Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/akVfoe2NMwgKKix-I6Nd4k5ngMM.roa
File: akVfoe2NMwgKKix-I6Nd4k5ngMM.roa (raw, json)
Hash identifier: Na2cRAe6jotzXC7LjsbqIgTy4+1+OZSmFcHXYaFK5lY=
Subject key identifier: 6A:45:5F:A1:ED:8D:33:08:0A:2A:2C:7E:23:A3:5D:E2:4E:67:80:C3
Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Certificate serial: 019421B21375F044F54A186B4352E24A8A6A
Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/akVfoe2NMwgKKix-I6Nd4k5ngMM.roa
Signing time: Wed 01 Jan 2025 11:48:25 +0000
ROA not before: Wed 01 Jan 2025 11:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50251
IP address blocks: 193.106.48.0/22 maxlen: 24
2a0b:d7c4::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:13:75:f0:44:f5:4a:18:6b:43:52:e2:4a:8a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Validity
Not Before: Jan 1 11:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a455fa1ed8d33080a2a2c7e23a35de24e6780c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6a:88:61:2a:7f:d2:cf:ff:f1:27:ee:21:89:
fd:3d:09:aa:c2:bd:11:f1:30:e3:23:c3:a9:c2:e2:
52:d0:2c:6d:26:70:29:17:c2:ef:41:9e:ce:ed:74:
61:6d:9a:5c:3e:42:ec:44:79:60:f6:98:f8:04:39:
c4:e1:46:41:0e:7c:a4:48:3a:ab:3f:ec:48:1a:a0:
08:ed:83:dc:fe:b2:3c:49:91:fa:fa:41:ca:03:7d:
07:64:db:69:a2:5e:5b:2e:71:a2:43:d0:32:89:b7:
d8:c4:65:c6:54:29:0f:54:63:51:27:2d:df:24:c5:
8b:f6:24:d4:e7:64:4c:3b:49:2e:ab:11:d4:08:62:
21:5a:1c:f8:16:c0:86:84:05:2a:2d:63:f6:e1:10:
ed:f8:a2:a4:a0:55:ca:62:09:c4:a3:7e:5d:0b:fb:
f7:51:c1:27:67:83:80:ce:a8:b1:6a:5b:59:67:9a:
5f:bc:8f:62:03:21:d8:8e:b0:66:ad:ba:8c:e7:03:
f3:c3:02:2b:9a:36:4b:4e:00:ec:3a:25:f9:49:76:
7a:6d:69:76:45:99:54:1e:57:0d:6c:d1:2d:e9:75:
12:f0:3a:48:f4:46:69:a2:11:1d:46:65:07:12:c4:
0a:3e:e1:65:a4:e5:4e:ef:e9:7c:d7:37:1e:b5:be:
13:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:45:5F:A1:ED:8D:33:08:0A:2A:2C:7E:23:A3:5D:E2:4E:67:80:C3
X509v3 Authority Key Identifier:
keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/akVfoe2NMwgKKix-I6Nd4k5ngMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.48.0/22
IPv6:
2a0b:d7c4::/30
Signature Algorithm: sha256WithRSAEncryption
c2:01:40:be:de:df:ef:9f:2d:76:69:63:96:3e:0e:57:63:11:
10:b9:99:1a:ed:95:08:8e:30:30:e9:b3:bc:2d:43:0c:82:ff:
c9:aa:7a:05:13:40:66:fd:ac:ef:ba:a7:de:5f:00:73:b4:d3:
df:7d:58:64:d8:17:1b:18:f7:ca:d5:a0:d0:49:dd:d4:21:c4:
d8:3b:14:88:22:7f:6f:40:e2:b0:ea:04:02:66:4e:2f:a7:21:
3e:4c:2e:c6:12:bd:28:53:8d:a1:32:a4:c1:a7:4a:0b:5e:cc:
e7:5b:78:0a:11:d3:71:b5:9f:10:ea:ab:a1:a9:29:29:da:8a:
58:33:5c:5d:61:7d:57:32:ce:4b:e8:0c:44:15:ea:61:1e:ef:
fb:da:37:84:25:9e:a1:25:96:a6:e6:c5:ef:bb:b6:ac:35:25:
56:e5:ac:4c:9f:34:a2:9a:15:59:d3:12:8d:0b:f9:7e:6b:9c:
c2:c1:8a:47:9e:c7:3a:0c:5f:af:a5:c5:cd:38:16:5b:38:b7:
43:ea:b7:25:b1:48:86:3b:61:3d:31:1b:41:8b:e0:7a:3c:7b:
f9:f6:d3:76:48:b4:1a:9b:bc:10:aa:fb:38:14:9e:ff:4c:ff:
c2:2a:11:01:89:4d:c9:cf:e7:6e:8f:4d:37:e1:53:c5:d3:45:
9d:68:d5:02
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQhshN18ET1ShhrQ1LiSopqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZWRhNGY4ZDllNDgyOTUyYTExMmIyZWY1YTRmMjM5Yjdm
NjI1NTEwHhcNMjUwMTAxMTE0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTQ1NWZhMWVkOGQzMzA4MGEyYTJjN2UyM2EzNWRlMjRlNjc4MGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGqIYSp/0s//8SfuIYn9PQmqwr0R
8TDjI8OpwuJS0CxtJnApF8LvQZ7O7XRhbZpcPkLsRHlg9pj4BDnE4UZBDnykSDqr
P+xIGqAI7YPc/rI8SZH6+kHKA30HZNtpol5bLnGiQ9AyibfYxGXGVCkPVGNRJy3f
JMWL9iTU52RMO0kuqxHUCGIhWhz4FsCGhAUqLWP24RDt+KKkoFXKYgnEo35dC/v3
UcEnZ4OAzqixaltZZ5pfvI9iAyHYjrBmrbqM5wPzwwIrmjZLTgDsOiX5SXZ6bWl2
RZlUHlcNbNEt6XUS8DpI9EZpohEdRmUHEsQKPuFlpOVO7+l81zcetb4TcwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGpFX6HtjTMICiosfiOjXeJOZ4DDMB8GA1UdIwQY
MBaAFNLtpPjZ5IKVKhErLvWk8jm39iVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHUyay1ObmtncFVxRVNzdTlhVHlPYmYySlZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9kZTM0YjUtMDMyMC00Y2Q5LTllZTMt
YzRjZTNlODA3M2RiLzEvYWtWZm9lMk5Nd2dLS2l4LUk2TmQ0azVuZ01NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9kZTM0YjUtMDMyMC00Y2Q5LTllZTMtYzRjZTNlODA3M2Ri
LzEvMHUyay1ObmtncFVxRVNzdTlhVHlPYmYySlZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwWowMA0E
AgACMAcDBQIqC9fEMA0GCSqGSIb3DQEBCwUAA4IBAQDCAUC+3t/vny12aWOWPg5X
YxEQuZka7ZUIjjAw6bO8LUMMgv/JqnoFE0Bm/azvuqfeXwBztNPffVhk2BcbGPfK
1aDQSd3UIcTYOxSIIn9vQOKw6gQCZk4vpyE+TC7GEr0oU42hMqTBp0oLXsznW3gK
EdNxtZ8Q6quhqSkp2opYM1xdYX1XMs5L6AxEFephHu/72jeEJZ6hJZam5sXvu7as
NSVW5axMnzSimhVZ0xKNC/l+a5zCwYpHnsc6DF+vpcXNOBZbOLdD6rclsUiGO2E9
MRtBi+B6PHv59tN2SLQam7wQqvs4FJ7/TP/CKhEBiU3Jz+duj0034VPF00WdaNUC
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:54 2025 by rpki-client