Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/IN53s7ISZBVIVvaoNtrSdpwO7Fw.roa
File: IN53s7ISZBVIVvaoNtrSdpwO7Fw.roa (raw, json)
Hash identifier: vG1Xsb5JGqpTVNboMLFjS6fFntPm08pTlZBbdiru0RE=
Subject key identifier: 20:DE:77:B3:B2:12:64:15:48:56:F6:A8:36:DA:D2:76:9C:0E:EC:5C
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 01856F4292483528FDD09E608DD1B53D156D
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/IN53s7ISZBVIVvaoNtrSdpwO7Fw.roa
Signing time: Sun 01 Jan 2023 21:35:11 +0000
ROA not before: Sun 01 Jan 2023 21:35:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59210
IP address blocks: 195.128.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:92:48:35:28:fd:d0:9e:60:8d:d1:b5:3d:15:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jan 1 21:35:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20de77b3b21264154856f6a836dad2769c0eec5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9e:99:42:0e:bd:54:46:3c:45:2d:45:d7:8b:
6b:3c:79:2a:84:a3:ad:0d:5a:fb:2e:24:db:ca:5d:
dc:25:d7:66:f6:c9:92:f4:49:5a:f0:22:39:78:a7:
a4:bc:ce:ff:5a:c0:b7:bf:1f:1a:65:89:8f:66:ef:
2e:81:6a:4a:8b:77:cd:c6:8c:e8:e2:ba:75:51:55:
7f:59:f0:5c:26:c0:24:23:17:1b:f3:b2:ba:ea:95:
4b:8a:c2:5f:3f:35:d9:39:4e:ad:6b:25:67:d0:48:
49:99:37:79:3c:23:a3:b7:ab:29:d9:2d:0a:3b:40:
9e:59:72:29:81:66:d6:da:48:2e:04:34:c0:76:8b:
29:a4:29:0b:06:10:e7:8c:54:89:0c:59:65:5a:14:
b6:9d:7e:7d:58:38:86:4e:eb:58:51:49:64:3a:1d:
bb:65:ce:3f:9a:77:07:41:ff:38:08:55:b3:c1:4f:
f0:90:82:00:6e:3e:b9:ee:b2:b4:91:15:f9:58:09:
ff:64:f4:ac:22:26:58:8b:02:37:d2:dd:6f:cb:95:
d3:d3:4f:52:c6:16:eb:34:9c:3a:36:47:86:bc:77:
36:e5:1c:8f:1f:6c:72:96:e9:fc:f8:8a:60:5c:03:
0e:e7:76:78:98:a2:fe:00:68:2a:5c:89:9e:a7:d1:
2d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DE:77:B3:B2:12:64:15:48:56:F6:A8:36:DA:D2:76:9C:0E:EC:5C
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/IN53s7ISZBVIVvaoNtrSdpwO7Fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.136.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:58:6e:9d:09:f2:e7:75:d0:a7:dd:d9:91:8e:ba:35:7f:09:
1a:a5:5d:ac:5e:58:13:a2:64:55:05:ed:45:ba:08:de:d3:97:
c7:e2:96:f0:93:5c:7f:37:d0:84:e3:b1:f2:d5:c0:35:6c:2d:
e2:22:b3:f7:91:d5:76:9c:43:18:0b:6e:4d:a4:61:b3:48:a1:
c8:6e:10:a9:6b:96:99:63:57:59:a4:f3:7b:08:a7:09:e5:35:
d9:fa:66:0a:81:90:e3:11:88:56:17:ad:a3:72:c9:2d:2f:25:
9f:bb:5c:ed:fa:47:06:5e:02:cd:3a:a4:19:a7:42:e3:23:e5:
61:bf:36:9b:f1:3f:da:8b:58:52:99:a1:22:0b:52:7b:d2:9a:
4e:42:69:73:4e:0c:90:cd:d7:72:db:37:59:7f:21:d9:03:01:
a1:e3:d5:f8:7e:bb:5c:df:b6:8f:cb:1a:ea:a9:4d:34:2f:d3:
34:ca:b0:46:cd:1b:8e:2b:1c:48:0b:1e:45:e6:78:99:cb:50:
f8:90:69:b9:a4:26:62:d6:e3:ef:c2:f0:e3:74:c5:30:43:1f:
31:e7:53:e3:d1:67:d3:1a:c9:dd:fa:a5:7a:5e:2b:8f:b5:d4:
47:ed:a5:2f:f6:98:14:93:a8:0b:23:dc:3e:a3:f0:34:51:fa:
14:ca:58:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvQpJINSj90J5gjdG1PRVtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZThjYzhmNWFmMWU3MzYyZDQ1NGYzZGQ5MWE4Mjk1Mjkx
OWRiNjEwHhcNMjMwMTAxMjEzNTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGRlNzdiM2IyMTI2NDE1NDg1NmY2YTgzNmRhZDI3NjljMGVlYzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ6ZQg69VEY8RS1F14trPHkqhKOt
DVr7LiTbyl3cJddm9smS9Ela8CI5eKekvM7/WsC3vx8aZYmPZu8ugWpKi3fNxozo
4rp1UVV/WfBcJsAkIxcb87K66pVLisJfPzXZOU6tayVn0EhJmTd5PCOjt6sp2S0K
O0CeWXIpgWbW2kguBDTAdosppCkLBhDnjFSJDFllWhS2nX59WDiGTutYUUlkOh27
Zc4/mncHQf84CFWzwU/wkIIAbj657rK0kRX5WAn/ZPSsIiZYiwI30t1vy5XT009S
xhbrNJw6NkeGvHc25RyPH2xylun8+IpgXAMO53Z4mKL+AGgqXImep9EtCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCDed7OyEmQVSFb2qDba0nacDuxcMB8GA1UdIwQY
MBaAFNvozI9a8ec2LUVPPdkagpUpGdthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMt
MjYyMWQ1Yzk5Y2FiLzEvSU41M3M3SVNaQlZJVnZhb050clNkcHdPN0Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMtMjYyMWQ1Yzk5Y2Fi
LzEvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4CIMA0G
CSqGSIb3DQEBCwUAA4IBAQDZWG6dCfLnddCn3dmRjro1fwkapV2sXlgTomRVBe1F
ugje05fH4pbwk1x/N9CE47Hy1cA1bC3iIrP3kdV2nEMYC25NpGGzSKHIbhCpa5aZ
Y1dZpPN7CKcJ5TXZ+mYKgZDjEYhWF62jcsktLyWfu1zt+kcGXgLNOqQZp0LjI+Vh
vzab8T/ai1hSmaEiC1J70ppOQmlzTgyQzddy2zdZfyHZAwGh49X4frtc37aPyxrq
qU00L9M0yrBGzRuOKxxICx5F5niZy1D4kGm5pCZi1uPvwvDjdMUwQx8x51Pj0WfT
Gsnd+qV6XiuPtdRH7aUv9pgUk6gLI9w+o/A0UfoUylhg
-----END CERTIFICATE-----
Generated at Wed Mar 12 07:03:10 2025 by rpki-client