Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/En56MrvrAc2ZjznO-sVnuE-LhdM.roa
File: En56MrvrAc2ZjznO-sVnuE-LhdM.roa (raw, json)
Hash identifier: HqjVdQwx3YyRZrFCjkQ3kR6h3z6cMZaI4IEZAgx0eDw=
Subject key identifier: 12:7E:7A:32:BB:EB:01:CD:99:8F:39:CE:FA:C5:67:B8:4F:8B:85:D3
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 019424B3D4420090108BA20ADEF03B8E2529
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/En56MrvrAc2ZjznO-sVnuE-LhdM.roa
Signing time: Thu 02 Jan 2025 01:49:12 +0000
ROA not before: Thu 02 Jan 2025 01:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34763
IP address blocks: 193.84.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d4:42:00:90:10:8b:a2:0a:de:f0:3b:8e:25:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Jan 2 01:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=127e7a32bbeb01cd998f39cefac567b84f8b85d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c5:5f:91:f4:8b:95:96:22:1e:ca:a1:c3:24:
8a:ac:83:6a:7f:db:1f:dd:59:c1:27:0a:91:10:1a:
40:b7:56:a8:37:2e:b1:ed:64:53:d5:97:cf:76:a8:
2d:1d:a1:04:fb:ea:7c:af:cd:8c:c8:b0:34:47:04:
6b:c3:08:a7:79:44:76:22:38:9c:82:f6:42:1f:5d:
7e:27:59:6e:86:20:0c:bf:3e:bf:f3:9e:1e:47:a7:
34:83:2f:d4:b9:15:20:e7:67:e7:43:c7:97:03:94:
9a:32:a5:53:67:83:10:d0:95:d2:98:43:9b:01:06:
49:29:e9:43:7e:25:28:5b:bd:0e:c2:24:c7:f4:13:
7f:ca:97:32:4c:79:29:d8:fc:65:af:de:11:53:c6:
11:30:7c:ac:83:0c:3a:62:c4:74:c3:f7:53:78:28:
8b:f0:a0:4b:2f:df:6a:13:d9:68:c0:8c:10:78:8c:
27:09:a7:a9:ae:c3:4e:22:c9:57:5f:69:63:0d:76:
94:d1:fe:9a:57:bb:a9:3d:5a:7f:c0:d1:c9:b9:5e:
7e:e7:4a:5c:46:60:28:52:a4:69:b3:e6:cf:d5:a6:
02:03:7e:87:a9:8c:1c:88:83:9b:f4:13:85:fb:6f:
d5:c4:b0:56:b4:e4:15:b1:3c:93:27:74:61:67:38:
31:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7E:7A:32:BB:EB:01:CD:99:8F:39:CE:FA:C5:67:B8:4F:8B:85:D3
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/En56MrvrAc2ZjznO-sVnuE-LhdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.119.0/24
Signature Algorithm: sha256WithRSAEncryption
40:54:82:01:44:e9:0f:d1:1b:c4:16:6b:9f:d2:29:b1:18:c4:
29:48:c3:63:f9:12:2e:96:62:b9:20:a9:e0:fb:06:44:c7:03:
94:d7:d1:96:93:86:b4:84:79:78:80:1c:00:a0:99:24:e3:7d:
dd:c4:5e:20:0c:09:f8:29:10:7e:3a:90:03:b4:57:60:24:cd:
de:ba:5b:4b:e8:38:11:9a:99:50:f6:f8:0e:0c:35:c3:ec:2d:
bd:bc:c2:18:95:84:e0:9d:1c:7d:16:77:5e:14:dc:8a:b7:37:
df:33:db:f2:31:3b:0f:70:b3:31:73:80:79:f2:98:22:c3:1f:
9f:2c:23:c8:f6:e1:c7:54:97:c4:39:12:85:a0:16:dd:f8:60:
80:96:69:c4:a3:23:98:cc:04:77:43:52:06:c6:da:04:a5:46:
64:2d:1c:ef:cd:75:ff:63:46:42:61:62:02:c4:0f:6c:50:f0:
08:b6:26:93:85:49:c3:bd:39:7e:f0:58:64:6d:f3:73:c2:2b:
c3:24:5a:0a:d1:03:bd:8d:d1:c2:78:a9:68:9c:1e:c6:30:2e:
f6:d5:52:41:ca:17:f0:a6:88:41:c6:0f:4a:28:93:80:f0:82:
c9:7e:2b:02:0c:49:4b:48:6e:3e:45:d1:5f:7a:57:65:08:f4:
0c:c6:d6:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks9RCAJAQi6IK3vA7jiUpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNGQ4NmFmYjU5ZjFkOWRkMTZjMTEyNTAwOWI5OTgzODJl
MzZlZDMwHhcNMjUwMTAyMDE0OTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjdlN2EzMmJiZWIwMWNkOTk4ZjM5Y2VmYWM1NjdiODRmOGI4NWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysVfkfSLlZYiHsqhwySKrINqf9sf
3VnBJwqREBpAt1aoNy6x7WRT1ZfPdqgtHaEE++p8r82MyLA0RwRrwwineUR2Ijic
gvZCH11+J1luhiAMvz6/854eR6c0gy/UuRUg52fnQ8eXA5SaMqVTZ4MQ0JXSmEOb
AQZJKelDfiUoW70OwiTH9BN/ypcyTHkp2Pxlr94RU8YRMHysgww6YsR0w/dTeCiL
8KBLL99qE9lowIwQeIwnCaeprsNOIslXX2ljDXaU0f6aV7upPVp/wNHJuV5+50pc
RmAoUqRps+bP1aYCA36HqYwciIOb9BOF+2/VxLBWtOQVsTyTJ3RhZzgxZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBJ+ejK76wHNmY85zvrFZ7hPi4XTMB8GA1UdIwQY
MBaAFJxNhq+1nx2d0WwRJQCbmYOC427TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgt
ZjRmMDU2MWI3YTU3LzEvRW41Nk1ydnJBYzJaanpuTy1zVm51RS1MaGRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgtZjRmMDU2MWI3YTU3
LzEvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwVR3MA0G
CSqGSIb3DQEBCwUAA4IBAQBAVIIBROkP0RvEFmuf0imxGMQpSMNj+RIulmK5IKng
+wZExwOU19GWk4a0hHl4gBwAoJkk433dxF4gDAn4KRB+OpADtFdgJM3eultL6DgR
mplQ9vgODDXD7C29vMIYlYTgnRx9FndeFNyKtzffM9vyMTsPcLMxc4B58pgiwx+f
LCPI9uHHVJfEORKFoBbd+GCAlmnEoyOYzAR3Q1IGxtoEpUZkLRzvzXX/Y0ZCYWIC
xA9sUPAItiaThUnDvTl+8FhkbfNzwivDJFoK0QO9jdHCeKlonB7GMC721VJByhfw
pohBxg9KKJOA8ILJfisCDElLSG4+RdFfeldlCPQMxtZS
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:52 2025 by rpki-client