Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/3qw5_uMFVjTfFcOeix9G0p8brYE.roa
File: 3qw5_uMFVjTfFcOeix9G0p8brYE.roa (raw, json)
Hash identifier: li/3Zc6reVrz0HoWXYKvAmhtcYsIh6cqjNhVRqOfoFo=
Subject key identifier: DE:AC:39:FE:E3:05:56:34:DF:15:C3:9E:8B:1F:46:D2:9F:1B:AD:81
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 018394350F501E7AA654B29BF0479CB3947A
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/3qw5_uMFVjTfFcOeix9G0p8brYE.roa
Signing time: Sat 01 Oct 2022 15:40:48 +0000
ROA not before: Sat 01 Oct 2022 15:40:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 193.106.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:94:35:0f:50:1e:7a:a6:54:b2:9b:f0:47:9c:b3:94:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Oct 1 15:40:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=deac39fee3055634df15c39e8b1f46d29f1bad81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fd:c6:15:16:72:fa:e9:3f:e3:49:53:67:b0:
db:6f:82:8c:5a:ab:02:9a:07:1d:44:b4:dd:04:57:
66:80:58:06:94:02:96:c1:c3:06:00:c9:14:53:df:
1b:05:0b:c9:0d:f6:2d:80:7c:bc:c7:83:d0:8c:fe:
7d:0f:66:0a:6d:82:dd:ed:87:9e:e0:7a:f2:51:ab:
1e:5d:f6:e2:c9:1c:78:21:8b:9f:7b:32:2e:95:a6:
8a:3a:c7:37:9f:72:78:a3:3a:a5:bb:15:84:63:d2:
44:1b:6e:71:42:64:f9:c0:f3:59:74:6b:cc:c7:ff:
45:76:8e:7c:79:27:a7:9e:08:9d:a8:7e:6d:c8:af:
c5:22:be:a1:80:be:dd:b4:a1:16:f2:c8:2f:a1:37:
77:c1:34:bc:7d:ac:f8:47:dc:67:df:96:ea:6b:0a:
f0:a8:e5:9e:5d:5e:c7:82:be:8d:b4:95:4f:11:b2:
8f:4c:b4:8b:33:fd:2e:b2:dd:0e:bd:ce:86:31:bd:
66:de:a2:dc:fe:f0:65:a9:7f:e5:21:4a:85:f5:bd:
a2:58:c8:e7:b3:3e:10:6a:01:ce:2b:94:12:2f:18:
b1:95:05:fe:83:a2:72:53:22:c4:9a:c9:4a:ac:f8:
92:f9:a0:c0:7c:35:2d:3b:67:96:15:70:da:b3:ad:
ea:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AC:39:FE:E3:05:56:34:DF:15:C3:9E:8B:1F:46:D2:9F:1B:AD:81
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/3qw5_uMFVjTfFcOeix9G0p8brYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.196.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:0a:ab:07:32:eb:3b:67:9d:83:8b:ab:df:ae:ad:da:a3:1d:
72:4e:e9:fd:1f:23:cc:e5:8a:b5:fb:6d:6c:da:ee:70:d9:d1:
29:6b:cb:fd:eb:75:6c:f9:d4:0e:39:ac:66:24:c2:10:56:96:
fa:f0:9d:f5:36:27:15:2d:d7:d7:03:9f:6a:70:f1:bb:d4:51:
a5:0f:e9:83:2e:8c:41:6e:4d:5c:eb:73:78:e7:6e:0a:d7:4d:
ca:1f:26:3a:34:c7:a8:38:77:d2:ed:e4:c6:2f:13:1c:d5:4c:
02:d9:79:a6:8d:9e:52:5e:d1:c7:36:44:41:de:1e:69:99:ad:
1a:69:79:93:56:16:d2:11:97:fe:af:80:0b:d3:49:e0:64:28:
9b:ea:39:93:23:2b:6b:7c:86:fe:04:17:e3:8c:50:84:b1:9e:
f1:20:19:7e:c1:6c:df:9b:38:b0:53:14:4b:d3:87:6f:67:f1:
cc:96:28:12:f8:e0:39:b2:c4:d7:2c:d5:38:42:7f:f0:c0:00:
fa:da:82:0d:c2:f4:1e:6f:72:b9:ab:58:19:9e:47:44:7b:1d:
ff:4d:a2:33:ab:f4:d3:57:fb:46:d7:ac:8c:6e:97:00:ed:f5:
21:7d:6b:6f:0c:c9:6b:06:ed:70:25:87:16:9f:c6:6d:95:62:
51:b2:bb:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOUNQ9QHnqmVLKb8Eecs5R6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZGVlYTNiNmFhYzRkODM0YjRmZDdjMmU1ZDNjMzk3ZjYx
ZjQzZDYwHhcNMjIxMDAxMTU0MDQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWFjMzlmZWUzMDU1NjM0ZGYxNWMzOWU4YjFmNDZkMjlmMWJhZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv3GFRZy+uk/40lTZ7Dbb4KMWqsC
mgcdRLTdBFdmgFgGlAKWwcMGAMkUU98bBQvJDfYtgHy8x4PQjP59D2YKbYLd7Yee
4HryUaseXfbiyRx4IYufezIulaaKOsc3n3J4ozqluxWEY9JEG25xQmT5wPNZdGvM
x/9Fdo58eSenngidqH5tyK/FIr6hgL7dtKEW8sgvoTd3wTS8faz4R9xn35bqawrw
qOWeXV7Hgr6NtJVPEbKPTLSLM/0ust0Ovc6GMb1m3qLc/vBlqX/lIUqF9b2iWMjn
sz4QagHOK5QSLxixlQX+g6JyUyLEmslKrPiS+aDAfDUtO2eWFXDas63qwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN6sOf7jBVY03xXDnosfRtKfG62BMB8GA1UdIwQY
MBaAFDre6jtqrE2DS0/XwuXTw5f2H0PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3Q3cU8ycXNUWU5MVDlmQzVkUERsX1lmUTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8wMTVmNDQtMGY0Yy00NzE0LTg2MTUt
MjNiMDcyZjViMTg4LzEvM3F3NV91TUZWalRmRmNPZWl4OUcwcDhicllFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8wMTVmNDQtMGY0Yy00NzE0LTg2MTUtMjNiMDcyZjViMTg4
LzEvT3Q3cU8ycXNUWU5MVDlmQzVkUERsX1lmUTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWrEMA0G
CSqGSIb3DQEBCwUAA4IBAQBaCqsHMus7Z52Di6vfrq3aox1yTun9HyPM5Yq1+21s
2u5w2dEpa8v963Vs+dQOOaxmJMIQVpb68J31NicVLdfXA59qcPG71FGlD+mDLoxB
bk1c63N4524K103KHyY6NMeoOHfS7eTGLxMc1UwC2XmmjZ5SXtHHNkRB3h5pma0a
aXmTVhbSEZf+r4AL00ngZCib6jmTIytrfIb+BBfjjFCEsZ7xIBl+wWzfmziwUxRL
04dvZ/HMligS+OA5ssTXLNU4Qn/wwAD62oINwvQeb3K5q1gZnkdEex3/TaIzq/TT
V/tG16yMbpcA7fUhfWtvDMlrBu1wJYcWn8ZtlWJRsrv5
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:09:34 2025 by rpki-client