Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3f9886-04ee-4cd3-8a71-9d9624f54e91/1/IYPs6gX1YiRngBMUFbEc4VMrX1w.roa
File: IYPs6gX1YiRngBMUFbEc4VMrX1w.roa (raw, json)
Hash identifier: bjmN+t6ZgDZnnss026SG6UYNQT9+P5hK9f0C868LEkE=
Subject key identifier: 21:83:EC:EA:05:F5:62:24:67:80:13:14:15:B1:1C:E1:53:2B:5F:5C
Certificate issuer: /CN=fb4f903abf0939ae2a235a6b7dc443e1b98ebe3e
Certificate serial: 018572BA45416BFEA0557FECA8F5719F1B67
Authority key identifier: FB:4F:90:3A:BF:09:39:AE:2A:23:5A:6B:7D:C4:43:E1:B9:8E:BE:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0-QOr8JOa4qI1prfcRD4bmOvj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3f9886-04ee-4cd3-8a71-9d9624f54e91/1/IYPs6gX1YiRngBMUFbEc4VMrX1w.roa
Signing time: Mon 02 Jan 2023 13:44:48 +0000
ROA not before: Mon 02 Jan 2023 13:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201942
IP address blocks: 193.56.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:45:41:6b:fe:a0:55:7f:ec:a8:f5:71:9f:1b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb4f903abf0939ae2a235a6b7dc443e1b98ebe3e
Validity
Not Before: Jan 2 13:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2183ecea05f562246780131415b11ce1532b5f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:25:14:06:ea:a3:af:d1:65:4e:2a:a6:92:2f:
83:f5:51:e8:ef:6e:e3:0b:cf:08:2b:26:e8:f2:8a:
dd:f0:f8:78:0b:27:6f:0e:b6:ad:ae:65:38:e6:3f:
ac:1b:e4:f0:29:cf:9a:48:a1:b3:6d:89:96:99:fe:
be:e6:f3:7f:da:8c:52:2d:1e:fc:10:db:74:24:a6:
d2:40:68:a9:6f:9d:03:0b:30:0e:f8:1a:21:05:f3:
43:f5:49:21:b1:6b:32:fb:be:c7:ac:99:f2:f9:93:
ff:83:c2:5f:12:5b:75:df:9b:bd:4a:86:ed:48:dd:
78:33:a9:de:bc:9d:f5:7d:45:43:7f:3b:5a:11:d1:
ac:0d:66:53:f8:89:9d:34:a6:c8:68:81:d9:9e:f1:
0b:e0:2b:ba:50:18:69:22:48:6c:e6:be:a1:0e:c8:
23:86:85:ec:8b:57:10:06:40:ad:92:e5:00:bb:b7:
98:ae:48:9a:86:60:c7:f5:3c:c7:71:1c:42:1c:fe:
d5:ea:00:0a:1a:48:e5:a4:dd:6c:2a:ba:e7:cd:6e:
b3:c1:e2:f9:11:77:e7:59:c7:ce:4f:8d:4c:ed:c8:
f1:3b:d8:3a:d4:ec:b7:0f:65:46:bc:85:bf:35:d6:
18:72:4b:74:06:46:28:69:f2:c2:ba:35:f1:10:1b:
10:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:83:EC:EA:05:F5:62:24:67:80:13:14:15:B1:1C:E1:53:2B:5F:5C
X509v3 Authority Key Identifier:
keyid:FB:4F:90:3A:BF:09:39:AE:2A:23:5A:6B:7D:C4:43:E1:B9:8E:BE:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0-QOr8JOa4qI1prfcRD4bmOvj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f9886-04ee-4cd3-8a71-9d9624f54e91/1/IYPs6gX1YiRngBMUFbEc4VMrX1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f9886-04ee-4cd3-8a71-9d9624f54e91/1/1-0-QOr8JOa4qI1prfcRD4bmOvj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.3.0/24
Signature Algorithm: sha256WithRSAEncryption
41:ac:1d:c6:c7:d9:49:f0:1d:7d:3d:66:1f:80:c8:d8:b0:98:
b1:b6:73:d1:8b:01:b0:c3:7c:d3:c8:ef:97:fe:e3:f5:1b:6e:
3e:27:93:f1:3b:a0:24:a4:97:f1:04:2f:13:00:a2:89:c5:12:
d6:59:68:d4:5f:10:14:de:f8:b9:f4:5e:7e:8f:c9:bb:82:e3:
9a:d8:9b:51:6a:e6:ce:c1:82:56:3d:43:61:fa:aa:d1:7c:7c:
cc:ab:59:37:dc:5d:5b:0d:a9:31:a3:65:ab:82:a1:d1:ff:46:
20:39:8d:30:0e:ed:65:9f:25:75:24:86:ad:21:9c:41:4e:46:
a9:52:fd:4e:26:a7:c6:67:7c:4f:46:ec:93:24:12:5d:de:a1:
ad:08:86:a1:08:c7:b9:0c:9e:59:f9:40:6e:d2:6b:04:da:e7:
80:ec:fe:71:b8:ae:42:c8:87:22:2a:e0:74:f1:1d:96:6f:30:
c0:1d:c0:3a:c0:43:29:96:84:f0:c6:40:f2:75:c4:a0:84:ec:
d2:84:8b:51:ad:32:a5:b2:91:95:6a:b6:0b:eb:ef:32:9e:43:
91:a4:bf:81:a8:c3:cc:25:40:39:ab:3a:24:04:16:1b:39:18:
ed:aa:de:9e:e9:1d:22:87:8e:27:64:e1:a9:ff:51:4e:43:d4:
48:a0:c6:c1
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVyukVBa/6gVX/sqPVxnxtnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNGY5MDNhYmYwOTM5YWUyYTIzNWE2YjdkYzQ0M2UxYjk4
ZWJlM2UwHhcNMjMwMTAyMTM0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTgzZWNlYTA1ZjU2MjI0Njc4MDEzMTQxNWIxMWNlMTUzMmI1ZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCUUBuqjr9FlTiqmki+D9VHo727j
C88IKybo8ord8Ph4CydvDratrmU45j+sG+TwKc+aSKGzbYmWmf6+5vN/2oxSLR78
ENt0JKbSQGipb50DCzAO+BohBfND9UkhsWsy+77HrJny+ZP/g8JfElt135u9Sobt
SN14M6nevJ31fUVDfztaEdGsDWZT+ImdNKbIaIHZnvEL4Cu6UBhpIkhs5r6hDsgj
hoXsi1cQBkCtkuUAu7eYrkiahmDH9TzHcRxCHP7V6gAKGkjlpN1sKrrnzW6zweL5
EXfnWcfOT41M7cjxO9g61Oy3D2VGvIW/NdYYckt0BkYoafLCujXxEBsQWQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFCGD7OoF9WIkZ4ATFBWxHOFTK19cMB8GA1UdIwQY
MBaAFPtPkDq/CTmuKiNaa33EQ+G5jr4+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0wLVFPcjhKT2E0cUkxcHJmY1JENGJtT3ZqNC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvM2Y5ODg2LTA0ZWUtNGNkMy04YTcx
LTlkOTYyNGY1NGU5MS8xL0lZUHM2Z1gxWWlSbmdCTVVGYkVjNFZNclgxdy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDUvM2Y5ODg2LTA0ZWUtNGNkMy04YTcxLTlkOTYyNGY1NGU5
MS8xLzEtMC1RT3I4Sk9hNHFJMXByZmNSRDRibU92ajQuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBOAMw
DQYJKoZIhvcNAQELBQADggEBAEGsHcbH2UnwHX09Zh+AyNiwmLG2c9GLAbDDfNPI
75f+4/Ubbj4nk/E7oCSkl/EELxMAoonFEtZZaNRfEBTe+Ln0Xn6PybuC45rYm1Fq
5s7BglY9Q2H6qtF8fMyrWTfcXVsNqTGjZauCodH/RiA5jTAO7WWfJXUkhq0hnEFO
RqlS/U4mp8ZnfE9G7JMkEl3eoa0IhqEIx7kMnln5QG7SawTa54Ds/nG4rkLIhyIq
4HTxHZZvMMAdwDrAQymWhPDGQPJ1xKCE7NKEi1GtMqWykZVqtgvr7zKeQ5Gkv4Go
w8wlQDmrOiQEFhs5GO2q3p7pHSKHjidk4an/UU5D1EigxsE=
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:43:07 2025 by rpki-client