Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/31a95f-1b56-4db3-90b6-29c838f6278d/1/pxzULYMOh4yvKrj4fKZeqw1A1H0.roa
File: pxzULYMOh4yvKrj4fKZeqw1A1H0.roa (raw, json)
Hash identifier: 0ahzNKxZIajMUwSrXrItIWCV7mLoR8L5ldAy1LkHQHo=
Subject key identifier: A7:1C:D4:2D:83:0E:87:8C:AF:2A:B8:F8:7C:A6:5E:AB:0D:40:D4:7D
Certificate issuer: /CN=1e9f66ed6e695f1c0c482f682cce3f069f804ede
Certificate serial: 0185719537BF8A970A8CD7E3E7DAA2BD77E8
Authority key identifier: 1E:9F:66:ED:6E:69:5F:1C:0C:48:2F:68:2C:CE:3F:06:9F:80:4E:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp9m7W5pXxwMSC9oLM4_Bp-ATt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/31a95f-1b56-4db3-90b6-29c838f6278d/1/pxzULYMOh4yvKrj4fKZeqw1A1H0.roa
Signing time: Mon 02 Jan 2023 08:24:42 +0000
ROA not before: Mon 02 Jan 2023 08:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.43.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:37:bf:8a:97:0a:8c:d7:e3:e7:da:a2:bd:77:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9f66ed6e695f1c0c482f682cce3f069f804ede
Validity
Not Before: Jan 2 08:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a71cd42d830e878caf2ab8f87ca65eab0d40d47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fe:fe:d1:6f:0f:6d:23:b2:ae:54:59:31:b5:
94:10:ce:63:b8:29:04:94:0a:8a:9a:1a:0f:66:c7:
c0:c5:33:e9:58:ad:54:63:d4:b6:9c:b0:10:5d:96:
62:59:0c:b4:ed:c7:da:65:e2:d2:06:4c:86:53:f7:
fc:d4:e8:a7:b8:ef:fe:d6:1c:91:6e:93:97:fb:6e:
d7:4d:c4:29:2e:59:89:28:c4:92:ac:0a:da:ca:c3:
89:20:73:84:b8:02:11:2f:b9:0b:7f:71:4c:64:36:
96:ac:76:aa:d3:eb:d5:27:04:8b:d7:28:22:e9:8e:
3b:96:fe:58:a0:33:b8:03:fb:20:79:40:d5:ee:63:
3c:62:c3:1a:a2:70:91:0c:b9:19:f4:32:77:2a:fa:
c7:d4:85:02:94:89:8b:03:8a:84:2c:2f:36:07:bc:
c3:7a:ef:b7:2d:58:b0:15:b5:43:46:4c:89:d4:23:
e9:0f:2d:10:85:c5:f2:d9:80:de:98:6b:05:a2:6e:
68:d9:1f:ac:23:46:06:df:df:3e:b0:66:ac:a8:89:
60:b2:05:48:98:0e:2f:06:74:9e:e8:a8:a9:ea:14:
d2:f6:43:30:e5:f0:b0:8e:2a:1a:21:c0:05:b8:72:
39:c5:82:5b:f8:b7:f5:2e:92:cf:ad:9d:8f:80:67:
e7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1C:D4:2D:83:0E:87:8C:AF:2A:B8:F8:7C:A6:5E:AB:0D:40:D4:7D
X509v3 Authority Key Identifier:
keyid:1E:9F:66:ED:6E:69:5F:1C:0C:48:2F:68:2C:CE:3F:06:9F:80:4E:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp9m7W5pXxwMSC9oLM4_Bp-ATt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/31a95f-1b56-4db3-90b6-29c838f6278d/1/pxzULYMOh4yvKrj4fKZeqw1A1H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/31a95f-1b56-4db3-90b6-29c838f6278d/1/Hp9m7W5pXxwMSC9oLM4_Bp-ATt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.42.0/24
Signature Algorithm: sha256WithRSAEncryption
70:95:d0:98:59:1a:98:28:83:73:6f:53:1c:a0:ba:7a:c7:15:
5a:f7:42:28:3b:11:a7:49:49:d3:90:4e:d3:aa:73:a5:96:ae:
91:81:e1:1c:dc:74:51:5e:b6:5e:78:b5:4f:c4:d9:82:68:8e:
5f:da:aa:4d:54:f9:60:bb:de:be:cd:9e:26:74:43:d3:3c:0c:
fc:85:bf:90:d3:dc:d3:c3:fe:49:c0:5a:0d:79:f7:10:bc:9b:
a7:d4:df:67:9f:68:e4:a7:cd:75:72:3a:a8:1d:f5:36:aa:d9:
8a:8a:32:ca:99:07:81:3f:24:6e:3f:0c:6a:71:b5:a5:4a:cb:
6d:89:c9:5d:f7:24:a3:82:e7:72:69:d8:21:d8:4e:f9:93:ae:
df:1f:de:6e:aa:88:8c:64:30:8f:24:11:2d:64:6a:09:96:36:
d6:e2:c7:ad:19:50:28:f8:a1:70:f8:2a:ab:7d:3c:7f:d2:ab:
38:0a:9c:76:d3:a8:97:f3:67:0f:74:72:e6:cb:31:d8:53:8e:
37:62:eb:a3:d0:71:b4:d2:30:f1:27:25:8f:53:69:3c:5b:e9:
4f:4b:fb:8d:50:7d:1d:e4:da:fa:ee:a9:84:51:4f:61:9a:3c:
75:92:6d:24:5b:4e:32:82:b6:b3:34:86:0c:a7:2d:c4:09:db:
ec:c6:ca:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxlTe/ipcKjNfj59qivXfoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWY2NmVkNmU2OTVmMWMwYzQ4MmY2ODJjY2UzZjA2OWY4
MDRlZGUwHhcNMjMwMTAyMDgyNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzFjZDQyZDgzMGU4NzhjYWYyYWI4Zjg3Y2E2NWVhYjBkNDBkNDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8P7+0W8PbSOyrlRZMbWUEM5juCkE
lAqKmhoPZsfAxTPpWK1UY9S2nLAQXZZiWQy07cfaZeLSBkyGU/f81OinuO/+1hyR
bpOX+27XTcQpLlmJKMSSrAraysOJIHOEuAIRL7kLf3FMZDaWrHaq0+vVJwSL1ygi
6Y47lv5YoDO4A/sgeUDV7mM8YsMaonCRDLkZ9DJ3KvrH1IUClImLA4qELC82B7zD
eu+3LViwFbVDRkyJ1CPpDy0QhcXy2YDemGsFom5o2R+sI0YG398+sGasqIlgsgVI
mA4vBnSe6Kip6hTS9kMw5fCwjioaIcAFuHI5xYJb+Lf1LpLPrZ2PgGfnhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKcc1C2DDoeMryq4+HymXqsNQNR9MB8GA1UdIwQY
MBaAFB6fZu1uaV8cDEgvaCzOPwafgE7eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHA5bTdXNXBYeHdNU0M5b0xNNF9CcC1BVHQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8zMWE5NWYtMWI1Ni00ZGIzLTkwYjYt
MjljODM4ZjYyNzhkLzEvcHh6VUxZTU9oNHl2S3JqNGZLWmVxdzFBMUgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8zMWE5NWYtMWI1Ni00ZGIzLTkwYjYtMjljODM4ZjYyNzhk
LzEvSHA5bTdXNXBYeHdNU0M5b0xNNF9CcC1BVHQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSsqMA0G
CSqGSIb3DQEBCwUAA4IBAQBwldCYWRqYKINzb1McoLp6xxVa90IoOxGnSUnTkE7T
qnOllq6RgeEc3HRRXrZeeLVPxNmCaI5f2qpNVPlgu96+zZ4mdEPTPAz8hb+Q09zT
w/5JwFoNefcQvJun1N9nn2jkp811cjqoHfU2qtmKijLKmQeBPyRuPwxqcbWlSstt
icld9ySjgudyadgh2E75k67fH95uqoiMZDCPJBEtZGoJljbW4setGVAo+KFw+Cqr
fTx/0qs4Cpx206iX82cPdHLmyzHYU443Yuuj0HG00jDxJyWPU2k8W+lPS/uNUH0d
5Nr67qmEUU9hmjx1km0kW04ygrazNIYMpy3ECdvsxsoo
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:09:56 2025 by rpki-client