Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/koWcD6_YJsplq6MpdAuoeyxurzM.roa
File: koWcD6_YJsplq6MpdAuoeyxurzM.roa (raw, json)
Hash identifier: 2bTDDvlz5M3JHeYmPpa6SlfroaAlw505uc1zw7/pXCU=
Subject key identifier: 92:85:9C:0F:AF:D8:26:CA:65:AB:A3:29:74:0B:A8:7B:2C:6E:AF:33
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0195375799F3969FF28C24062A17FB2EC04E
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/koWcD6_YJsplq6MpdAuoeyxurzM.roa
Signing time: Mon 24 Feb 2025 09:44:02 +0000
ROA not before: Mon 24 Feb 2025 09:44:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 188.191.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:57:99:f3:96:9f:f2:8c:24:06:2a:17:fb:2e:c0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Feb 24 09:44:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92859c0fafd826ca65aba329740ba87b2c6eaf33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b0:72:82:2b:38:29:e9:17:a3:2b:15:43:29:
f5:a5:df:3e:9d:2a:f4:96:c4:ee:97:f8:4d:2b:17:
08:43:8e:11:07:c0:44:e3:54:05:3d:70:6e:ee:16:
67:09:31:7f:47:82:7a:2f:b5:14:7b:76:89:41:ad:
35:ab:e7:f0:7f:6c:af:74:ce:8f:91:8e:72:0f:ee:
8a:0a:0d:15:d8:8b:ec:94:07:18:dc:6c:89:bc:3e:
a0:eb:82:70:44:a8:50:30:63:e5:d9:c0:11:5b:2d:
bd:4d:63:07:36:a7:af:ec:c0:61:aa:73:d2:2d:4d:
c5:a0:41:bf:0c:28:e5:d2:6d:34:ca:44:21:de:53:
ad:58:83:4d:a5:2f:d3:81:df:3e:13:39:46:ca:66:
e6:f6:60:d0:7e:48:a1:4d:eb:13:74:02:0c:9a:a1:
4e:ea:c3:38:43:32:d1:28:f3:8e:2c:f9:72:59:65:
87:df:27:60:8a:91:aa:53:a6:90:91:26:91:c8:4d:
9d:65:cb:a0:9b:1e:cf:2e:8a:a9:e2:d4:88:c4:3f:
3b:18:d3:8d:c1:16:cf:e0:74:d7:db:38:79:8b:61:
03:50:2a:67:d3:82:9b:a0:ca:e6:0d:e7:e9:51:94:
45:4e:3f:8a:78:0f:cb:38:28:de:d6:17:97:9f:5f:
cc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:85:9C:0F:AF:D8:26:CA:65:AB:A3:29:74:0B:A8:7B:2C:6E:AF:33
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/koWcD6_YJsplq6MpdAuoeyxurzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.97.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e3:d9:37:33:61:87:be:82:e8:a2:fe:46:dc:93:bc:92:3d:
7c:73:22:04:6b:68:c9:61:b4:39:97:32:3d:d4:2a:99:60:6a:
3f:1c:4f:ca:41:13:61:f1:74:c5:c5:12:90:6d:f4:d3:8e:96:
d5:fd:9e:f6:93:0a:93:3c:55:33:fa:d6:9b:82:1f:b5:cb:f6:
39:a1:07:11:a1:fe:cf:d4:bc:05:21:46:cb:ef:4d:74:66:0c:
42:03:87:5f:70:68:e2:64:3e:5f:85:aa:ba:45:77:06:7e:9c:
57:f8:2d:eb:c5:0f:b8:56:2f:e8:4f:57:e8:d8:f0:99:b5:6d:
d5:b5:1e:9c:83:9d:04:ae:df:db:41:98:79:c2:0f:d7:85:3b:
b3:73:a9:68:7a:47:30:fe:d2:bf:3d:f2:d9:4b:15:47:69:56:
ee:bd:22:ee:e1:82:e6:d1:04:9b:8a:95:05:f7:55:0a:ab:d6:
82:99:10:c0:ef:21:a8:0a:10:f4:ab:42:1e:a3:5d:dd:11:07:
3e:4e:f6:bf:61:dc:02:50:46:b4:8d:0c:e8:b8:52:2f:3e:4e:
52:f9:24:6a:dc:e1:9a:49:11:22:ed:cd:04:74:79:9a:9e:56:
91:81:c8:21:32:a3:e2:db:44:95:6a:ee:ac:87:f4:73:ff:97:
65:64:c8:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZU3V5nzlp/yjCQGKhf7LsBOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl
NGQxZDcwHhcNMjUwMjI0MDk0NDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Mjg1OWMwZmFmZDgyNmNhNjVhYmEzMjk3NDBiYTg3YjJjNmVhZjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LBygis4KekXoysVQyn1pd8+nSr0
lsTul/hNKxcIQ44RB8BE41QFPXBu7hZnCTF/R4J6L7UUe3aJQa01q+fwf2yvdM6P
kY5yD+6KCg0V2IvslAcY3GyJvD6g64JwRKhQMGPl2cARWy29TWMHNqev7MBhqnPS
LU3FoEG/DCjl0m00ykQh3lOtWINNpS/Tgd8+EzlGymbm9mDQfkihTesTdAIMmqFO
6sM4QzLRKPOOLPlyWWWH3ydgipGqU6aQkSaRyE2dZcugmx7PLoqp4tSIxD87GNON
wRbP4HTX2zh5i2EDUCpn04KboMrmDefpUZRFTj+KeA/LOCje1heXn1/MGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJKFnA+v2CbKZaujKXQLqHssbq8zMB8GA1UdIwQY
MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt
ZGRmNTY3ZWRlZDAzLzEva29XY0Q2X1lKc3BscTZNcGRBdW9leXh1cnpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz
LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvL9hMA0G
CSqGSIb3DQEBCwUAA4IBAQAg49k3M2GHvoLoov5G3JO8kj18cyIEa2jJYbQ5lzI9
1CqZYGo/HE/KQRNh8XTFxRKQbfTTjpbV/Z72kwqTPFUz+tabgh+1y/Y5oQcRof7P
1LwFIUbL7010ZgxCA4dfcGjiZD5fhaq6RXcGfpxX+C3rxQ+4Vi/oT1fo2PCZtW3V
tR6cg50Ert/bQZh5wg/XhTuzc6loekcw/tK/PfLZSxVHaVbuvSLu4YLm0QSbipUF
91UKq9aCmRDA7yGoChD0q0Ieo13dEQc+Tva/YdwCUEa0jQzouFIvPk5S+SRq3OGa
SREi7c0EdHmanlaRgcghMqPi20SVau6sh/Rz/5dlZMhF
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:50 2025 by rpki-client