Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/n5VeWxWY2oln-vj_zTDzIZhKJ7o.roa
File: n5VeWxWY2oln-vj_zTDzIZhKJ7o.roa (raw, json)
Hash identifier: EqXQvSt0GevvMEuCg+rO4QMkho9ipRnxxaSoCAV/oqA=
Subject key identifier: 9F:95:5E:5B:15:98:DA:89:67:FA:F8:FF:CD:30:F3:21:98:4A:27:BA
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BEC48CFABA75801748E03A273E266
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/n5VeWxWY2oln-vj_zTDzIZhKJ7o.roa
Signing time: Thu 02 Jan 2025 09:49:54 +0000
ROA not before: Thu 02 Jan 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201373
IP address blocks: 193.192.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ec:48:cf:ab:a7:58:01:74:8e:03:a2:73:e2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f955e5b1598da8967faf8ffcd30f321984a27ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:65:90:c3:24:d8:1a:64:91:72:6f:3f:61:75:
07:f0:7d:d1:d4:b1:fc:ec:e9:1d:c0:f3:6d:e8:88:
d7:8d:9a:04:a9:7a:87:6e:e3:32:8c:3c:ac:75:07:
16:c1:a4:51:07:a6:da:26:f3:da:fc:d6:9d:cd:68:
34:27:7b:76:ad:99:04:4b:23:25:01:1f:09:dd:5c:
9b:ca:8c:82:18:56:2b:11:e5:28:30:ee:0c:07:a8:
71:f7:f7:4f:b5:02:1e:e9:64:d5:d4:fd:cc:85:78:
a5:79:17:d9:e5:f4:b6:bd:a5:f2:3d:58:ec:61:e0:
81:0a:b8:23:ff:36:d8:77:44:ca:86:e5:95:9a:cc:
53:38:f8:01:a2:26:84:90:0a:58:55:45:4b:22:0a:
4e:90:b4:d9:d2:ba:7f:b5:08:26:2d:72:a7:63:65:
96:af:db:18:22:fd:a1:7a:37:66:b1:b2:77:14:40:
52:e5:23:95:02:d6:6a:e0:28:27:d0:e5:9d:ff:a1:
4b:6a:9c:76:26:b2:16:4e:64:83:3b:25:03:17:66:
85:3e:54:7b:e2:4f:a9:46:f4:ca:da:0f:73:be:0c:
45:1a:82:d7:77:22:1d:bf:1c:97:ab:05:a5:78:ac:
3d:c6:5e:4c:d0:2c:a3:08:da:e3:6f:d2:c1:85:eb:
f2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:95:5E:5B:15:98:DA:89:67:FA:F8:FF:CD:30:F3:21:98:4A:27:BA
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/n5VeWxWY2oln-vj_zTDzIZhKJ7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.190.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:86:d4:ab:da:c6:bb:fb:65:96:90:4d:ae:49:f3:13:75:3a:
22:ad:8a:3d:32:fa:6f:28:cb:fa:62:cb:18:d8:12:e9:11:b2:
3a:5d:ca:22:81:6f:23:78:07:98:11:2a:08:b1:dc:a2:e7:d6:
0c:1c:5c:6b:53:32:8c:f7:3f:06:7e:4b:90:74:ec:db:da:39:
ed:81:4e:48:49:03:db:bc:3e:68:78:02:fd:bc:60:a0:18:a0:
94:c0:44:1e:15:b4:30:f2:e7:ac:97:bd:ab:89:18:fd:f2:04:
66:c9:d0:76:ff:7b:b8:56:ec:cd:ea:32:44:be:bf:7d:f3:c2:
d8:cd:b1:9f:76:de:bb:19:f6:c3:8e:af:ea:a8:47:ad:50:6c:
88:b3:02:05:e2:0f:78:9a:0b:75:f9:c8:ea:94:08:62:7d:ff:
2f:a7:e6:88:a6:16:5d:84:84:db:01:c0:1d:69:39:06:28:be:
1e:18:d4:98:6e:2e:a4:91:d5:23:a3:96:2c:d7:57:0a:c8:67:
89:26:b9:0f:0e:a6:a8:86:07:3a:39:88:9c:ab:5e:f2:35:ec:
b4:08:66:8d:3c:c0:44:63:d5:66:29:99:c4:a1:77:9b:4e:31:
58:2f:c9:94:cd:5c:71:2c:ea:e8:07:e3:41:48:cd:69:56:84:
10:23:b0:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma+xIz6unWAF0jgOic+JmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjUwMTAyMDk0OTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Zjk1NWU1YjE1OThkYTg5NjdmYWY4ZmZjZDMwZjMyMTk4NGEyN2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGWQwyTYGmSRcm8/YXUH8H3R1LH8
7OkdwPNt6IjXjZoEqXqHbuMyjDysdQcWwaRRB6baJvPa/NadzWg0J3t2rZkESyMl
AR8J3VybyoyCGFYrEeUoMO4MB6hx9/dPtQIe6WTV1P3MhXileRfZ5fS2vaXyPVjs
YeCBCrgj/zbYd0TKhuWVmsxTOPgBoiaEkApYVUVLIgpOkLTZ0rp/tQgmLXKnY2WW
r9sYIv2hejdmsbJ3FEBS5SOVAtZq4Cgn0OWd/6FLapx2JrIWTmSDOyUDF2aFPlR7
4k+pRvTK2g9zvgxFGoLXdyIdvxyXqwWleKw9xl5M0CyjCNrjb9LBhevyKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ+VXlsVmNqJZ/r4/80w8yGYSie6MB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvbjVWZVd4V1kyb2xuLXZqX3pURHpJWmhLSjdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcC+MA0G
CSqGSIb3DQEBCwUAA4IBAQBehtSr2sa7+2WWkE2uSfMTdToirYo9MvpvKMv6YssY
2BLpEbI6XcoigW8jeAeYESoIsdyi59YMHFxrUzKM9z8GfkuQdOzb2jntgU5ISQPb
vD5oeAL9vGCgGKCUwEQeFbQw8uesl72riRj98gRmydB2/3u4VuzN6jJEvr9988LY
zbGfdt67GfbDjq/qqEetUGyIswIF4g94mgt1+cjqlAhiff8vp+aIphZdhITbAcAd
aTkGKL4eGNSYbi6kkdUjo5Ys11cKyGeJJrkPDqaohgc6OYicq17yNey0CGaNPMBE
Y9VmKZnEoXebTjFYL8mUzVxxLOroB+NBSM1pVoQQI7AI
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:09:52 2025 by rpki-client