Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/A-WEqq-qnquQ-k-HUeyR2Ta7Ai0.roa
File: A-WEqq-qnquQ-k-HUeyR2Ta7Ai0.roa (raw, json)
Hash identifier: ulBE+6XQU+CVKwFHEP6pOstPObSTz9LyM8DJtWKzepw=
Subject key identifier: 03:E5:84:AA:AF:AA:9E:AB:90:FA:4F:87:51:EC:91:D9:36:BB:02:2D
Certificate issuer: /CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Certificate serial: 019425FDC3E12D1C7876FE64ADF7DE190360
Authority key identifier: FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/A-WEqq-qnquQ-k-HUeyR2Ta7Ai0.roa
Signing time: Thu 02 Jan 2025 07:49:35 +0000
ROA not before: Thu 02 Jan 2025 07:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44392
IP address blocks: 195.93.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c3:e1:2d:1c:78:76:fe:64:ad:f7:de:19:03:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Validity
Not Before: Jan 2 07:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03e584aaafaa9eab90fa4f8751ec91d936bb022d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:53:76:32:93:16:21:60:c8:01:9a:fe:a7:29:
35:aa:fd:cd:11:5e:3c:3e:c6:e4:3f:7c:c0:87:76:
af:78:bc:9d:a4:6c:52:c7:ce:25:b7:ed:7d:c5:4c:
c0:61:ff:88:e7:54:0b:f6:ab:c4:dc:49:9b:9d:14:
f2:fd:73:51:02:f4:63:b1:4a:e3:5d:ae:1c:a9:61:
29:27:97:28:71:d6:3f:be:2f:15:cf:f0:f2:9c:10:
31:7d:22:ac:41:2d:45:7c:13:2b:bc:bd:2d:aa:8d:
9d:ee:01:0f:d1:71:f2:1c:65:56:90:58:5e:5e:75:
cb:03:bb:0d:36:5f:ad:5d:50:a8:1f:bd:95:35:7b:
c7:7e:1a:8f:72:34:cb:97:88:1e:dd:75:81:e1:87:
1b:1f:49:52:ab:f0:da:bd:17:66:8e:3f:ca:b2:3c:
43:a4:03:d4:73:19:7b:5a:35:08:62:5b:72:85:b7:
13:55:df:5d:88:8c:ef:7e:c2:29:a6:69:d9:34:15:
55:f1:5c:d7:de:8f:73:bd:24:be:d9:41:0f:ad:2b:
f6:5c:4e:a2:c3:f8:76:1a:2c:ad:b2:59:a5:ff:59:
bf:12:a6:02:8b:bc:85:ec:af:3f:a2:36:22:41:00:
49:0d:cc:90:27:e1:b4:74:08:e8:78:cc:89:47:48:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E5:84:AA:AF:AA:9E:AB:90:FA:4F:87:51:EC:91:D9:36:BB:02:2D
X509v3 Authority Key Identifier:
keyid:FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/A-WEqq-qnquQ-k-HUeyR2Ta7Ai0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.220.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:4e:07:d7:6b:06:ca:4e:26:f5:da:9c:0a:9d:07:21:4c:54:
e2:21:67:c3:79:c4:3b:bd:37:f2:b8:e6:c8:5d:bb:a3:3b:3c:
e3:50:85:7c:62:03:17:f0:d1:1d:57:0c:9d:d9:76:eb:c7:0a:
00:10:10:88:74:7b:2b:4f:a8:54:c3:e4:f1:af:2b:40:d9:e7:
1a:a5:84:dc:29:81:eb:56:42:c4:b5:ea:44:cd:ca:55:3d:37:
ba:96:ee:bd:ee:83:d6:c7:47:fa:d8:40:24:71:e4:71:76:ed:
d1:9f:11:26:e2:c2:c6:b2:4f:08:50:4b:7d:b9:b2:02:00:2a:
84:2d:94:eb:33:86:85:c7:95:d1:ca:24:f0:73:b5:aa:9a:58:
78:79:6c:34:6f:ce:c7:89:3a:5d:07:80:51:87:57:ed:74:ab:
a6:49:cb:c5:4f:61:77:03:62:73:12:db:d5:e0:64:7b:57:6b:
24:af:38:ec:6d:5a:40:be:50:81:61:2b:4d:7f:41:39:ab:b7:
be:18:f4:9f:62:b9:43:36:6c:d3:6a:10:0e:4f:05:53:89:64:
5a:91:f0:a0:44:fa:f3:45:1a:c4:28:be:06:42:02:bf:70:ac:
13:ea:b4:0c:2b:44:97:f0:80:34:89:58:44:91:dc:63:12:e3:
cc:4a:80:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/cPhLRx4dv5krffeGQNgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzRlZjIwMGJjOWQyN2U5ZWQ3ZjNiYzZiNWMwNTI5MmQ4
NDMyYmEwHhcNMjUwMTAyMDc0OTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2U1ODRhYWFmYWE5ZWFiOTBmYTRmODc1MWVjOTFkOTM2YmIwMjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVN2MpMWIWDIAZr+pyk1qv3NEV48
PsbkP3zAh3aveLydpGxSx84lt+19xUzAYf+I51QL9qvE3EmbnRTy/XNRAvRjsUrj
Xa4cqWEpJ5cocdY/vi8Vz/DynBAxfSKsQS1FfBMrvL0tqo2d7gEP0XHyHGVWkFhe
XnXLA7sNNl+tXVCoH72VNXvHfhqPcjTLl4ge3XWB4YcbH0lSq/DavRdmjj/KsjxD
pAPUcxl7WjUIYltyhbcTVd9diIzvfsIppmnZNBVV8VzX3o9zvSS+2UEPrSv2XE6i
w/h2Giytslml/1m/EqYCi7yF7K8/ojYiQQBJDcyQJ+G0dAjoeMyJR0g6uQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAPlhKqvqp6rkPpPh1Hskdk2uwItMB8GA1UdIwQY
MBaAFP7E7yALydJ+ntfzvGtcBSkthDK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jMDViODYtNmYxNi00OTY0LWE1MDMt
NWVjY2VjOGQ5M2I0LzEvQS1XRXFxLXFucXVRLWstSFVleVIyVGE3QWkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jMDViODYtNmYxNi00OTY0LWE1MDMtNWVjY2VjOGQ5M2I0
LzEvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw13cMA0G
CSqGSIb3DQEBCwUAA4IBAQAfTgfXawbKTib12pwKnQchTFTiIWfDecQ7vTfyuObI
XbujOzzjUIV8YgMX8NEdVwyd2XbrxwoAEBCIdHsrT6hUw+TxrytA2ecapYTcKYHr
VkLEtepEzcpVPTe6lu697oPWx0f62EAkceRxdu3RnxEm4sLGsk8IUEt9ubICACqE
LZTrM4aFx5XRyiTwc7Wqmlh4eWw0b87HiTpdB4BRh1ftdKumScvFT2F3A2JzEtvV
4GR7V2skrzjsbVpAvlCBYStNf0E5q7e+GPSfYrlDNmzTahAOTwVTiWRakfCgRPrz
RRrEKL4GQgK/cKwT6rQMK0SX8IA0iVhEkdxjEuPMSoAU
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:05 2025 by rpki-client