Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/AsUkbA5N2PUwSi47FKCaYRJKFUs.roa
File: AsUkbA5N2PUwSi47FKCaYRJKFUs.roa (raw, json)
Hash identifier: pCCYd/C+MlVrRZtG5LOO+Gem9dQw10KaWQbtM9c+M54=
Subject key identifier: 02:C5:24:6C:0E:4D:D8:F5:30:4A:2E:3B:14:A0:9A:61:12:4A:15:4B
Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Certificate serial: 0194266B7C972532FD11D4E4CAA055348686
Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/AsUkbA5N2PUwSi47FKCaYRJKFUs.roa
Signing time: Thu 02 Jan 2025 09:49:25 +0000
ROA not before: Thu 02 Jan 2025 09:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39100
IP address blocks: 195.60.186.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:7c:97:25:32:fd:11:d4:e4:ca:a0:55:34:86:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Validity
Not Before: Jan 2 09:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02c5246c0e4dd8f5304a2e3b14a09a61124a154b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:d2:c5:55:54:22:10:95:41:4a:f4:fe:96:
39:c8:0c:2b:0b:b6:0c:a8:2b:a0:21:03:5b:94:aa:
17:cb:b5:38:54:bf:5c:88:31:c4:92:01:72:49:ed:
d2:3f:12:2d:fb:fb:1c:74:4b:ca:20:b0:f1:90:46:
e6:31:3d:ee:e3:1f:15:46:df:a4:39:59:37:c3:c4:
9d:87:63:14:55:b6:16:14:60:f5:4b:06:4c:a6:f5:
a6:cb:95:bc:48:72:cb:48:1f:a6:7b:7b:f0:81:9a:
e9:82:ae:2c:0a:d1:07:4f:a8:4c:fa:f9:04:0f:43:
db:be:be:36:69:55:66:31:4c:4a:d1:cd:95:03:fd:
c1:b4:8e:2d:c9:7d:c3:2b:e0:d1:4a:62:24:07:ec:
4f:74:f7:3f:8a:da:cb:79:95:ed:d4:79:ea:16:ba:
63:db:17:22:3b:95:9b:fd:ee:aa:12:3d:13:d2:d6:
01:ee:7c:9e:68:ce:c7:a7:6f:25:60:65:97:66:1f:
53:c4:30:b4:60:3d:de:7d:24:27:c8:e6:38:2c:66:
18:01:fc:c3:84:65:ee:0b:f6:75:2f:dc:a9:d5:d2:
5c:0e:fc:ea:49:94:82:b9:02:fc:53:c8:30:5d:2a:
52:c5:df:ee:9f:0a:98:0c:d7:6b:8d:7c:97:59:8d:
bd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C5:24:6C:0E:4D:D8:F5:30:4A:2E:3B:14:A0:9A:61:12:4A:15:4B
X509v3 Authority Key Identifier:
keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/AsUkbA5N2PUwSi47FKCaYRJKFUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.186.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:0c:9d:05:0a:b6:e0:97:f6:df:22:35:22:5a:3c:40:9a:8e:
5c:12:f0:34:a5:01:04:84:4d:88:35:31:d1:d3:74:40:76:45:
08:36:86:64:1c:f7:df:c1:11:e4:14:9d:3b:ff:06:9f:e0:a1:
74:27:87:88:d1:e3:a3:f0:a5:ca:1d:90:3e:b2:1e:80:57:5b:
04:a7:26:ff:7e:f2:cd:2c:57:a7:95:ae:62:69:bf:45:2d:7c:
2c:71:ca:bc:c3:0b:15:6d:50:3a:ee:93:7e:75:07:80:1d:1b:
a9:6a:a4:54:36:3a:0c:40:80:73:64:b4:0b:7a:0c:85:03:c3:
69:66:74:d0:bc:ce:7f:82:7f:a9:d6:e3:f7:1c:dc:4d:94:d6:
a6:2a:c6:88:d2:7f:71:b8:45:21:6f:ad:75:5b:8a:67:5e:4c:
e5:6d:b4:58:bf:fa:ab:fe:a4:24:5b:62:f9:0e:5d:a5:a5:de:
85:8f:80:6d:b3:5d:b3:d8:a6:de:83:25:3c:dd:02:fc:1d:68:
8a:f5:be:5b:e2:81:36:67:c8:04:10:79:6f:b7:65:e3:4d:7a:
66:d5:cb:b4:05:29:db:6c:04:16:21:4d:a9:2c:9b:d6:16:c0:
de:f7:49:9c:54:57:68:7d:8b:39:60:be:25:c7:87:b5:08:ad:
d9:15:5e:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma3yXJTL9EdTkyqBVNIaGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMTdlNzAxNmY5NTNhMGU2MmNjYTQ1NjZmZjlkMTA1MmMz
MGYyNWEwHhcNMjUwMTAyMDk0OTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmM1MjQ2YzBlNGRkOGY1MzA0YTJlM2IxNGEwOWE2MTEyNGExNTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs13SxVVUIhCVQUr0/pY5yAwrC7YM
qCugIQNblKoXy7U4VL9ciDHEkgFySe3SPxIt+/scdEvKILDxkEbmMT3u4x8VRt+k
OVk3w8Sdh2MUVbYWFGD1SwZMpvWmy5W8SHLLSB+me3vwgZrpgq4sCtEHT6hM+vkE
D0Pbvr42aVVmMUxK0c2VA/3BtI4tyX3DK+DRSmIkB+xPdPc/itrLeZXt1HnqFrpj
2xciO5Wb/e6qEj0T0tYB7nyeaM7Hp28lYGWXZh9TxDC0YD3efSQnyOY4LGYYAfzD
hGXuC/Z1L9yp1dJcDvzqSZSCuQL8U8gwXSpSxd/unwqYDNdrjXyXWY29YwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFALFJGwOTdj1MEouOxSgmmESShVLMB8GA1UdIwQY
MBaAFK0X5wFvlToOYsykVm/50QUsMPJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84M2M4ODEtYmVmNy00Zjc5LTkwYmEt
NTU5MDc2OGRlMmNmLzEvQXNVa2JBNU4yUFV3U2k0N0ZLQ2FZUkpLRlVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84M2M4ODEtYmVmNy00Zjc5LTkwYmEtNTU5MDc2OGRlMmNm
LzEvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwzy6MA0G
CSqGSIb3DQEBCwUAA4IBAQBrDJ0FCrbgl/bfIjUiWjxAmo5cEvA0pQEEhE2INTHR
03RAdkUINoZkHPffwRHkFJ07/waf4KF0J4eI0eOj8KXKHZA+sh6AV1sEpyb/fvLN
LFenla5iab9FLXwsccq8wwsVbVA67pN+dQeAHRupaqRUNjoMQIBzZLQLegyFA8Np
ZnTQvM5/gn+p1uP3HNxNlNamKsaI0n9xuEUhb611W4pnXkzlbbRYv/qr/qQkW2L5
Dl2lpd6Fj4Bts12z2KbegyU83QL8HWiK9b5b4oE2Z8gEEHlvt2XjTXpm1cu0BSnb
bAQWIU2pLJvWFsDe90mcVFdofYs5YL4lx4e1CK3ZFV5J
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:10 2025 by rpki-client