Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/Ldu0EGXQ1MYyGdeyQmSIejuBpSw.roa
File: Ldu0EGXQ1MYyGdeyQmSIejuBpSw.roa (raw, json)
Hash identifier: zigF7LOpUtd1pS/tfQIWkRyp68k6cu70RaVSak3Qv0w=
Subject key identifier: 2D:DB:B4:10:65:D0:D4:C6:32:19:D7:B2:42:64:88:7A:3B:81:A5:2C
Certificate issuer: /CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Certificate serial: 0194B60C9A1ECDCE83D0D5FA4990A627F617
Authority key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/Ldu0EGXQ1MYyGdeyQmSIejuBpSw.roa
Signing time: Thu 30 Jan 2025 07:11:06 +0000
ROA not before: Thu 30 Jan 2025 07:11:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9063
IP address blocks: 193.141.183.0/24 maxlen: 24
193.141.188.0/24 maxlen: 24
2001:67c:d18::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b6:0c:9a:1e:cd:ce:83:d0:d5:fa:49:90:a6:27:f6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Validity
Not Before: Jan 30 07:11:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ddbb41065d0d4c63219d7b24264887a3b81a52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:a6:31:12:05:49:4b:41:c1:e6:b0:62:cf:
55:d2:b6:2c:2e:02:1a:80:c0:22:d5:7b:6b:1a:66:
ad:ce:24:43:8f:71:dd:7d:42:24:56:69:96:47:83:
54:38:e4:6b:13:be:0b:6f:0f:4c:6d:f2:a5:e3:c8:
ee:0a:7e:6f:d2:a5:22:96:59:b8:bd:3b:32:12:2c:
2a:7e:65:25:5b:75:0f:b6:66:16:97:0f:bd:c4:ce:
9f:38:89:72:84:1b:11:3a:10:10:2e:50:f8:36:60:
96:a6:b1:8e:c0:ac:f8:a0:dd:53:fe:46:d2:87:08:
f9:3b:fa:e4:c6:6e:6f:88:e4:9d:0b:c5:a8:02:25:
13:29:25:c8:d8:3f:4e:a8:4d:7f:61:21:2e:07:fc:
ce:0a:0e:5f:4f:ad:eb:b9:d4:3c:b0:88:4f:3c:05:
0a:67:82:9a:3f:93:9e:a3:c6:b0:5a:de:7b:40:df:
77:60:9e:1b:58:1d:c1:f0:9a:d7:e7:f9:e3:df:a0:
cf:d5:ec:ad:05:a2:01:bd:c9:df:5c:35:e4:c6:c5:
2f:15:90:8c:18:09:e2:77:ee:c9:3f:27:dc:81:3a:
7f:8b:ae:a9:d1:d7:b1:97:91:cd:a4:e2:b3:bb:c2:
92:95:31:b7:41:22:52:1a:85:62:43:da:e3:3e:61:
6b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DB:B4:10:65:D0:D4:C6:32:19:D7:B2:42:64:88:7A:3B:81:A5:2C
X509v3 Authority Key Identifier:
keyid:DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/Ldu0EGXQ1MYyGdeyQmSIejuBpSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.183.0/24
193.141.188.0/24
IPv6:
2001:67c:d18::/48
Signature Algorithm: sha256WithRSAEncryption
c4:b2:f3:72:00:21:63:c9:95:2b:50:f6:0d:d5:30:2f:15:b7:
63:00:a1:c6:4d:ea:29:0e:73:c2:53:3d:3b:3a:9f:6b:2e:a4:
11:36:a7:a5:bb:52:d7:89:d0:ce:99:47:f0:3a:7b:81:de:5b:
f8:05:d4:12:c0:a6:f2:00:bd:4e:3f:4e:b5:07:4b:7e:93:02:
da:e0:e8:29:d4:bb:18:6a:60:d3:94:29:e6:c1:32:3b:eb:94:
8e:15:bb:7f:e8:ad:bc:4a:db:5c:cc:59:b2:a6:4d:bf:6a:05:
90:51:3d:03:9b:23:ed:3f:c4:13:75:0f:b5:3d:ab:97:4b:74:
1a:dd:57:e3:b7:45:9d:dc:93:6b:f8:de:3a:8f:d6:db:86:5d:
c2:b8:13:99:ef:7d:68:d8:66:1c:de:1a:81:b8:13:81:31:08:
04:3b:4c:f5:db:f5:ab:87:22:4b:93:45:96:0a:b9:91:6d:0c:
c8:7c:be:9c:6d:bf:b1:e9:d8:96:77:33:7b:f8:34:3b:5b:a1:
5c:5d:23:2b:0d:c7:5a:e7:88:08:90:1d:96:8f:bc:1a:f8:64:
99:b9:03:50:96:f8:b1:38:45:1e:97:4b:cf:01:1c:4a:0a:ba:
b6:c8:84:98:b3:39:c2:4e:7d:54:f3:21:a4:76:c2:3e:71:1e:
b3:39:2b:ab
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZS2DJoezc6D0NX6SZCmJ/YXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNWY3MmYwZmFjZjUyNzA1NzI3YzAzOWJkYzFmYmI3Y2M5
N2Q0MjgwHhcNMjUwMTMwMDcxMTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGRiYjQxMDY1ZDBkNGM2MzIxOWQ3YjI0MjY0ODg3YTNiODFhNTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFimMRIFSUtBweawYs9V0rYsLgIa
gMAi1XtrGmatziRDj3HdfUIkVmmWR4NUOORrE74Lbw9MbfKl48juCn5v0qUillm4
vTsyEiwqfmUlW3UPtmYWlw+9xM6fOIlyhBsROhAQLlD4NmCWprGOwKz4oN1T/kbS
hwj5O/rkxm5viOSdC8WoAiUTKSXI2D9OqE1/YSEuB/zOCg5fT63rudQ8sIhPPAUK
Z4KaP5Oeo8awWt57QN93YJ4bWB3B8JrX5/nj36DP1eytBaIBvcnfXDXkxsUvFZCM
GAnid+7JPyfcgTp/i66p0dexl5HNpOKzu8KSlTG3QSJSGoViQ9rjPmFrCwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFC3btBBl0NTGMhnXskJkiHo7gaUsMB8GA1UdIwQY
MBaAFN1fcvD6z1JwVyfAOb3B+7fMl9QoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1Y5eThQclBVbkJYSjhBNXZjSDd0OHlYMUNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yZjMzZWUtNTU5MC00YTIyLWI4ZTIt
Mjg4MDYxMjcwNWVlLzEvTGR1MEVHWFExTVl5R2RleVFtU0llanVCcFN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yZjMzZWUtNTU5MC00YTIyLWI4ZTItMjg4MDYxMjcwNWVl
LzEvM1Y5eThQclBVbkJYSjhBNXZjSDd0OHlYMUNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwY23AwQA
wY28MA8EAgACMAkDBwAgAQZ8DRgwDQYJKoZIhvcNAQELBQADggEBAMSy83IAIWPJ
lStQ9g3VMC8Vt2MAocZN6ikOc8JTPTs6n2supBE2p6W7UteJ0M6ZR/A6e4HeW/gF
1BLApvIAvU4/TrUHS36TAtrg6CnUuxhqYNOUKebBMjvrlI4Vu3/orbxK21zMWbKm
Tb9qBZBRPQObI+0/xBN1D7U9q5dLdBrdV+O3RZ3ck2v43jqP1tuGXcK4E5nvfWjY
ZhzeGoG4E4ExCAQ7TPXb9auHIkuTRZYKuZFtDMh8vpxtv7Hp2JZ3M3v4NDtboVxd
IysNx1rniAiQHZaPvBr4ZJm5A1CW+LE4RR6XS88BHEoKurbIhJizOcJOfVTzIaR2
wj5xHrM5K6s=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:41 2025 by rpki-client