Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4oz3FSOmeAEJFTnSsmlsPvT51Kw.roa
File: 4oz3FSOmeAEJFTnSsmlsPvT51Kw.roa (raw, json)
Hash identifier: 3wflJKJOJ9bwFEZc3qK+4fheWo1XXz/GznbuP7e4Csg=
Subject key identifier: E2:8C:F7:15:23:A6:78:01:09:15:39:D2:B2:69:6C:3E:F4:F9:D4:AC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194F0EEABF04112FC05EA0942C70DCE260D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4oz3FSOmeAEJFTnSsmlsPvT51Kw.roa
Signing time: Mon 10 Feb 2025 17:36:00 +0000
ROA not before: Mon 10 Feb 2025 17:36:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211557
IP address blocks: 93.88.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f0:ee:ab:f0:41:12:fc:05:ea:09:42:c7:0d:ce:26:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 10 17:36:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e28cf71523a67801091539d2b2696c3ef4f9d4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:16:71:31:37:a9:13:bd:6d:c9:59:8b:1e:3a:
b3:3d:09:24:10:61:d3:44:dc:68:d0:91:5a:c4:58:
0c:1d:da:49:e8:61:1b:30:3e:bb:fa:5d:9c:f8:ef:
91:ab:d9:42:e9:5e:ff:dd:1e:23:7a:49:e4:f2:65:
d0:5f:0c:1e:25:2e:34:47:f2:eb:96:b6:f0:03:ac:
81:0f:be:a1:57:89:83:16:76:83:be:a8:02:6c:da:
64:a7:87:c7:78:9b:2e:36:b7:17:24:cc:59:5b:78:
60:94:89:b2:a9:9c:04:a5:6e:9a:bc:d8:a0:f4:4f:
3c:29:6a:8a:8f:af:42:bb:19:e8:e1:00:0d:cd:8b:
ce:c5:81:c3:a6:6f:74:bf:f1:61:f3:25:67:0e:08:
b1:ac:ff:3c:91:39:15:63:61:a0:7d:cd:b0:cc:18:
82:ce:f1:c1:d9:35:ad:be:d3:af:f4:95:c3:44:70:
f8:6a:07:99:6e:98:08:1f:ae:b7:ed:20:6c:47:c2:
f7:b8:d4:26:04:70:ac:95:b7:9f:e9:a7:0f:5f:03:
39:6d:53:97:ed:2b:14:b3:78:78:9a:6e:17:27:b8:
2e:1a:3f:e0:20:7e:7d:28:e6:b6:fb:b8:c0:40:d2:
00:96:c0:e9:81:60:ec:98:0f:20:e7:aa:a6:13:79:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8C:F7:15:23:A6:78:01:09:15:39:D2:B2:69:6C:3E:F4:F9:D4:AC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4oz3FSOmeAEJFTnSsmlsPvT51Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.201.0/24
Signature Algorithm: sha256WithRSAEncryption
92:f5:a9:e3:0a:90:99:69:a6:7b:4c:85:9e:1f:3f:c2:b3:12:
62:09:59:2d:3f:08:b9:cc:55:2b:5c:6c:b5:da:c3:e5:8d:1e:
c9:93:27:c9:da:ed:b7:34:4f:3d:bf:37:7e:e0:83:f5:b3:ab:
c6:13:52:c3:53:93:c3:d4:11:e5:b5:a3:58:85:3b:f0:3e:ee:
1d:50:c0:91:cc:9a:b3:be:db:30:b4:1c:cb:bb:fd:db:14:b6:
50:85:6b:4c:76:82:53:19:ba:38:6f:5c:a1:53:79:5f:4d:a0:
fb:2e:c9:53:af:13:98:1b:b7:66:9b:54:43:9c:eb:28:8a:03:
40:6c:06:d7:7f:5d:3b:58:83:56:51:67:25:eb:da:d9:56:82:
d7:a7:ac:e7:3f:47:72:58:02:82:21:1b:ca:ba:68:c3:e7:7f:
6f:b7:8e:a5:f4:1e:62:8c:25:f8:e1:52:59:93:4a:6d:4a:69:
66:3f:27:2b:18:ca:22:f9:6f:7d:a6:18:58:10:e5:75:93:54:
81:92:1c:56:35:e3:ea:70:c3:1d:b7:73:f8:7d:10:9b:8c:1e:
ac:ff:53:70:16:e9:eb:a8:02:90:49:22:d5:d4:6f:86:34:a0:
80:01:1c:54:56:e2:a1:3c:10:1d:c3:9c:b3:8b:62:85:ae:84:
77:67:d2:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTw7qvwQRL8BeoJQscNziYNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMjEwMTczNjAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjhjZjcxNTIzYTY3ODAxMDkxNTM5ZDJiMjY5NmMzZWY0ZjlkNGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhZxMTepE71tyVmLHjqzPQkkEGHT
RNxo0JFaxFgMHdpJ6GEbMD67+l2c+O+Rq9lC6V7/3R4jeknk8mXQXwweJS40R/Lr
lrbwA6yBD76hV4mDFnaDvqgCbNpkp4fHeJsuNrcXJMxZW3hglImyqZwEpW6avNig
9E88KWqKj69Cuxno4QANzYvOxYHDpm90v/Fh8yVnDgixrP88kTkVY2Ggfc2wzBiC
zvHB2TWtvtOv9JXDRHD4ageZbpgIH6637SBsR8L3uNQmBHCslbef6acPXwM5bVOX
7SsUs3h4mm4XJ7guGj/gIH59KOa2+7jAQNIAlsDpgWDsmA8g56qmE3ls0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOKM9xUjpngBCRU50rJpbD70+dSsMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvNG96M0ZTT21lQUVKRlRuU3NtbHNQdlQ1MUt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVjJMA0G
CSqGSIb3DQEBCwUAA4IBAQCS9anjCpCZaaZ7TIWeHz/CsxJiCVktPwi5zFUrXGy1
2sPljR7JkyfJ2u23NE89vzd+4IP1s6vGE1LDU5PD1BHltaNYhTvwPu4dUMCRzJqz
vtswtBzLu/3bFLZQhWtMdoJTGbo4b1yhU3lfTaD7LslTrxOYG7dmm1RDnOsoigNA
bAbXf107WINWUWcl69rZVoLXp6znP0dyWAKCIRvKumjD539vt46l9B5ijCX44VJZ
k0ptSmlmPycrGMoi+W99phhYEOV1k1SBkhxWNePqcMMdt3P4fRCbjB6s/1NwFunr
qAKQSSLV1G+GNKCAARxUVuKhPBAdw5yzi2KFroR3Z9Ig
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:10:11 2025 by rpki-client