Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f9b3ca-04a0-4233-aed1-c6f9d0a8f36e/1/QmRUHqv64UPyBKoQv51IfnP-QZA.roa
File: QmRUHqv64UPyBKoQv51IfnP-QZA.roa (raw, json)
Hash identifier: 5TqGlR5kcjYIf9exkmmrVoMdCKt2N9PvRh/iaOC8iEg=
Subject key identifier: 42:64:54:1E:AB:FA:E1:43:F2:04:AA:10:BF:9D:48:7E:73:FE:41:90
Certificate issuer: /CN=aee8d6f56c5fbc904c9b913609013e5964865257
Certificate serial: 0191E1831152BDA5F44B4A1F8A92192A7F8F
Authority key identifier: AE:E8:D6:F5:6C:5F:BC:90:4C:9B:91:36:09:01:3E:59:64:86:52:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rujW9WxfvJBMm5E2CQE-WWSGUlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f9b3ca-04a0-4233-aed1-c6f9d0a8f36e/1/QmRUHqv64UPyBKoQv51IfnP-QZA.roa
Signing time: Wed 11 Sep 2024 14:35:48 +0000
ROA not before: Wed 11 Sep 2024 14:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201670
IP address blocks: 195.20.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:83:11:52:bd:a5:f4:4b:4a:1f:8a:92:19:2a:7f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee8d6f56c5fbc904c9b913609013e5964865257
Validity
Not Before: Sep 11 14:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4264541eabfae143f204aa10bf9d487e73fe4190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d3:63:23:1b:97:b0:ab:45:60:6b:a1:04:66:
7b:6d:0d:20:e4:ce:24:74:c7:bd:4e:ae:9d:ce:cd:
19:55:3e:6b:bb:78:92:c1:68:82:1b:43:bf:dc:51:
b3:42:99:82:12:17:25:a0:05:e8:31:e6:37:a9:35:
6f:e0:2c:aa:0f:ff:1f:8b:bf:89:78:9a:3f:b8:77:
7c:e9:7e:49:03:be:e4:9b:87:36:48:02:e8:64:34:
3b:3a:3f:68:38:74:19:25:8e:1f:f5:c9:b9:14:61:
57:c2:92:33:ea:ed:39:30:97:20:e8:81:e3:67:f2:
75:93:31:83:72:0b:10:7f:13:77:71:c8:37:f7:e6:
5f:9d:31:3b:48:b4:de:97:58:3c:f8:5c:c9:62:d7:
bc:da:db:18:1b:10:4b:0c:3e:f1:2b:b2:5e:bd:da:
86:ec:9d:8e:6e:53:7c:3d:46:8f:30:5a:71:65:78:
31:a8:71:c6:f2:e4:6e:d2:91:83:24:d2:31:ff:20:
48:5d:69:0c:76:16:a7:92:b4:07:4a:a0:4c:a5:08:
26:48:c6:88:5b:3b:1d:e9:45:83:72:0f:f7:c6:d8:
10:b9:aa:16:70:a6:7a:1e:64:9d:ab:32:b5:22:94:
8c:d6:2b:0a:a5:45:3a:e8:0b:c8:67:e0:51:99:ec:
c7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:64:54:1E:AB:FA:E1:43:F2:04:AA:10:BF:9D:48:7E:73:FE:41:90
X509v3 Authority Key Identifier:
keyid:AE:E8:D6:F5:6C:5F:BC:90:4C:9B:91:36:09:01:3E:59:64:86:52:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rujW9WxfvJBMm5E2CQE-WWSGUlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f9b3ca-04a0-4233-aed1-c6f9d0a8f36e/1/QmRUHqv64UPyBKoQv51IfnP-QZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f9b3ca-04a0-4233-aed1-c6f9d0a8f36e/1/rujW9WxfvJBMm5E2CQE-WWSGUlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.19.0/24
Signature Algorithm: sha256WithRSAEncryption
10:17:ee:8b:34:6c:56:34:9a:b8:93:13:53:f0:be:9f:dd:ac:
e5:be:9e:a1:6e:4d:da:7c:c4:27:1f:b9:cd:9c:ca:b5:fd:27:
9b:71:87:59:74:ef:93:c6:b6:67:13:1f:76:d6:8f:23:49:70:
f7:c7:ce:c3:94:95:b5:7a:47:de:22:ef:ac:ca:0b:57:01:87:
2f:20:32:73:86:e3:1b:7d:20:e9:97:f0:db:58:ae:f1:16:34:
92:6a:a7:cf:a9:b9:5c:e1:e0:13:dc:84:51:5a:61:b5:b2:c8:
9c:bc:f1:18:ee:4d:d1:26:3c:b3:2e:9c:c1:9f:65:a0:42:52:
5d:04:8a:63:37:03:43:0e:ca:f6:1f:b6:ea:5b:51:0a:6e:65:
84:40:f6:13:cd:a8:7c:ec:52:49:a8:3a:52:07:9f:5b:ff:56:
f6:99:d2:52:a7:65:9a:d8:d6:57:97:c3:97:35:54:40:f9:f8:
fa:da:9c:11:0f:88:12:18:51:71:f9:16:ff:ee:f6:c6:87:33:
91:b6:6f:a5:22:76:25:50:a6:76:78:9c:0c:c0:b2:63:9c:d3:
5d:90:41:03:30:8c:db:e1:9c:b6:f9:28:d1:0e:b3:f3:bc:2e:
d3:9e:dc:48:89:24:58:00:a4:a0:fd:19:fb:89:83:b3:a0:c3:
f3:6b:75:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHhgxFSvaX0S0ofipIZKn+PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZThkNmY1NmM1ZmJjOTA0YzliOTEzNjA5MDEzZTU5NjQ4
NjUyNTcwHhcNMjQwOTExMTQzNTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjY0NTQxZWFiZmFlMTQzZjIwNGFhMTBiZjlkNDg3ZTczZmU0MTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdNjIxuXsKtFYGuhBGZ7bQ0g5M4k
dMe9Tq6dzs0ZVT5ru3iSwWiCG0O/3FGzQpmCEhcloAXoMeY3qTVv4CyqD/8fi7+J
eJo/uHd86X5JA77km4c2SALoZDQ7Oj9oOHQZJY4f9cm5FGFXwpIz6u05MJcg6IHj
Z/J1kzGDcgsQfxN3ccg39+ZfnTE7SLTel1g8+FzJYte82tsYGxBLDD7xK7JevdqG
7J2OblN8PUaPMFpxZXgxqHHG8uRu0pGDJNIx/yBIXWkMdhankrQHSqBMpQgmSMaI
Wzsd6UWDcg/3xtgQuaoWcKZ6HmSdqzK1IpSM1isKpUU66AvIZ+BRmezHsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEJkVB6r+uFD8gSqEL+dSH5z/kGQMB8GA1UdIwQY
MBaAFK7o1vVsX7yQTJuRNgkBPllkhlJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVqVzlXeGZ2SkJNbTVFMkNRRS1XV1NHVWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mOWIzY2EtMDRhMC00MjMzLWFlZDEt
YzZmOWQwYThmMzZlLzEvUW1SVUhxdjY0VVB5QktvUXY1MUlmblAtUVpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9mOWIzY2EtMDRhMC00MjMzLWFlZDEtYzZmOWQwYThmMzZl
LzEvcnVqVzlXeGZ2SkJNbTVFMkNRRS1XV1NHVWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxQTMA0G
CSqGSIb3DQEBCwUAA4IBAQAQF+6LNGxWNJq4kxNT8L6f3azlvp6hbk3afMQnH7nN
nMq1/SebcYdZdO+TxrZnEx921o8jSXD3x87DlJW1ekfeIu+sygtXAYcvIDJzhuMb
fSDpl/DbWK7xFjSSaqfPqblc4eAT3IRRWmG1ssicvPEY7k3RJjyzLpzBn2WgQlJd
BIpjNwNDDsr2H7bqW1EKbmWEQPYTzah87FJJqDpSB59b/1b2mdJSp2Wa2NZXl8OX
NVRA+fj62pwRD4gSGFFx+Rb/7vbGhzORtm+lInYlUKZ2eJwMwLJjnNNdkEEDMIzb
4Zy2+SjRDrPzvC7TntxIiSRYAKSg/Rn7iYOzoMPza3UN
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:00:53 2025 by rpki-client