Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/k7yPmh_VriNHU-CyfNEMCCb6TOE.roa
File: k7yPmh_VriNHU-CyfNEMCCb6TOE.roa (raw, json)
Hash identifier: 6fF4pa1mlP98MU9p3QUUtBJtrK8b/EcC9DvKjbs9UhU=
Subject key identifier: 93:BC:8F:9A:1F:D5:AE:23:47:53:E0:B2:7C:D1:0C:08:26:FA:4C:E1
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 019428238DA763A94F64AF71D11C6E12B22F
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/k7yPmh_VriNHU-CyfNEMCCb6TOE.roa
Signing time: Thu 02 Jan 2025 17:50:06 +0000
ROA not before: Thu 02 Jan 2025 17:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 188.209.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:8d:a7:63:a9:4f:64:af:71:d1:1c:6e:12:b2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 2 17:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93bc8f9a1fd5ae234753e0b27cd10c0826fa4ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a0:d9:3b:e6:4a:9e:26:3a:e3:e2:01:29:35:
a0:ae:93:7c:70:28:f9:b4:5a:ee:b2:a5:ea:1e:e2:
02:50:2f:2a:8f:ad:c5:a2:98:2c:91:09:c2:25:45:
68:3c:af:df:c0:95:3d:e3:11:f2:c3:56:8d:a8:fc:
f8:ab:de:13:b8:d2:26:e2:00:8e:43:e7:fa:a6:39:
21:66:06:7b:0a:64:3b:bf:5d:a8:e1:cb:75:82:17:
43:99:78:b7:d4:20:20:57:1f:43:bc:95:dd:bd:14:
43:c2:1f:08:09:06:ac:36:3c:de:c7:fd:d6:00:23:
b9:fc:d0:94:0e:ec:65:37:ba:c4:43:34:7d:60:40:
19:94:64:27:cc:ac:e7:37:fd:a8:e9:21:52:18:57:
a1:16:32:77:50:e2:68:a3:6c:3b:c5:d0:a1:e3:f6:
d3:7b:e6:cc:7b:fd:e1:4e:12:b2:6e:66:bd:f1:a3:
10:ec:f5:81:da:bc:a6:99:04:0b:4a:42:7d:3b:94:
9f:e2:d8:83:e2:a2:fb:f4:af:8d:2e:6f:5a:2c:1c:
4a:73:b9:23:3e:b7:51:34:7f:9d:6d:e4:67:c7:80:
a6:1d:c0:9e:f0:f4:aa:8b:1b:96:60:68:99:a8:3d:
47:92:04:c0:99:26:f1:7d:2e:b3:ab:2d:b0:e0:e8:
04:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BC:8F:9A:1F:D5:AE:23:47:53:E0:B2:7C:D1:0C:08:26:FA:4C:E1
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/k7yPmh_VriNHU-CyfNEMCCb6TOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.135.0/24
Signature Algorithm: sha256WithRSAEncryption
05:67:19:52:01:9c:46:bb:97:a3:38:31:cc:cb:67:ed:a1:ff:
ab:39:a2:cc:8d:ff:85:12:ba:2e:3b:f6:8f:89:da:f4:2e:23:
23:32:55:99:1d:7f:61:24:87:04:01:d5:63:77:cb:f1:cd:51:
93:d9:ab:00:e0:2a:de:68:bf:81:d5:de:d8:2d:f0:3f:93:43:
df:69:b1:eb:02:d2:1b:a5:09:98:00:4f:a1:c3:e2:26:a4:99:
f8:8f:cc:e7:bc:ae:3d:0c:d6:88:13:2c:41:f3:51:f8:20:25:
f0:e2:10:ae:c7:c0:7f:3f:f0:d5:5d:66:0a:c2:72:fb:36:2a:
c6:e0:ce:3c:b9:df:49:b7:aa:69:0e:34:d5:e2:cf:7e:06:ad:
30:34:27:06:18:90:73:9f:ba:0b:6a:2a:ee:b1:1e:9a:39:b8:
e4:7c:05:be:2c:c5:f7:e0:64:bc:ed:eb:e7:28:7e:2a:9c:58:
1e:e8:40:88:9b:fd:37:08:b3:a0:3f:bf:8a:65:63:69:c7:b6:
ea:2a:5f:62:31:1a:82:ab:c4:ef:9f:67:f6:4e:e9:1c:2a:8f:
ce:64:da:2b:78:de:02:3d:f7:f9:e7:da:93:95:03:7f:c6:f3:
ac:3f:e3:c6:1f:1b:19:f0:8f:b0:da:a5:42:01:4a:67:93:0b:
96:12:44:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI42nY6lPZK9x0RxuErIvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjUwMTAyMTc1MDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2JjOGY5YTFmZDVhZTIzNDc1M2UwYjI3Y2QxMGMwODI2ZmE0Y2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6DZO+ZKniY64+IBKTWgrpN8cCj5
tFrusqXqHuICUC8qj63FopgskQnCJUVoPK/fwJU94xHyw1aNqPz4q94TuNIm4gCO
Q+f6pjkhZgZ7CmQ7v12o4ct1ghdDmXi31CAgVx9DvJXdvRRDwh8ICQasNjzex/3W
ACO5/NCUDuxlN7rEQzR9YEAZlGQnzKznN/2o6SFSGFehFjJ3UOJoo2w7xdCh4/bT
e+bMe/3hThKybma98aMQ7PWB2rymmQQLSkJ9O5Sf4tiD4qL79K+NLm9aLBxKc7kj
PrdRNH+dbeRnx4CmHcCe8PSqixuWYGiZqD1HkgTAmSbxfS6zqy2w4OgEtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJO8j5of1a4jR1PgsnzRDAgm+kzhMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvazd5UG1oX1ZyaU5IVS1DeWZORU1DQ2I2VE9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNGHMA0G
CSqGSIb3DQEBCwUAA4IBAQAFZxlSAZxGu5ejODHMy2ftof+rOaLMjf+FErouO/aP
idr0LiMjMlWZHX9hJIcEAdVjd8vxzVGT2asA4CreaL+B1d7YLfA/k0PfabHrAtIb
pQmYAE+hw+ImpJn4j8znvK49DNaIEyxB81H4ICXw4hCux8B/P/DVXWYKwnL7NirG
4M48ud9Jt6ppDjTV4s9+Bq0wNCcGGJBzn7oLairusR6aObjkfAW+LMX34GS87evn
KH4qnFge6ECIm/03CLOgP7+KZWNpx7bqKl9iMRqCq8Tvn2f2TukcKo/OZNoreN4C
Pff559qTlQN/xvOsP+PGHxsZ8I+w2qVCAUpnkwuWEkRP
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:42:44 2025 by rpki-client