Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/8FKyt8eDnO1kLTJD9dF4kktBbnk.roa
File: 8FKyt8eDnO1kLTJD9dF4kktBbnk.roa (raw, json)
Hash identifier: 9mNmQ05G/Q2P4wE3xyuelgcW7lRtN/p4eyiaB9oB3rE=
Subject key identifier: F0:52:B2:B7:C7:83:9C:ED:64:2D:32:43:F5:D1:78:92:4B:41:6E:79
Certificate issuer: /CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Certificate serial: 0194221F770EA12C785D3A71DFAFD781FFE1
Authority key identifier: 31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/8FKyt8eDnO1kLTJD9dF4kktBbnk.roa
Signing time: Wed 01 Jan 2025 13:47:54 +0000
ROA not before: Wed 01 Jan 2025 13:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 193.176.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:77:0e:a1:2c:78:5d:3a:71:df:af:d7:81:ff:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Validity
Not Before: Jan 1 13:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f052b2b7c7839ced642d3243f5d178924b416e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9d:4d:57:fa:02:f3:38:73:e5:4a:99:f6:36:
4a:be:88:35:e3:db:12:cc:60:be:4b:13:b6:28:ca:
7e:17:7f:3c:63:23:cb:9e:42:6c:1a:1e:09:7e:33:
9b:12:83:61:ad:97:93:19:7a:0e:2a:ae:09:70:39:
a2:17:01:12:19:4b:8c:cb:93:1b:80:5a:83:13:42:
ae:6c:bb:d2:70:da:36:8b:55:30:c8:fe:37:86:ae:
e6:eb:4d:3c:c0:05:2f:b8:5a:8f:65:59:3e:d6:e5:
57:78:a4:81:7b:6a:82:c7:55:95:92:35:6b:4b:d1:
25:69:e7:05:04:5c:11:45:53:6b:bc:34:b6:de:66:
80:b4:77:2b:a8:12:7a:7d:1e:83:e6:33:ae:8f:1e:
51:12:9a:34:5e:5e:6a:45:ea:8a:75:75:07:ad:b5:
5f:4b:6c:2b:b6:0f:99:24:8a:e6:69:78:c9:da:a4:
37:86:7b:f3:55:aa:bd:f5:f3:cb:22:cb:0c:c4:f4:
64:11:10:14:ef:49:8a:89:50:51:12:ae:1e:57:3e:
bb:e4:d8:f1:4b:c8:b1:34:7b:f7:60:9f:b4:c5:f9:
e0:00:ca:4f:da:4d:fb:3c:97:2b:5b:44:1b:7e:dd:
7e:c5:45:1e:56:e8:55:ef:55:06:13:29:da:49:20:
f5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:52:B2:B7:C7:83:9C:ED:64:2D:32:43:F5:D1:78:92:4B:41:6E:79
X509v3 Authority Key Identifier:
keyid:31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/8FKyt8eDnO1kLTJD9dF4kktBbnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.235.0/24
Signature Algorithm: sha256WithRSAEncryption
10:d2:dd:8d:a9:dd:c2:41:7d:50:d4:42:1b:71:ac:eb:ab:bf:
17:a8:ac:9f:d7:a6:a7:e4:01:6c:80:0f:48:58:8b:83:3d:d7:
ea:ec:ea:fa:e4:de:08:cb:fb:02:ee:49:71:65:5c:80:6b:52:
6f:e0:69:76:c1:0f:d0:d4:28:45:f1:04:00:6e:5c:71:23:91:
1c:b6:16:15:a6:6f:34:bc:5e:94:fe:76:f7:25:b1:ee:4e:7d:
69:b0:0c:b2:1c:cb:52:4c:fa:e7:14:cb:8f:49:5b:30:3a:75:
ab:a2:99:21:9e:ff:dc:53:fc:81:bd:34:ca:d7:19:a2:17:af:
5b:37:3b:56:7b:36:5c:03:db:32:71:5f:18:73:aa:41:2e:1d:
3c:f1:86:64:12:c6:fe:2d:e4:32:45:bc:2c:b4:a0:d1:52:73:
61:ab:45:8a:fc:fe:01:54:7d:37:50:df:ec:09:da:36:5a:b9:
23:40:cf:c9:a0:fe:81:94:88:70:25:17:86:cb:88:fa:81:a8:
e3:d6:88:0a:e8:cf:37:21:a6:de:1d:f8:d1:a9:4d:4d:08:4f:
70:97:ac:cb:f9:24:62:c2:30:7b:e4:2d:1e:26:bb:0e:3c:b3:
67:7c:ea:7d:23:b6:fc:40:15:8b:22:aa:f7:b8:de:b9:91:55:
17:6c:f5:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH3cOoSx4XTpx36/Xgf/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMTdmZDIyN2U5ZGNlOTc4MDVjMDNlNWYzMzAwMmFlYTE4
YzM3ZGQwHhcNMjUwMTAxMTM0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDUyYjJiN2M3ODM5Y2VkNjQyZDMyNDNmNWQxNzg5MjRiNDE2ZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ1NV/oC8zhz5UqZ9jZKvog149sS
zGC+SxO2KMp+F388YyPLnkJsGh4JfjObEoNhrZeTGXoOKq4JcDmiFwESGUuMy5Mb
gFqDE0KubLvScNo2i1UwyP43hq7m6008wAUvuFqPZVk+1uVXeKSBe2qCx1WVkjVr
S9ElaecFBFwRRVNrvDS23maAtHcrqBJ6fR6D5jOujx5REpo0Xl5qReqKdXUHrbVf
S2wrtg+ZJIrmaXjJ2qQ3hnvzVaq99fPLIssMxPRkERAU70mKiVBREq4eVz675Njx
S8ixNHv3YJ+0xfngAMpP2k37PJcrW0Qbft1+xUUeVuhV71UGEynaSSD1GwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPBSsrfHg5ztZC0yQ/XReJJLQW55MB8GA1UdIwQY
MBaAFDEX/SJ+nc6XgFwD5fMwAq6hjDfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVJmOUluNmR6cGVBWEFQbDh6QUNycUdNTjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85ZjYyMzMtNzgyYS00MTQwLWI1MDAt
OTk3MTkwN2E5NWE3LzEvOEZLeXQ4ZURuTzFrTFRKRDlkRjRra3RCYm5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS85ZjYyMzMtNzgyYS00MTQwLWI1MDAtOTk3MTkwN2E5NWE3
LzEvTVJmOUluNmR6cGVBWEFQbDh6QUNycUdNTjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbDrMA0G
CSqGSIb3DQEBCwUAA4IBAQAQ0t2Nqd3CQX1Q1EIbcazrq78XqKyf16an5AFsgA9I
WIuDPdfq7Or65N4Iy/sC7klxZVyAa1Jv4Gl2wQ/Q1ChF8QQAblxxI5EcthYVpm80
vF6U/nb3JbHuTn1psAyyHMtSTPrnFMuPSVswOnWropkhnv/cU/yBvTTK1xmiF69b
NztWezZcA9sycV8Yc6pBLh088YZkEsb+LeQyRbwstKDRUnNhq0WK/P4BVH03UN/s
Cdo2WrkjQM/JoP6BlIhwJReGy4j6gajj1ogK6M83IabeHfjRqU1NCE9wl6zL+SRi
wjB75C0eJrsOPLNnfOp9I7b8QBWLIqr3uN65kVUXbPV3
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:27:58 2025 by rpki-client