Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/J5SKCaGOc1EmK2ciMl5AsL0Yt6k.roa
File: J5SKCaGOc1EmK2ciMl5AsL0Yt6k.roa (raw, json)
Hash identifier: G1OhQbiptYNimu4j0r+tzGfxHpXqGX5AtlwZt3l6QBs=
Subject key identifier: 27:94:8A:09:A1:8E:73:51:26:2B:67:22:32:5E:40:B0:BD:18:B7:A9
Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial: 019522EBF05B99DF10944B2F4DB785E2A8D0
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/J5SKCaGOc1EmK2ciMl5AsL0Yt6k.roa
Signing time: Thu 20 Feb 2025 10:34:02 +0000
ROA not before: Thu 20 Feb 2025 10:34:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212368
IP address blocks: 193.134.253.0/24 maxlen: 24
193.135.101.0/24 maxlen: 24
2a14:8980::/48 maxlen: 48
2a14:8981::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:eb:f0:5b:99:df:10:94:4b:2f:4d:b7:85:e2:a8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Validity
Not Before: Feb 20 10:34:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27948a09a18e7351262b6722325e40b0bd18b7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:f5:22:b4:3f:5c:2a:a2:61:a8:4c:6a:f6:
49:76:d0:d8:b1:c0:d0:f5:50:6b:79:fe:a6:75:3b:
20:d0:a8:5b:e1:40:00:27:b9:83:c5:63:01:78:57:
4d:8e:db:2c:9a:d4:45:07:25:71:75:5a:f6:65:5e:
24:7e:c4:5c:9a:84:99:39:00:58:24:80:68:5b:aa:
34:2e:08:6a:f4:21:df:41:1f:73:56:ae:94:01:e5:
55:f6:be:a7:3f:34:99:ab:7a:46:4b:c5:9e:84:e0:
25:98:94:c8:5f:89:ce:f2:89:99:48:ad:34:07:91:
da:ff:98:50:f5:8c:b9:6a:ee:76:ff:80:9d:27:1a:
98:cb:03:b9:3e:dc:f2:94:ac:c7:a3:3e:3d:0f:a0:
21:74:b5:5e:c7:da:e9:ab:81:1f:2a:8e:85:91:91:
dc:a7:c7:a1:cb:f9:07:7b:28:d3:ed:b1:01:22:f8:
0c:6d:55:14:86:60:1c:4f:b0:e4:55:af:59:b6:34:
e3:0f:a4:5c:de:fc:dc:4f:13:87:8f:d8:b6:3e:57:
fc:9d:93:0b:84:80:91:2b:12:bc:3d:be:55:4c:05:
81:a3:65:b6:8d:3f:61:85:dc:90:10:2c:16:8a:fe:
b2:63:14:3b:6b:cf:cd:74:01:f3:6a:ab:fb:79:4f:
b8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:94:8A:09:A1:8E:73:51:26:2B:67:22:32:5E:40:B0:BD:18:B7:A9
X509v3 Authority Key Identifier:
keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/J5SKCaGOc1EmK2ciMl5AsL0Yt6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.253.0/24
193.135.101.0/24
IPv6:
2a14:8980::/48
2a14:8981::/48
Signature Algorithm: sha256WithRSAEncryption
99:85:92:f2:29:8d:32:1c:39:96:a2:6e:cf:cf:80:3f:8f:c3:
15:73:59:14:99:4b:85:5d:85:5b:37:29:d8:01:6f:e9:47:fe:
53:75:96:1b:9c:a0:5d:bf:a0:e6:c5:42:56:69:d3:47:c1:b7:
8c:f9:f3:ae:0b:a1:09:13:8b:6b:3f:08:7a:67:e6:85:3a:07:
0b:e3:5e:91:f4:7f:bd:12:de:0c:cb:3f:b0:7a:8b:18:a4:3c:
50:ab:9a:41:b4:52:03:37:5e:81:16:75:e5:8c:ca:b5:9a:4e:
63:f1:04:59:ee:55:53:d1:c0:9d:74:10:bc:09:5a:2d:c3:18:
b4:62:37:52:ed:5a:f8:b7:bf:97:9b:81:3c:d0:81:a4:44:3e:
e0:f9:92:65:41:d5:f1:cc:6f:dd:c2:7d:25:81:3a:dd:40:d5:
49:c3:26:d3:1c:b1:3a:df:48:40:8c:b9:4e:1b:22:07:1a:49:
9f:e6:57:bb:14:f8:d1:9c:5d:87:13:ae:68:d8:ab:9e:c2:68:
32:eb:06:19:65:54:0f:3b:f4:42:a2:ce:99:90:1d:c2:3e:7f:
f7:bf:ac:4f:8e:c1:f8:76:e3:46:89:b1:a3:5d:ce:d7:72:d3:
27:c9:d8:ce:32:8a:e2:e7:08:7b:b4:a6:b3:0c:f1:e3:79:ca:
d3:0e:9a:1a
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZUi6/Bbmd8QlEsvTbeF4qjQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjMzNTRhMTExYWY2ZDVlMWFkMTBkYTM4YWQ4MTQ0YjZi
ZTg2OGUwHhcNMjUwMjIwMTAzNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzk0OGEwOWExOGU3MzUxMjYyYjY3MjIzMjVlNDBiMGJkMThiN2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbv1IrQ/XCqiYahMavZJdtDYscDQ
9VBref6mdTsg0Khb4UAAJ7mDxWMBeFdNjtssmtRFByVxdVr2ZV4kfsRcmoSZOQBY
JIBoW6o0Lghq9CHfQR9zVq6UAeVV9r6nPzSZq3pGS8WehOAlmJTIX4nO8omZSK00
B5Ha/5hQ9Yy5au52/4CdJxqYywO5PtzylKzHoz49D6AhdLVex9rpq4EfKo6FkZHc
p8ehy/kHeyjT7bEBIvgMbVUUhmAcT7DkVa9ZtjTjD6Rc3vzcTxOHj9i2Plf8nZML
hICRKxK8Pb5VTAWBo2W2jT9hhdyQECwWiv6yYxQ7a8/NdAHzaqv7eU+4EQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFCeUigmhjnNRJitnIjJeQLC9GLepMB8GA1UdIwQY
MBaAFJhjNUoRGvbV4a0Q2jitgUS2voaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9iZWE4NDctYTc4My00ODlkLWFlNGIt
NTNmNTc1MDRlZjM1LzEvSjVTS0NhR09jMUVtSzJjaU1sNUFzTDBZdDZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9iZWE4NDctYTc4My00ODlkLWFlNGItNTNmNTc1MDRlZjM1
LzEvbUdNMVNoRWE5dFhoclJEYU9LMkJSTGEtaG80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAwYb9AwQA
wYdlMBgEAgACMBIDBwAqFImAAAADBwAqFImBAAAwDQYJKoZIhvcNAQELBQADggEB
AJmFkvIpjTIcOZaibs/PgD+PwxVzWRSZS4VdhVs3KdgBb+lH/lN1lhucoF2/oObF
QlZp00fBt4z5864LoQkTi2s/CHpn5oU6BwvjXpH0f70S3gzLP7B6ixikPFCrmkG0
UgM3XoEWdeWMyrWaTmPxBFnuVVPRwJ10ELwJWi3DGLRiN1LtWvi3v5ebgTzQgaRE
PuD5kmVB1fHMb93CfSWBOt1A1UnDJtMcsTrfSECMuU4bIgcaSZ/mV7sU+NGcXYcT
rmjYq57CaDLrBhllVA879EKizpmQHcI+f/e/rE+Owfh240aJsaNdztdy0yfJ2M4y
iuLnCHu0prMM8eN5ytMOmho=
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:05:21 2025 by rpki-client