Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/pbIiqJaS1EGbniEbzOhuiaxLoYs.roa
File: pbIiqJaS1EGbniEbzOhuiaxLoYs.roa (raw, json)
Hash identifier: WUDrXqNFVweqXZgj8CONFBSXhspu+0e8gEJSRHtVtqA=
Subject key identifier: A5:B2:22:A8:96:92:D4:41:9B:9E:21:1B:CC:E8:6E:89:AC:4B:A1:8B
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 0195AF00083E5AAC63585E5710E75E616D74
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/pbIiqJaS1EGbniEbzOhuiaxLoYs.roa
Signing time: Wed 19 Mar 2025 15:22:49 +0000
ROA not before: Wed 19 Mar 2025 15:22:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 93.119.144.0/24 maxlen: 24
188.208.126.0/24 maxlen: 24
188.208.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:af:00:08:3e:5a:ac:63:58:5e:57:10:e7:5e:61:6d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Mar 19 15:22:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5b222a89692d4419b9e211bcce86e89ac4ba18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:67:04:55:b4:13:de:bf:d8:9d:92:82:34:
35:4a:79:cf:8e:46:e4:fc:8a:1f:8f:bb:b7:cc:86:
bf:60:a7:42:0c:32:ea:89:64:4d:22:da:ea:c0:57:
f4:9f:a0:15:41:4a:91:3a:2b:a9:1f:0d:e0:4a:ec:
25:a4:f0:9b:6a:6c:98:12:b8:22:04:49:ae:74:3a:
70:b9:ec:23:5b:fa:24:6f:ea:1c:e2:22:26:a6:a6:
30:0f:ab:39:23:8a:d8:5e:47:ab:4d:90:68:a8:f1:
0b:01:be:6d:0c:b8:8a:39:68:03:a3:98:d5:7d:ee:
6d:9c:c0:58:70:80:aa:47:b1:78:1c:ad:72:b0:93:
87:98:5b:39:bf:8a:06:7f:2e:49:36:8e:d4:8f:b4:
de:7f:85:3f:6b:5a:d6:81:35:90:03:af:ec:55:bd:
02:5a:e7:f8:de:62:3b:c0:3e:c6:c4:61:dd:e8:8a:
51:22:04:af:1e:92:f5:93:49:d8:ef:22:dd:ce:d1:
7e:a0:c6:de:bb:d8:0b:d7:13:2e:11:ad:8d:c8:6a:
df:ca:40:b3:5e:a7:96:67:97:22:4b:47:3b:8e:2d:
87:49:95:3f:c2:c2:31:e7:10:69:1b:09:75:83:2c:
ae:0f:7a:82:c3:f2:9a:81:8a:af:90:5f:a0:96:27:
47:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B2:22:A8:96:92:D4:41:9B:9E:21:1B:CC:E8:6E:89:AC:4B:A1:8B
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/pbIiqJaS1EGbniEbzOhuiaxLoYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.144.0/24
188.208.126.0/23
Signature Algorithm: sha256WithRSAEncryption
15:54:ea:91:9a:2e:d1:70:1e:08:55:c5:4f:00:5f:61:16:c5:
7c:8d:80:43:1a:97:02:33:24:f5:4e:80:09:32:a0:23:78:fe:
4d:79:20:d6:f3:da:6d:1c:2b:51:46:0b:0b:e9:0e:4f:28:79:
92:35:64:c9:2c:26:8d:51:7d:ae:e5:12:d9:fb:df:d2:ed:4c:
a8:90:65:70:36:5e:27:3b:0d:07:0f:9f:5e:79:b7:ef:dd:23:
38:7c:60:30:78:aa:9a:ef:f7:4c:79:63:b5:e1:2c:90:72:3d:
f4:00:ca:01:08:12:82:af:78:a1:03:92:35:39:a6:ae:73:02:
5e:64:ca:b2:e9:c7:54:16:13:f2:65:46:3e:a7:45:ce:db:57:
5c:9a:db:3f:b5:4c:08:88:1a:87:95:26:35:e8:e4:fd:c8:46:
32:2f:96:11:92:96:88:b6:2f:7f:aa:9f:4e:7a:92:70:db:80:
62:5e:11:4a:88:dc:01:28:1d:01:76:13:e1:12:5a:10:8e:7a:
ee:c1:4a:2b:6f:89:73:bf:33:3e:7a:09:dc:04:71:81:38:e1:
56:f6:4f:32:70:2d:10:12:e3:91:1d:6b:9b:4f:b2:e0:f4:20:
83:9e:96:86:84:08:27:f8:2d:ce:e9:82:c8:1e:e3:aa:71:10:
8e:10:23:27
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZWvAAg+WqxjWF5XEOdeYW10MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjUwMzE5MTUyMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWIyMjJhODk2OTJkNDQxOWI5ZTIxMWJjY2U4NmU4OWFjNGJhMThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkhnBFW0E96/2J2SgjQ1SnnPjkbk
/Iofj7u3zIa/YKdCDDLqiWRNItrqwFf0n6AVQUqROiupHw3gSuwlpPCbamyYErgi
BEmudDpwuewjW/okb+oc4iImpqYwD6s5I4rYXkerTZBoqPELAb5tDLiKOWgDo5jV
fe5tnMBYcICqR7F4HK1ysJOHmFs5v4oGfy5JNo7Uj7Tef4U/a1rWgTWQA6/sVb0C
Wuf43mI7wD7GxGHd6IpRIgSvHpL1k0nY7yLdztF+oMbeu9gL1xMuEa2NyGrfykCz
XqeWZ5ciS0c7ji2HSZU/wsIx5xBpGwl1gyyuD3qCw/KagYqvkF+glidH2QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKWyIqiWktRBm54hG8zobomsS6GLMB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvcGJJaXFKYVMxRUdibmlFYnpPaHVpYXhMb1lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXXeQAwQB
vNB+MA0GCSqGSIb3DQEBCwUAA4IBAQAVVOqRmi7RcB4IVcVPAF9hFsV8jYBDGpcC
MyT1ToAJMqAjeP5NeSDW89ptHCtRRgsL6Q5PKHmSNWTJLCaNUX2u5RLZ+9/S7Uyo
kGVwNl4nOw0HD59eebfv3SM4fGAweKqa7/dMeWO14SyQcj30AMoBCBKCr3ihA5I1
OaaucwJeZMqy6cdUFhPyZUY+p0XO21dcmts/tUwIiBqHlSY16OT9yEYyL5YRkpaI
ti9/qp9OepJw24BiXhFKiNwBKB0BdhPhEloQjnruwUorb4lzvzM+egncBHGBOOFW
9k8ycC0QEuORHWubT7Lg9CCDnpaGhAgn+C3O6YLIHuOqcRCOECMn
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:36:59 2025 by rpki-client