Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b9230f-fbf1-4272-b217-156204897e89/1/aoc2mwLZxdW8_Xz9f2_WGzc4nk8.roa
File: aoc2mwLZxdW8_Xz9f2_WGzc4nk8.roa (raw, json)
Hash identifier: CRQPxp+z1JPAfba5ELhe97Tu5oEpjyiYwg05KoM0e/w=
Subject key identifier: 6A:87:36:9B:02:D9:C5:D5:BC:FD:7C:FD:7F:6F:D6:1B:37:38:9E:4F
Certificate issuer: /CN=4ad35bad87fbbc23e4dda0bcaf2e329a14432e58
Certificate serial: 0129E4
Authority key identifier: 4A:D3:5B:AD:87:FB:BC:23:E4:DD:A0:BC:AF:2E:32:9A:14:43:2E:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StNbrYf7vCPk3aC8ry4ymhRDLlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b9230f-fbf1-4272-b217-156204897e89/1/aoc2mwLZxdW8_Xz9f2_WGzc4nk8.roa
Signing time: Tue 15 Feb 2022 12:21:00 +0000
ROA not before: Tue 15 Feb 2022 12:21:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 193.202.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76260 (0x129e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad35bad87fbbc23e4dda0bcaf2e329a14432e58
Validity
Not Before: Feb 15 12:21:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a87369b02d9c5d5bcfd7cfd7f6fd61b37389e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:4d:b1:72:b0:4a:95:20:68:31:84:e6:df:
58:b5:9e:4a:44:66:c2:93:99:01:93:78:13:91:dd:
8b:e4:7d:10:1e:8b:1d:d3:76:be:13:6d:db:b1:0c:
73:6d:39:68:c0:90:60:a3:a5:ca:4e:8e:30:da:63:
83:42:3b:f0:ce:57:a1:3d:d5:f2:3c:ba:e4:f2:fa:
73:82:34:62:97:a5:4a:c3:1d:88:d3:0a:8e:77:63:
4a:6e:e7:5c:b5:d1:fc:b1:c7:3e:1d:0d:86:ce:99:
32:95:46:2f:07:7f:5d:f5:85:a3:49:67:52:23:21:
21:b4:f6:aa:27:59:bb:37:b7:23:a5:ce:8e:6e:90:
31:a1:f9:a5:a9:72:f0:58:d7:8e:53:7f:21:98:b7:
29:54:f8:4f:11:9e:21:75:5a:16:b4:73:bb:71:0c:
87:d5:e7:64:7c:f4:ab:1d:25:21:c8:91:15:14:1b:
5f:88:b0:d4:eb:c1:bd:e1:ef:b4:29:e0:c7:88:68:
1e:cd:37:bc:41:f0:ee:98:3f:15:8a:2b:f6:7e:56:
9d:fc:d9:d8:e2:56:81:e8:e8:0c:80:c0:f4:89:07:
f4:53:2b:1e:16:90:2f:c9:92:9e:0a:f5:50:97:e0:
0f:15:65:b3:ca:04:44:99:69:c2:f4:45:d3:cf:fe:
53:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:87:36:9B:02:D9:C5:D5:BC:FD:7C:FD:7F:6F:D6:1B:37:38:9E:4F
X509v3 Authority Key Identifier:
keyid:4A:D3:5B:AD:87:FB:BC:23:E4:DD:A0:BC:AF:2E:32:9A:14:43:2E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StNbrYf7vCPk3aC8ry4ymhRDLlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b9230f-fbf1-4272-b217-156204897e89/1/aoc2mwLZxdW8_Xz9f2_WGzc4nk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b9230f-fbf1-4272-b217-156204897e89/1/StNbrYf7vCPk3aC8ry4ymhRDLlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.16.0/24
Signature Algorithm: sha256WithRSAEncryption
68:df:08:47:22:f2:3a:e8:61:3a:13:bf:7d:8e:cc:08:c8:62:
c5:72:97:f4:ef:c7:a9:d8:7d:c6:8c:26:08:6e:17:ae:a1:df:
ba:f4:d6:41:34:b7:1a:53:87:ab:6c:c7:8d:43:80:c7:3a:aa:
8b:15:78:c7:5e:3f:2b:54:88:25:35:e3:25:09:19:5b:f7:6b:
f9:e4:01:2f:e6:8e:a2:ce:8d:d5:da:45:de:d6:9c:6b:56:5a:
a7:f0:8d:b9:94:4f:e1:98:cd:ad:cc:f4:72:48:0d:b8:96:6f:
41:cf:3a:c3:50:22:37:51:aa:c4:9a:33:e0:52:8d:45:ba:48:
54:f0:41:f6:c4:15:cb:86:60:08:a8:05:fc:7c:85:25:9f:a8:
f2:7a:ce:68:88:55:c9:84:9d:38:df:ec:51:01:0a:3f:3e:4c:
84:8a:a6:97:ca:30:3a:1c:e5:81:55:83:d7:43:52:a1:0e:5f:
2d:85:54:c8:53:8f:62:16:a8:48:f7:09:a5:12:23:44:57:e4:
de:2b:db:7f:9c:03:87:50:f7:78:5d:65:56:1e:74:86:cd:d4:
2a:14:2e:76:0e:8a:fd:96:10:b6:1f:c9:13:e6:51:81:ad:27:
17:66:6f:d9:2e:e9:1f:c0:d3:5b:59:b6:c6:63:d9:de:e3:5b:
63:5b:29:b9
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDASnkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRh
ZDM1YmFkODdmYmJjMjNlNGRkYTBiY2FmMmUzMjlhMTQ0MzJlNTgwHhcNMjIwMjE1
MTIyMTAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2YTg3MzY5YjAyZDlj
NWQ1YmNmZDdjZmQ3ZjZmZDYxYjM3Mzg5ZTRmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtJVNsXKwSpUgaDGE5t9YtZ5KRGbCk5kBk3gTkd2L5H0QHosd
03a+E23bsQxzbTlowJBgo6XKTo4w2mODQjvwzlehPdXyPLrk8vpzgjRil6VKwx2I
0wqOd2NKbudctdH8scc+HQ2GzpkylUYvB39d9YWjSWdSIyEhtPaqJ1m7N7cjpc6O
bpAxofmlqXLwWNeOU38hmLcpVPhPEZ4hdVoWtHO7cQyH1edkfPSrHSUhyJEVFBtf
iLDU68G94e+0KeDHiGgezTe8QfDumD8Viiv2flad/NnY4laB6OgMgMD0iQf0Uyse
FpAvyZKeCvVQl+APFWWzygREmWnC9EXTz/5TXwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFGqHNpsC2cXVvP18/X9v1hs3OJ5PMB8GA1UdIwQYMBaAFErTW62H+7wj5N2g
vK8uMpoUQy5YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
U3ROYnJZZjd2Q1BrM2FDOHJ5NHltaFJETGxnLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC83Ny9iOTIzMGYtZmJmMS00MjcyLWIyMTctMTU2MjA0ODk3ZTg5LzEv
YW9jMm13TFp4ZFc4X1h6OWYyX1dHemM0bms4LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9i
OTIzMGYtZmJmMS00MjcyLWIyMTctMTU2MjA0ODk3ZTg5LzEvU3ROYnJZZjd2Q1Br
M2FDOHJ5NHltaFJETGxnLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcoQMA0GCSqGSIb3DQEBCwUAA4IB
AQBo3whHIvI66GE6E799jswIyGLFcpf078ep2H3GjCYIbheuod+69NZBNLcaU4er
bMeNQ4DHOqqLFXjHXj8rVIglNeMlCRlb92v55AEv5o6izo3V2kXe1pxrVlqn8I25
lE/hmM2tzPRySA24lm9BzzrDUCI3UarEmjPgUo1FukhU8EH2xBXLhmAIqAX8fIUl
n6jyes5oiFXJhJ043+xRAQo/PkyEiqaXyjA6HOWBVYPXQ1KhDl8thVTIU49iFqhI
9wmlEiNEV+TeK9t/nAOHUPd4XWVWHnSGzdQqFC52Dor9lhC2H8kT5lGBrScXZm/Z
LukfwNNbWbbGY9ne41tjWym5
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:15:25 2025 by rpki-client