Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/r2ver_B1QfAF2R2XPpvc11DJXmA.roa
File: r2ver_B1QfAF2R2XPpvc11DJXmA.roa (raw, json)
Hash identifier: 6Y5LmQV5zXuhOo4pwCZR6jl/OtipaY9LyBdb5pEQmos=
Subject key identifier: AF:6B:DE:AF:F0:75:41:F0:05:D9:1D:97:3E:9B:DC:D7:50:C9:5E:60
Certificate issuer: /CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442
Certificate serial: 019420686434B031A88376742D91734C717D
Authority key identifier: 55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/r2ver_B1QfAF2R2XPpvc11DJXmA.roa
Signing time: Wed 01 Jan 2025 05:48:19 +0000
ROA not before: Wed 01 Jan 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9145
IP address blocks: 193.30.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:64:34:b0:31:a8:83:76:74:2d:91:73:4c:71:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442
Validity
Not Before: Jan 1 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af6bdeaff07541f005d91d973e9bdcd750c95e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c5:08:02:10:d3:9c:c4:16:2d:fc:c5:57:2a:
4a:16:f7:d6:dd:87:78:29:b7:e9:e2:83:ba:92:e2:
b6:b4:f1:dc:93:17:14:2c:1b:da:5a:e6:28:42:64:
17:29:49:48:11:c0:59:19:5c:d1:c6:e8:4b:70:c9:
05:80:6f:24:41:70:94:9b:15:f6:d2:8d:6f:8d:23:
e5:e0:7f:c9:89:01:85:a0:93:20:95:8f:01:7f:a9:
e4:7f:cb:37:07:87:8e:54:58:6e:15:fc:a7:4f:4a:
b6:c0:b6:33:4e:a5:04:42:54:46:9f:64:cf:ca:46:
85:7c:d5:aa:d1:04:2c:2a:9c:14:9a:09:10:b8:91:
7f:7e:48:58:59:eb:19:b6:d9:55:11:9f:45:ba:f1:
50:b2:b4:81:54:5d:77:cf:e8:86:71:9a:f4:b3:a5:
83:92:28:44:ae:4d:65:92:05:b4:4d:51:be:c6:d5:
dd:95:b7:af:ce:34:66:0f:89:bd:06:4b:98:0b:93:
c0:60:f2:bb:d2:27:d1:5b:55:b2:81:52:f6:d5:be:
d3:fe:7e:1b:d7:ab:68:56:37:84:c3:5f:bc:e1:1f:
bb:54:8e:fc:6f:ef:bd:c8:8f:6b:2c:70:67:19:59:
10:87:92:ed:89:d2:94:14:0e:f1:cd:d4:ce:e8:c9:
ca:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6B:DE:AF:F0:75:41:F0:05:D9:1D:97:3E:9B:DC:D7:50:C9:5E:60
X509v3 Authority Key Identifier:
keyid:55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/r2ver_B1QfAF2R2XPpvc11DJXmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.76.0/23
Signature Algorithm: sha256WithRSAEncryption
13:7b:ba:72:ed:d4:02:ed:af:aa:64:ca:6e:98:d9:85:d2:25:
52:7f:01:86:49:0b:d0:9e:3d:a5:55:33:06:31:24:06:e8:a2:
36:9d:d6:b4:81:70:8d:78:d1:f9:36:2e:a0:04:e4:04:38:3c:
f1:58:6d:d4:51:97:7b:b9:cc:10:eb:a2:f9:d0:05:c8:8a:23:
e9:2e:06:ce:04:af:18:27:89:c2:a3:69:22:7e:74:78:ff:ce:
d9:48:60:4b:c9:0b:2d:96:87:af:53:c3:3f:e8:3c:63:b0:54:
83:b5:b5:9e:ac:3e:4a:e9:0a:91:28:1c:36:49:11:c5:9e:bf:
09:2b:ab:07:81:73:36:01:0e:83:bd:54:a0:04:3f:a2:28:e9:
21:67:1d:16:4d:1e:fe:3c:8e:2e:b9:58:e0:fc:72:3f:bb:9f:
bb:d6:e5:ed:f6:3b:42:48:b3:b0:ce:02:61:7c:27:69:52:88:
ae:4e:5e:2f:53:5d:ef:ae:f8:dc:49:b5:01:c5:d0:be:e0:b1:
f7:67:7c:11:b7:6d:7d:32:65:a8:52:77:22:3d:fd:48:07:bd:
39:d2:41:5a:0c:e6:01:80:e7:2e:9a:64:60:0f:12:2e:17:ae:
05:6a:4b:15:0d:5b:85:50:34:48:8e:a7:3e:7a:55:86:7f:51:
c6:52:6f:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaGQ0sDGog3Z0LZFzTHF9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YjIwNTliNzQ4ZDZkZGQ1YzVhMGMxZDM1ZTk3NWVmN2Jh
ODg0NDIwHhcNMjUwMTAxMDU0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjZiZGVhZmYwNzU0MWYwMDVkOTFkOTczZTliZGNkNzUwYzk1ZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cUIAhDTnMQWLfzFVypKFvfW3Yd4
Kbfp4oO6kuK2tPHckxcULBvaWuYoQmQXKUlIEcBZGVzRxuhLcMkFgG8kQXCUmxX2
0o1vjSPl4H/JiQGFoJMglY8Bf6nkf8s3B4eOVFhuFfynT0q2wLYzTqUEQlRGn2TP
ykaFfNWq0QQsKpwUmgkQuJF/fkhYWesZttlVEZ9FuvFQsrSBVF13z+iGcZr0s6WD
kihErk1lkgW0TVG+xtXdlbevzjRmD4m9BkuYC5PAYPK70ifRW1WygVL21b7T/n4b
16toVjeEw1+84R+7VI78b++9yI9rLHBnGVkQh5LtidKUFA7xzdTO6MnKewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK9r3q/wdUHwBdkdlz6b3NdQyV5gMB8GA1UdIwQY
MBaAFFWyBZt0jW3dXFoMHTXpde97qIRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJJRm0zU05iZDFjV2d3ZE5lbDE3M3VvaEVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mOGU2N2YtOGRkMS00ZjJjLThkZTkt
MjMwNjRlMjFkMTRkLzEvcjJ2ZXJfQjFRZkFGMlIyWFBwdmMxMURKWG1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9mOGU2N2YtOGRkMS00ZjJjLThkZTktMjMwNjRlMjFkMTRk
LzEvVmJJRm0zU05iZDFjV2d3ZE5lbDE3M3VvaEVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwR5MMA0G
CSqGSIb3DQEBCwUAA4IBAQATe7py7dQC7a+qZMpumNmF0iVSfwGGSQvQnj2lVTMG
MSQG6KI2nda0gXCNeNH5Ni6gBOQEODzxWG3UUZd7ucwQ66L50AXIiiPpLgbOBK8Y
J4nCo2kifnR4/87ZSGBLyQstloevU8M/6DxjsFSDtbWerD5K6QqRKBw2SRHFnr8J
K6sHgXM2AQ6DvVSgBD+iKOkhZx0WTR7+PI4uuVjg/HI/u5+71uXt9jtCSLOwzgJh
fCdpUoiuTl4vU13vrvjcSbUBxdC+4LH3Z3wRt219MmWoUnciPf1IB7050kFaDOYB
gOcummRgDxIuF64FaksVDVuFUDRIjqc+elWGf1HGUm8Z
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:16 2025 by rpki-client