Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/dBTi9V6Lj09iolupOZhzala-GHE.roa
File: dBTi9V6Lj09iolupOZhzala-GHE.roa (raw, json)
Hash identifier: XgE5C6MotJsfB/9tY52qQR/CvntbYT/9aocAmt0KwNM=
Subject key identifier: 74:14:E2:F5:5E:8B:8F:4F:62:A2:5B:A9:39:98:73:6A:56:BE:18:71
Certificate issuer: /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial: 019423D71F7AD758C3198BDBCED1DAE1C26B
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/dBTi9V6Lj09iolupOZhzala-GHE.roa
Signing time: Wed 01 Jan 2025 21:48:08 +0000
ROA not before: Wed 01 Jan 2025 21:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 193.39.200.0/23 maxlen: 23
193.39.200.0/24 maxlen: 24
193.39.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1f:7a:d7:58:c3:19:8b:db:ce:d1:da:e1:c2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Validity
Not Before: Jan 1 21:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7414e2f55e8b8f4f62a25ba93998736a56be1871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:5c:24:3c:39:47:27:7b:5a:5c:84:ec:54:
73:a2:4b:13:80:2a:f5:0c:27:37:54:60:46:c7:89:
1a:9f:2e:25:22:06:35:ad:d8:6f:e4:f8:51:82:32:
33:ab:9e:37:41:dc:df:e0:91:eb:ce:17:50:64:db:
1a:85:89:22:2a:e3:da:96:3b:5b:d1:68:e4:d1:47:
3f:fe:18:fb:0b:da:72:2d:38:73:6e:56:bb:a3:19:
49:9e:a8:55:95:e1:be:42:56:0c:95:f7:fa:52:8d:
d8:64:28:62:e3:5f:85:34:e3:e2:2d:4b:e4:64:5f:
14:b0:f0:dc:7e:ad:ca:79:d1:78:a2:c7:e0:b5:5b:
ea:3b:1d:87:61:92:af:52:02:63:b7:c8:de:a6:8c:
e2:66:db:e8:54:df:15:e7:f4:b1:0e:a6:93:ca:4f:
62:e4:22:fc:49:4f:70:2c:08:6f:44:c0:93:d0:74:
4b:43:d9:9e:e9:86:31:30:dc:ca:bd:a0:02:e8:81:
92:5d:1f:c7:ce:96:1a:4a:9e:51:dd:b4:c3:63:d9:
a9:c4:c1:f5:39:65:99:0b:75:9c:45:d3:88:f6:44:
3d:96:eb:c4:a1:d7:cc:61:c6:94:a8:77:31:c6:5f:
b6:1e:1f:05:24:ad:2f:f8:5a:f4:59:54:f2:c9:70:
8d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:14:E2:F5:5E:8B:8F:4F:62:A2:5B:A9:39:98:73:6A:56:BE:18:71
X509v3 Authority Key Identifier:
keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/dBTi9V6Lj09iolupOZhzala-GHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.200.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:da:62:46:0f:23:76:13:51:2c:74:2c:0d:ca:d8:b5:ad:ee:
6a:51:18:9b:56:ea:d6:19:b4:2c:d9:6f:ae:5a:59:ac:e2:ef:
66:6c:dc:d5:4d:f3:69:cb:28:dd:ae:1d:2e:6b:6f:17:e3:7a:
cb:f6:b0:21:b8:d0:bd:44:45:e9:03:99:c6:e9:4a:32:e7:59:
e6:bf:8f:7d:71:3d:26:7e:8e:57:d1:df:06:bf:f9:e4:e5:54:
46:7f:a3:56:05:93:51:32:24:e9:f4:0b:63:fd:de:5a:fd:28:
b7:60:9b:6b:63:60:87:d5:2c:10:56:38:e9:db:23:66:85:50:
73:d8:c4:93:2f:5a:b9:1e:06:ee:3d:46:68:e5:8d:01:dd:3c:
5d:f1:0f:38:59:64:af:41:a0:27:0e:3d:d4:fa:7e:1d:30:28:
9c:bd:61:df:0f:b8:a9:1d:e3:43:a2:d5:d4:14:be:5a:0a:57:
e3:a0:70:71:24:a2:80:a1:f3:d2:54:dd:3a:5c:8a:0d:9b:dd:
12:96:e9:17:98:ef:a0:29:72:49:c9:0b:4a:8b:07:c4:9d:3f:
27:89:71:c6:12:5c:94:3b:96:70:d4:20:74:5c:e3:29:7f:dd:
af:d8:63:bf:c4:69:31:48:2f:a2:25:2e:9b:2e:59:1f:d8:f7:
19:b7:e8:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1x9611jDGYvbztHa4cJrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTE1NTU0OGVjOWFiZTExZWYzYmU3MDYwNmE0Yjk4N2Vh
ZTM4MjUwHhcNMjUwMTAxMjE0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDE0ZTJmNTVlOGI4ZjRmNjJhMjViYTkzOTk4NzM2YTU2YmUxODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/VcJDw5Ryd7WlyE7FRzoksTgCr1
DCc3VGBGx4kany4lIgY1rdhv5PhRgjIzq543Qdzf4JHrzhdQZNsahYkiKuPaljtb
0Wjk0Uc//hj7C9pyLThzbla7oxlJnqhVleG+QlYMlff6Uo3YZChi41+FNOPiLUvk
ZF8UsPDcfq3KedF4osfgtVvqOx2HYZKvUgJjt8jepoziZtvoVN8V5/SxDqaTyk9i
5CL8SU9wLAhvRMCT0HRLQ9me6YYxMNzKvaAC6IGSXR/HzpYaSp5R3bTDY9mpxMH1
OWWZC3WcRdOI9kQ9luvEodfMYcaUqHcxxl+2Hh8FJK0v+Fr0WVTyyXCNkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHQU4vVei49PYqJbqTmYc2pWvhhxMB8GA1UdIwQY
MBaAFPThVVSOyavhHvO+cGBqS5h+rjglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9GVlZJN0pxLUVlODc1d1lHcExtSDZ1T0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80ZWRlOWQtY2RmOC00YzI4LTg4YjMt
YzlmMTZlODBiM2M0LzEvZEJUaTlWNkxqMDlpb2x1cE9aaHphbGEtR0hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80ZWRlOWQtY2RmOC00YzI4LTg4YjMtYzlmMTZlODBiM2M0
LzEvOU9GVlZJN0pxLUVlODc1d1lHcExtSDZ1T0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSfIMA0G
CSqGSIb3DQEBCwUAA4IBAQBa2mJGDyN2E1EsdCwNyti1re5qURibVurWGbQs2W+u
Wlms4u9mbNzVTfNpyyjdrh0ua28X43rL9rAhuNC9REXpA5nG6Uoy51nmv499cT0m
fo5X0d8Gv/nk5VRGf6NWBZNRMiTp9Atj/d5a/Si3YJtrY2CH1SwQVjjp2yNmhVBz
2MSTL1q5HgbuPUZo5Y0B3Txd8Q84WWSvQaAnDj3U+n4dMCicvWHfD7ipHeNDotXU
FL5aClfjoHBxJKKAofPSVN06XIoNm90SlukXmO+gKXJJyQtKiwfEnT8niXHGElyU
O5Zw1CB0XOMpf92v2GO/xGkxSC+iJS6bLlkf2PcZt+hC
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:53 2025 by rpki-client