Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/ORZQ3TzlAnbqpUbLBvAypexe6yo.roa
File: ORZQ3TzlAnbqpUbLBvAypexe6yo.roa (raw, json)
Hash identifier: Yedmm0b14/xeLz9/IuhulJeoi6LG8nDdvf2zdmYeKsI=
Subject key identifier: 39:16:50:DD:3C:E5:02:76:EA:A5:46:CB:06:F0:32:A5:EC:5E:EB:2A
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 01942368CD47F57D50FCB39DD5639E602904
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/ORZQ3TzlAnbqpUbLBvAypexe6yo.roa
Signing time: Wed 01 Jan 2025 19:47:38 +0000
ROA not before: Wed 01 Jan 2025 19:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3399
IP address blocks: 193.178.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:cd:47:f5:7d:50:fc:b3:9d:d5:63:9e:60:29:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: Jan 1 19:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=391650dd3ce50276eaa546cb06f032a5ec5eeb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:65:ed:f7:9d:b5:bf:d1:e4:b1:c9:cb:cd:
22:1d:52:b2:c6:e1:e8:80:42:6b:a6:a1:ae:d5:67:
ee:2e:c3:94:96:b5:9c:fb:2b:63:3d:9f:1f:3c:fb:
3c:b2:90:59:de:09:d2:35:af:84:75:33:6d:6e:33:
b4:90:85:31:1f:1a:a2:50:c4:15:a0:b0:cc:6c:c8:
09:b3:15:2c:27:65:2b:ce:06:7f:16:35:f0:ce:1c:
82:79:8f:e3:e3:d1:a3:63:e3:37:91:fe:2b:32:93:
a2:9c:de:f9:a1:c8:36:c3:11:b9:49:7c:ae:0e:6b:
a0:75:4e:45:9d:e5:c3:d0:d6:f6:d5:90:d1:6f:ab:
7f:80:59:46:ec:b7:ff:a9:83:a1:21:da:1a:b8:e8:
ad:7b:83:77:a8:1e:dc:99:20:81:c2:b9:a0:f3:5c:
b2:7b:01:3a:98:9e:14:3d:00:f3:9b:05:f5:85:52:
29:b0:da:d9:6b:96:35:7a:d9:f6:d8:9c:a4:cf:21:
b4:cc:d0:db:e3:70:54:c7:ad:4e:49:90:8f:66:59:
27:e4:0d:29:97:a3:7a:48:78:de:8f:f0:7c:5a:19:
c1:e6:2c:68:b4:9d:81:0a:0c:91:f7:5e:e0:1c:00:
59:7b:c0:42:0a:d7:e0:51:bc:0f:02:14:c5:df:96:
44:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:16:50:DD:3C:E5:02:76:EA:A5:46:CB:06:F0:32:A5:EC:5E:EB:2A
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/ORZQ3TzlAnbqpUbLBvAypexe6yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.129.0/24
Signature Algorithm: sha256WithRSAEncryption
57:01:14:9c:e6:fb:53:7e:6f:a1:45:e7:14:a3:66:5b:c7:ec:
8d:3a:b9:46:58:51:81:da:b1:90:e4:10:23:52:0b:82:0e:fd:
55:91:e7:30:0e:fb:26:b1:db:84:66:0b:e0:1f:2e:15:e5:2b:
db:78:9e:26:0c:08:7f:68:c8:d4:98:b1:0e:18:6d:f6:6e:af:
5c:e9:67:e0:43:df:c2:f3:44:aa:c6:75:31:fb:e0:76:36:3e:
07:d2:75:90:f6:33:74:d1:04:31:d5:a4:85:6a:41:d9:a0:76:
c8:18:a2:ae:79:38:cb:a2:9a:c2:5f:ad:5e:23:44:fe:42:89:
1c:bb:5c:f8:36:ae:26:72:7f:ca:ff:b5:b2:ea:61:5f:5d:57:
e8:b9:3d:4f:50:1f:6f:2e:41:43:3a:f8:44:96:f6:70:41:e7:
d1:8c:dd:c8:15:89:14:c4:3f:be:b7:25:82:72:1a:51:0b:2d:
30:cd:3a:67:fa:3d:48:f2:4f:6f:bf:c6:36:03:d5:17:1f:98:
a4:73:e7:45:04:d0:c2:50:de:96:f1:85:47:d9:be:c1:e7:de:
35:9d:d6:60:27:29:bd:3c:99:37:51:54:75:a8:9a:d2:d9:c9:
e2:74:b2:1c:b4:44:0d:22:42:2d:1c:76:d4:30:91:2a:79:1a:
f6:3c:98:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaM1H9X1Q/LOd1WOeYCkEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZGI1NmNkYTJlN2RkYjAyMzE2OGM1ZDc3ZWM5N2Q5YTAw
NmJhZWQwHhcNMjUwMTAxMTk0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTE2NTBkZDNjZTUwMjc2ZWFhNTQ2Y2IwNmYwMzJhNWVjNWVlYjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGZl7fedtb/R5LHJy80iHVKyxuHo
gEJrpqGu1WfuLsOUlrWc+ytjPZ8fPPs8spBZ3gnSNa+EdTNtbjO0kIUxHxqiUMQV
oLDMbMgJsxUsJ2UrzgZ/FjXwzhyCeY/j49GjY+M3kf4rMpOinN75ocg2wxG5SXyu
DmugdU5FneXD0Nb21ZDRb6t/gFlG7Lf/qYOhIdoauOite4N3qB7cmSCBwrmg81yy
ewE6mJ4UPQDzmwX1hVIpsNrZa5Y1etn22JykzyG0zNDb43BUx61OSZCPZlkn5A0p
l6N6SHjej/B8WhnB5ixotJ2BCgyR917gHABZe8BCCtfgUbwPAhTF35ZEZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDkWUN085QJ26qVGywbwMqXsXusqMB8GA1UdIwQY
MBaAFMfbVs2i592wIxaMXXfsl9mgBrrtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDl0V3phTG4zYkFqRm94ZGQteVgyYUFHdXUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hOTc4YWItNDNkNS00MzM1LWFmYTIt
ODJlYjZmZDExZGQ1LzEvT1JaUTNUemxBbmJxcFViTEJ2QXlwZXhlNnlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hOTc4YWItNDNkNS00MzM1LWFmYTItODJlYjZmZDExZGQ1
LzEveDl0V3phTG4zYkFqRm94ZGQteVgyYUFHdXUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbKBMA0G
CSqGSIb3DQEBCwUAA4IBAQBXARSc5vtTfm+hRecUo2Zbx+yNOrlGWFGB2rGQ5BAj
UguCDv1VkecwDvsmsduEZgvgHy4V5SvbeJ4mDAh/aMjUmLEOGG32bq9c6WfgQ9/C
80SqxnUx++B2Nj4H0nWQ9jN00QQx1aSFakHZoHbIGKKueTjLoprCX61eI0T+Qokc
u1z4Nq4mcn/K/7Wy6mFfXVfouT1PUB9vLkFDOvhElvZwQefRjN3IFYkUxD++tyWC
chpRCy0wzTpn+j1I8k9vv8Y2A9UXH5ikc+dFBNDCUN6W8YVH2b7B5941ndZgJym9
PJk3UVR1qJrS2cnidLIctEQNIkItHHbUMJEqeRr2PJhm
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:14 2025 by rpki-client