Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/0DgNiJD2mgZ1XCEBTWhvSNfB6bU.roa
File: 0DgNiJD2mgZ1XCEBTWhvSNfB6bU.roa (raw, json)
Hash identifier: Wkh8AlvgkPO29DapFZTMpLUvC34G78ujIPFAn+aP0AI=
Subject key identifier: D0:38:0D:88:90:F6:9A:06:75:5C:21:01:4D:68:6F:48:D7:C1:E9:B5
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 01848A36C4A8CFD52D7326EFB004AF5CC0D8
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/0DgNiJD2mgZ1XCEBTWhvSNfB6bU.roa
Signing time: Fri 18 Nov 2022 10:09:15 +0000
ROA not before: Fri 18 Nov 2022 10:09:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211560
IP address blocks: 193.53.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8a:36:c4:a8:cf:d5:2d:73:26:ef:b0:04:af:5c:c0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Nov 18 10:09:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0380d8890f69a06755c21014d686f48d7c1e9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:38:6f:81:a7:56:a5:8e:bc:48:2a:f7:54:
b5:d4:b4:f9:25:53:d8:da:b1:4b:fc:07:47:93:89:
98:03:2f:31:b2:a0:c4:9a:87:24:b7:08:6c:73:1f:
fc:6f:e2:1f:9c:fe:a9:7b:33:53:ec:2d:b1:b0:2c:
8d:79:3f:6e:6a:ad:70:44:0f:2d:3a:f0:2c:b8:12:
1c:25:c4:b6:a8:83:9e:ff:c8:5b:60:b9:56:5a:b6:
ea:25:71:6c:6c:34:a0:9c:5d:69:a1:62:ba:e5:7d:
9c:6a:28:52:12:c3:c7:47:4a:a5:aa:4b:75:9a:7e:
a9:e8:98:29:d9:cb:a3:03:69:12:c0:bf:29:2d:35:
cf:d7:1c:32:a0:e4:a0:9f:fa:65:d3:b4:24:c4:e2:
0f:6a:21:4f:c7:a4:26:ce:8c:d9:81:5f:0c:ac:aa:
89:51:98:3e:fe:1e:ad:34:bf:76:80:bc:a2:db:93:
e1:06:1f:58:3a:d2:6d:91:1d:d4:e5:a5:27:07:29:
b0:ce:ce:6f:a8:df:d4:50:a8:c6:8c:4c:d7:40:9e:
96:fc:33:2a:e0:70:b1:c3:7b:2e:5c:1e:73:17:ca:
99:30:f1:df:05:36:f2:4d:72:4d:28:a7:a4:9d:6b:
b2:19:5c:e6:71:e2:91:b6:80:0a:0b:4d:62:3e:4e:
90:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:38:0D:88:90:F6:9A:06:75:5C:21:01:4D:68:6F:48:D7:C1:E9:B5
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/0DgNiJD2mgZ1XCEBTWhvSNfB6bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.40.0/24
Signature Algorithm: sha256WithRSAEncryption
02:3d:3e:8c:c1:32:49:35:1a:5d:bd:65:f8:b0:6a:65:4d:f0:
2d:fb:ca:5d:96:0c:9f:3a:38:84:d6:cd:2f:e3:98:7b:7f:69:
7f:f3:be:0f:f8:1b:e5:da:7e:cd:80:7b:e0:64:6c:53:b8:20:
14:98:e3:8e:f9:16:03:e7:59:a3:80:ac:95:5c:aa:97:4b:2e:
90:f8:72:46:02:b1:d1:7c:3d:00:1f:90:95:ae:db:7a:1d:be:
46:88:c2:4c:ac:a0:26:cb:85:b4:00:17:88:5a:68:02:88:99:
8e:3b:7a:5a:ee:e6:1b:23:0f:c2:0d:44:c1:7e:d9:d4:1e:f8:
a5:8f:15:6b:fe:f3:47:14:fd:f3:ad:82:73:cd:1c:5d:51:14:
b2:22:c0:9c:da:b7:d7:bc:d2:99:00:18:6b:b2:0c:d3:50:d3:
58:45:c5:d9:47:2c:52:67:55:21:61:1f:4b:f6:63:a1:8c:23:
56:f1:78:f0:86:60:49:7a:12:e6:86:87:f9:21:77:cb:89:5a:
19:a6:9f:d9:34:c5:7a:05:a9:60:16:4f:21:3d:88:8a:cc:45:
04:b4:e0:60:06:fb:ec:55:c7:cf:f9:7d:a9:7c:14:d4:1c:16:
42:7b:0a:cb:32:d6:9e:39:3c:2c:06:64:ec:5c:60:2e:13:0e:
f1:b3:41:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSKNsSoz9UtcybvsASvXMDYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZmQzZjg5MzM1ZGNmODI4NjY2YjI4ZmFkOGFlOTkzYmQ0
NDg4NzgwHhcNMjIxMTE4MTAwOTE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDM4MGQ4ODkwZjY5YTA2NzU1YzIxMDE0ZDY4NmY0OGQ3YzFlOWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeM4b4GnVqWOvEgq91S11LT5JVPY
2rFL/AdHk4mYAy8xsqDEmocktwhscx/8b+IfnP6pezNT7C2xsCyNeT9uaq1wRA8t
OvAsuBIcJcS2qIOe/8hbYLlWWrbqJXFsbDSgnF1poWK65X2caihSEsPHR0qlqkt1
mn6p6Jgp2cujA2kSwL8pLTXP1xwyoOSgn/pl07QkxOIPaiFPx6QmzozZgV8MrKqJ
UZg+/h6tNL92gLyi25PhBh9YOtJtkR3U5aUnBymwzs5vqN/UUKjGjEzXQJ6W/DMq
4HCxw3suXB5zF8qZMPHfBTbyTXJNKKeknWuyGVzmceKRtoAKC01iPk6QcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNA4DYiQ9poGdVwhAU1ob0jXwem1MB8GA1UdIwQY
MBaAFKf9P4kzXc+Chmayj62K6ZO9RIh4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF8wX2lUTmR6NEtHWnJLUHJZcnBrNzFFaUhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8zODhmZDgtYzgxZi00ZTcxLWFmNTIt
YzBiMWFkNDM1Yjk1LzEvMERnTmlKRDJtZ1oxWENFQlRXaHZTTmZCNmJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8zODhmZDgtYzgxZi00ZTcxLWFmNTItYzBiMWFkNDM1Yjk1
LzEvcF8wX2lUTmR6NEtHWnJLUHJZcnBrNzFFaUhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTUoMA0G
CSqGSIb3DQEBCwUAA4IBAQACPT6MwTJJNRpdvWX4sGplTfAt+8pdlgyfOjiE1s0v
45h7f2l/874P+Bvl2n7NgHvgZGxTuCAUmOOO+RYD51mjgKyVXKqXSy6Q+HJGArHR
fD0AH5CVrtt6Hb5GiMJMrKAmy4W0ABeIWmgCiJmOO3pa7uYbIw/CDUTBftnUHvil
jxVr/vNHFP3zrYJzzRxdURSyIsCc2rfXvNKZABhrsgzTUNNYRcXZRyxSZ1UhYR9L
9mOhjCNW8XjwhmBJehLmhof5IXfLiVoZpp/ZNMV6BalgFk8hPYiKzEUEtOBgBvvs
VcfP+X2pfBTUHBZCewrLMtaeOTwsBmTsXGAuEw7xs0HE
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:56 2025 by rpki-client