Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/kjFcO2vP9hRsCnhMHcVVr7i25GQ.roa
File: kjFcO2vP9hRsCnhMHcVVr7i25GQ.roa (raw, json)
Hash identifier: uzNQc25xFFFvxq6t0LJN+KIWw8IhZA902HimZqoYMYo=
Subject key identifier: 92:31:5C:3B:6B:CF:F6:14:6C:0A:78:4C:1D:C5:55:AF:B8:B6:E4:64
Certificate issuer: /CN=b32f015f6a2345345cb3daf230c25c8fae02305a
Certificate serial: 018571D7CEF9C215C74BFF76C31D8A64982B
Authority key identifier: B3:2F:01:5F:6A:23:45:34:5C:B3:DA:F2:30:C2:5C:8F:AE:02:30:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy8BX2ojRTRcs9ryMMJcj64CMFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/kjFcO2vP9hRsCnhMHcVVr7i25GQ.roa
Signing time: Mon 02 Jan 2023 09:37:26 +0000
ROA not before: Mon 02 Jan 2023 09:37:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8866
IP address blocks: 195.177.248.0/23 maxlen: 23
193.22.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:ce:f9:c2:15:c7:4b:ff:76:c3:1d:8a:64:98:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32f015f6a2345345cb3daf230c25c8fae02305a
Validity
Not Before: Jan 2 09:37:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92315c3b6bcff6146c0a784c1dc555afb8b6e464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:36:02:23:88:51:18:b1:14:9d:76:78:3d:
e7:52:14:c0:c6:2b:3c:22:70:a1:b4:a7:fd:f8:66:
83:64:15:20:56:f2:51:42:4d:cf:95:e7:4b:a4:8c:
b0:ff:75:94:0b:bc:b2:c7:93:9f:f1:34:ed:60:6b:
ce:2b:48:0d:6e:0c:70:67:2a:e7:c5:98:98:ca:a8:
0d:b0:16:d4:38:14:7b:71:8d:0d:61:25:4b:a9:51:
50:3e:4e:cd:0b:51:5f:22:df:18:b9:0f:a0:19:b0:
35:66:06:1b:4e:11:29:e8:c5:35:69:41:c5:14:89:
cc:84:49:82:79:15:12:3f:dd:05:56:76:a5:02:c0:
12:5c:ed:ba:c1:7e:6a:40:a0:a3:67:e6:45:87:ae:
42:ad:a8:f5:cc:42:84:ec:79:64:73:1b:82:43:b7:
66:ae:77:20:1f:7d:c5:19:32:39:09:b6:50:4c:cc:
07:2a:b5:b6:c9:e7:21:3e:23:4d:9d:49:7c:34:81:
c8:c3:1c:9e:bb:14:52:c8:ff:30:83:ad:9b:a7:ad:
1c:23:84:c5:2c:30:25:c4:29:eb:6d:fa:26:44:da:
5d:2f:35:bd:ab:d0:31:b2:22:1f:3d:57:7c:ef:19:
90:de:b4:00:f0:2a:c4:b0:31:ae:a6:2e:33:c8:a4:
aa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:31:5C:3B:6B:CF:F6:14:6C:0A:78:4C:1D:C5:55:AF:B8:B6:E4:64
X509v3 Authority Key Identifier:
keyid:B3:2F:01:5F:6A:23:45:34:5C:B3:DA:F2:30:C2:5C:8F:AE:02:30:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy8BX2ojRTRcs9ryMMJcj64CMFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/kjFcO2vP9hRsCnhMHcVVr7i25GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/sy8BX2ojRTRcs9ryMMJcj64CMFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.103.0/24
195.177.248.0/23
Signature Algorithm: sha256WithRSAEncryption
25:bb:d1:a4:2a:7d:b2:cd:62:1c:98:24:90:4c:0e:d3:fd:0a:
f5:a8:f0:2f:09:69:45:f8:2b:5a:2d:ee:0a:89:8a:bc:ff:bc:
90:8e:f4:ad:b2:0f:f9:91:11:e5:28:75:a3:e0:a2:d4:23:c7:
2e:2a:2f:81:c6:a4:b0:f6:3e:17:84:59:a7:b5:0c:ba:e1:81:
ad:e6:49:cb:bd:ec:48:e7:09:34:04:d6:aa:1a:47:59:06:47:
af:2f:df:99:8f:78:31:fc:a5:56:d5:59:b3:f5:0a:29:79:22:
7c:9c:a9:07:f7:34:5f:c6:f3:69:7b:c5:56:6d:97:19:a1:d3:
33:b9:ed:de:11:3c:eb:35:c4:12:83:31:37:8f:3a:59:5b:b3:
66:08:00:ca:06:6e:d3:51:c3:00:ec:1d:89:1d:c9:74:13:3d:
21:52:55:19:83:86:44:ea:0f:12:92:4e:e8:91:28:42:f6:a0:
9d:72:bc:7d:ec:b2:5c:d9:7f:dd:35:96:8d:2e:0a:5a:f8:4e:
12:d2:47:a2:a2:7d:94:ae:32:84:2e:4f:2d:ef:e7:aa:9e:5d:
4d:b2:59:e2:1f:2d:1b:fb:45:46:26:49:ed:4c:9d:ae:0a:da:
ea:97:97:6a:89:cf:bb:56:b9:6b:f1:6c:9f:67:cf:d3:e5:9f:
bb:e4:85:e7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVx1875whXHS/92wx2KZJgrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMmYwMTVmNmEyMzQ1MzQ1Y2IzZGFmMjMwYzI1YzhmYWUw
MjMwNWEwHhcNMjMwMTAyMDkzNzI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjMxNWMzYjZiY2ZmNjE0NmMwYTc4NGMxZGM1NTVhZmI4YjZlNDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWs2AiOIURixFJ12eD3nUhTAxis8
InChtKf9+GaDZBUgVvJRQk3PledLpIyw/3WUC7yyx5Of8TTtYGvOK0gNbgxwZyrn
xZiYyqgNsBbUOBR7cY0NYSVLqVFQPk7NC1FfIt8YuQ+gGbA1ZgYbThEp6MU1aUHF
FInMhEmCeRUSP90FVnalAsASXO26wX5qQKCjZ+ZFh65Craj1zEKE7HlkcxuCQ7dm
rncgH33FGTI5CbZQTMwHKrW2yechPiNNnUl8NIHIwxyeuxRSyP8wg62bp60cI4TF
LDAlxCnrbfomRNpdLzW9q9AxsiIfPVd87xmQ3rQA8CrEsDGupi4zyKSq9wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJIxXDtrz/YUbAp4TB3FVa+4tuRkMB8GA1UdIwQY
MBaAFLMvAV9qI0U0XLPa8jDCXI+uAjBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3k4Qlgyb2pSVFJjczlyeU1NSmNqNjRDTUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9jMDFmNWItNmQyOC00NDFkLThjMTUt
MWZjZGFjNmYwMTgzLzEva2pGY08ydlA5aFJzQ25oTUhjVlZyN2kyNUdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9jMDFmNWItNmQyOC00NDFkLThjMTUtMWZjZGFjNmYwMTgz
LzEvc3k4Qlgyb2pSVFJjczlyeU1NSmNqNjRDTUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwRZnAwQB
w7H4MA0GCSqGSIb3DQEBCwUAA4IBAQAlu9GkKn2yzWIcmCSQTA7T/Qr1qPAvCWlF
+CtaLe4KiYq8/7yQjvStsg/5kRHlKHWj4KLUI8cuKi+BxqSw9j4XhFmntQy64YGt
5knLvexI5wk0BNaqGkdZBkevL9+Zj3gx/KVW1Vmz9QopeSJ8nKkH9zRfxvNpe8VW
bZcZodMzue3eETzrNcQSgzE3jzpZW7NmCADKBm7TUcMA7B2JHcl0Ez0hUlUZg4ZE
6g8Skk7okShC9qCdcrx97LJc2X/dNZaNLgpa+E4S0keion2UrjKELk8t7+eqnl1N
slniHy0b+0VGJkntTJ2uCtrql5dqic+7Vrlr8WyfZ8/T5Z+75IXn
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:04:06 2025 by rpki-client