Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/jJN5SmOYRCh5g1P7LMTmmGEDihE.roa
File: jJN5SmOYRCh5g1P7LMTmmGEDihE.roa (raw, json)
Hash identifier: zVXVRIlXsH01/EvIe9iIxpAfO1eaFz3FhIYvYUirwQk=
Subject key identifier: 8C:93:79:4A:63:98:44:28:79:83:53:FB:2C:C4:E6:98:61:03:8A:11
Certificate issuer: /CN=c83c4c9d2fce61665165c05a101e815047b64f6a
Certificate serial: 01942444DBA71D8B065099D78DF79F4E0FD4
Authority key identifier: C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/jJN5SmOYRCh5g1P7LMTmmGEDihE.roa
Signing time: Wed 01 Jan 2025 23:47:59 +0000
ROA not before: Wed 01 Jan 2025 23:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197717
IP address blocks: 193.200.54.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:db:a7:1d:8b:06:50:99:d7:8d:f7:9f:4e:0f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83c4c9d2fce61665165c05a101e815047b64f6a
Validity
Not Before: Jan 1 23:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c93794a63984428798353fb2cc4e69861038a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:03:a4:d1:2b:14:d2:01:01:71:9d:42:a1:
65:4d:69:7e:76:d2:92:b4:a2:de:d4:5b:08:6e:b9:
c4:7b:ea:32:47:7d:43:4d:30:7e:14:ea:2a:ad:df:
70:fd:11:5d:d6:1f:7f:61:0a:13:10:b4:19:4e:7a:
61:e3:44:cc:c6:7f:64:c7:96:c5:fa:a6:4d:59:12:
71:bc:0f:4b:bf:6c:5b:4a:6e:f5:bf:19:dd:0c:d2:
d0:21:68:2c:22:48:01:d7:56:7f:dc:e6:91:f4:fc:
2a:22:d0:d0:ff:69:0a:c6:49:69:30:fc:c7:44:0c:
7b:8f:e4:cc:94:5f:ff:c1:69:04:23:ef:7a:ff:fb:
a7:35:97:86:c7:68:ca:11:cf:f2:81:59:36:2b:b8:
30:56:27:95:08:9e:b9:27:dd:a1:00:a4:7e:74:02:
7c:c9:42:5a:08:dd:31:e0:e2:c5:09:cd:52:ec:2b:
b7:d1:2e:4b:f9:36:d5:23:cc:54:7c:6b:b3:f2:e7:
45:8b:68:25:7f:90:28:ad:b5:84:ff:26:93:47:08:
ed:64:9b:bc:0f:d8:c5:7b:e3:1d:99:90:4f:52:86:
5a:0d:96:d5:4f:8c:b4:4f:40:14:3a:a2:4f:6b:e7:
b2:8c:cd:06:09:7a:d9:bf:55:10:3e:22:00:b8:bd:
25:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:93:79:4A:63:98:44:28:79:83:53:FB:2C:C4:E6:98:61:03:8A:11
X509v3 Authority Key Identifier:
keyid:C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/jJN5SmOYRCh5g1P7LMTmmGEDihE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.54.0/23
Signature Algorithm: sha256WithRSAEncryption
61:b1:cb:6a:ba:c3:12:87:d8:48:27:70:40:17:33:c0:30:38:
d2:d2:d1:8c:c4:84:26:dc:86:ad:02:0c:3d:99:c0:7b:0c:3c:
5a:8c:a9:c4:97:4c:eb:23:f3:9c:56:16:3f:a4:bb:2e:60:6e:
7c:06:ab:ff:20:9e:af:16:db:b6:23:8b:9f:a6:e9:1e:c3:9b:
a4:e2:9c:42:93:e3:6e:02:a2:98:80:96:33:d3:50:ce:f2:1e:
32:ee:68:1d:46:68:a4:ea:f8:39:e6:09:d5:a3:78:14:75:98:
f1:f0:56:09:b1:ce:44:b7:60:54:8d:e8:b1:14:51:cd:3f:fe:
99:0a:24:d6:7b:32:03:77:f5:81:41:19:49:95:e6:9d:fe:b6:
c5:c5:05:2e:94:13:e5:ea:48:6f:55:df:c1:45:69:c5:54:02:
05:bf:cd:21:2a:0f:bc:1d:47:69:7f:1c:d2:f3:12:2c:c7:95:
68:e8:01:ae:8e:01:c1:cc:69:7f:81:a9:a8:30:ae:48:9b:92:
e8:b5:ff:23:07:43:59:fb:3d:31:ea:35:41:e1:74:64:b0:ec:
7f:bb:fb:ab:82:ce:ed:c7:a5:e2:18:94:24:6f:87:21:88:ab:
3f:fa:1b:56:2f:a6:de:8d:6e:43:68:10:49:d2:90:d8:a8:2b:
9f:49:28:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRNunHYsGUJnXjfefTg/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4M2M0YzlkMmZjZTYxNjY1MTY1YzA1YTEwMWU4MTUwNDdi
NjRmNmEwHhcNMjUwMTAxMjM0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzkzNzk0YTYzOTg0NDI4Nzk4MzUzZmIyY2M0ZTY5ODYxMDM4YTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshADpNErFNIBAXGdQqFlTWl+dtKS
tKLe1FsIbrnEe+oyR31DTTB+FOoqrd9w/RFd1h9/YQoTELQZTnph40TMxn9kx5bF
+qZNWRJxvA9Lv2xbSm71vxndDNLQIWgsIkgB11Z/3OaR9PwqItDQ/2kKxklpMPzH
RAx7j+TMlF//wWkEI+96//unNZeGx2jKEc/ygVk2K7gwVieVCJ65J92hAKR+dAJ8
yUJaCN0x4OLFCc1S7Cu30S5L+TbVI8xUfGuz8udFi2glf5AorbWE/yaTRwjtZJu8
D9jFe+MdmZBPUoZaDZbVT4y0T0AUOqJPa+eyjM0GCXrZv1UQPiIAuL0lwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIyTeUpjmEQoeYNT+yzE5phhA4oRMB8GA1UdIwQY
MBaAFMg8TJ0vzmFmUWXAWhAegVBHtk9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUR4TW5TX09ZV1pSWmNCYUVCNkJVRWUyVDJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NzQ0MDgtNDE2My00ZTdlLWFhYjkt
NDJlZjMzYTI2ZTY2LzEvakpONVNtT1lSQ2g1ZzFQN0xNVG1tR0VEaWhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82NzQ0MDgtNDE2My00ZTdlLWFhYjktNDJlZjMzYTI2ZTY2
LzEveUR4TW5TX09ZV1pSWmNCYUVCNkJVRWUyVDJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwcg2MA0G
CSqGSIb3DQEBCwUAA4IBAQBhsctqusMSh9hIJ3BAFzPAMDjS0tGMxIQm3IatAgw9
mcB7DDxajKnEl0zrI/OcVhY/pLsuYG58Bqv/IJ6vFtu2I4ufpukew5uk4pxCk+Nu
AqKYgJYz01DO8h4y7mgdRmik6vg55gnVo3gUdZjx8FYJsc5Et2BUjeixFFHNP/6Z
CiTWezIDd/WBQRlJlead/rbFxQUulBPl6khvVd/BRWnFVAIFv80hKg+8HUdpfxzS
8xIsx5Vo6AGujgHBzGl/gamoMK5Im5Lotf8jB0NZ+z0x6jVB4XRksOx/u/urgs7t
x6XiGJQkb4chiKs/+htWL6bejW5DaBBJ0pDYqCufSSjW
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:47:46 2025 by rpki-client