Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/odHmDhpPBcZ3XwBesQQXylBZA0o.roa
File: odHmDhpPBcZ3XwBesQQXylBZA0o.roa (raw, json)
Hash identifier: H/gbEaRHX0JWWLdUIVP1AcKvMMZMHQaipUWz40c1nI0=
Subject key identifier: A1:D1:E6:0E:1A:4F:05:C6:77:5F:00:5E:B1:04:17:CA:50:59:03:4A
Certificate issuer: /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial: 01942067C2DB887090A85B29176B05E712EA
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/odHmDhpPBcZ3XwBesQQXylBZA0o.roa
Signing time: Wed 01 Jan 2025 05:47:38 +0000
ROA not before: Wed 01 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 193.134.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c2:db:88:70:90:a8:5b:29:17:6b:05:e7:12:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Validity
Not Before: Jan 1 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1d1e60e1a4f05c6775f005eb10417ca5059034a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9e:eb:01:63:78:c1:f5:55:6e:b1:e6:29:01:
ae:e4:99:24:9a:d1:d1:bc:84:21:f1:9e:f6:4e:7b:
d4:11:d7:de:5a:34:88:92:0e:df:01:64:d0:0d:82:
46:ed:b4:8f:77:98:b0:6e:ac:df:61:20:30:f1:08:
13:4b:f1:49:50:fd:23:08:38:b2:e9:76:cf:c0:9c:
b4:67:b9:93:3c:36:a9:51:72:c7:69:f5:6f:1f:cb:
ec:b4:ca:c2:c5:77:01:92:32:bc:3f:03:b1:9a:de:
af:4e:e8:49:aa:ab:0d:83:6a:ec:54:fa:57:53:65:
78:37:54:89:83:84:cf:ee:ae:0a:48:21:91:cc:93:
bb:ea:32:19:a7:4b:f0:c9:c2:f0:3a:65:36:8b:be:
ba:8f:86:0e:63:70:4e:a7:9e:a4:03:68:73:c6:8d:
53:e2:20:ec:f9:9b:a4:0f:5c:c1:e9:f2:0c:86:91:
a1:02:c0:48:76:e1:fb:f7:bc:03:85:43:7c:62:b9:
fb:90:9a:d4:ca:48:71:f8:15:d4:70:40:a9:98:2d:
33:7b:96:b4:20:6c:2d:59:44:36:f7:ad:f2:8a:a9:
fc:ee:1f:36:93:b6:d9:c7:5b:6d:02:e0:de:d4:75:
a7:09:cb:11:8a:3c:dc:82:a5:8a:ef:0c:bd:06:fd:
19:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D1:E6:0E:1A:4F:05:C6:77:5F:00:5E:B1:04:17:CA:50:59:03:4A
X509v3 Authority Key Identifier:
keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/odHmDhpPBcZ3XwBesQQXylBZA0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.151.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:3f:68:0f:96:6b:30:13:c8:68:93:3d:eb:de:f0:12:db:51:
02:74:62:0a:ae:aa:bb:f8:46:c5:58:0f:f4:69:d3:4e:05:11:
1c:78:e5:e2:23:30:89:cc:ed:35:0e:d2:c9:7a:43:8d:73:cd:
76:52:9d:25:e4:b7:78:30:1f:5c:68:1f:01:a4:29:0c:cc:13:
c5:10:c5:ee:77:ad:cb:26:78:3c:4f:cf:ed:78:c5:1e:48:74:
39:f3:08:db:e3:b2:49:76:e7:a3:4e:09:85:22:97:98:5a:74:
a2:75:9c:3c:1b:0c:da:57:9f:12:f2:85:3a:ab:c6:8c:cf:91:
83:93:cb:2d:49:e0:d8:82:81:1f:ac:7b:41:0e:aa:01:53:20:
e2:d5:41:78:15:25:03:3d:df:25:fb:18:06:9d:e7:d5:de:a0:
98:68:e9:0d:24:83:0b:01:d9:55:d8:a4:a8:65:d8:d4:2d:8d:
33:64:56:fa:1f:ee:8f:05:e4:63:86:f2:33:9d:ee:0b:c7:25:
3e:34:ae:91:e5:cc:3c:97:b7:89:bd:f5:e0:8e:29:00:93:08:
07:59:19:b3:50:3d:48:dd:ad:c0:42:c5:36:83:f2:7e:ce:03:
a1:70:d9:88:99:1c:a9:1a:db:2a:78:7f:89:9a:4e:91:f3:78:
76:fc:5c:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ8LbiHCQqFspF2sF5xLqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlOTg3MDM5YjNmM2IyZGI5YjI5OGFlMGQ4ZDBlYjM0ODk2
OWFkNjIwHhcNMjUwMTAxMDU0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWQxZTYwZTFhNGYwNWM2Nzc1ZjAwNWViMTA0MTdjYTUwNTkwMzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA657rAWN4wfVVbrHmKQGu5JkkmtHR
vIQh8Z72TnvUEdfeWjSIkg7fAWTQDYJG7bSPd5iwbqzfYSAw8QgTS/FJUP0jCDiy
6XbPwJy0Z7mTPDapUXLHafVvH8vstMrCxXcBkjK8PwOxmt6vTuhJqqsNg2rsVPpX
U2V4N1SJg4TP7q4KSCGRzJO76jIZp0vwycLwOmU2i766j4YOY3BOp56kA2hzxo1T
4iDs+ZukD1zB6fIMhpGhAsBIduH797wDhUN8Yrn7kJrUykhx+BXUcECpmC0ze5a0
IGwtWUQ2963yiqn87h82k7bZx1ttAuDe1HWnCcsRijzcgqWK7wy9Bv0ZBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKHR5g4aTwXGd18AXrEEF8pQWQNKMB8GA1UdIwQY
MBaAFI6YcDmz87LbmymK4NjQ6zSJaa1iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanBod09iUHpzdHViS1lyZzJORHJOSWxwcldJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zNjY1NjAtMDk2ZS00ODM1LTg5ZmQt
NTYzNjAwMzE5YTFmLzEvb2RIbURocFBCY1ozWHdCZXNRUVh5bEJaQTBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8zNjY1NjAtMDk2ZS00ODM1LTg5ZmQtNTYzNjAwMzE5YTFm
LzEvanBod09iUHpzdHViS1lyZzJORHJOSWxwcldJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYaXMA0G
CSqGSIb3DQEBCwUAA4IBAQAvP2gPlmswE8hokz3r3vAS21ECdGIKrqq7+EbFWA/0
adNOBREceOXiIzCJzO01DtLJekONc812Up0l5Ld4MB9caB8BpCkMzBPFEMXud63L
Jng8T8/teMUeSHQ58wjb47JJduejTgmFIpeYWnSidZw8GwzaV58S8oU6q8aMz5GD
k8stSeDYgoEfrHtBDqoBUyDi1UF4FSUDPd8l+xgGnefV3qCYaOkNJIMLAdlV2KSo
ZdjULY0zZFb6H+6PBeRjhvIzne4LxyU+NK6R5cw8l7eJvfXgjikAkwgHWRmzUD1I
3a3AQsU2g/J+zgOhcNmImRypGtsqeH+Jmk6R83h2/Fz0
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:19:13 2025 by rpki-client