Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bc94aa-9615-4e33-9412-a3c0b89f1000/1/NxU-KBucMyXEiT7eVeS-IaBklZc.roa
File: NxU-KBucMyXEiT7eVeS-IaBklZc.roa (raw, json)
Hash identifier: XA+lFm5rsS7H00CZ0Qipf412sj8reiTsa9Lcoe7TMHg=
Subject key identifier: 37:15:3E:28:1B:9C:33:25:C4:89:3E:DE:55:E4:BE:21:A0:64:95:97
Certificate issuer: /CN=ebaf6e5387c9d95b84c010794a9f0c8db9d7f53d
Certificate serial: 03E7266F
Authority key identifier: EB:AF:6E:53:87:C9:D9:5B:84:C0:10:79:4A:9F:0C:8D:B9:D7:F5:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/669uU4fJ2VuEwBB5Sp8MjbnX9T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bc94aa-9615-4e33-9412-a3c0b89f1000/1/NxU-KBucMyXEiT7eVeS-IaBklZc.roa
Signing time: Sat 01 Jan 2022 10:01:44 +0000
ROA not before: Sat 01 Jan 2022 10:01:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42927
IP address blocks: 193.186.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65480303 (0x3e7266f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf6e5387c9d95b84c010794a9f0c8db9d7f53d
Validity
Not Before: Jan 1 10:01:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37153e281b9c3325c4893ede55e4be21a0649597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e1:33:eb:4b:86:08:82:3b:0d:d8:7e:11:16:
c2:77:8a:9a:44:14:8a:98:45:23:02:a8:34:ed:ee:
89:d7:09:e8:8d:84:75:03:e4:60:f1:9e:1c:74:03:
45:9e:05:56:d2:c0:a2:e8:ad:72:87:a1:da:05:14:
d2:23:a3:f8:2c:8d:87:cc:d6:46:17:2a:f6:bb:b2:
c7:f0:90:f6:1b:e5:a5:1d:f9:84:c2:fc:73:8a:f6:
8d:3b:3a:00:70:89:75:97:7a:66:ce:e4:50:14:d4:
96:60:43:dc:68:a6:ca:2c:e3:f3:4d:7f:3e:8a:31:
46:85:2e:63:db:51:80:82:9f:6f:d5:ec:ac:ba:4f:
9f:92:c0:6d:15:48:0f:61:e7:f0:59:75:d5:88:4b:
bd:04:9a:87:f4:02:40:ab:ae:67:5b:59:52:3d:f0:
d5:9d:ca:54:57:85:93:cf:1e:78:d0:44:3b:03:ef:
25:f4:63:0f:41:55:db:a2:d6:e9:d5:66:ad:ca:d7:
2f:a2:63:9f:97:e5:bf:03:ac:ac:b1:dc:38:bd:a1:
46:81:78:42:c3:84:49:26:33:77:08:10:f9:a1:79:
4c:1a:7a:9d:83:3b:6e:07:1d:38:e5:da:b1:54:30:
16:e4:57:70:ac:7e:f7:3e:8a:b6:9b:91:91:77:28:
44:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:15:3E:28:1B:9C:33:25:C4:89:3E:DE:55:E4:BE:21:A0:64:95:97
X509v3 Authority Key Identifier:
keyid:EB:AF:6E:53:87:C9:D9:5B:84:C0:10:79:4A:9F:0C:8D:B9:D7:F5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/669uU4fJ2VuEwBB5Sp8MjbnX9T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bc94aa-9615-4e33-9412-a3c0b89f1000/1/NxU-KBucMyXEiT7eVeS-IaBklZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bc94aa-9615-4e33-9412-a3c0b89f1000/1/669uU4fJ2VuEwBB5Sp8MjbnX9T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.255.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:01:ca:f9:53:db:b3:28:72:03:87:99:49:11:21:cc:bf:af:
27:83:14:b7:03:5e:4d:97:7c:eb:fc:f0:e5:4e:18:84:d0:fb:
fd:cd:fb:8a:13:d5:f6:af:c9:1e:a6:e7:37:17:89:b2:36:0c:
41:4f:b2:9a:ee:ea:8e:ee:10:43:45:05:d0:b0:e0:e1:38:3a:
81:c1:ae:aa:f8:f6:7c:47:3b:46:91:c7:bc:6f:56:fd:6f:06:
c7:f4:62:bd:fd:b3:00:04:34:b3:8a:fa:e1:ff:e9:58:61:48:
fa:34:55:67:37:0e:4c:1e:97:4e:6f:ef:50:53:93:89:f6:92:
c3:03:38:f4:ae:44:ae:3a:bb:ad:1f:44:e1:71:e3:0a:fd:aa:
01:d9:2f:f1:c1:04:39:54:02:db:84:b3:db:bb:3c:c0:22:41:
cb:b8:5d:54:a9:0d:58:ee:33:ad:48:51:bc:d5:e0:d6:42:e7:
5b:b3:e7:8d:6b:5e:fb:60:b3:07:98:f3:47:21:ce:be:f1:3e:
38:5a:8b:3f:78:31:fb:45:3e:19:f3:7c:5e:53:ea:b9:b1:19:
7e:00:40:46:d4:f2:61:83:d7:03:6c:46:4b:ec:0d:f8:5e:79:
84:c0:9e:a3:d1:36:56:3c:af:48:1a:a0:5e:fe:9f:47:ef:30:
fe:d3:27:02
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA+cmbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YmFmNmU1Mzg3YzlkOTViODRjMDEwNzk0YTlmMGM4ZGI5ZDdmNTNkMB4XDTIyMDEw
MTEwMDE0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzcxNTNlMjgxYjlj
MzMyNWM0ODkzZWRlNTVlNGJlMjFhMDY0OTU5NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN3hM+tLhgiCOw3YfhEWwneKmkQUiphFIwKoNO3uidcJ6I2E
dQPkYPGeHHQDRZ4FVtLAouitcoeh2gUU0iOj+CyNh8zWRhcq9ruyx/CQ9hvlpR35
hML8c4r2jTs6AHCJdZd6Zs7kUBTUlmBD3Gimyizj801/PooxRoUuY9tRgIKfb9Xs
rLpPn5LAbRVID2Hn8Fl11YhLvQSah/QCQKuuZ1tZUj3w1Z3KVFeFk88eeNBEOwPv
JfRjD0FV26LW6dVmrcrXL6Jjn5flvwOsrLHcOL2hRoF4QsOESSYzdwgQ+aF5TBp6
nYM7bgcdOOXasVQwFuRXcKx+9z6KtpuRkXcoRHUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ3FT4oG5wzJcSJPt5V5L4hoGSVlzAfBgNVHSMEGDAWgBTrr25Th8nZW4TA
EHlKnwyNudf1PTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzY2OXVVNGZKMlZ1RXdCQjVTcDhNamJuWDlUMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvYmM5NGFhLTk2MTUtNGUzMy05NDEyLWEzYzBiODlmMTAwMC8x
L054VS1LQnVjTXlYRWlUN2VWZVMtSWFCa2xaYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
YmM5NGFhLTk2MTUtNGUzMy05NDEyLWEzYzBiODlmMTAwMC8xLzY2OXVVNGZKMlZ1
RXdCQjVTcDhNamJuWDlUMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMG6/zANBgkqhkiG9w0BAQsFAAOC
AQEAigHK+VPbsyhyA4eZSREhzL+vJ4MUtwNeTZd86/zw5U4YhND7/c37ihPV9q/J
HqbnNxeJsjYMQU+ymu7qju4QQ0UF0LDg4Tg6gcGuqvj2fEc7RpHHvG9W/W8Gx/Ri
vf2zAAQ0s4r64f/pWGFI+jRVZzcOTB6XTm/vUFOTifaSwwM49K5Erjq7rR9E4XHj
Cv2qAdkv8cEEOVQC24Sz27s8wCJBy7hdVKkNWO4zrUhRvNXg1kLnW7PnjWte+2Cz
B5jzRyHOvvE+OFqLP3gx+0U+GfN8XlPqubEZfgBARtTyYYPXA2xGS+wN+F55hMCe
o9E2VjyvSBqgXv6fR+8w/tMnAg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:27 2025 by rpki-client