Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25d6a1-b4be-4e6d-b51f-1664c012dbc5/1/4X3QjsxWI5ze-NhsHnazIE7bvaE.roa
File: 4X3QjsxWI5ze-NhsHnazIE7bvaE.roa (raw, json)
Hash identifier: 2s991ijpf5Ac7XWAV9svUg9nmbqN6nQTPfTB0I6esCM=
Subject key identifier: E1:7D:D0:8E:CC:56:23:9C:DE:F8:D8:6C:1E:76:B3:20:4E:DB:BD:A1
Certificate issuer: /CN=ad85ad0ca493b3bc06c99ba1a4aef5b079dc9efb
Certificate serial: 01856E8B5B5CAF0BFEE45D518DBC89139FDC
Authority key identifier: AD:85:AD:0C:A4:93:B3:BC:06:C9:9B:A1:A4:AE:F5:B0:79:DC:9E:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYWtDKSTs7wGyZuhpK71sHncnvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25d6a1-b4be-4e6d-b51f-1664c012dbc5/1/4X3QjsxWI5ze-NhsHnazIE7bvaE.roa
Signing time: Sun 01 Jan 2023 18:15:04 +0000
ROA not before: Sun 01 Jan 2023 18:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41296
IP address blocks: 193.41.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:5b:5c:af:0b:fe:e4:5d:51:8d:bc:89:13:9f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad85ad0ca493b3bc06c99ba1a4aef5b079dc9efb
Validity
Not Before: Jan 1 18:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e17dd08ecc56239cdef8d86c1e76b3204edbbda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:d8:84:ac:d1:61:c2:2e:37:31:fe:aa:26:
ca:c0:bd:54:69:4c:b6:e3:1b:09:0f:c7:a1:2f:47:
f1:d3:55:8c:2c:80:54:77:41:48:73:9a:af:cf:b8:
4d:52:58:d2:43:bb:d5:9b:d7:27:c7:d3:ce:69:9e:
92:3d:81:87:4e:2b:64:16:b8:66:a0:9d:7d:de:8a:
e2:e2:5e:d1:9e:12:e8:17:d2:90:0f:e0:d3:ba:78:
03:b7:76:9b:68:7e:d7:4b:6f:41:d3:e8:d7:53:e6:
1f:73:e3:ed:e3:97:e5:3b:4e:17:27:56:86:16:1e:
4d:a8:22:06:bc:21:c9:fd:36:c2:db:40:3d:b3:69:
ae:50:5f:2f:5c:88:8b:7f:bb:ef:b8:db:50:f8:4f:
91:98:7e:67:05:02:45:18:f0:22:11:47:fc:69:bc:
46:cd:5a:2a:d6:b8:6c:72:18:0b:24:a7:67:f4:69:
6f:de:af:df:b9:b0:b4:21:c9:c3:d9:27:b5:cd:72:
da:3d:55:89:5e:5f:e3:91:ae:69:54:f4:12:14:ae:
b4:0f:54:df:7e:07:e3:fd:b1:b7:fb:70:3a:c0:00:
3f:8b:9c:55:2d:c9:68:53:5c:61:7a:0a:a9:b4:bb:
ed:ad:af:4c:a1:84:80:26:d7:00:f8:68:83:27:e1:
cf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7D:D0:8E:CC:56:23:9C:DE:F8:D8:6C:1E:76:B3:20:4E:DB:BD:A1
X509v3 Authority Key Identifier:
keyid:AD:85:AD:0C:A4:93:B3:BC:06:C9:9B:A1:A4:AE:F5:B0:79:DC:9E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYWtDKSTs7wGyZuhpK71sHncnvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25d6a1-b4be-4e6d-b51f-1664c012dbc5/1/4X3QjsxWI5ze-NhsHnazIE7bvaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25d6a1-b4be-4e6d-b51f-1664c012dbc5/1/rYWtDKSTs7wGyZuhpK71sHncnvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.225.0/24
Signature Algorithm: sha256WithRSAEncryption
09:12:ce:52:75:b2:b3:f1:6d:89:b8:26:12:35:01:f3:a0:ba:
26:49:82:b0:21:98:66:c3:08:9b:91:b9:1b:84:9f:af:6d:fc:
71:95:2f:39:5c:aa:11:36:c8:46:c0:13:db:03:e4:2b:1d:ec:
5b:72:e4:74:ce:e6:1c:73:b1:62:46:b3:d5:cb:d5:d0:1f:20:
8f:3a:3e:80:68:8c:5d:3b:f0:14:29:14:e8:d4:25:d8:d0:a0:
45:18:27:d0:a8:50:b9:6e:54:c1:bd:8a:ef:e2:a4:fb:b3:af:
5b:13:9d:97:de:ed:50:1d:ef:51:79:94:46:13:53:bc:cf:52:
c1:94:56:01:b5:b4:ab:34:f1:4e:9d:fd:2d:a8:3f:38:76:2b:
6a:00:c7:3a:e4:6c:f8:bd:36:29:16:99:44:0a:61:ca:fc:35:
2a:06:80:6e:e2:9b:13:7a:59:b3:12:95:9f:2c:fa:20:69:d5:
eb:04:d7:ff:19:bb:d4:5c:f7:78:c3:ff:71:fe:24:02:5d:8d:
01:3c:19:69:e6:44:0e:03:bf:45:4b:b6:79:9d:84:90:f3:f7:
77:18:49:54:3c:06:32:8f:d9:45:02:1d:49:0d:c4:11:b4:5a:
50:77:76:7a:88:98:23:20:a2:d5:1c:7e:87:9e:09:cc:9f:01:
cf:be:78:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVui1tcrwv+5F1RjbyJE5/cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkODVhZDBjYTQ5M2IzYmMwNmM5OWJhMWE0YWVmNWIwNzlk
YzllZmIwHhcNMjMwMTAxMTgxNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTdkZDA4ZWNjNTYyMzljZGVmOGQ4NmMxZTc2YjMyMDRlZGJiZGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlXYhKzRYcIuNzH+qibKwL1UaUy2
4xsJD8ehL0fx01WMLIBUd0FIc5qvz7hNUljSQ7vVm9cnx9POaZ6SPYGHTitkFrhm
oJ193ori4l7RnhLoF9KQD+DTungDt3abaH7XS29B0+jXU+Yfc+Pt45flO04XJ1aG
Fh5NqCIGvCHJ/TbC20A9s2muUF8vXIiLf7vvuNtQ+E+RmH5nBQJFGPAiEUf8abxG
zVoq1rhschgLJKdn9Glv3q/fubC0IcnD2Se1zXLaPVWJXl/jka5pVPQSFK60D1Tf
fgfj/bG3+3A6wAA/i5xVLcloU1xhegqptLvtra9MoYSAJtcA+GiDJ+HPDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOF90I7MViOc3vjYbB52syBO272hMB8GA1UdIwQY
MBaAFK2FrQykk7O8BsmboaSu9bB53J77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcllXdERLU1RzN3dHeVp1aHBLNzFzSG5jbnZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yNWQ2YTEtYjRiZS00ZTZkLWI1MWYt
MTY2NGMwMTJkYmM1LzEvNFgzUWpzeFdJNXplLU5oc0huYXpJRTdidmFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8yNWQ2YTEtYjRiZS00ZTZkLWI1MWYtMTY2NGMwMTJkYmM1
LzEvcllXdERLU1RzN3dHeVp1aHBLNzFzSG5jbnZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSnhMA0G
CSqGSIb3DQEBCwUAA4IBAQAJEs5SdbKz8W2JuCYSNQHzoLomSYKwIZhmwwibkbkb
hJ+vbfxxlS85XKoRNshGwBPbA+QrHexbcuR0zuYcc7FiRrPVy9XQHyCPOj6AaIxd
O/AUKRTo1CXY0KBFGCfQqFC5blTBvYrv4qT7s69bE52X3u1QHe9ReZRGE1O8z1LB
lFYBtbSrNPFOnf0tqD84ditqAMc65Gz4vTYpFplECmHK/DUqBoBu4psTelmzEpWf
LPogadXrBNf/GbvUXPd4w/9x/iQCXY0BPBlp5kQOA79FS7Z5nYSQ8/d3GElUPAYy
j9lFAh1JDcQRtFpQd3Z6iJgjIKLVHH6HngnMnwHPvnjr
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:39 2025 by rpki-client