Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/KXyP5a-ORSrqdUpeeV2CLDBipn8.roa
File: KXyP5a-ORSrqdUpeeV2CLDBipn8.roa (raw, json)
Hash identifier: dYrNGgyuXaPzH5ttLP9eAZD5QCocmnzqurlk1U+k9qo=
Subject key identifier: 29:7C:8F:E5:AF:8E:45:2A:EA:75:4A:5E:79:5D:82:2C:30:62:A6:7F
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0185714C17B0C6EF5CF342E9C85E1A6DD4CA
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/KXyP5a-ORSrqdUpeeV2CLDBipn8.roa
Signing time: Mon 02 Jan 2023 07:04:50 +0000
ROA not before: Mon 02 Jan 2023 07:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210703
IP address blocks: 194.150.205.0/24 maxlen: 24
194.150.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:17:b0:c6:ef:5c:f3:42:e9:c8:5e:1a:6d:d4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Jan 2 07:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=297c8fe5af8e452aea754a5e795d822c3062a67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:34:e7:57:94:da:c2:f3:f0:c2:9e:f4:55:5b:
71:06:dd:e1:8e:d0:42:2d:37:f2:67:a0:65:91:36:
a0:69:f3:d6:e1:78:ab:40:77:e3:4c:ea:6d:95:33:
99:17:08:13:d5:69:b8:5a:da:d3:ef:47:30:62:be:
39:a8:97:d8:7a:f3:15:8b:08:5c:87:bd:8e:a4:49:
44:ac:d7:53:0d:2d:a0:84:8f:17:45:80:6f:72:92:
54:e2:30:9a:6b:71:e0:dd:ef:73:ec:4e:13:6b:6f:
dc:22:d1:7e:bd:d8:55:7c:d9:a7:0b:92:fd:77:23:
bf:6d:d0:6b:05:41:60:e9:c7:e7:25:81:1e:da:42:
41:21:e3:db:4b:a5:5e:ca:af:b3:16:c7:e0:16:43:
22:ed:d2:56:95:6f:d6:bb:9a:0f:a0:ff:7b:47:ad:
f0:f8:6c:ea:ef:c9:6d:bc:af:b0:c8:8a:1c:7a:e5:
28:a9:26:5f:cc:09:28:e5:b8:a6:7f:36:f6:fb:22:
61:35:a2:fd:8b:08:68:a5:62:8e:97:6a:21:25:88:
9c:8d:b5:4e:b0:4b:c2:2c:35:fd:c5:d8:24:68:d1:
94:07:d2:c1:1b:68:4b:d4:29:31:fc:f9:63:51:58:
91:85:cb:37:e6:4b:da:63:75:f5:e0:1b:6f:9f:d3:
98:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7C:8F:E5:AF:8E:45:2A:EA:75:4A:5E:79:5D:82:2C:30:62:A6:7F
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/KXyP5a-ORSrqdUpeeV2CLDBipn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.205.0/24
194.150.210.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:b4:2f:96:e4:f1:4a:18:4c:a8:76:26:65:ae:ed:5a:71:66:
8b:9b:98:c6:bd:8f:79:70:bf:93:37:25:f7:99:fd:de:e9:f3:
2b:73:9a:e1:a3:e2:71:d6:62:6b:27:50:fb:f5:9c:b6:d1:f7:
e6:45:d0:0d:e2:43:ea:b0:cb:21:c4:f4:39:cb:f0:d4:b6:82:
43:8e:d5:bd:6b:2d:9a:4c:0e:58:f2:46:61:e2:2a:e0:91:7f:
54:87:b6:d2:42:56:dd:db:c8:6d:47:cf:e0:d3:f1:d5:26:68:
99:03:ea:06:90:a0:99:13:b9:b6:3a:93:6f:7f:b5:ca:22:f4:
23:98:e0:95:e5:8d:af:0a:10:5f:b8:2a:da:20:f6:a2:e2:ab:
13:fa:9b:50:e2:12:de:77:bd:8f:7c:78:02:5e:3c:b5:42:31:
e8:cb:89:a1:b7:11:ea:48:ca:9a:74:d9:35:b5:37:db:2a:9c:
57:b0:62:5e:2c:50:8a:ca:7a:a0:39:10:58:3d:aa:42:7f:8a:
0f:4e:47:ef:38:cb:cd:f9:96:7c:ed:53:2d:78:7d:70:22:14:
63:77:60:bd:c9:5d:80:98:1f:40:63:ab:a7:d7:ce:1a:72:43:
f8:2b:e2:23:0c:e0:9b:d4:3a:e5:60:3d:bb:a2:46:20:6d:de:
38:a0:63:05
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVxTBewxu9c80LpyF4abdTKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWNmMTBiODg3ZjA4NTg4N2RlOGIyZGI2NDkxN2VlMmU0
MjQ1NDUwHhcNMjMwMTAyMDcwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTdjOGZlNWFmOGU0NTJhZWE3NTRhNWU3OTVkODIyYzMwNjJhNjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzTnV5TawvPwwp70VVtxBt3hjtBC
LTfyZ6BlkTagafPW4XirQHfjTOptlTOZFwgT1Wm4WtrT70cwYr45qJfYevMViwhc
h72OpElErNdTDS2ghI8XRYBvcpJU4jCaa3Hg3e9z7E4Ta2/cItF+vdhVfNmnC5L9
dyO/bdBrBUFg6cfnJYEe2kJBIePbS6Veyq+zFsfgFkMi7dJWlW/Wu5oPoP97R63w
+Gzq78ltvK+wyIoceuUoqSZfzAko5bimfzb2+yJhNaL9iwhopWKOl2ohJYicjbVO
sEvCLDX9xdgkaNGUB9LBG2hL1Ckx/PljUViRhcs35kvaY3X14Btvn9OYRQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCl8j+WvjkUq6nVKXnldgiwwYqZ/MB8GA1UdIwQY
MBaAFBPs8QuIfwhYh96LLbZJF+4uQkVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODkt
YmQ5YjQyZjQ4ZGRlLzEvS1h5UDVhLU9SU3JxZFVwZWVWMkNMREJpcG44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jNDVhOWItNTA5Ni00ZTc1LTkzODktYmQ5YjQyZjQ4ZGRl
LzEvRS16eEM0aF9DRmlIM29zdHRra1g3aTVDUlVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwpbNAwQA
wpbSMA0GCSqGSIb3DQEBCwUAA4IBAQBMtC+W5PFKGEyodiZlru1acWaLm5jGvY95
cL+TNyX3mf3e6fMrc5rho+Jx1mJrJ1D79Zy20ffmRdAN4kPqsMshxPQ5y/DUtoJD
jtW9ay2aTA5Y8kZh4irgkX9Uh7bSQlbd28htR8/g0/HVJmiZA+oGkKCZE7m2OpNv
f7XKIvQjmOCV5Y2vChBfuCraIPai4qsT+ptQ4hLed72PfHgCXjy1QjHoy4mhtxHq
SMqadNk1tTfbKpxXsGJeLFCKynqgORBYPapCf4oPTkfvOMvN+ZZ87VMteH1wIhRj
d2C9yV2AmB9AY6un184ackP4K+IjDOCb1DrlYD27okYgbd44oGMF
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:41:22 2025 by rpki-client