Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/gPnJRGAbg_gsEG5lsQLMQZ_aN3E.roa
File: gPnJRGAbg_gsEG5lsQLMQZ_aN3E.roa (raw, json)
Hash identifier: DPgRiY1XTMHzjxPysYXSL0RUck6B0Hjs2YcV10aS3mY=
Subject key identifier: 80:F9:C9:44:60:1B:83:F8:2C:10:6E:65:B1:02:CC:41:9F:DA:37:71
Certificate issuer: /CN=efa70cb849e3837451bd79af7dc7e035963e6043
Certificate serial: 0194214383F883C9C6A7E24EA6B589AB6C83
Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/gPnJRGAbg_gsEG5lsQLMQZ_aN3E.roa
Signing time: Wed 01 Jan 2025 09:47:40 +0000
ROA not before: Wed 01 Jan 2025 09:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33911
IP address blocks: 193.202.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:83:f8:83:c9:c6:a7:e2:4e:a6:b5:89:ab:6c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043
Validity
Not Before: Jan 1 09:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80f9c944601b83f82c106e65b102cc419fda3771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:ba:4f:48:a5:e9:58:db:58:57:99:13:61:
a6:56:c7:2e:b6:f0:20:b7:d4:d1:dd:b8:76:82:70:
9e:05:3b:ad:7e:d2:52:dc:f3:f6:2c:00:d7:b1:fe:
73:6e:92:8e:ca:79:fc:1a:35:fd:62:b3:ea:34:d2:
89:d0:50:03:c4:a9:c0:48:a4:dd:1b:33:9f:68:f0:
fd:98:0b:fd:13:e6:1e:22:ac:92:19:5a:83:92:f6:
cd:b1:ff:2d:87:77:8a:30:6c:b3:e7:7c:60:74:1d:
28:bc:8f:af:a2:22:5e:60:5c:1f:92:45:71:76:9d:
db:d7:14:6e:86:d8:c0:a5:03:6f:4f:19:61:c6:0b:
7f:e1:b9:68:a8:ec:64:04:00:99:c7:15:c1:b5:f2:
6c:b2:11:1f:65:56:ad:77:f7:c6:67:24:c3:25:04:
e6:4e:78:e8:79:f8:b2:e7:ff:4a:84:c1:a4:97:67:
f2:08:13:95:f1:f9:df:f2:40:ad:61:31:93:f8:b7:
b1:30:f8:79:11:e6:28:76:01:ba:05:1c:d7:a2:89:
23:1e:38:79:eb:95:fb:13:26:5a:df:ae:d1:8c:fc:
95:85:13:4c:78:39:1c:ff:f2:75:ec:a5:91:ce:2c:
56:f9:59:d6:8b:08:b2:0f:44:c2:aa:30:d9:42:5c:
97:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F9:C9:44:60:1B:83:F8:2C:10:6E:65:B1:02:CC:41:9F:DA:37:71
X509v3 Authority Key Identifier:
keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/gPnJRGAbg_gsEG5lsQLMQZ_aN3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.126.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:68:18:d3:e4:4b:b5:a5:cc:a4:38:26:f2:2e:31:d4:72:d4:
b0:0f:56:dc:ab:06:fb:2e:70:8b:57:92:88:71:99:06:71:d1:
0c:92:69:cd:33:31:cc:64:4b:05:1f:32:62:3e:f6:75:48:92:
d0:a0:97:36:f6:ab:95:a9:47:99:46:ec:e0:ae:1e:66:a9:9d:
e1:3d:33:ea:e8:5e:03:ad:6e:cc:08:ba:a9:7d:83:b5:17:f6:
74:11:e7:dd:c0:e6:e5:81:3b:3d:e4:71:8a:9a:ba:c0:9b:df:
1e:bf:50:06:28:c0:f2:d5:43:0d:34:ca:a5:ec:cb:97:b5:98:
30:73:a9:de:70:a8:d4:d1:7a:41:86:44:39:f2:83:d0:3a:19:
63:d7:bb:14:a3:bb:04:c4:d3:58:af:f8:04:59:ba:74:bf:de:
c2:8a:7b:68:a3:ee:f7:0d:d8:67:92:72:e1:c8:81:6e:2c:e0:
50:c6:e6:12:49:bc:9e:8c:4d:6c:a1:ce:af:4f:e5:b9:f3:1b:
b1:1e:44:b7:02:5c:bf:15:2e:29:88:69:7e:a7:95:e1:b2:d4:
7f:50:9b:d8:c7:35:fc:2d:1d:99:02:f7:de:d8:f5:57:43:fa:
fa:dd:20:f9:da:0c:0a:24:74:e1:a6:f7:f6:c5:25:ce:b7:bd:
bf:6a:8e:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ4P4g8nGp+JOprWJq2yDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTcwY2I4NDllMzgzNzQ1MWJkNzlhZjdkYzdlMDM1OTYz
ZTYwNDMwHhcNMjUwMTAxMDk0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGY5Yzk0NDYwMWI4M2Y4MmMxMDZlNjViMTAyY2M0MTlmZGEzNzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrO6T0il6VjbWFeZE2GmVscutvAg
t9TR3bh2gnCeBTutftJS3PP2LADXsf5zbpKOynn8GjX9YrPqNNKJ0FADxKnASKTd
GzOfaPD9mAv9E+YeIqySGVqDkvbNsf8th3eKMGyz53xgdB0ovI+voiJeYFwfkkVx
dp3b1xRuhtjApQNvTxlhxgt/4bloqOxkBACZxxXBtfJsshEfZVatd/fGZyTDJQTm
Tnjoefiy5/9KhMGkl2fyCBOV8fnf8kCtYTGT+LexMPh5EeYodgG6BRzXookjHjh5
65X7EyZa367RjPyVhRNMeDkc//J17KWRzixW+VnWiwiyD0TCqjDZQlyXWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFID5yURgG4P4LBBuZbECzEGf2jdxMB8GA1UdIwQY
MBaAFO+nDLhJ44N0Ub15r33H4DWWPmBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZjTXVFbmpnM1JSdlhtdmZjZmdOWlktWUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82OTJiMWUtYzlmZS00M2UwLWI3MjIt
NTNhNjA0ODA3NjFkLzEvZ1BuSlJHQWJnX2dzRUc1bHNRTE1RWl9hTjNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS82OTJiMWUtYzlmZS00M2UwLWI3MjItNTNhNjA0ODA3NjFk
LzEvNzZjTXVFbmpnM1JSdlhtdmZjZmdOWlktWUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcp+MA0G
CSqGSIb3DQEBCwUAA4IBAQALaBjT5Eu1pcykOCbyLjHUctSwD1bcqwb7LnCLV5KI
cZkGcdEMkmnNMzHMZEsFHzJiPvZ1SJLQoJc29quVqUeZRuzgrh5mqZ3hPTPq6F4D
rW7MCLqpfYO1F/Z0EefdwOblgTs95HGKmrrAm98ev1AGKMDy1UMNNMql7MuXtZgw
c6necKjU0XpBhkQ58oPQOhlj17sUo7sExNNYr/gEWbp0v97Cintoo+73DdhnknLh
yIFuLOBQxuYSSbyejE1soc6vT+W58xuxHkS3Aly/FS4piGl+p5XhstR/UJvYxzX8
LR2ZAvfe2PVXQ/r63SD52gwKJHThpvf2xSXOt72/ao6D
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:53:53 2025 by rpki-client