Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/En0AxaNswsA9xI4lqkSKkt-F7C0.roa
File: En0AxaNswsA9xI4lqkSKkt-F7C0.roa (raw, json)
Hash identifier: q8FwSEiSjvslMUXDVxvqWzOjw6rMu6h87zO4Dcum1yM=
Subject key identifier: 12:7D:00:C5:A3:6C:C2:C0:3D:C4:8E:25:AA:44:8A:92:DF:85:EC:2D
Certificate issuer: /CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Certificate serial: 0194228D9AE321383B5D2EF936D2DD6F6309
Authority key identifier: 52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/En0AxaNswsA9xI4lqkSKkt-F7C0.roa
Signing time: Wed 01 Jan 2025 15:48:12 +0000
ROA not before: Wed 01 Jan 2025 15:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57630
IP address blocks: 193.201.16.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:9a:e3:21:38:3b:5d:2e:f9:36:d2:dd:6f:63:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Validity
Not Before: Jan 1 15:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=127d00c5a36cc2c03dc48e25aa448a92df85ec2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4c:9c:9f:ae:b7:48:79:26:41:b8:ed:4d:84:
a5:12:ea:85:e7:0b:cc:48:0a:89:02:be:dd:a5:fa:
9f:95:f6:c4:9a:07:72:c3:82:61:30:90:5d:2e:80:
aa:53:8d:7e:bd:f9:79:51:63:6d:b8:8e:b6:5d:e4:
06:dd:ba:da:84:59:2b:4f:c0:9c:f8:21:e5:f3:1c:
91:c9:3f:42:1b:7b:8e:b2:df:a1:0a:be:db:66:35:
5c:f6:c6:b3:d9:83:83:78:f2:80:bb:31:02:09:97:
e8:19:32:fd:e3:45:75:93:c5:c1:78:cd:ea:1e:eb:
44:6b:4f:f6:e4:d7:f5:03:a0:2d:51:da:a4:d4:6e:
af:27:a4:19:ba:5b:35:19:79:96:34:8b:90:37:be:
25:cb:7f:a7:7a:9e:06:fe:c0:54:5a:5f:93:5e:fb:
8e:32:91:55:92:97:53:c8:80:59:8d:af:e3:6e:64:
61:46:41:ab:1e:3e:2c:b7:c0:8f:17:5d:96:bd:1c:
f2:c5:bc:e8:67:13:a8:17:f1:49:02:c4:45:00:e7:
a9:5d:4f:ac:a2:3b:b1:3d:ef:cb:9f:f6:e9:ef:0b:
2c:6f:da:06:5e:8d:c2:76:0a:b9:34:88:98:3e:b2:
9b:00:ce:50:82:61:45:71:34:d4:0c:67:bc:61:94:
16:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7D:00:C5:A3:6C:C2:C0:3D:C4:8E:25:AA:44:8A:92:DF:85:EC:2D
X509v3 Authority Key Identifier:
keyid:52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/En0AxaNswsA9xI4lqkSKkt-F7C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.16.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:1c:32:2c:34:e7:66:21:87:0d:14:14:fb:31:84:eb:61:8a:
07:97:da:c3:db:63:8d:13:66:1e:47:b9:f0:a5:c5:92:ea:2e:
39:38:1f:b2:ab:34:ed:04:62:16:b3:73:cb:39:23:ab:27:65:
7d:ec:bb:47:fc:e0:13:79:16:0b:23:c5:60:7b:3a:2e:05:0f:
e2:b0:b4:19:1a:30:87:8c:d4:b9:51:66:c4:fb:a2:5e:ee:ff:
92:92:7f:db:76:a2:33:1d:18:4a:18:d6:b8:61:72:90:f4:25:
b1:5b:2f:ad:7d:fc:28:1a:1e:55:51:68:9a:fc:54:c6:9e:65:
a2:da:ec:cf:6d:66:96:98:fe:d8:5e:d2:f7:90:d8:4e:f1:05:
38:77:0a:2c:5b:23:9f:b7:19:a0:a5:a7:e0:05:41:42:41:10:
7e:6e:d9:e4:51:72:e0:84:e2:dd:77:5f:17:d2:60:78:ca:b4:
48:7e:78:e6:cc:04:49:a7:6d:02:1e:15:e6:2b:d4:fa:c6:7b:
da:b3:58:98:63:30:90:90:b1:32:37:cd:5b:0b:ad:fe:bc:31:
e3:43:e4:58:e0:d4:8d:8a:b5:2e:8d:b6:9b:ef:89:81:34:15:
d7:aa:80:e1:35:9a:54:fa:b2:8c:b5:38:d9:91:9a:d7:b2:96:
bb:c8:66:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijZrjITg7XS75NtLdb2MJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZDY2MWE5NDhmMmJmMzQ5MGU4OWQ4MjUyZjJjY2M4NzQ3
Y2U1YzcwHhcNMjUwMTAxMTU0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjdkMDBjNWEzNmNjMmMwM2RjNDhlMjVhYTQ0OGE5MmRmODVlYzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEycn663SHkmQbjtTYSlEuqF5wvM
SAqJAr7dpfqflfbEmgdyw4JhMJBdLoCqU41+vfl5UWNtuI62XeQG3brahFkrT8Cc
+CHl8xyRyT9CG3uOst+hCr7bZjVc9saz2YODePKAuzECCZfoGTL940V1k8XBeM3q
HutEa0/25Nf1A6AtUdqk1G6vJ6QZuls1GXmWNIuQN74ly3+nep4G/sBUWl+TXvuO
MpFVkpdTyIBZja/jbmRhRkGrHj4st8CPF12WvRzyxbzoZxOoF/FJAsRFAOepXU+s
ojuxPe/Ln/bp7wssb9oGXo3Cdgq5NIiYPrKbAM5QgmFFcTTUDGe8YZQWuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBJ9AMWjbMLAPcSOJapEipLfhewtMB8GA1UdIwQY
MBaAFFLWYalI8r80kOidglLyzMh0fOXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXRaaHFVanl2elNRNkoyQ1V2TE15SFI4NWNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lMmEyYjItYWIzYy00YWZiLTg5ODct
ZGQ2M2YyMTVjNDM0LzEvRW4wQXhhTnN3c0E5eEk0bHFrU0trdC1GN0MwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lMmEyYjItYWIzYy00YWZiLTg5ODctZGQ2M2YyMTVjNDM0
LzEvVXRaaHFVanl2elNRNkoyQ1V2TE15SFI4NWNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwckQMA0G
CSqGSIb3DQEBCwUAA4IBAQBrHDIsNOdmIYcNFBT7MYTrYYoHl9rD22ONE2YeR7nw
pcWS6i45OB+yqzTtBGIWs3PLOSOrJ2V97LtH/OATeRYLI8VgezouBQ/isLQZGjCH
jNS5UWbE+6Je7v+Skn/bdqIzHRhKGNa4YXKQ9CWxWy+tffwoGh5VUWia/FTGnmWi
2uzPbWaWmP7YXtL3kNhO8QU4dwosWyOftxmgpafgBUFCQRB+btnkUXLghOLdd18X
0mB4yrRIfnjmzARJp20CHhXmK9T6xnvas1iYYzCQkLEyN81bC63+vDHjQ+RY4NSN
irUujbab74mBNBXXqoDhNZpU+rKMtTjZkZrXspa7yGa+
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:20 2025 by rpki-client