Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/o6rhv_3B72g00uq2IPDaZ2Jd1ks.roa
File: o6rhv_3B72g00uq2IPDaZ2Jd1ks.roa (raw, json)
Hash identifier: Fo46CBCFKZszIDa+exG/2GR8P/sXWsoYlOaHRAWOGNo=
Subject key identifier: A3:AA:E1:BF:FD:C1:EF:68:34:D2:EA:B6:20:F0:DA:67:62:5D:D6:4B
Certificate issuer: /CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Certificate serial: 0194228D70940149FD328FC12A5985CE89B7
Authority key identifier: 1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/o6rhv_3B72g00uq2IPDaZ2Jd1ks.roa
Signing time: Wed 01 Jan 2025 15:48:02 +0000
ROA not before: Wed 01 Jan 2025 15:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 193.5.178.0/24 maxlen: 24
2001:67c:1818::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:70:94:01:49:fd:32:8f:c1:2a:59:85:ce:89:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Validity
Not Before: Jan 1 15:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3aae1bffdc1ef6834d2eab620f0da67625dd64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c5:1b:60:37:46:00:d0:ed:ba:ce:80:5e:2a:
00:18:a9:bb:d8:3f:0f:09:21:87:3b:3b:19:53:15:
77:ff:e6:ec:c4:85:6b:c9:58:56:db:d7:45:76:17:
60:60:69:99:e0:d5:d8:9e:e0:eb:e8:fc:09:5c:6c:
0e:8b:b5:cb:af:13:69:01:c3:46:53:36:b1:39:86:
90:f8:a0:bb:ac:ef:7c:41:4e:31:fc:c3:96:f7:f7:
66:ca:13:06:25:7e:97:1e:ae:b2:44:d2:7b:4d:bc:
bc:31:ce:d3:2d:e5:67:6b:c3:23:14:ae:74:af:71:
fc:a2:50:8b:f1:a7:e4:82:4c:b3:2f:b6:7a:46:00:
fe:95:5d:5a:f1:a8:9c:ca:31:46:a3:1e:eb:28:eb:
b1:c6:32:b0:ef:54:86:b8:38:e9:b9:12:78:86:5d:
f1:b1:7c:ec:86:82:eb:39:fa:fc:e0:da:dd:20:76:
82:52:3f:a1:24:ae:fa:c8:20:23:e0:aa:7e:8c:bb:
ef:00:e0:01:84:e2:2e:49:19:cf:b1:93:b7:0b:06:
ee:d9:af:0d:2d:ed:4f:8d:4e:1b:9a:b2:b9:5e:0c:
85:8b:d9:79:62:47:49:8e:fe:e8:a4:1a:3b:c3:2f:
90:e5:ca:f7:04:f7:39:ee:55:af:e1:74:b3:56:5b:
de:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AA:E1:BF:FD:C1:EF:68:34:D2:EA:B6:20:F0:DA:67:62:5D:D6:4B
X509v3 Authority Key Identifier:
keyid:1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/o6rhv_3B72g00uq2IPDaZ2Jd1ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.178.0/24
IPv6:
2001:67c:1818::/48
Signature Algorithm: sha256WithRSAEncryption
6d:a1:b5:4d:01:a6:1b:03:dd:27:59:f0:ac:17:8c:b4:53:f1:
ba:fd:0f:82:8c:6d:44:28:a6:2f:f7:5f:c6:b6:f7:e1:52:7d:
d9:fe:ae:4b:b3:0d:ef:d9:5c:c5:d6:4b:21:10:81:c9:c7:9c:
d3:38:e6:e9:0a:33:33:83:84:a6:42:6d:fe:37:49:43:35:7b:
2c:b2:01:c2:48:1c:f2:97:6c:e8:fa:50:e6:67:a2:59:a4:55:
be:f1:9d:99:ab:55:dc:93:ac:86:08:69:1f:8d:32:88:1d:5d:
83:4a:f1:e9:05:29:f1:95:a7:1d:62:ac:77:88:09:35:ac:23:
04:ba:08:6c:90:d8:c6:a1:6b:e4:8b:14:87:35:f7:17:94:75:
01:e6:fd:c5:36:b8:89:38:e6:2a:b2:91:2a:e5:d4:9e:99:ab:
4c:e3:44:df:d7:9f:23:83:d5:a6:2d:fe:3d:10:32:89:35:84:
88:63:bd:26:eb:62:79:2d:ea:0e:6f:81:75:5a:38:4b:f6:13:
fa:39:63:f2:7e:32:68:d6:a4:1a:e6:d4:c5:3d:34:c1:d0:d4:
23:75:aa:fd:c3:03:f4:2f:6e:4f:2a:48:d1:6c:e9:4b:c0:6b:
16:aa:a9:da:c0:7c:f2:e8:84:bf:4c:d4:b0:3d:83:90:b4:23:
97:94:20:01
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQijXCUAUn9Mo/BKlmFzom3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZjg3OTFkYzNhYTZmZWEzMjhhNWUxMzkwY2UyNmU5ODJk
ZjM3MmQwHhcNMjUwMTAxMTU0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2FhZTFiZmZkYzFlZjY4MzRkMmVhYjYyMGYwZGE2NzYyNWRkNjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcUbYDdGANDtus6AXioAGKm72D8P
CSGHOzsZUxV3/+bsxIVryVhW29dFdhdgYGmZ4NXYnuDr6PwJXGwOi7XLrxNpAcNG
UzaxOYaQ+KC7rO98QU4x/MOW9/dmyhMGJX6XHq6yRNJ7Tby8Mc7TLeVna8MjFK50
r3H8olCL8afkgkyzL7Z6RgD+lV1a8aicyjFGox7rKOuxxjKw71SGuDjpuRJ4hl3x
sXzshoLrOfr84NrdIHaCUj+hJK76yCAj4Kp+jLvvAOABhOIuSRnPsZO3Cwbu2a8N
Le1PjU4bmrK5XgyFi9l5YkdJjv7opBo7wy+Q5cr3BPc57lWv4XSzVlve9wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKOq4b/9we9oNNLqtiDw2mdiXdZLMB8GA1UdIwQY
MBaAFB74eR3Dqm/qMopeE5DOJumC3zctMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZoNUhjT3FiLW95aWw0VGtNNG02WUxmTnkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lMTc4MTMtMTg0NS00ZmYyLWI5NWEt
ODMzZWU5Y2IzOTgwLzEvbzZyaHZfM0I3MmcwMHVxMklQRGFaMkpkMWtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lMTc4MTMtMTg0NS00ZmYyLWI5NWEtODMzZWU5Y2IzOTgw
LzEvSHZoNUhjT3FiLW95aWw0VGtNNG02WUxmTnkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwQWyMA8E
AgACMAkDBwAgAQZ8GBgwDQYJKoZIhvcNAQELBQADggEBAG2htU0BphsD3SdZ8KwX
jLRT8br9D4KMbUQopi/3X8a29+FSfdn+rkuzDe/ZXMXWSyEQgcnHnNM45ukKMzOD
hKZCbf43SUM1eyyyAcJIHPKXbOj6UOZnolmkVb7xnZmrVdyTrIYIaR+NMogdXYNK
8ekFKfGVpx1irHeICTWsIwS6CGyQ2Maha+SLFIc19xeUdQHm/cU2uIk45iqykSrl
1J6Zq0zjRN/XnyOD1aYt/j0QMok1hIhjvSbrYnkt6g5vgXVaOEv2E/o5Y/J+MmjW
pBrm1MU9NMHQ1CN1qv3DA/Qvbk8qSNFs6UvAaxaqqdrAfPLohL9M1LA9g5C0I5eU
IAE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:44 2025 by rpki-client