Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/9c3ab-Wad5N-TUYUBK9Zyh47cwc.roa
File: 9c3ab-Wad5N-TUYUBK9Zyh47cwc.roa (raw, json)
Hash identifier: E45sd3llDs2pTTLi6LJkzrRBxW0QqdLu4AwwGiPWU8o=
Subject key identifier: F5:CD:DA:6F:E5:9A:77:93:7E:4D:46:14:04:AF:59:CA:1E:3B:73:07
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 019421B1D55C1AD171F1692BE98DB33EFD7B
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/9c3ab-Wad5N-TUYUBK9Zyh47cwc.roa
Signing time: Wed 01 Jan 2025 11:48:10 +0000
ROA not before: Wed 01 Jan 2025 11:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33954
IP address blocks: 195.228.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d5:5c:1a:d1:71:f1:69:2b:e9:8d:b3:3e:fd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 11:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5cdda6fe59a77937e4d461404af59ca1e3b7307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:63:30:9d:a6:28:c4:0c:ff:7f:36:0f:40:
5c:06:1c:f5:be:86:56:d1:18:03:cc:57:e9:65:8b:
a7:cb:ab:d2:59:28:41:ff:14:6d:9b:7e:e8:34:96:
32:c5:3f:63:29:10:fb:6e:7a:c1:1c:22:9a:1e:27:
53:af:d4:02:2e:3a:99:16:e0:d7:a0:9c:9b:ba:a1:
f8:3a:7b:19:a4:a3:09:25:e7:d1:05:a4:cc:e7:45:
46:d7:b0:fd:c1:cb:26:c2:25:ae:0a:d2:c1:3d:57:
d4:60:22:57:20:90:3b:32:52:a7:60:40:db:03:d9:
9b:7b:83:bd:95:90:c6:b3:22:d5:98:8d:75:f0:0c:
37:a2:bd:38:24:f1:32:ac:40:6c:02:4d:e9:bf:2b:
22:c5:f9:47:b5:6a:00:60:5f:9d:85:91:9d:21:fc:
ca:9d:0c:2f:2b:62:04:8c:56:02:b7:cd:ec:8d:e7:
e6:a0:e9:ec:91:f5:55:c8:97:9d:56:8c:92:9b:d0:
45:fe:35:92:26:16:e7:77:93:b0:9a:94:a2:30:79:
34:b6:e9:9f:1f:f3:21:b5:a1:fa:8e:35:cc:10:a2:
f9:c4:7c:f3:68:cb:db:3a:31:4f:2a:6a:51:82:43:
06:66:c0:b0:90:00:48:c0:9c:f9:4a:56:e0:13:ef:
8f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CD:DA:6F:E5:9A:77:93:7E:4D:46:14:04:AF:59:CA:1E:3B:73:07
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/9c3ab-Wad5N-TUYUBK9Zyh47cwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.228.53.0/24
Signature Algorithm: sha256WithRSAEncryption
70:10:78:e1:21:d7:27:e1:e9:ae:8f:c9:89:a4:71:f9:55:bf:
7a:d0:f7:55:3e:9f:bf:35:34:e7:be:fc:3b:be:f9:cc:25:31:
54:cc:88:09:73:a5:b9:ad:4c:f6:2c:b6:42:9b:96:c4:7e:40:
4e:00:9b:51:72:e4:2b:8a:28:70:0c:1e:88:12:36:72:ef:9e:
5b:64:89:1a:2d:41:3b:2c:47:28:74:20:2a:5f:46:2d:2d:cc:
3c:dd:b1:d0:58:9e:d5:56:8e:bc:d8:18:ec:11:a6:19:ea:53:
ba:ae:9d:e7:b3:00:b4:89:1c:4c:29:a9:6f:3f:c4:9e:10:e2:
8d:fc:ee:ca:1a:d2:b5:f6:ab:f3:da:17:01:13:a5:58:90:c0:
7a:5e:bc:50:75:7e:33:22:8c:0a:ec:56:4c:a0:49:db:4b:ff:
d2:96:cc:33:da:f5:13:a7:6e:01:65:94:c5:4e:f0:49:ac:40:
e8:6f:ce:6c:02:2a:2c:02:93:46:c9:a2:25:3b:24:c1:57:e5:
52:09:53:c3:49:9f:59:36:24:72:ab:88:2c:e1:d5:88:4d:43:
f2:ef:73:e1:88:44:6c:e8:ce:62:c6:8b:e4:18:45:be:d1:73:
da:9b:60:cd:c6:93:a9:74:41:b4:a6:2a:81:46:de:03:ec:98:
50:be:af:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsdVcGtFx8Wkr6Y2zPv17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4
YWFlN2IwHhcNMjUwMTAxMTE0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWNkZGE2ZmU1OWE3NzkzN2U0ZDQ2MTQwNGFmNTljYTFlM2I3MzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyX1jMJ2mKMQM/382D0BcBhz1voZW
0RgDzFfpZYuny6vSWShB/xRtm37oNJYyxT9jKRD7bnrBHCKaHidTr9QCLjqZFuDX
oJybuqH4OnsZpKMJJefRBaTM50VG17D9wcsmwiWuCtLBPVfUYCJXIJA7MlKnYEDb
A9mbe4O9lZDGsyLVmI118Aw3or04JPEyrEBsAk3pvysixflHtWoAYF+dhZGdIfzK
nQwvK2IEjFYCt83sjefmoOnskfVVyJedVoySm9BF/jWSJhbnd5OwmpSiMHk0tumf
H/MhtaH6jjXMEKL5xHzzaMvbOjFPKmpRgkMGZsCwkABIwJz5SlbgE++P9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPXN2m/lmneTfk1GFASvWcoeO3MHMB8GA1UdIwQY
MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt
MjkyYWU0NmU2MzAyLzEvOWMzYWItV2FkNU4tVFVZVUJLOVp5aDQ3Y3djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy
LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+Q1MA0G
CSqGSIb3DQEBCwUAA4IBAQBwEHjhIdcn4emuj8mJpHH5Vb960PdVPp+/NTTnvvw7
vvnMJTFUzIgJc6W5rUz2LLZCm5bEfkBOAJtRcuQriihwDB6IEjZy755bZIkaLUE7
LEcodCAqX0YtLcw83bHQWJ7VVo682BjsEaYZ6lO6rp3nswC0iRxMKalvP8SeEOKN
/O7KGtK19qvz2hcBE6VYkMB6XrxQdX4zIowK7FZMoEnbS//Slswz2vUTp24BZZTF
TvBJrEDob85sAiosApNGyaIlOyTBV+VSCVPDSZ9ZNiRyq4gs4dWITUPy73PhiERs
6M5ixovkGEW+0XPam2DNxpOpdEG0piqBRt4D7JhQvq/d
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:21 2025 by rpki-client