Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/0jZIDs7SNow5TdTYYaCm-OLD7zI.roa
File: 0jZIDs7SNow5TdTYYaCm-OLD7zI.roa (raw, json)
Hash identifier: Zn6WeKZ8a5fagTt1hA72cyKZuSNaaVav+yd7MK9Kvtw=
Subject key identifier: D2:36:48:0E:CE:D2:36:8C:39:4D:D4:D8:61:A0:A6:F8:E2:C3:EF:32
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01942444A035F3A581D83E178F42BAE341C3
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/0jZIDs7SNow5TdTYYaCm-OLD7zI.roa
Signing time: Wed 01 Jan 2025 23:47:44 +0000
ROA not before: Wed 01 Jan 2025 23:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 193.177.222.0/24 maxlen: 24
2a0d:c7c2::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a0:35:f3:a5:81:d8:3e:17:8f:42:ba:e3:41:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d236480eced2368c394dd4d861a0a6f8e2c3ef32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5f:cb:f9:71:08:f4:fc:cd:99:7a:ae:da:c9:
95:36:e0:d9:85:01:3c:69:4b:cf:3c:82:e5:49:56:
68:f1:db:a4:bf:fc:2f:93:30:fd:35:54:55:07:4a:
89:c4:30:dd:7c:6f:0e:14:ce:f7:9f:9f:9f:ce:4b:
d0:90:05:dd:3d:a9:84:b1:39:be:46:44:7b:2a:b1:
46:b8:eb:2d:7c:c7:4f:dc:e8:81:1b:91:a4:18:81:
23:4e:61:93:dc:3b:3b:a3:0d:b8:0b:43:10:6f:44:
74:2e:bb:26:74:75:bc:8b:10:ed:11:8f:d9:3d:cb:
d1:77:fd:db:a1:43:f8:04:b8:00:16:7f:0a:64:34:
34:3a:86:62:21:59:7a:2c:83:e7:e8:50:8f:78:b0:
19:50:fe:4b:42:36:d6:f6:1d:9d:78:da:35:21:65:
06:4e:63:bb:43:fc:13:95:bb:6d:c5:e3:d8:7b:9a:
f4:7f:d9:25:68:dd:c7:db:1a:2d:3d:71:1f:c0:34:
e4:f5:a9:ca:eb:a8:1a:2b:4c:f1:ac:e1:7d:3e:25:
f2:bc:0d:2d:77:ab:06:8f:f3:c1:2a:86:3d:01:8a:
60:bb:8e:63:cb:97:5d:44:51:4d:83:63:28:15:3c:
85:5e:71:53:76:84:81:5a:a0:18:2d:44:43:9f:f3:
ff:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:36:48:0E:CE:D2:36:8C:39:4D:D4:D8:61:A0:A6:F8:E2:C3:EF:32
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/0jZIDs7SNow5TdTYYaCm-OLD7zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.222.0/24
IPv6:
2a0d:c7c2::/32
Signature Algorithm: sha256WithRSAEncryption
85:77:f9:f8:47:5f:f8:cf:68:63:58:92:d8:d2:6a:55:10:9c:
76:09:f2:c7:e1:39:66:01:a0:5c:bd:8c:6b:e9:41:3f:1b:a7:
23:73:fa:19:3e:cb:c5:be:20:b4:6a:90:fe:35:83:65:8f:53:
be:b2:2c:73:e1:2c:4b:8e:3e:28:a9:52:3e:64:88:c2:e6:98:
70:5d:16:a8:0b:f8:60:c8:98:9e:65:9b:ac:38:2c:7e:f7:9f:
31:46:27:8b:99:52:51:9c:75:8e:10:0e:e9:b7:0b:eb:b2:b5:
8a:d5:51:7c:c9:e0:a9:48:f2:d8:ee:03:ba:b6:0e:ef:6e:d1:
b8:00:74:4a:07:f2:0c:2e:5a:63:47:5c:18:7a:9c:66:3c:4a:
4a:36:3b:72:00:39:87:c1:56:f0:ca:f0:62:bf:ac:9d:22:d9:
7a:4e:3d:a1:ff:79:b7:8b:20:8a:7d:6d:eb:4d:24:39:2b:29:
7e:5e:c2:e6:f7:09:2f:e6:20:34:e6:a3:ba:72:66:21:6a:af:
25:c9:fc:17:7a:c8:79:fd:bc:02:ba:8b:95:13:a0:94:32:89:
27:42:77:98:58:4d:13:2a:7d:c9:b8:ef:f4:63:d9:5c:eb:af:
b7:ca:01:3a:9d:68:b6:a3:84:f4:c6:bf:33:3d:99:88:06:e0:
41:96:6b:75
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQkRKA186WB2D4Xj0K640HDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjUwMTAxMjM0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjM2NDgwZWNlZDIzNjhjMzk0ZGQ0ZDg2MWEwYTZmOGUyYzNlZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9V/L+XEI9PzNmXqu2smVNuDZhQE8
aUvPPILlSVZo8dukv/wvkzD9NVRVB0qJxDDdfG8OFM73n5+fzkvQkAXdPamEsTm+
RkR7KrFGuOstfMdP3OiBG5GkGIEjTmGT3Ds7ow24C0MQb0R0LrsmdHW8ixDtEY/Z
PcvRd/3boUP4BLgAFn8KZDQ0OoZiIVl6LIPn6FCPeLAZUP5LQjbW9h2deNo1IWUG
TmO7Q/wTlbttxePYe5r0f9klaN3H2xotPXEfwDTk9anK66gaK0zxrOF9PiXyvA0t
d6sGj/PBKoY9AYpgu45jy5ddRFFNg2MoFTyFXnFTdoSBWqAYLURDn/P/WQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNI2SA7O0jaMOU3U2GGgpvjiw+8yMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvMGpaSURzN1NOb3c1VGRUWVlhQ20tT0xEN3pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwbHeMA0E
AgACMAcDBQAqDcfCMA0GCSqGSIb3DQEBCwUAA4IBAQCFd/n4R1/4z2hjWJLY0mpV
EJx2CfLH4TlmAaBcvYxr6UE/G6cjc/oZPsvFviC0apD+NYNlj1O+sixz4SxLjj4o
qVI+ZIjC5phwXRaoC/hgyJieZZusOCx+958xRieLmVJRnHWOEA7ptwvrsrWK1VF8
yeCpSPLY7gO6tg7vbtG4AHRKB/IMLlpjR1wYepxmPEpKNjtyADmHwVbwyvBiv6yd
Itl6Tj2h/3m3iyCKfW3rTSQ5Kyl+XsLm9wkv5iA05qO6cmYhaq8lyfwXesh5/bwC
uouVE6CUMoknQneYWE0TKn3JuO/0Y9lc66+3ygE6nWi2o4T0xr8zPZmIBuBBlmt1
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:17 2025 by rpki-client