Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/pLab0TRjgeeCCYzGrOJ8eUnyoUY.roa
File: pLab0TRjgeeCCYzGrOJ8eUnyoUY.roa (raw, json)
Hash identifier: eAiA3LScpHVLn6hm7FMcqWOD8wBahEBpe3kvRDh7XrA=
Subject key identifier: A4:B6:9B:D1:34:63:81:E7:82:09:8C:C6:AC:E2:7C:79:49:F2:A1:46
Certificate issuer: /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Certificate serial: 01942143EF1892D0C7AC358C5A59637E3629
Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/pLab0TRjgeeCCYzGrOJ8eUnyoUY.roa
Signing time: Wed 01 Jan 2025 09:48:07 +0000
ROA not before: Wed 01 Jan 2025 09:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.131.114.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ef:18:92:d0:c7:ac:35:8c:5a:59:63:7e:36:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Validity
Not Before: Jan 1 09:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4b69bd1346381e782098cc6ace27c7949f2a146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:1b:a6:0d:b4:72:e4:32:97:b6:8d:2e:16:
1c:79:7c:81:62:7e:55:6d:c6:4e:fa:9b:ea:e5:c0:
70:be:bb:df:ed:01:14:fd:f1:2b:0e:48:10:1e:c1:
de:4a:5e:02:b7:f8:cc:25:7d:bb:46:f9:4b:cf:da:
34:58:0f:58:a6:42:2a:74:4a:af:f9:f0:a4:92:18:
be:f8:a2:d8:c6:e4:22:ca:45:31:63:35:db:d8:46:
68:82:22:2a:ea:fb:be:ff:e8:97:67:1c:db:31:96:
3f:14:0e:04:c4:10:62:b5:9e:cc:90:b0:18:06:94:
10:30:9a:1b:6f:b8:03:53:da:2b:83:9f:2c:f1:4e:
10:f5:25:a2:32:ef:74:69:04:6a:f9:68:99:e5:02:
6c:26:1d:ab:82:14:4c:42:4a:64:b9:29:8c:d9:e2:
e9:71:71:8d:45:7e:83:b9:c7:3b:f2:39:eb:c4:47:
0f:bd:a8:08:d2:6b:e2:84:44:0d:bb:04:32:cd:b2:
a6:f5:64:62:34:b8:26:bb:7c:77:b0:51:da:0f:9b:
b0:7e:0d:b3:55:3c:cc:55:c4:33:2f:58:37:0f:0a:
b3:d2:d5:e2:70:be:be:0a:d8:09:5b:2e:17:cd:1d:
15:72:67:0b:27:5e:00:4a:d7:c0:de:0f:a4:0b:8d:
ca:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B6:9B:D1:34:63:81:E7:82:09:8C:C6:AC:E2:7C:79:49:F2:A1:46
X509v3 Authority Key Identifier:
keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/pLab0TRjgeeCCYzGrOJ8eUnyoUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.131.114.0/23
Signature Algorithm: sha256WithRSAEncryption
90:fd:29:38:26:f6:3f:49:e9:11:6d:76:c3:4e:e7:dd:63:f1:
68:3a:81:5d:95:5c:8f:6c:44:3b:1c:01:23:88:50:66:2f:1f:
a2:3f:2b:7d:ea:37:53:91:8c:cc:36:4d:65:f2:ed:7a:05:a1:
94:c7:62:94:92:5a:44:6e:d5:1d:a3:2a:8e:16:b5:8a:2c:27:
74:d2:c9:02:f9:54:37:fd:87:6c:05:0b:c9:30:79:8c:3f:99:
45:7d:f9:d7:80:68:71:dd:2c:11:60:c8:87:1d:9e:ad:ca:f1:
f4:a1:b7:99:93:a5:8c:8b:4a:02:10:db:01:c6:29:04:bf:ff:
57:c0:05:a7:f4:ac:56:3c:97:eb:41:ec:27:0c:d0:00:c3:86:
b3:14:6e:5d:b2:68:7f:f5:67:44:9b:b6:b1:99:6b:60:47:05:
4c:58:87:f0:ac:6d:6b:ed:4f:f3:51:33:a6:e4:03:c9:b4:e4:
a9:af:bc:d4:e3:e0:82:c2:61:84:7b:ed:34:d7:27:3b:78:2c:
a6:10:09:eb:fd:0d:41:f0:d3:43:ed:5e:64:87:fe:1c:cc:47:
a9:6a:18:bb:ac:c7:d5:84:95:e1:87:0d:97:62:b2:aa:8c:ed:
ce:2b:1d:1b:65:22:77:ee:11:9b:eb:40:73:f5:cb:12:d5:97:
70:c7:0b:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ+8YktDHrDWMWlljfjYpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYTgxNzEzODUzYzliMThkNDEwZDRmZjMwOTlhYjY2OGU2
OWIzZjUwHhcNMjUwMTAxMDk0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGI2OWJkMTM0NjM4MWU3ODIwOThjYzZhY2UyN2M3OTQ5ZjJhMTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiobpg20cuQyl7aNLhYceXyBYn5V
bcZO+pvq5cBwvrvf7QEU/fErDkgQHsHeSl4Ct/jMJX27RvlLz9o0WA9YpkIqdEqv
+fCkkhi++KLYxuQiykUxYzXb2EZogiIq6vu+/+iXZxzbMZY/FA4ExBBitZ7MkLAY
BpQQMJobb7gDU9org58s8U4Q9SWiMu90aQRq+WiZ5QJsJh2rghRMQkpkuSmM2eLp
cXGNRX6Ducc78jnrxEcPvagI0mvihEQNuwQyzbKm9WRiNLgmu3x3sFHaD5uwfg2z
VTzMVcQzL1g3Dwqz0tXicL6+CtgJWy4XzR0VcmcLJ14AStfA3g+kC43KlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKS2m9E0Y4HnggmMxqzifHlJ8qFGMB8GA1UdIwQY
MBaAFB2oFxOFPJsY1BDU/zCZq2aOabP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kMjlmZTctOGMyMi00YWFhLWI4ZDYt
NjYwZjM5ZjY0MzE2LzEvcExhYjBUUmpnZWVDQ1l6R3JPSjhlVW55b1VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9kMjlmZTctOGMyMi00YWFhLWI4ZDYtNjYwZjM5ZjY0MzE2
LzEvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwYNyMA0G
CSqGSIb3DQEBCwUAA4IBAQCQ/Sk4JvY/SekRbXbDTufdY/FoOoFdlVyPbEQ7HAEj
iFBmLx+iPyt96jdTkYzMNk1l8u16BaGUx2KUklpEbtUdoyqOFrWKLCd00skC+VQ3
/YdsBQvJMHmMP5lFffnXgGhx3SwRYMiHHZ6tyvH0obeZk6WMi0oCENsBxikEv/9X
wAWn9KxWPJfrQewnDNAAw4azFG5dsmh/9WdEm7axmWtgRwVMWIfwrG1r7U/zUTOm
5APJtOSpr7zU4+CCwmGEe+001yc7eCymEAnr/Q1B8NND7V5kh/4czEepahi7rMfV
hJXhhw2XYrKqjO3OKx0bZSJ37hGb60Bz9csS1Zdwxwto
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:30:07 2025 by rpki-client