCBOPZs_nETM.roa (raw, json)
Hash identifier: hDCmpGO771VuGbnW0cQSb2PpqZMISzSMoGkCSY1YTbI=
Subject key identifier: D4:5A:4C:06:C3:EB:54:DF:11:E7:ED:0C:08:13:8F:66:CF:E7:11:33
Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial: 0194228D201E3D353B9570EB817F553AC6F2
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/1FpMBsPrVN8R5-0MCBOPZs_nETM.roa
Signing time: Wed 01 Jan 2025 15:47:41 +0000
ROA not before: Wed 01 Jan 2025 15:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 193.134.253.0/24 maxlen: 24
193.135.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:20:1e:3d:35:3b:95:70:eb:81:7f:55:3a:c6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Validity
Not Before: Jan 1 15:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d45a4c06c3eb54df11e7ed0c08138f66cfe71133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:6f:6a:1e:96:6d:a2:de:c1:8f:c3:52:f0:
52:a0:1a:fc:65:e7:84:a8:f8:58:32:05:e9:68:22:
2d:64:af:ed:c3:f2:1c:37:f6:15:ce:8d:c9:cb:0e:
29:ad:b8:86:cb:57:11:2b:5c:c6:a4:57:ba:fb:fb:
0f:a0:95:5d:74:81:6e:22:b8:59:54:be:a1:70:92:
c0:b6:a6:ba:f6:da:03:49:2c:9d:ee:a0:c6:b6:5e:
de:0b:e1:17:bc:f7:04:5f:f5:ee:d5:44:20:02:f7:
c9:3e:5f:c9:df:35:59:c7:52:1c:d4:58:0f:04:32:
53:0f:6e:9f:c1:e4:78:a9:23:f5:0c:4b:65:b4:0c:
b8:aa:93:c0:6c:79:e4:99:83:23:3a:0c:0a:7c:33:
04:91:25:6a:a5:80:2e:98:cd:21:48:71:e5:8a:5a:
16:d2:8f:9d:cd:ca:66:09:4b:a2:1a:a8:ef:69:ea:
ab:07:b9:60:5f:89:0c:80:67:39:cd:12:7c:7e:15:
4a:dc:2e:76:f8:ba:95:85:e0:89:d1:ca:fc:cf:cc:
10:8b:e2:1b:06:7f:27:91:28:28:0e:c8:84:b8:2f:
f7:99:21:1f:44:14:a5:71:1d:4c:2a:2b:f4:64:30:
c6:93:72:55:ea:4d:cd:fb:7e:cc:af:b0:71:d6:28:
b7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5A:4C:06:C3:EB:54:DF:11:E7:ED:0C:08:13:8F:66:CF:E7:11:33
X509v3 Authority Key Identifier:
keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/1FpMBsPrVN8R5-0MCBOPZs_nETM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.253.0/24
193.135.101.0/24
Signature Algorithm: sha256WithRSAEncryption
14:be:8c:2a:bf:4d:14:84:b7:49:69:b1:4b:fe:84:e6:a5:b0:
2f:db:59:5c:1a:17:d1:c5:6d:59:8d:2c:76:ec:24:54:20:84:
64:b8:d1:bd:d6:b0:48:54:f6:af:f8:e0:ac:2b:a5:d7:22:56:
36:e0:be:78:1b:55:0a:9f:a0:50:62:a1:ad:4d:04:2d:4d:b1:
06:21:fd:6f:f8:f1:08:34:04:fe:2e:5f:b5:d6:69:fe:ab:8d:
ae:42:f2:28:21:d3:3f:31:18:3d:6f:86:7a:e9:82:ce:4d:6a:
ab:78:81:83:fe:32:08:dc:d3:75:37:d3:96:21:01:eb:fd:68:
2f:5d:b7:60:06:5a:67:8b:eb:9d:a9:b7:39:a2:e1:ff:d7:67:
d1:e4:ee:ba:d1:c3:1a:f6:6f:8c:f5:07:af:28:59:25:52:bc:
05:91:da:d7:3b:2b:71:0b:65:e4:15:df:0f:ed:21:8b:52:de:
21:31:02:61:63:d3:6b:6b:5e:6c:ff:58:ef:85:2e:61:f7:34:
b7:a6:93:20:d2:c6:be:f2:52:ae:9e:f4:74:a4:3d:97:71:89:
cc:a6:b8:46:7c:8c:79:05:10:3d:e1:8e:c8:02:76:6d:d1:54:
4f:f6:bf:31:9e:d3:30:ea:43:37:80:ab:76:86:2a:c4:89:d6:
d7:bf:d4:d6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQijSAePTU7lXDrgX9VOsbyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjMzNTRhMTExYWY2ZDVlMWFkMTBkYTM4YWQ4MTQ0YjZi
ZTg2OGUwHhcNMjUwMTAxMTU0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDVhNGMwNmMzZWI1NGRmMTFlN2VkMGMwODEzOGY2NmNmZTcxMTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRVvah6WbaLewY/DUvBSoBr8ZeeE
qPhYMgXpaCItZK/tw/IcN/YVzo3Jyw4prbiGy1cRK1zGpFe6+/sPoJVddIFuIrhZ
VL6hcJLAtqa69toDSSyd7qDGtl7eC+EXvPcEX/Xu1UQgAvfJPl/J3zVZx1Ic1FgP
BDJTD26fweR4qSP1DEtltAy4qpPAbHnkmYMjOgwKfDMEkSVqpYAumM0hSHHliloW
0o+dzcpmCUuiGqjvaeqrB7lgX4kMgGc5zRJ8fhVK3C52+LqVheCJ0cr8z8wQi+Ib
Bn8nkSgoDsiEuC/3mSEfRBSlcR1MKiv0ZDDGk3JV6k3N+37Mr7Bx1ii34QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNRaTAbD61TfEeftDAgTj2bP5xEzMB8GA1UdIwQY
MBaAFJhjNUoRGvbV4a0Q2jitgUS2voaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9iZWE4NDctYTc4My00ODlkLWFlNGIt
NTNmNTc1MDRlZjM1LzEvMUZwTUJzUHJWTjhSNS0wTUNCT1Bac19uRVRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9iZWE4NDctYTc4My00ODlkLWFlNGItNTNmNTc1MDRlZjM1
LzEvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwYb9AwQA
wYdlMA0GCSqGSIb3DQEBCwUAA4IBAQAUvowqv00UhLdJabFL/oTmpbAv21lcGhfR
xW1ZjSx27CRUIIRkuNG91rBIVPav+OCsK6XXIlY24L54G1UKn6BQYqGtTQQtTbEG
If1v+PEINAT+Ll+11mn+q42uQvIoIdM/MRg9b4Z66YLOTWqreIGD/jII3NN1N9OW
IQHr/WgvXbdgBlpni+udqbc5ouH/12fR5O660cMa9m+M9QevKFklUrwFkdrXOytx
C2XkFd8P7SGLUt4hMQJhY9Nra15s/1jvhS5h9zS3ppMg0sa+8lKunvR0pD2XcYnM
prhGfIx5BRA94Y7IAnZt0VRP9r8xntMw6kM3gKt2hirEidbXv9TW
-----END CERTIFICATE-----
Generated at Wed Apr 9 11:46:19 2025 by rpki-client