Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/RRaQACbqLwLKraqHN1M2tzTz11M.roa
File: RRaQACbqLwLKraqHN1M2tzTz11M.roa (raw, json)
Hash identifier: fgjH6j5BEJ0aVt3erz7iOfXQAwF4RjDDJs4bom435Us=
Subject key identifier: 45:16:90:00:26:EA:2F:02:CA:AD:AA:87:37:53:36:B7:34:F3:D7:53
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0195605778FC736F7B8B0548EC9A05B0F4CF
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/RRaQACbqLwLKraqHN1M2tzTz11M.roa
Signing time: Tue 04 Mar 2025 08:48:20 +0000
ROA not before: Tue 04 Mar 2025 08:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136501
IP address blocks: 193.17.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:57:78:fc:73:6f:7b:8b:05:48:ec:9a:05:b0:f4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Mar 4 08:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4516900026ea2f02caadaa87375336b734f3d753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:e8:31:88:b1:41:05:af:42:e1:63:8f:20:
b7:e4:0f:dc:d2:f8:3b:89:43:67:7e:48:a7:c1:2b:
ba:48:c7:5f:4a:bd:fb:f3:cc:22:5b:7a:95:37:79:
da:d8:8a:1c:f8:63:26:ac:c9:0b:c3:b1:84:34:6e:
b3:42:aa:54:bd:a6:a0:c2:c4:36:4b:13:94:e7:57:
a8:6a:d2:e2:c4:81:26:b5:05:3e:57:e7:b6:40:b1:
54:f0:d0:94:d4:f8:c5:d0:45:92:1b:3f:69:59:44:
70:02:d6:ca:c0:84:9c:d5:2f:61:d0:ed:a9:a9:86:
3a:98:19:06:9b:ae:00:32:3e:95:97:90:31:55:84:
0d:f9:47:ef:fe:69:4d:61:e3:a9:a8:48:de:cf:87:
91:90:db:fe:32:6f:54:7a:1a:a0:08:30:9f:e2:c5:
d0:f0:b0:0c:5c:ce:3c:9a:3a:62:c4:6f:11:4d:77:
68:36:a4:7f:c4:e2:72:13:42:e1:e8:89:1c:c6:a1:
96:86:22:31:7d:34:48:4c:10:17:e1:30:ba:7b:e7:
f0:e8:84:e0:0e:7e:a0:98:cb:12:37:45:86:67:ec:
c9:47:1a:31:a1:4e:49:bd:c7:05:17:40:77:30:38:
81:f3:a2:ca:bf:c4:10:66:fa:f8:70:5e:ed:0a:63:
0e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:16:90:00:26:EA:2F:02:CA:AD:AA:87:37:53:36:B7:34:F3:D7:53
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/RRaQACbqLwLKraqHN1M2tzTz11M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.91.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d1:7e:4b:f0:a0:f2:ff:9e:a0:6e:bd:c2:75:32:b9:7e:42:
06:c6:25:a1:fe:69:3b:83:8c:bb:61:d7:88:c3:c9:9a:d2:f1:
fc:bd:60:63:d2:e9:c1:ee:e5:e3:74:b8:52:e4:85:78:dc:2f:
6a:0f:10:18:d0:84:17:58:28:46:e9:85:da:e4:9d:db:cf:3f:
fd:11:fa:a4:f1:99:7a:1b:1a:9d:b7:4c:b6:de:69:d8:99:3d:
90:90:f5:f0:35:79:12:e2:45:00:50:5c:98:08:bb:59:b9:32:
5b:21:87:9a:7a:5b:7c:d0:1d:35:99:e4:e5:05:ad:f3:fd:20:
78:01:3c:0f:a5:19:c8:d6:88:c3:b0:ec:fe:06:ef:dc:ef:53:
f0:e8:d8:b8:61:24:0f:d8:31:fe:57:f4:0b:b6:d4:5a:99:28:
2d:8f:0c:5f:4b:84:f3:87:a0:f3:53:3d:b0:03:15:c8:79:13:
47:71:e0:10:49:a3:f7:26:23:88:52:de:d0:08:71:5d:b8:52:
e4:19:d4:5f:36:84:26:08:2c:fb:0b:92:c6:90:80:45:e2:f9:
36:11:c1:f7:e6:76:f3:f1:d5:7b:2e:05:3a:69:ea:47:03:24:
0d:b8:44:d2:21:2c:a1:6b:58:10:0b:f8:85:b4:e9:fc:1a:09:
50:39:8f:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVgV3j8c297iwVI7JoFsPTPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjUwMzA0MDg0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTE2OTAwMDI2ZWEyZjAyY2FhZGFhODczNzUzMzZiNzM0ZjNkNzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2roMYixQQWvQuFjjyC35A/c0vg7
iUNnfkinwSu6SMdfSr3788wiW3qVN3na2Ioc+GMmrMkLw7GENG6zQqpUvaagwsQ2
SxOU51eoatLixIEmtQU+V+e2QLFU8NCU1PjF0EWSGz9pWURwAtbKwISc1S9h0O2p
qYY6mBkGm64AMj6Vl5AxVYQN+Ufv/mlNYeOpqEjez4eRkNv+Mm9UehqgCDCf4sXQ
8LAMXM48mjpixG8RTXdoNqR/xOJyE0Lh6IkcxqGWhiIxfTRITBAX4TC6e+fw6ITg
Dn6gmMsSN0WGZ+zJRxoxoU5JvccFF0B3MDiB86LKv8QQZvr4cF7tCmMOnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEUWkAAm6i8Cyq2qhzdTNrc089dTMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvUlJhUUFDYnFMd0xLcmFxSE4xTTJ0elR6MTFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRFbMA0G
CSqGSIb3DQEBCwUAA4IBAQBP0X5L8KDy/56gbr3CdTK5fkIGxiWh/mk7g4y7YdeI
w8ma0vH8vWBj0unB7uXjdLhS5IV43C9qDxAY0IQXWChG6YXa5J3bzz/9Efqk8Zl6
Gxqdt0y23mnYmT2QkPXwNXkS4kUAUFyYCLtZuTJbIYeaelt80B01meTlBa3z/SB4
ATwPpRnI1ojDsOz+Bu/c71Pw6Ni4YSQP2DH+V/QLttRamSgtjwxfS4Tzh6DzUz2w
AxXIeRNHceAQSaP3JiOIUt7QCHFduFLkGdRfNoQmCCz7C5LGkIBF4vk2EcH35nbz
8dV7LgU6aepHAyQNuETSISyha1gQC/iFtOn8GglQOY+g
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:15:24 2025 by rpki-client