Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/U9NaOvKZniiNhl5zE3KqQScFT6c.roa
File: U9NaOvKZniiNhl5zE3KqQScFT6c.roa (raw, json)
Hash identifier: i2z1+tj2AfSPC//fYo07n/HYknAsXyAjlQF2God3G58=
Subject key identifier: 53:D3:5A:3A:F2:99:9E:28:8D:86:5E:73:13:72:AA:41:27:05:4F:A7
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 01953E85FB4A22806AA0037C3C010FFC742A
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/U9NaOvKZniiNhl5zE3KqQScFT6c.roa
Signing time: Tue 25 Feb 2025 19:12:02 +0000
ROA not before: Tue 25 Feb 2025 19:12:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46261
IP address blocks: 193.108.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3e:85:fb:4a:22:80:6a:a0:03:7c:3c:01:0f:fc:74:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Feb 25 19:12:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53d35a3af2999e288d865e731372aa4127054fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8b:29:3d:74:d4:6d:3c:b7:b4:08:0d:0e:e8:
88:7e:cf:6c:84:4c:63:5e:36:33:01:87:d5:6a:74:
92:0d:71:d9:83:3f:5c:65:11:1a:8e:d9:bd:8b:fb:
a3:6b:1c:f2:b6:6f:34:fa:cd:20:2e:4b:44:0b:3f:
e5:83:f3:7d:89:1c:a0:cc:51:8f:9c:69:ea:89:7a:
41:af:ed:83:f5:78:a2:eb:52:12:1b:92:a9:b5:43:
e7:50:f1:b2:04:e8:cc:bc:25:2c:d5:22:78:5f:9a:
06:a7:3e:a2:4e:08:d1:2b:61:ca:02:c9:08:8a:7f:
3f:cb:f3:96:31:b1:cd:93:9c:d2:b2:3d:84:af:09:
39:82:21:f0:64:aa:64:b4:db:36:b3:bd:a2:77:cc:
3f:8b:0e:17:86:5a:d8:57:ea:20:69:84:e5:01:98:
52:a6:49:8a:34:de:2c:a9:20:aa:b5:1f:ba:40:10:
b4:ae:29:3f:b7:43:25:48:08:7c:49:1d:77:16:b2:
ad:30:2d:24:46:45:10:84:c2:b7:b9:07:9a:73:fc:
cf:bf:1a:df:56:81:05:45:d0:98:0e:0f:cd:d5:62:
84:9e:cb:0a:90:70:fc:51:9f:cc:f5:0d:66:76:57:
30:d9:ad:97:66:2f:d4:ee:e5:fd:44:f9:2c:95:d4:
0a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D3:5A:3A:F2:99:9E:28:8D:86:5E:73:13:72:AA:41:27:05:4F:A7
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/U9NaOvKZniiNhl5zE3KqQScFT6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.56.0/24
Signature Algorithm: sha256WithRSAEncryption
00:0d:9e:55:e5:27:40:31:1a:e7:d5:fd:96:8f:bf:0c:b7:04:
90:0c:85:e0:a6:b8:21:8f:c1:83:81:57:35:34:86:c9:6a:06:
83:2b:3b:cd:3d:00:97:ab:f6:6e:fa:59:16:22:ab:1f:ae:ed:
c9:47:59:88:91:d3:d8:d0:e3:55:75:cd:aa:f4:36:ea:ff:2f:
f7:51:19:58:3f:56:2a:7c:bc:25:4c:44:11:8e:7c:37:3f:81:
8b:21:c3:79:e5:2d:84:e4:1a:b9:73:da:23:6c:35:30:57:8a:
90:09:fa:d3:5e:05:d2:88:0b:18:4a:a4:df:ca:68:b7:c4:42:
df:46:8a:b8:26:4d:fc:20:80:12:4d:10:f7:8f:e9:19:b6:11:
12:6d:87:1d:ec:9c:c2:79:cd:6a:20:f8:13:1e:a3:03:99:74:
f7:02:78:81:df:bb:90:ab:b2:df:ef:4e:22:8e:b5:5b:1a:d4:
e3:b4:7e:ef:17:5d:f4:73:69:a1:dc:a3:c4:30:b0:1d:2b:14:
ee:5d:8c:d4:ed:f2:07:5c:49:7a:22:cb:83:99:66:e1:d0:3f:
e6:95:5b:1d:86:dc:f5:6d:b0:e0:82:e3:dc:11:94:7e:50:0b:
88:d9:a9:8b:f1:07:59:ae:d5:5b:18:d8:79:96:76:4d:57:9f:
70:dc:42:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZU+hftKIoBqoAN8PAEP/HQqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz
M2RiOTYwHhcNMjUwMjI1MTkxMjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2QzNWEzYWYyOTk5ZTI4OGQ4NjVlNzMxMzcyYWE0MTI3MDU0ZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlospPXTUbTy3tAgNDuiIfs9shExj
XjYzAYfVanSSDXHZgz9cZREajtm9i/ujaxzytm80+s0gLktECz/lg/N9iRygzFGP
nGnqiXpBr+2D9Xii61ISG5KptUPnUPGyBOjMvCUs1SJ4X5oGpz6iTgjRK2HKAskI
in8/y/OWMbHNk5zSsj2Erwk5giHwZKpktNs2s72id8w/iw4XhlrYV+ogaYTlAZhS
pkmKNN4sqSCqtR+6QBC0rik/t0MlSAh8SR13FrKtMC0kRkUQhMK3uQeac/zPvxrf
VoEFRdCYDg/N1WKEnssKkHD8UZ/M9Q1mdlcw2a2XZi/U7uX9RPksldQK3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFPTWjrymZ4ojYZecxNyqkEnBU+nMB8GA1UdIwQY
MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt
MmM3MDg2ZmRlZDkzLzEvVTlOYU92S1puaWlOaGw1ekUzS3FRU2NGVDZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz
LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWw4MA0G
CSqGSIb3DQEBCwUAA4IBAQAADZ5V5SdAMRrn1f2Wj78MtwSQDIXgprghj8GDgVc1
NIbJagaDKzvNPQCXq/Zu+lkWIqsfru3JR1mIkdPY0ONVdc2q9Dbq/y/3URlYP1Yq
fLwlTEQRjnw3P4GLIcN55S2E5Bq5c9ojbDUwV4qQCfrTXgXSiAsYSqTfymi3xELf
Roq4Jk38IIASTRD3j+kZthESbYcd7JzCec1qIPgTHqMDmXT3AniB37uQq7Lf704i
jrVbGtTjtH7vF130c2mh3KPEMLAdKxTuXYzU7fIHXEl6IsuDmWbh0D/mlVsdhtz1
bbDgguPcEZR+UAuI2amL8QdZrtVbGNh5lnZNV59w3EIm
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:40 2025 by rpki-client