Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/Rczo0g4sMDiLqgxJB5S25i7insI.roa
File: Rczo0g4sMDiLqgxJB5S25i7insI.roa (raw, json)
Hash identifier: ga9irX/23kZoTrdiG1+m2/fUL1sV+Nzwld+rWszWQkY=
Subject key identifier: 45:CC:E8:D2:0E:2C:30:38:8B:AA:0C:49:07:94:B6:E6:2E:E2:9E:C2
Certificate issuer: /CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Certificate serial: 0194DF824E46EF1E79033AC0C753A043DC66
Authority key identifier: B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/Rczo0g4sMDiLqgxJB5S25i7insI.roa
Signing time: Fri 07 Feb 2025 08:24:06 +0000
ROA not before: Fri 07 Feb 2025 08:24:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 193.3.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:82:4e:46:ef:1e:79:03:3a:c0:c7:53:a0:43:dc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Validity
Not Before: Feb 7 08:24:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45cce8d20e2c30388baa0c490794b6e62ee29ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:9c:41:39:85:ea:7b:cd:61:f9:5c:72:53:
9c:a7:e9:c7:ec:2c:86:66:06:61:b6:8f:3a:9b:d3:
d6:ff:2c:d3:91:bd:e5:fb:36:50:9f:c7:85:65:25:
53:3d:c2:1b:19:e2:6f:96:2d:42:cf:d0:59:3f:85:
87:1a:6e:24:4b:55:09:4d:a4:1a:f4:67:b4:aa:13:
71:3a:1d:81:dc:fa:cf:e9:0f:d3:18:87:60:48:65:
1c:31:98:b9:de:9b:ee:1b:20:a7:e3:81:74:ed:9a:
59:3e:97:a2:dd:ac:9a:9b:91:60:03:46:99:22:f5:
65:84:e8:5e:cf:d0:8f:16:8c:ec:ad:5f:43:c9:8f:
94:91:73:76:d1:77:3e:33:92:f4:ba:70:4b:dc:be:
87:db:6b:db:1c:aa:08:0e:b0:62:d4:fc:5f:1e:17:
b1:a4:15:4e:17:19:5e:ac:8e:7f:f8:19:47:f3:27:
d2:25:2e:52:7b:f9:18:37:a6:97:59:a3:1e:9d:70:
c8:25:c7:84:1c:df:23:18:b3:bc:78:1d:a9:66:9b:
02:68:e1:01:54:e7:03:30:3b:e2:7a:27:7f:45:fa:
a0:8f:cb:71:d7:ea:0c:9a:4a:a9:06:bb:fb:aa:43:
2a:bb:58:36:13:00:00:1a:2b:e4:6b:e5:89:8c:08:
62:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CC:E8:D2:0E:2C:30:38:8B:AA:0C:49:07:94:B6:E6:2E:E2:9E:C2
X509v3 Authority Key Identifier:
keyid:B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/Rczo0g4sMDiLqgxJB5S25i7insI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.190.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:68:6c:98:35:04:9f:7e:8a:31:f6:7a:53:d7:f9:0c:fb:dd:
8f:cc:dd:30:e3:b1:5f:c8:c0:a9:44:77:a0:26:c9:b7:4b:aa:
3d:b2:84:83:c8:b1:a8:c2:e6:20:77:31:71:ae:91:00:71:c1:
cb:c8:6d:5f:93:6f:a0:58:6e:7a:64:13:41:e6:9e:24:2a:f1:
7c:c9:eb:03:2a:cb:9e:e8:9c:08:17:d3:98:b1:95:87:37:3b:
19:ef:a1:a9:d8:a3:43:18:14:05:89:54:81:d7:ce:81:c5:b5:
ca:0e:84:8f:ac:f2:22:db:fd:3f:d7:50:ff:8b:8d:9a:23:80:
f4:38:30:68:ab:75:ed:49:70:83:29:00:9d:0d:e3:b2:18:72:
88:1d:0f:a0:65:cb:71:57:13:8d:20:46:d8:f8:90:51:8d:e7:
1d:81:58:ce:ad:6f:20:9f:50:e9:87:b1:11:f7:32:d6:cf:92:
d9:bc:99:04:0b:21:a2:a0:4f:4b:06:7d:d6:59:d7:46:22:00:
71:bd:31:66:29:cd:68:dc:2b:9c:07:35:1c:06:bc:b4:94:c5:
7c:6c:75:f4:13:18:b1:8f:81:d1:0b:77:31:6c:a9:0c:a1:06:
76:c5:16:ca:aa:a2:ab:1f:f8:28:4f:5e:32:4c:19:8e:8d:4a:
3b:96:52:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTfgk5G7x55AzrAx1OgQ9xmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MTcxNjI4NzdkYTlmNDAzMGJiY2I5ZmU4YWMxNDNlNmFi
Mjg3MWIwHhcNMjUwMjA3MDgyNDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWNjZThkMjBlMmMzMDM4OGJhYTBjNDkwNzk0YjZlNjJlZTI5ZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTucQTmF6nvNYflcclOcp+nH7CyG
ZgZhto86m9PW/yzTkb3l+zZQn8eFZSVTPcIbGeJvli1Cz9BZP4WHGm4kS1UJTaQa
9Ge0qhNxOh2B3PrP6Q/TGIdgSGUcMZi53pvuGyCn44F07ZpZPpei3ayam5FgA0aZ
IvVlhOhez9CPFozsrV9DyY+UkXN20Xc+M5L0unBL3L6H22vbHKoIDrBi1PxfHhex
pBVOFxlerI5/+BlH8yfSJS5Se/kYN6aXWaMenXDIJceEHN8jGLO8eB2pZpsCaOEB
VOcDMDvieid/Rfqgj8tx1+oMmkqpBrv7qkMqu1g2EwAAGivka+WJjAhiRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEXM6NIOLDA4i6oMSQeUtuYu4p7CMB8GA1UdIwQY
MBaAFLgXFih32p9AMLvLn+isFD5qsocbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUJjV0tIZmFuMEF3dTh1ZjZLd1VQbXF5aHhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8xNmI3YjQtYmIyMS00YjNlLWFlYjQt
YjI3Y2EyOTFiZDc3LzEvUmN6bzBnNHNNRGlMcWd4SkI1UzI1aTdpbnNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8xNmI3YjQtYmIyMS00YjNlLWFlYjQtYjI3Y2EyOTFiZDc3
LzEvdUJjV0tIZmFuMEF3dTh1ZjZLd1VQbXF5aHhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQO+MA0G
CSqGSIb3DQEBCwUAA4IBAQDKaGyYNQSffoox9npT1/kM+92PzN0w47FfyMCpRHeg
Jsm3S6o9soSDyLGowuYgdzFxrpEAccHLyG1fk2+gWG56ZBNB5p4kKvF8yesDKsue
6JwIF9OYsZWHNzsZ76Gp2KNDGBQFiVSB186BxbXKDoSPrPIi2/0/11D/i42aI4D0
ODBoq3XtSXCDKQCdDeOyGHKIHQ+gZctxVxONIEbY+JBRjecdgVjOrW8gn1Dph7ER
9zLWz5LZvJkECyGioE9LBn3WWddGIgBxvTFmKc1o3CucBzUcBry0lMV8bHX0Exix
j4HRC3cxbKkMoQZ2xRbKqqKrH/goT14yTBmOjUo7llIy
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:52 2025 by rpki-client