Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/fUsIKiUBSF-4suxe2Rd_oxkjZw4.roa
File: fUsIKiUBSF-4suxe2Rd_oxkjZw4.roa (raw, json)
Hash identifier: le+dLHnCy+Cz7KtAkD9h+I9evtnw4iklRaF6GSYCuDI=
Subject key identifier: 7D:4B:08:2A:25:01:48:5F:B8:B2:EC:5E:D9:17:7F:A3:19:23:67:0E
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 0194258F79C26086794CC8BB69B3B32CE028
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/fUsIKiUBSF-4suxe2Rd_oxkjZw4.roa
Signing time: Thu 02 Jan 2025 05:49:07 +0000
ROA not before: Thu 02 Jan 2025 05:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2119
IP address blocks: 82.193.160.0/19 maxlen: 19
2a02:2580::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:79:c2:60:86:79:4c:c8:bb:69:b3:b3:2c:e0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: Jan 2 05:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d4b082a2501485fb8b2ec5ed9177fa31923670e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3b:7e:c8:ee:fc:dc:6d:80:66:9f:c8:aa:70:
f4:91:47:cf:3f:8a:12:2f:8d:b3:b4:1d:9e:ab:e1:
81:e5:d1:a0:e2:04:2d:fa:06:81:1f:31:71:9a:1a:
b5:42:1b:0a:b4:d5:13:6d:49:bc:5d:6f:46:0c:fe:
7c:89:53:5d:68:3d:c6:67:04:a2:19:8c:e0:2e:47:
3f:ec:4c:81:a9:51:be:84:c2:72:d1:36:e2:46:62:
5a:54:4f:d9:b5:6b:79:ff:55:c8:eb:20:e4:0b:b0:
63:88:7c:90:c5:42:49:0b:ad:60:cc:cf:37:8c:56:
03:8d:1d:4a:b8:81:79:ca:6a:cf:20:e5:d2:e4:9d:
fa:d8:86:c3:cb:5b:36:09:a8:12:85:4f:5e:5f:42:
8d:99:17:68:ab:c5:8c:cd:0c:8d:4b:62:f3:24:ed:
4f:52:6e:16:f5:f1:2a:b3:16:d2:e6:57:e2:e9:da:
43:7d:68:f2:9e:49:e4:d5:3e:bb:b9:f9:a2:89:83:
53:e7:5e:e3:c8:9d:49:1f:82:8b:c3:fd:22:b4:28:
f0:ad:31:1e:15:3d:07:d5:fa:a8:84:c6:83:bf:ba:
4d:74:fd:3a:3c:64:d2:bc:e8:8e:ee:3a:6e:12:98:
dd:e7:75:06:51:4f:2f:b6:0c:54:4b:c8:95:2e:db:
08:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4B:08:2A:25:01:48:5F:B8:B2:EC:5E:D9:17:7F:A3:19:23:67:0E
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/fUsIKiUBSF-4suxe2Rd_oxkjZw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.193.160.0/19
IPv6:
2a02:2580::/32
Signature Algorithm: sha256WithRSAEncryption
5b:43:11:5c:7e:8e:e8:f1:65:e0:c0:98:0c:cb:70:98:e0:be:
5f:9a:05:2f:a4:55:eb:17:9e:35:ab:1a:27:c5:77:88:3c:f6:
00:a6:40:f6:bb:55:53:e9:d8:a8:e4:54:cb:29:16:20:de:6b:
ab:4f:cb:71:98:05:d6:d2:40:57:4c:32:d3:6c:17:25:da:8d:
92:18:2f:d8:59:45:0c:3c:8d:56:f8:ea:cc:4c:9b:57:b6:6e:
d3:9f:a5:aa:5a:21:61:be:c5:44:1d:fb:0b:c4:7f:39:5e:73:
02:dc:bd:15:ab:15:11:f7:37:6a:43:36:23:0b:38:4f:6e:b0:
f6:ce:bc:fb:1a:75:09:02:20:42:00:a6:7e:9e:51:15:de:08:
bf:fc:4d:2e:76:d6:e8:e0:2c:c5:41:1a:5a:42:c8:d6:b0:e3:
b3:4f:5e:51:03:0d:c3:7d:90:4c:ca:25:65:d6:7a:0c:cb:75:
52:46:49:bf:8f:b8:93:76:91:4c:c8:87:2e:a3:c3:c1:d5:cb:
60:1c:87:90:f3:12:ac:dd:92:6b:30:ca:dd:99:1a:10:7c:f6:
50:df:49:39:e5:3d:9c:01:44:ea:ac:b0:1e:93:a4:84:f1:54:
cc:e6:b8:b2:1b:5c:02:61:7a:54:f5:27:e9:48:70:98:0f:38:
c0:b1:97:5b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQlj3nCYIZ5TMi7abOzLOAoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlM2Q4MTIxMWY0OTJlZGYwMjlhMjJjYzY2YzIwYTNiOTQ1
ODM1OTAwHhcNMjUwMTAyMDU0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDRiMDgyYTI1MDE0ODVmYjhiMmVjNWVkOTE3N2ZhMzE5MjM2NzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Tt+yO783G2AZp/IqnD0kUfPP4oS
L42ztB2eq+GB5dGg4gQt+gaBHzFxmhq1QhsKtNUTbUm8XW9GDP58iVNdaD3GZwSi
GYzgLkc/7EyBqVG+hMJy0TbiRmJaVE/ZtWt5/1XI6yDkC7BjiHyQxUJJC61gzM83
jFYDjR1KuIF5ymrPIOXS5J362IbDy1s2CagShU9eX0KNmRdoq8WMzQyNS2LzJO1P
Um4W9fEqsxbS5lfi6dpDfWjynknk1T67ufmiiYNT517jyJ1JH4KLw/0itCjwrTEe
FT0H1fqohMaDv7pNdP06PGTSvOiO7jpuEpjd53UGUU8vtgxUS8iVLtsIYQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFH1LCColAUhfuLLsXtkXf6MZI2cOMB8GA1UdIwQY
MBaAFN49gSEfSS7fApoizGbCCjuUWDWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYt
MzE0MjhiMDUwZmQ3LzEvZlVzSUtpVUJTRi00c3V4ZTJSZF9veGtqWnc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYtMzE0MjhiMDUwZmQ3
LzEvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFUsGgMA0E
AgACMAcDBQAqAiWAMA0GCSqGSIb3DQEBCwUAA4IBAQBbQxFcfo7o8WXgwJgMy3CY
4L5fmgUvpFXrF541qxonxXeIPPYApkD2u1VT6dio5FTLKRYg3murT8txmAXW0kBX
TDLTbBcl2o2SGC/YWUUMPI1W+OrMTJtXtm7Tn6WqWiFhvsVEHfsLxH85XnMC3L0V
qxUR9zdqQzYjCzhPbrD2zrz7GnUJAiBCAKZ+nlEV3gi//E0udtbo4CzFQRpaQsjW
sOOzT15RAw3DfZBMyiVl1noMy3VSRkm/j7iTdpFMyIcuo8PB1ctgHIeQ8xKs3ZJr
MMrdmRoQfPZQ30k55T2cAUTqrLAek6SE8VTM5riyG1wCYXpU9SfpSHCYDzjAsZdb
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:49:31 2025 by rpki-client