Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b9230f-fbf1-4272-b217-156204897e89/1/MxabdPWe0ykB9ULXiBVNkfFQZsE.roa
File: MxabdPWe0ykB9ULXiBVNkfFQZsE.roa (raw, json)
Hash identifier: Ogm52NarTs1as/kejrlm+PE7dSDMgydeM3pmfKVp05g=
Subject key identifier: 33:16:9B:74:F5:9E:D3:29:01:F5:42:D7:88:15:4D:91:F1:50:66:C1
Certificate issuer: /CN=4ad35bad87fbbc23e4dda0bcaf2e329a14432e58
Certificate serial: 01853E904B22678D7FC8744E6501B8DA810F
Authority key identifier: 4A:D3:5B:AD:87:FB:BC:23:E4:DD:A0:BC:AF:2E:32:9A:14:43:2E:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StNbrYf7vCPk3aC8ry4ymhRDLlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b9230f-fbf1-4272-b217-156204897e89/1/MxabdPWe0ykB9ULXiBVNkfFQZsE.roa
Signing time: Fri 23 Dec 2022 10:38:41 +0000
ROA not before: Fri 23 Dec 2022 10:38:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14576
IP address blocks: 193.202.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3e:90:4b:22:67:8d:7f:c8:74:4e:65:01:b8:da:81:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad35bad87fbbc23e4dda0bcaf2e329a14432e58
Validity
Not Before: Dec 23 10:38:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33169b74f59ed32901f542d788154d91f15066c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:e5:82:0c:80:40:7f:e7:76:d3:41:51:ce:
9c:5b:08:df:fc:73:20:d4:e2:0e:fe:a4:d4:32:ed:
35:a3:53:d2:0f:11:a5:e7:64:78:23:a3:ca:3f:3a:
68:24:6f:eb:a2:c1:60:89:61:b4:2d:7b:4d:98:52:
2d:d8:38:be:ae:ec:ae:20:f7:d4:c8:db:3f:00:83:
4e:7f:31:d3:38:69:15:ba:83:12:67:fe:dd:45:5a:
ee:de:4d:0c:7a:2e:b6:8f:ed:67:b9:c6:71:2f:b4:
e5:d1:68:5c:0d:03:80:b1:97:a6:0b:b3:4c:c3:6e:
69:6d:d2:04:3b:6b:7a:35:7b:7a:67:ad:fa:b2:4b:
87:8d:cd:f7:45:83:9d:3e:dd:52:63:80:3e:c8:3a:
f3:fd:cb:5e:2d:68:97:74:76:3e:34:79:e2:a8:1e:
6a:79:a8:a9:e4:7a:2e:f5:b5:89:a2:9c:3a:55:d9:
fb:a0:d4:fe:f0:38:50:c9:1f:df:5e:08:35:f4:e0:
0e:a5:6f:95:49:03:2f:01:f8:07:a0:e9:f8:9e:33:
ac:84:15:6b:d6:35:33:85:d0:a1:e3:55:95:78:cb:
eb:ad:66:94:44:0f:9a:bf:5c:76:4a:8c:14:a7:2b:
99:55:9c:ab:d3:08:de:40:0a:7f:fc:a3:f0:08:1e:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:16:9B:74:F5:9E:D3:29:01:F5:42:D7:88:15:4D:91:F1:50:66:C1
X509v3 Authority Key Identifier:
keyid:4A:D3:5B:AD:87:FB:BC:23:E4:DD:A0:BC:AF:2E:32:9A:14:43:2E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StNbrYf7vCPk3aC8ry4ymhRDLlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b9230f-fbf1-4272-b217-156204897e89/1/MxabdPWe0ykB9ULXiBVNkfFQZsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b9230f-fbf1-4272-b217-156204897e89/1/StNbrYf7vCPk3aC8ry4ymhRDLlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.16.0/24
Signature Algorithm: sha256WithRSAEncryption
61:5e:fa:a5:fb:a5:f8:5c:d9:de:fa:44:0c:eb:f8:8c:23:b3:
49:d2:ce:ae:32:5c:0c:96:e3:42:f5:6d:3c:04:d5:f6:f0:08:
28:0e:7b:05:a5:f0:bc:f9:ba:bf:5b:28:c8:e3:a9:28:ec:6f:
cb:0c:c0:07:a5:0c:ca:9d:f1:9e:ba:ee:57:8d:f4:57:09:bc:
6a:47:82:0e:58:1d:3b:5a:97:2b:2b:20:83:b7:1e:7e:bb:80:
39:3e:57:4a:b6:33:6e:95:02:80:3b:75:78:21:0e:c7:90:29:
0b:59:85:de:de:b2:9d:87:d6:76:60:df:54:3a:33:9a:08:44:
c9:6a:c2:47:41:ed:b3:d7:5f:89:98:f3:ce:12:04:4a:30:3f:
2e:d1:c7:cd:40:e3:2d:ef:2d:b7:e7:a5:99:b0:8b:fd:8e:5c:
7d:66:92:7d:89:8f:fd:48:80:82:1e:7a:bf:17:42:fe:ee:dd:
59:94:05:16:37:50:f1:a1:e7:42:62:04:d5:45:08:95:a1:ca:
5e:e1:a8:38:51:43:90:30:c8:b5:27:96:5b:9d:b8:e0:1e:3f:
13:94:f6:13:53:7d:da:d1:f7:e6:29:e6:93:8f:fb:60:19:90:
6b:6d:b9:d5:f2:44:2f:60:57:7c:f9:db:69:87:0b:65:43:a9:
15:b9:9e:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYU+kEsiZ41/yHROZQG42oEPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZDM1YmFkODdmYmJjMjNlNGRkYTBiY2FmMmUzMjlhMTQ0
MzJlNTgwHhcNMjIxMjIzMTAzODQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzE2OWI3NGY1OWVkMzI5MDFmNTQyZDc4ODE1NGQ5MWYxNTA2NmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJPlggyAQH/ndtNBUc6cWwjf/HMg
1OIO/qTUMu01o1PSDxGl52R4I6PKPzpoJG/rosFgiWG0LXtNmFIt2Di+ruyuIPfU
yNs/AINOfzHTOGkVuoMSZ/7dRVru3k0Mei62j+1nucZxL7Tl0WhcDQOAsZemC7NM
w25pbdIEO2t6NXt6Z636skuHjc33RYOdPt1SY4A+yDrz/cteLWiXdHY+NHniqB5q
eaip5Hou9bWJopw6Vdn7oNT+8DhQyR/fXgg19OAOpW+VSQMvAfgHoOn4njOshBVr
1jUzhdCh41WVeMvrrWaURA+av1x2SowUpyuZVZyr0wjeQAp//KPwCB51vQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDMWm3T1ntMpAfVC14gVTZHxUGbBMB8GA1UdIwQY
MBaAFErTW62H+7wj5N2gvK8uMpoUQy5YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3ROYnJZZjd2Q1BrM2FDOHJ5NHltaFJETGxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iOTIzMGYtZmJmMS00MjcyLWIyMTct
MTU2MjA0ODk3ZTg5LzEvTXhhYmRQV2UweWtCOVVMWGlCVk5rZkZRWnNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9iOTIzMGYtZmJmMS00MjcyLWIyMTctMTU2MjA0ODk3ZTg5
LzEvU3ROYnJZZjd2Q1BrM2FDOHJ5NHltaFJETGxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcoQMA0G
CSqGSIb3DQEBCwUAA4IBAQBhXvql+6X4XNne+kQM6/iMI7NJ0s6uMlwMluNC9W08
BNX28AgoDnsFpfC8+bq/WyjI46ko7G/LDMAHpQzKnfGeuu5XjfRXCbxqR4IOWB07
WpcrKyCDtx5+u4A5PldKtjNulQKAO3V4IQ7HkCkLWYXe3rKdh9Z2YN9UOjOaCETJ
asJHQe2z11+JmPPOEgRKMD8u0cfNQOMt7y2356WZsIv9jlx9ZpJ9iY/9SICCHnq/
F0L+7t1ZlAUWN1DxoedCYgTVRQiVocpe4ag4UUOQMMi1J5ZbnbjgHj8TlPYTU33a
0ffmKeaTj/tgGZBrbbnV8kQvYFd8+dtphwtlQ6kVuZ51
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:34 2025 by rpki-client