Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/p_j3LdHqloqy31ys1DONIgOvkNM.roa
File: p_j3LdHqloqy31ys1DONIgOvkNM.roa (raw, json)
Hash identifier: e0esMIe91pHIi5Kz9zl42FRDuceOXwyLvxXrkJdL2D0=
Subject key identifier: A7:F8:F7:2D:D1:EA:96:8A:B2:DF:5C:AC:D4:33:8D:22:03:AF:90:D3
Certificate issuer: /CN=f86fe427cff6d85a695ec86528a4830cb408a818
Certificate serial: 019424447E24E23C6C0249B5FEC8D282B8F1
Authority key identifier: F8:6F:E4:27:CF:F6:D8:5A:69:5E:C8:65:28:A4:83:0C:B4:08:A8:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/p_j3LdHqloqy31ys1DONIgOvkNM.roa
Signing time: Wed 01 Jan 2025 23:47:36 +0000
ROA not before: Wed 01 Jan 2025 23:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25193
IP address blocks: 193.41.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:7e:24:e2:3c:6c:02:49:b5:fe:c8:d2:82:b8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f86fe427cff6d85a695ec86528a4830cb408a818
Validity
Not Before: Jan 1 23:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7f8f72dd1ea968ab2df5cacd4338d2203af90d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:3d:4c:9c:20:bb:2d:14:31:7c:8f:40:d2:
1c:9c:01:75:e1:cf:fa:50:ad:70:fb:13:1f:91:f1:
dd:70:e7:2e:21:68:98:24:2f:e5:a9:24:ab:dd:86:
50:0f:5e:5b:24:a2:f4:13:9b:2d:a5:59:23:2e:bb:
76:c9:48:ed:8f:a3:dc:3c:66:99:2f:67:d4:ee:86:
54:69:85:d7:2e:1b:60:28:8d:40:5c:8b:ce:b8:09:
d8:2f:91:fb:9c:cd:37:78:e6:f1:37:b8:39:21:ac:
da:75:51:66:cc:8d:81:35:70:8a:04:17:54:72:b3:
c7:89:37:99:8f:3a:9a:9d:6a:69:9d:d4:13:80:a8:
4e:21:6a:36:8d:97:0e:24:53:7b:01:99:2b:54:d6:
35:0e:7d:91:d0:9c:cb:87:e8:42:19:09:9b:39:a4:
20:c2:06:33:e5:33:b2:c0:6a:10:6f:e9:94:6d:3a:
3c:43:c3:74:bc:70:6e:36:e2:13:18:01:8a:29:c1:
17:d1:03:2c:98:12:60:46:d1:8b:fe:9f:0a:53:22:
0a:72:05:c7:2c:f1:fc:44:61:8f:78:8c:c0:84:0b:
a4:bd:72:aa:e6:c4:60:9d:d6:3b:bc:58:3a:6b:f7:
ac:a1:c3:e0:bf:aa:45:d7:5a:b1:c2:60:39:00:1a:
e8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F8:F7:2D:D1:EA:96:8A:B2:DF:5C:AC:D4:33:8D:22:03:AF:90:D3
X509v3 Authority Key Identifier:
keyid:F8:6F:E4:27:CF:F6:D8:5A:69:5E:C8:65:28:A4:83:0C:B4:08:A8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/p_j3LdHqloqy31ys1DONIgOvkNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.129.0/24
Signature Algorithm: sha256WithRSAEncryption
32:05:be:f9:83:3b:0b:ff:fa:d9:c8:32:90:5c:d8:39:6f:84:
1f:d1:67:fd:56:d1:bc:17:09:73:40:03:ef:2b:e0:0b:09:21:
f6:eb:67:bf:db:f7:48:36:fe:b5:cd:84:c6:4a:f1:2e:07:58:
1b:68:9e:52:55:9e:8d:98:98:d8:1d:e9:8c:4a:bc:bb:ec:6d:
30:7f:e6:1e:15:44:f3:99:2e:e0:c9:bb:06:1d:72:e8:2c:d3:
fe:e8:8e:80:47:ce:12:b6:ff:42:13:b5:bf:bc:d3:9e:80:f8:
f2:ac:85:df:06:56:8c:75:7c:3a:f3:8a:c6:4e:48:c4:23:35:
27:6b:1c:2c:b3:5b:0b:a6:c5:4c:34:1f:94:92:e1:c7:cf:09:
6b:74:75:77:c8:7a:57:30:86:7f:30:d2:5f:4c:d5:3e:8d:e4:
4c:4a:74:f7:2d:94:d3:f0:d1:f0:0f:1f:6d:67:9c:74:db:fe:
2c:63:22:99:15:f7:fd:a7:6c:b4:26:31:a6:9e:17:96:a7:2b:
a2:f9:cd:78:a0:19:2f:b1:9b:a2:45:ea:8e:57:86:73:bc:66:
c2:7c:a1:05:73:e5:3b:e8:ed:05:f4:1b:bf:a3:e6:4f:8a:80:
55:e6:41:33:31:eb:e6:1e:dd:1f:57:b8:ca:e7:2f:d5:04:90:
63:84:b2:a0
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQkRH4k4jxsAkm1/sjSgrjxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NmZlNDI3Y2ZmNmQ4NWE2OTVlYzg2NTI4YTQ4MzBjYjQw
OGE4MTgwHhcNMjUwMTAxMjM0NzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2Y4ZjcyZGQxZWE5NjhhYjJkZjVjYWNkNDMzOGQyMjAzYWY5MGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV89TJwguy0UMXyPQNIcnAF14c/6
UK1w+xMfkfHdcOcuIWiYJC/lqSSr3YZQD15bJKL0E5stpVkjLrt2yUjtj6PcPGaZ
L2fU7oZUaYXXLhtgKI1AXIvOuAnYL5H7nM03eObxN7g5IazadVFmzI2BNXCKBBdU
crPHiTeZjzqanWppndQTgKhOIWo2jZcOJFN7AZkrVNY1Dn2R0JzLh+hCGQmbOaQg
wgYz5TOywGoQb+mUbTo8Q8N0vHBuNuITGAGKKcEX0QMsmBJgRtGL/p8KUyIKcgXH
LPH8RGGPeIzAhAukvXKq5sRgndY7vFg6a/esocPgv6pF11qxwmA5ABro8wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFKf49y3R6paKst9crNQzjSIDr5DTMB8GA1UdIwQY
MBaAFPhv5CfP9thaaV7IZSikgwy0CKgYMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1HX2tKOF8yMkZwcFhzaGxLS1NERExRSXFCZy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvOTA1Yzg4LTlkM2ItNDlkZS04OWU4
LTRkYmVmZDFmMmJmMC8xL3BfajNMZEhxbG9xeTMxeXMxRE9OSWdPdmtOTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTkvOTA1Yzg4LTlkM2ItNDlkZS04OWU4LTRkYmVmZDFmMmJm
MC8xLzEtR19rSjhfMjJGcHBYc2hsS0tTRERMUUlxQmcuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBKYEw
DQYJKoZIhvcNAQELBQADggEBADIFvvmDOwv/+tnIMpBc2DlvhB/RZ/1W0bwXCXNA
A+8r4AsJIfbrZ7/b90g2/rXNhMZK8S4HWBtonlJVno2YmNgd6YxKvLvsbTB/5h4V
RPOZLuDJuwYdcugs0/7ojoBHzhK2/0ITtb+8056A+PKshd8GVox1fDrzisZOSMQj
NSdrHCyzWwumxUw0H5SS4cfPCWt0dXfIelcwhn8w0l9M1T6N5ExKdPctlNPw0fAP
H21nnHTb/ixjIpkV9/2nbLQmMaaeF5anK6L5zXigGS+xm6JF6o5XhnO8ZsJ8oQVz
5Tvo7QX0G7+j5k+KgFXmQTMx6+Ye3R9XuMrnL9UEkGOEsqA=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:07 2025 by rpki-client