Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/qufcdPSdEtDaFtrISHEdLWv3S2M.roa
File: qufcdPSdEtDaFtrISHEdLWv3S2M.roa (raw, json)
Hash identifier: T2dPM9R1QKb1KXwCc1Gtxp+rTdBsb2KAhbC/WGxf99k=
Subject key identifier: AA:E7:DC:74:F4:9D:12:D0:DA:16:DA:C8:48:71:1D:2D:6B:F7:4B:63
Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial: 01951AACBBA320AFC1F1CEC025ACDC29F239
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/qufcdPSdEtDaFtrISHEdLWv3S2M.roa
Signing time: Tue 18 Feb 2025 20:08:02 +0000
ROA not before: Tue 18 Feb 2025 20:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.155.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1a:ac:bb:a3:20:af:c1:f1:ce:c0:25:ac:dc:29:f2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Validity
Not Before: Feb 18 20:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aae7dc74f49d12d0da16dac848711d2d6bf74b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7f:ae:9e:d7:74:c6:c4:59:6f:71:db:8d:54:
34:15:d0:52:0a:8a:3f:2c:5a:6b:64:29:bb:9b:59:
86:7a:5e:92:4c:60:d8:07:67:79:8a:2a:32:6c:89:
ba:ec:b5:7a:3b:04:3a:a3:6c:da:8b:4d:e5:6d:1e:
c8:3f:01:ea:13:a2:d3:41:c0:1e:1d:7b:b1:f2:fe:
6f:c0:54:d9:07:47:40:8d:96:ec:f8:73:98:4c:da:
37:6a:f8:35:0b:e3:10:1f:24:84:1f:8b:f4:91:34:
7b:f9:3f:c9:36:c0:f7:f5:5c:dc:1a:56:33:d3:dc:
ab:ce:b4:b1:fd:62:f9:21:06:bf:e4:d6:53:13:13:
36:3f:fe:13:0f:51:06:f5:f3:89:dd:fd:59:b2:b0:
a4:38:f2:f0:9d:16:dc:4c:a2:7b:6b:39:2c:4e:0f:
9c:1e:00:23:fb:1a:bf:25:6b:09:63:4c:66:50:9f:
58:92:bc:b0:78:8c:01:3a:dd:37:cb:72:b5:44:bd:
e6:c5:05:10:45:4f:17:8b:8b:3a:e0:94:d3:95:6a:
aa:3a:6c:9c:94:50:17:75:e8:b6:fc:a3:ea:55:4c:
5e:55:d0:bb:d9:b2:ab:69:ab:0a:ad:55:a9:49:16:
26:b2:3f:9c:84:cd:54:81:bf:49:bf:40:a0:24:79:
c7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E7:DC:74:F4:9D:12:D0:DA:16:DA:C8:48:71:1D:2D:6B:F7:4B:63
X509v3 Authority Key Identifier:
keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/qufcdPSdEtDaFtrISHEdLWv3S2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.155.237.0/24
Signature Algorithm: sha256WithRSAEncryption
94:15:1a:d8:f0:7c:fd:5a:6f:c7:df:4c:52:17:c6:c1:22:e4:
5a:f1:81:71:49:94:54:9e:90:e1:33:69:65:e0:13:c4:f8:9f:
37:61:2d:c8:82:b4:c2:2d:8a:ab:15:13:0b:16:9a:6e:a0:60:
97:9c:d0:fb:2a:82:d9:96:a2:d8:be:0f:25:df:0e:6b:1d:bf:
9c:44:26:76:fd:f7:b4:78:87:73:95:7c:cc:fe:f9:21:4e:fc:
eb:b1:fb:a6:58:dd:d6:a2:04:f9:0b:c1:a1:5b:e5:f0:ba:49:
59:b7:0d:2c:fd:77:fd:33:79:77:81:83:48:2c:ae:05:bd:a9:
97:00:a8:31:82:c0:d6:85:f0:45:ed:64:b5:2f:7b:b6:e4:0b:
2a:9e:f2:a9:a6:30:8c:80:f9:0d:c6:08:10:53:32:34:c8:d5:
1f:1f:20:4d:19:41:1b:50:13:a5:80:a7:12:03:3b:61:19:8c:
20:1e:36:fa:45:2c:dd:06:a8:2e:76:6b:1c:b5:a5:42:17:31:
70:d7:93:08:ac:bc:b6:bc:8e:ed:3b:ad:61:ec:4a:3e:f7:5d:
25:48:fa:35:2c:f0:57:38:83:08:98:04:8f:bc:31:b2:cd:da:
04:fa:69:e2:ad:9a:fb:39:5c:8e:78:5c:e6:29:43:a1:b3:2e:
23:74:eb:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUarLujIK/B8c7AJazcKfI5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMmQ0ZDJmYjc1YTc1NTlhMjBmNzk1NDhjNDU4NTQyZmQw
YTlhNGMwHhcNMjUwMjE4MjAwODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWU3ZGM3NGY0OWQxMmQwZGExNmRhYzg0ODcxMWQyZDZiZjc0YjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxX+untd0xsRZb3HbjVQ0FdBSCoo/
LFprZCm7m1mGel6STGDYB2d5iioybIm67LV6OwQ6o2zai03lbR7IPwHqE6LTQcAe
HXux8v5vwFTZB0dAjZbs+HOYTNo3avg1C+MQHySEH4v0kTR7+T/JNsD39VzcGlYz
09yrzrSx/WL5IQa/5NZTExM2P/4TD1EG9fOJ3f1ZsrCkOPLwnRbcTKJ7azksTg+c
HgAj+xq/JWsJY0xmUJ9YkryweIwBOt03y3K1RL3mxQUQRU8Xi4s64JTTlWqqOmyc
lFAXdei2/KPqVUxeVdC72bKraasKrVWpSRYmsj+chM1Ugb9Jv0CgJHnHtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKrn3HT0nRLQ2hbayEhxHS1r90tjMB8GA1UdIwQY
MBaAFNEtTS+3WnVZog95VIxFhUL9CppMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NzViZWYtOTcwYS00YjM3LWIxMmUt
MWVlY2Q1ODVkYjhjLzEvcXVmY2RQU2RFdERhRnRySVNIRWRMV3YzUzJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81NzViZWYtOTcwYS00YjM3LWIxMmUtMWVlY2Q1ODVkYjhj
LzEvMFMxTkw3ZGFkVm1pRDNsVWpFV0ZRdjBLbWt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZvtMA0G
CSqGSIb3DQEBCwUAA4IBAQCUFRrY8Hz9Wm/H30xSF8bBIuRa8YFxSZRUnpDhM2ll
4BPE+J83YS3IgrTCLYqrFRMLFppuoGCXnND7KoLZlqLYvg8l3w5rHb+cRCZ2/fe0
eIdzlXzM/vkhTvzrsfumWN3WogT5C8GhW+XwuklZtw0s/Xf9M3l3gYNILK4FvamX
AKgxgsDWhfBF7WS1L3u25AsqnvKppjCMgPkNxggQUzI0yNUfHyBNGUEbUBOlgKcS
AzthGYwgHjb6RSzdBqgudmsctaVCFzFw15MIrLy2vI7tO61h7Eo+910lSPo1LPBX
OIMImASPvDGyzdoE+mnirZr7OVyOeFzmKUOhsy4jdOu3
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:24:35 2025 by rpki-client