Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/6rodAjSIbG6YFduEO6o-mzSC84o.roa
File: 6rodAjSIbG6YFduEO6o-mzSC84o.roa (raw, json)
Hash identifier: RKLQB89FZZg5hR7dVusoyg+p0ydlK7Y9TWvLdUVR81I=
Subject key identifier: EA:BA:1D:02:34:88:6C:6E:98:15:DB:84:3B:AA:3E:9B:34:82:F3:8A
Certificate issuer: /CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Certificate serial: 01856DC1E557840F2F126787ECC5B128AF26
Authority key identifier: 85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/6rodAjSIbG6YFduEO6o-mzSC84o.roa
Signing time: Sun 01 Jan 2023 14:35:01 +0000
ROA not before: Sun 01 Jan 2023 14:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41269
IP address blocks: 193.47.166.0/24 maxlen: 24
193.238.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:e5:57:84:0f:2f:12:67:87:ec:c5:b1:28:af:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Validity
Not Before: Jan 1 14:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaba1d0234886c6e9815db843baa3e9b3482f38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b1:68:97:a8:aa:39:78:b4:4d:90:cb:38:d0:
7b:3b:59:36:34:2b:8a:04:b1:a2:b0:de:8c:fb:65:
8f:48:8a:1f:00:30:28:ce:c3:0e:90:45:3a:22:2d:
ca:d7:09:8f:de:6d:e2:4f:b2:e6:5b:5d:90:d7:5d:
e0:fe:9d:f7:4e:3c:e3:85:38:2f:2c:a3:73:62:c6:
89:f8:a5:0f:85:50:39:0a:25:5e:24:4b:dc:86:57:
33:81:91:40:00:b5:75:bd:78:01:49:24:a7:04:81:
bf:5d:93:6d:70:47:41:84:90:4b:44:8b:00:0c:b7:
5a:ef:3f:6d:1e:96:9c:9d:b5:90:e2:93:6e:96:1c:
6e:c9:b0:ed:3a:b5:df:f4:08:17:b1:8e:25:23:44:
7b:f1:f0:ee:73:bf:3d:5e:22:b8:e4:60:d7:34:46:
79:0b:d0:09:1c:d2:92:ce:36:ac:a4:77:a2:d2:19:
be:90:fc:9f:79:53:db:39:d1:fd:79:5b:0f:9a:c1:
e2:39:4c:b5:d1:51:27:5e:ba:4d:74:10:d9:36:8d:
a8:7f:11:1a:cb:57:d0:c0:56:89:ea:b4:02:77:a3:
51:dc:d5:b1:bd:8f:f2:80:48:b1:70:68:5e:b3:86:
cd:cb:6f:a8:66:e1:2f:5a:cf:a8:3e:65:48:ad:e2:
b6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BA:1D:02:34:88:6C:6E:98:15:DB:84:3B:AA:3E:9B:34:82:F3:8A
X509v3 Authority Key Identifier:
keyid:85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/6rodAjSIbG6YFduEO6o-mzSC84o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.166.0/24
193.238.108.0/24
Signature Algorithm: sha256WithRSAEncryption
29:78:97:88:b4:d2:1b:dd:19:27:19:d5:79:1c:52:b3:6e:23:
b1:ea:46:23:d3:d1:2a:84:0f:48:ce:23:18:2f:40:dc:d9:77:
86:6e:ce:6d:5b:e4:50:e3:59:d0:8e:9b:98:d5:2f:09:ab:19:
c9:e2:42:77:4e:8b:cc:a4:41:26:b0:88:55:69:a7:35:d8:bc:
ee:84:84:1b:84:56:a2:f8:b9:0c:90:52:6c:79:3a:6d:54:a5:
f4:c2:ae:5f:7b:31:1d:24:75:f8:42:40:80:26:01:e0:41:fd:
02:64:14:10:ea:9e:5a:05:b0:1a:ea:8a:52:9f:48:b7:4c:12:
1b:12:1d:c6:bd:f3:83:c1:23:1a:1c:25:a9:5c:2e:c2:b2:38:
f2:d3:de:c9:14:a4:aa:33:34:da:56:4f:69:af:50:cd:4e:70:
a8:39:98:b0:0a:02:01:e6:61:b2:bb:08:99:43:20:37:fd:06:
3c:45:bb:06:3e:a7:fc:40:e4:48:06:c4:4d:0c:21:f5:b5:0d:
9d:84:1f:2b:ad:b6:34:d0:8e:1f:53:8c:09:d4:98:c1:9a:55:
ca:28:39:8d:c7:49:89:d5:64:70:80:eb:88:c2:9d:e5:3a:26:
20:35:b5:3c:3e:bf:09:81:d5:0e:54:81:c9:a0:73:ff:8a:78:
c0:7c:2f:99
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVtweVXhA8vEmeH7MWxKK8mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MmVjZTljOWEzMjRkNDVjMzVmOTU1OWYzMjlkODg2OWRh
YjUzYmEwHhcNMjMwMTAxMTQzNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWJhMWQwMjM0ODg2YzZlOTgxNWRiODQzYmFhM2U5YjM0ODJmMzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLFol6iqOXi0TZDLONB7O1k2NCuK
BLGisN6M+2WPSIofADAozsMOkEU6Ii3K1wmP3m3iT7LmW12Q113g/p33TjzjhTgv
LKNzYsaJ+KUPhVA5CiVeJEvchlczgZFAALV1vXgBSSSnBIG/XZNtcEdBhJBLRIsA
DLda7z9tHpacnbWQ4pNulhxuybDtOrXf9AgXsY4lI0R78fDuc789XiK45GDXNEZ5
C9AJHNKSzjaspHei0hm+kPyfeVPbOdH9eVsPmsHiOUy10VEnXrpNdBDZNo2ofxEa
y1fQwFaJ6rQCd6NR3NWxvY/ygEixcGhes4bNy2+oZuEvWs+oPmVIreK2pQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOq6HQI0iGxumBXbhDuqPps0gvOKMB8GA1UdIwQY
MBaAFIUuzpyaMk1Fw1+VWfMp2Iadq1O6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFM3T25Kb3lUVVhEWDVWWjh5bllocDJyVTdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kM2NjZTYtYjQ3Yi00ZDA2LWEzMGYt
ZWIyNDExZDIxMmFiLzEvNnJvZEFqU0liRzZZRmR1RU82by1telNDODRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kM2NjZTYtYjQ3Yi00ZDA2LWEzMGYtZWIyNDExZDIxMmFi
LzEvaFM3T25Kb3lUVVhEWDVWWjh5bllocDJyVTdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwS+mAwQA
we5sMA0GCSqGSIb3DQEBCwUAA4IBAQApeJeItNIb3RknGdV5HFKzbiOx6kYj09Eq
hA9IziMYL0Dc2XeGbs5tW+RQ41nQjpuY1S8JqxnJ4kJ3TovMpEEmsIhVaac12Lzu
hIQbhFai+LkMkFJseTptVKX0wq5fezEdJHX4QkCAJgHgQf0CZBQQ6p5aBbAa6opS
n0i3TBIbEh3GvfODwSMaHCWpXC7Csjjy097JFKSqMzTaVk9pr1DNTnCoOZiwCgIB
5mGyuwiZQyA3/QY8RbsGPqf8QORIBsRNDCH1tQ2dhB8rrbY00I4fU4wJ1JjBmlXK
KDmNx0mJ1WRwgOuIwp3lOiYgNbU8Pr8JgdUOVIHJoHP/injAfC+Z
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:32:13 2025 by rpki-client