Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/e2NE1F5iFgkHudbXVHYH1wUp_FU.roa
File: e2NE1F5iFgkHudbXVHYH1wUp_FU.roa (raw, json)
Hash identifier: 8qSsAm+X02+dw3kb1lxk4jI9T4oH3pY9Kk8/8bVh3h8=
Subject key identifier: 7B:63:44:D4:5E:62:16:09:07:B9:D6:D7:54:76:07:D7:05:29:FC:55
Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial: 019426D9483E990B923D10CE465B1125E1B3
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/e2NE1F5iFgkHudbXVHYH1wUp_FU.roa
Signing time: Thu 02 Jan 2025 11:49:21 +0000
ROA not before: Thu 02 Jan 2025 11:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.193.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:48:3e:99:0b:92:3d:10:ce:46:5b:11:25:e1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Validity
Not Before: Jan 2 11:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b6344d45e62160907b9d6d7547607d70529fc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:c3:70:23:b2:3c:91:d2:d1:7c:f1:ce:8e:
44:39:00:76:af:1f:c6:e4:1b:1b:ba:c4:60:2a:c9:
9d:16:91:20:14:99:5e:90:31:39:a4:01:92:9d:0b:
39:0b:14:c0:22:1a:cf:5d:14:61:3b:2d:bc:43:b8:
01:a3:39:4b:27:51:fa:f2:43:cc:37:3d:9d:49:d2:
f7:d1:0f:98:ac:e1:eb:f1:3e:92:f1:08:24:84:9c:
39:8a:59:43:d7:7f:39:a6:c0:5c:6c:29:d8:cb:20:
5b:7c:96:19:24:6f:e5:5b:8c:13:ef:48:38:28:66:
74:c7:8e:26:e1:90:3f:6d:a7:50:72:59:f0:52:6f:
72:86:0e:3c:14:a1:ab:58:36:5a:c6:43:57:7d:08:
40:df:29:99:18:70:66:ae:15:20:ab:a6:3c:59:6b:
75:54:68:c3:33:ac:70:22:b1:9b:c8:88:49:9a:cc:
c4:d0:29:0b:51:d9:7e:f2:b2:cd:6b:5b:59:7c:5d:
10:72:e1:05:e7:f5:56:ba:e0:b5:7a:2e:3e:c8:f8:
00:af:08:c0:3a:09:05:5d:dc:b8:3c:c6:ac:47:e1:
ce:38:1f:1c:36:fb:e9:d6:2d:32:0f:89:cc:b4:34:
18:04:39:29:86:60:7e:f2:15:16:fa:35:8f:bf:f1:
c4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:63:44:D4:5E:62:16:09:07:B9:D6:D7:54:76:07:D7:05:29:FC:55
X509v3 Authority Key Identifier:
keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/e2NE1F5iFgkHudbXVHYH1wUp_FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.166.0/24
Signature Algorithm: sha256WithRSAEncryption
11:6d:cd:21:ad:1c:f6:64:86:f2:06:7c:f3:b1:d0:44:7e:d6:
78:60:b4:a3:22:2f:21:a4:bf:40:00:2a:0e:f7:90:b3:58:3f:
2c:02:bb:04:55:59:77:29:2a:8c:b9:aa:0d:ed:b0:c1:8e:80:
67:db:1f:01:e7:9f:b0:e4:ac:49:a9:89:33:1f:fc:ce:49:23:
64:1e:be:cc:54:43:19:5b:a1:60:a3:77:1e:87:48:0a:50:c8:
b9:f3:69:5b:14:cd:cb:01:e4:35:e4:22:03:cd:fb:48:19:2d:
db:bd:4a:31:6f:68:10:31:5b:7d:96:b7:ce:03:19:fb:ae:58:
ed:3e:ef:42:4e:e3:17:a0:63:80:a6:a3:cc:0b:2c:f7:f2:58:
03:9b:84:fc:80:3b:e5:ff:0c:e0:3f:f9:87:05:b0:51:70:0e:
92:26:f0:9c:c0:a5:92:cb:b1:c6:36:64:96:33:ea:3b:1b:89:
aa:ea:4b:49:cd:9f:7e:dc:8f:63:88:bc:d8:4f:2b:b4:41:91:
01:2e:13:ba:dd:5d:6d:8c:bd:a4:66:b7:67:4e:68:04:1c:a2:
db:9c:cf:09:64:16:c7:43:de:ec:c9:9b:f7:13:56:ae:ad:38:
66:41:c5:2b:29:7e:70:82:28:33:bd:e4:b9:8b:1a:67:fb:ad:
ac:62:81:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2Ug+mQuSPRDORlsRJeGzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDZiNTlhOTNlMzI0MDgzZmJjYTQyMzdlNDdlOWY1ZWJm
MzcxYWIwHhcNMjUwMTAyMTE0OTIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjYzNDRkNDVlNjIxNjA5MDdiOWQ2ZDc1NDc2MDdkNzA1MjlmYzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAserDcCOyPJHS0Xzxzo5EOQB2rx/G
5BsbusRgKsmdFpEgFJlekDE5pAGSnQs5CxTAIhrPXRRhOy28Q7gBozlLJ1H68kPM
Nz2dSdL30Q+YrOHr8T6S8QgkhJw5illD1385psBcbCnYyyBbfJYZJG/lW4wT70g4
KGZ0x44m4ZA/badQclnwUm9yhg48FKGrWDZaxkNXfQhA3ymZGHBmrhUgq6Y8WWt1
VGjDM6xwIrGbyIhJmszE0CkLUdl+8rLNa1tZfF0QcuEF5/VWuuC1ei4+yPgArwjA
OgkFXdy4PMasR+HOOB8cNvvp1i0yD4nMtDQYBDkphmB+8hUW+jWPv/HEgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHtjRNReYhYJB7nW11R2B9cFKfxVMB8GA1UdIwQY
MBaAFMnWtZqT4yQIP7ykI35H6fXr83GrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTIt
YjkyMTFlMWZjMWFjLzEvZTJORTFGNWlGZ2tIdWRiWFZIWUgxd1VwX0ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTItYjkyMTFlMWZjMWFj
LzEveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucGmMA0G
CSqGSIb3DQEBCwUAA4IBAQARbc0hrRz2ZIbyBnzzsdBEftZ4YLSjIi8hpL9AACoO
95CzWD8sArsEVVl3KSqMuaoN7bDBjoBn2x8B55+w5KxJqYkzH/zOSSNkHr7MVEMZ
W6Fgo3ceh0gKUMi582lbFM3LAeQ15CIDzftIGS3bvUoxb2gQMVt9lrfOAxn7rljt
Pu9CTuMXoGOApqPMCyz38lgDm4T8gDvl/wzgP/mHBbBRcA6SJvCcwKWSy7HGNmSW
M+o7G4mq6ktJzZ9+3I9jiLzYTyu0QZEBLhO63V1tjL2kZrdnTmgEHKLbnM8JZBbH
Q97syZv3E1aurThmQcUrKX5wgigzveS5ixpn+62sYoGh
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:32:21 2025 by rpki-client