Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/SUTq95jZGn01xBhvy-cioZ9ezMI.roa
File: SUTq95jZGn01xBhvy-cioZ9ezMI.roa (raw, json)
Hash identifier: Mk9pTZw1hwTUNlJaQeetrnC5qoDPjWplIunqAj6Dg7E=
Subject key identifier: 49:44:EA:F7:98:D9:1A:7D:35:C4:18:6F:CB:E7:22:A1:9F:5E:CC:C2
Certificate issuer: /CN=5990c1553762ac9af57df9b58d9dc50af409c566
Certificate serial: 03FB9A18
Authority key identifier: 59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/SUTq95jZGn01xBhvy-cioZ9ezMI.roa
Signing time: Sat 01 Jan 2022 11:59:08 +0000
ROA not before: Sat 01 Jan 2022 11:59:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49801
IP address blocks: 193.29.18.0/24 maxlen: 24
193.29.26.0/24 maxlen: 24
2a10:f980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66820632 (0x3fb9a18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5990c1553762ac9af57df9b58d9dc50af409c566
Validity
Not Before: Jan 1 11:59:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4944eaf798d91a7d35c4186fcbe722a19f5eccc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:c3:2b:17:a0:61:b6:40:d5:62:db:53:f1:
d4:b8:da:62:ea:d2:9f:4c:23:4d:f4:e1:da:dd:7c:
6e:09:3a:5d:8f:35:69:61:7d:f0:23:5d:1e:bc:50:
dd:9e:7b:06:8b:ae:c6:e0:f8:74:55:4d:c3:6b:05:
7b:c9:f7:f9:4e:1d:5f:ce:3a:bb:b0:6a:9c:9d:b1:
cf:73:ec:fd:a7:88:5a:d4:86:9a:24:ef:f7:58:f6:
fa:be:da:2d:d5:d6:d3:13:ac:fe:a7:a3:bc:54:56:
1d:43:fe:99:fe:59:6b:4c:b5:f6:48:41:ca:f9:c7:
01:34:45:7a:70:26:9b:3e:00:10:95:71:82:a9:53:
31:54:23:88:b2:d6:3e:17:f7:a7:ed:71:88:84:c9:
a1:97:36:60:74:1e:4c:bc:68:e3:de:63:55:4e:4b:
32:3b:ce:8c:8a:9c:76:26:0a:6f:b4:16:c6:2e:e3:
17:5b:93:5d:50:d7:1e:6b:49:5e:41:ff:75:82:f6:
79:6b:ac:cc:d1:f1:95:b9:14:f8:8c:06:79:d6:ee:
a0:5b:11:be:88:30:09:a2:3b:cb:c2:60:5a:31:d7:
f6:f5:b5:0b:6a:66:5e:30:7d:f6:25:6e:50:20:90:
cd:ea:a4:0d:a7:ed:92:b1:cb:9c:50:fa:22:10:0e:
b4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:44:EA:F7:98:D9:1A:7D:35:C4:18:6F:CB:E7:22:A1:9F:5E:CC:C2
X509v3 Authority Key Identifier:
keyid:59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/SUTq95jZGn01xBhvy-cioZ9ezMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.18.0/24
193.29.26.0/24
IPv6:
2a10:f980::/29
Signature Algorithm: sha256WithRSAEncryption
a1:ed:50:76:6d:0e:3d:5f:e8:2e:56:cb:d1:92:64:fc:96:07:
66:0a:38:13:68:11:09:7a:8f:50:fa:7b:11:a9:87:11:d1:2b:
ac:97:63:8c:6d:57:e8:df:2d:cb:6c:17:48:15:2a:01:9f:70:
20:06:7b:dc:95:26:18:af:d3:cd:09:6d:43:c5:50:8f:4c:4b:
33:71:ae:fb:96:c0:13:60:6d:23:4c:ba:5e:04:90:ed:ff:e9:
6c:3d:14:e7:1b:a4:4b:b8:6c:51:a5:ac:54:e7:19:6c:b2:01:
40:4b:7b:8a:0b:e7:10:9c:11:b4:84:e8:e8:db:96:c1:1d:a1:
7f:f2:09:47:53:a4:d6:1d:72:96:4e:4f:f0:b6:e4:bf:10:38:
a1:ef:63:bc:b4:10:ad:5e:95:b3:89:05:ae:13:d5:2e:76:c3:
85:c7:3e:5f:95:83:6f:54:30:ad:a0:4f:05:78:43:e4:b6:16:
94:d7:da:cf:16:ef:52:ea:65:2e:f4:21:04:a3:d3:02:69:b6:
5a:31:82:07:30:61:17:31:b2:70:56:55:20:57:cb:bd:8e:3e:
16:3d:65:33:ca:f8:9d:49:3a:34:23:cb:3c:1d:c6:a4:ed:34:
12:38:dd:80:5b:4e:3a:93:fa:26:93:1b:ab:55:cd:aa:18:1c:
03:ee:96:a5
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEA/uaGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
OTkwYzE1NTM3NjJhYzlhZjU3ZGY5YjU4ZDlkYzUwYWY0MDljNTY2MB4XDTIyMDEw
MTExNTkwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDk0NGVhZjc5OGQ5
MWE3ZDM1YzQxODZmY2JlNzIyYTE5ZjVlY2NjMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALMXwysXoGG2QNVi21Px1LjaYurSn0wjTfTh2t18bgk6XY81
aWF98CNdHrxQ3Z57BouuxuD4dFVNw2sFe8n3+U4dX846u7BqnJ2xz3Ps/aeIWtSG
miTv91j2+r7aLdXW0xOs/qejvFRWHUP+mf5Za0y19khByvnHATRFenAmmz4AEJVx
gqlTMVQjiLLWPhf3p+1xiITJoZc2YHQeTLxo495jVU5LMjvOjIqcdiYKb7QWxi7j
F1uTXVDXHmtJXkH/dYL2eWuszNHxlbkU+IwGedbuoFsRvogwCaI7y8JgWjHX9vW1
C2pmXjB99iVuUCCQzeqkDaftkrHLnFD6IhAOtNkCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBRJROr3mNkafTXEGG/L5yKhn17MwjAfBgNVHSMEGDAWgBRZkMFVN2KsmvV9
+bWNncUK9AnFZjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1daREJWVGRpckpyMWZmbTFqWjNGQ3ZRSnhXWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvYThmOGUxLWRjZTItNDdlZi04MjRlLWJlZjEwMzRlZGJlNS8x
L1NVVHE5NWpaR24wMXhCaHZ5LWNpb1o5ZXpNSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
YThmOGUxLWRjZTItNDdlZi04MjRlLWJlZjEwMzRlZGJlNS8xL1daREJWVGRpckpy
MWZmbTFqWjNGQ3ZRSnhXWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAMEdEgMEAMEdGjANBAIAAjAHAwUD
KhD5gDANBgkqhkiG9w0BAQsFAAOCAQEAoe1Qdm0OPV/oLlbL0ZJk/JYHZgo4E2gR
CXqPUPp7EamHEdErrJdjjG1X6N8ty2wXSBUqAZ9wIAZ73JUmGK/TzQltQ8VQj0xL
M3Gu+5bAE2BtI0y6XgSQ7f/pbD0U5xukS7hsUaWsVOcZbLIBQEt7igvnEJwRtITo
6NuWwR2hf/IJR1Ok1h1ylk5P8LbkvxA4oe9jvLQQrV6Vs4kFrhPVLnbDhcc+X5WD
b1QwraBPBXhD5LYWlNfazxbvUuplLvQhBKPTAmm2WjGCBzBhFzGycFZVIFfLvY4+
Fj1lM8r4nUk6NCPLPB3GpO00EjjdgFtOOpP6JpMbq1XNqhgcA+6WpQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:56:43 2025 by rpki-client