Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/dSnXkIJXoRPxUxF2-kmsozuRcis.roa
File: dSnXkIJXoRPxUxF2-kmsozuRcis.roa (raw, json)
Hash identifier: m4nMI/u4wUdOg5Fa7ibh065lOF10oLD0o96gBJyOymw=
Subject key identifier: 75:29:D7:90:82:57:A1:13:F1:53:11:76:FA:49:AC:A3:3B:91:72:2B
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067D6E2A6EEB55F635D748D802C9722
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/dSnXkIJXoRPxUxF2-kmsozuRcis.roa
Signing time: Wed 01 Jan 2025 05:47:43 +0000
ROA not before: Wed 01 Jan 2025 05:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205218
IP address blocks: 193.246.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d6:e2:a6:ee:b5:5f:63:5d:74:8d:80:2c:97:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7529d7908257a113f1531176fa49aca33b91722b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:ea:40:7e:08:66:58:4e:e2:b5:8f:6a:27:
5f:f3:b4:e4:f6:fe:46:e3:16:1b:31:19:8e:19:17:
b5:37:44:4b:63:a6:bb:0a:65:b0:7c:79:70:86:bc:
b1:82:0c:3f:d5:f8:60:55:7a:57:7e:aa:5b:ae:b2:
d3:80:3f:ca:b8:52:9b:8d:ab:fd:44:7a:4a:25:33:
21:42:78:02:ef:15:95:3d:1a:de:4d:be:b6:de:42:
f6:d2:3e:2c:04:14:2f:a3:53:54:e5:d2:ef:d3:f1:
a0:3f:ae:b3:1a:a8:08:70:ee:2a:fa:94:00:1f:b0:
71:65:a6:6e:0c:ad:1f:fb:39:51:78:ac:bb:fd:e5:
5c:21:c0:a2:bc:1f:e7:fe:c9:d3:55:c9:3e:1f:84:
1e:8e:91:11:ae:db:3f:e9:40:22:47:35:b3:85:29:
ed:4e:d6:57:82:b4:b3:8b:34:25:4c:1a:e8:27:0e:
24:68:ec:63:ac:50:2f:c0:b3:36:5a:43:cb:2e:f5:
0a:85:29:fe:29:09:88:e2:10:a5:95:f7:0f:54:a4:
a8:e8:df:ab:68:c9:8d:54:b4:10:0e:43:ac:88:d4:
39:55:7a:9a:7f:77:f5:8b:39:26:9c:25:e7:cd:81:
e4:b1:e8:1e:05:1e:3e:e6:f8:a7:4f:af:f4:51:a5:
af:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:29:D7:90:82:57:A1:13:F1:53:11:76:FA:49:AC:A3:3B:91:72:2B
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/dSnXkIJXoRPxUxF2-kmsozuRcis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.56.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:8a:42:82:ff:00:2d:c5:50:90:57:1a:00:56:cf:09:c9:62:
85:cc:ae:e8:61:a1:9b:a1:9e:4d:4e:57:7c:ef:7f:ed:b4:23:
64:b8:fa:fe:c2:46:79:74:f8:4d:88:58:37:61:70:db:5d:a1:
e9:ba:59:b8:4d:51:f1:7f:ef:c2:9f:1e:47:16:35:c5:7f:88:
eb:51:03:34:22:db:15:2f:45:5e:0b:bd:b6:ce:65:ed:37:c0:
1f:84:38:85:5d:92:00:e4:9d:85:9a:1a:81:56:85:75:91:fb:
7a:32:23:c0:46:c9:f7:08:ad:62:93:e7:ec:c7:56:9e:a9:9e:
33:c5:2e:58:c3:ad:49:69:c7:8b:5e:bf:ae:83:5e:f1:0d:51:
48:2e:33:70:ea:b7:bd:4e:f7:f8:01:a5:39:5f:d6:04:44:59:
6d:b8:46:cd:93:fb:7f:5a:01:ad:f1:72:30:c8:38:ea:11:a0:
32:7b:e5:3f:4b:36:ed:be:62:32:a6:1a:03:0a:23:55:83:57:
1e:96:3c:3d:e6:32:5a:af:54:47:8e:1a:63:9e:a9:1c:db:59:
a8:1d:e9:96:6b:ff:0d:87:3a:3d:54:37:98:0a:9c:8b:2c:63:
57:23:54:59:aa:a4:20:d7:5f:79:95:af:db:01:f8:98:4d:87:
18:5b:96:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ9bipu61X2NddI2ALJciMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjUwMTAxMDU0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTI5ZDc5MDgyNTdhMTEzZjE1MzExNzZmYTQ5YWNhMzNiOTE3MjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrTqQH4IZlhO4rWPaidf87Tk9v5G
4xYbMRmOGRe1N0RLY6a7CmWwfHlwhryxggw/1fhgVXpXfqpbrrLTgD/KuFKbjav9
RHpKJTMhQngC7xWVPRreTb623kL20j4sBBQvo1NU5dLv0/GgP66zGqgIcO4q+pQA
H7BxZaZuDK0f+zlReKy7/eVcIcCivB/n/snTVck+H4QejpERrts/6UAiRzWzhSnt
TtZXgrSzizQlTBroJw4kaOxjrFAvwLM2WkPLLvUKhSn+KQmI4hCllfcPVKSo6N+r
aMmNVLQQDkOsiNQ5VXqaf3f1izkmnCXnzYHksegeBR4+5vinT6/0UaWvcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHUp15CCV6ET8VMRdvpJrKM7kXIrMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvZFNuWGtJSlhvUlB4VXhGMi1rbXNvenVSY2lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfY4MA0G
CSqGSIb3DQEBCwUAA4IBAQCrikKC/wAtxVCQVxoAVs8JyWKFzK7oYaGboZ5NTld8
73/ttCNkuPr+wkZ5dPhNiFg3YXDbXaHpulm4TVHxf+/Cnx5HFjXFf4jrUQM0ItsV
L0VeC722zmXtN8AfhDiFXZIA5J2FmhqBVoV1kft6MiPARsn3CK1ik+fsx1aeqZ4z
xS5Yw61JaceLXr+ug17xDVFILjNw6re9Tvf4AaU5X9YERFltuEbNk/t/WgGt8XIw
yDjqEaAye+U/SzbtvmIyphoDCiNVg1celjw95jJar1RHjhpjnqkc21moHemWa/8N
hzo9VDeYCpyLLGNXI1RZqqQg1195la/bAfiYTYcYW5aF
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:55:11 2025 by rpki-client