Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/bc9816-8d07-4afe-9ba0-cdef4a8205f6/1/PdLUre5V9gcXRT8lU8XFyq1UNG8.roa
File: PdLUre5V9gcXRT8lU8XFyq1UNG8.roa (raw, json)
Hash identifier: 1GVRhIDayuT9QVM4YeshPObsAdZGofspgiRQf7OkNrQ=
Subject key identifier: 3D:D2:D4:AD:EE:55:F6:07:17:45:3F:25:53:C5:C5:CA:AD:54:34:6F
Certificate issuer: /CN=045df450eacfdd679ef0d08c880a91fc75b8a897
Certificate serial: 0189DEB78CF2A21B93392B011A1FFF09D37C
Authority key identifier: 04:5D:F4:50:EA:CF:DD:67:9E:F0:D0:8C:88:0A:91:FC:75:B8:A8:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BF30UOrP3Wee8NCMiAqR_HW4qJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/bc9816-8d07-4afe-9ba0-cdef4a8205f6/1/PdLUre5V9gcXRT8lU8XFyq1UNG8.roa
Signing time: Thu 10 Aug 2023 09:11:58 +0000
ROA not before: Thu 10 Aug 2023 09:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12637
IP address blocks: 193.17.32.0/24 maxlen: 24
2a07:f200::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:b7:8c:f2:a2:1b:93:39:2b:01:1a:1f:ff:09:d3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045df450eacfdd679ef0d08c880a91fc75b8a897
Validity
Not Before: Aug 10 09:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dd2d4adee55f60717453f2553c5c5caad54346f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:b4:a1:83:01:f5:98:6c:a7:7f:37:c3:99:
08:16:de:6b:e6:df:23:50:bf:3a:c2:3f:d2:3b:27:
9c:94:c6:cc:75:8c:3b:fe:b1:bc:ef:33:76:43:34:
00:6c:0f:bd:f0:7a:55:0a:4c:8d:52:61:5a:a9:36:
8b:c2:90:7b:e1:af:a1:51:b6:99:18:e5:de:6d:b8:
57:14:42:fa:60:93:8f:e0:3e:c5:6c:dd:10:9e:a1:
bc:29:29:f0:00:ca:3e:7f:0d:89:c2:da:9d:c0:16:
a1:41:19:88:5c:ab:12:5b:ab:07:ff:b7:4b:ec:26:
51:de:41:10:e1:d7:7e:94:d4:c7:83:12:4a:eb:ca:
14:da:df:2f:c9:d4:20:85:8c:ec:df:26:1d:41:d9:
b0:5e:fe:97:d3:3e:ab:79:69:e7:45:f2:7c:e9:86:
35:78:0f:ba:f7:2b:c4:94:ab:00:67:41:46:a0:46:
ca:60:04:2a:cd:48:04:bc:f3:f6:86:a3:16:07:43:
77:cd:34:6d:60:c0:d8:b4:38:bf:9a:0a:ee:e7:d1:
63:59:39:79:4c:c8:f5:44:b0:d5:0d:71:45:64:65:
35:90:22:17:7e:37:47:74:fa:1c:3e:0e:52:9b:a1:
a7:f0:44:b6:2a:b4:dc:21:65:23:81:aa:b4:2d:f7:
8c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D2:D4:AD:EE:55:F6:07:17:45:3F:25:53:C5:C5:CA:AD:54:34:6F
X509v3 Authority Key Identifier:
keyid:04:5D:F4:50:EA:CF:DD:67:9E:F0:D0:8C:88:0A:91:FC:75:B8:A8:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BF30UOrP3Wee8NCMiAqR_HW4qJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/bc9816-8d07-4afe-9ba0-cdef4a8205f6/1/PdLUre5V9gcXRT8lU8XFyq1UNG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/bc9816-8d07-4afe-9ba0-cdef4a8205f6/1/BF30UOrP3Wee8NCMiAqR_HW4qJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.32.0/24
IPv6:
2a07:f200::/29
Signature Algorithm: sha256WithRSAEncryption
9d:a4:ca:9b:1c:16:5d:a5:4c:e4:c2:c6:8a:97:75:77:85:f3:
53:a4:e9:49:f3:d9:23:43:4b:cb:2d:c3:c7:bc:7f:f0:2d:bf:
9f:ba:43:6d:7e:bb:2e:b2:2e:0b:9e:23:c7:1f:1d:f7:7e:3b:
9c:36:b4:2e:f8:f3:1e:39:d8:59:8e:9a:55:8b:cb:5b:21:0a:
63:55:a7:ca:86:49:e4:eb:bd:ec:7a:46:03:99:fc:be:7a:f9:
9e:73:a7:8c:66:32:79:8c:75:58:47:f3:df:cc:1d:26:8d:79:
1d:15:49:a0:53:d6:33:79:ba:9f:47:45:03:de:d4:90:69:87:
0c:23:6b:8d:76:15:a9:63:7f:a3:3d:47:7b:18:36:7d:46:e9:
4a:0d:64:a5:7c:8f:14:2a:c0:f8:b8:66:bc:a7:c3:ac:b6:6c:
68:e2:1a:14:a9:bb:45:2a:74:0f:c1:3e:b5:19:79:4f:a9:f7:
9f:23:78:e7:37:c2:6e:c4:5b:b4:90:74:69:55:99:bd:66:0a:
9e:73:28:e6:74:e5:8d:f2:06:42:29:5a:b3:ab:3b:ef:29:5c:
b3:08:a9:f7:9d:52:3f:0c:07:91:a2:9c:ad:da:ea:9f:be:e2:
f5:74:53:9f:52:33:a2:e0:fd:f1:dd:80:81:b5:f2:e3:a4:c2:
f5:79:7f:f2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYnet4zyohuTOSsBGh//CdN8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NWRmNDUwZWFjZmRkNjc5ZWYwZDA4Yzg4MGE5MWZjNzVi
OGE4OTcwHhcNMjMwODEwMDkxMTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGQyZDRhZGVlNTVmNjA3MTc0NTNmMjU1M2M1YzVjYWFkNTQzNDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsra0oYMB9Zhsp383w5kIFt5r5t8j
UL86wj/SOyeclMbMdYw7/rG87zN2QzQAbA+98HpVCkyNUmFaqTaLwpB74a+hUbaZ
GOXebbhXFEL6YJOP4D7FbN0QnqG8KSnwAMo+fw2JwtqdwBahQRmIXKsSW6sH/7dL
7CZR3kEQ4dd+lNTHgxJK68oU2t8vydQghYzs3yYdQdmwXv6X0z6reWnnRfJ86YY1
eA+69yvElKsAZ0FGoEbKYAQqzUgEvPP2hqMWB0N3zTRtYMDYtDi/mgru59FjWTl5
TMj1RLDVDXFFZGU1kCIXfjdHdPocPg5Sm6Gn8ES2KrTcIWUjgaq0LfeMHwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFD3S1K3uVfYHF0U/JVPFxcqtVDRvMB8GA1UdIwQY
MBaAFARd9FDqz91nnvDQjIgKkfx1uKiXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkYzMFVPclAzV2VlOE5DTWlBcVJfSFc0cUpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iYzk4MTYtOGQwNy00YWZlLTliYTAt
Y2RlZjRhODIwNWY2LzEvUGRMVXJlNVY5Z2NYUlQ4bFU4WEZ5cTFVTkc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iYzk4MTYtOGQwNy00YWZlLTliYTAtY2RlZjRhODIwNWY2
LzEvQkYzMFVPclAzV2VlOE5DTWlBcVJfSFc0cUpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwREgMA0E
AgACMAcDBQMqB/IAMA0GCSqGSIb3DQEBCwUAA4IBAQCdpMqbHBZdpUzkwsaKl3V3
hfNTpOlJ89kjQ0vLLcPHvH/wLb+fukNtfrsusi4LniPHHx33fjucNrQu+PMeOdhZ
jppVi8tbIQpjVafKhknk673sekYDmfy+evmec6eMZjJ5jHVYR/PfzB0mjXkdFUmg
U9YzebqfR0UD3tSQaYcMI2uNdhWpY3+jPUd7GDZ9RulKDWSlfI8UKsD4uGa8p8Os
tmxo4hoUqbtFKnQPwT61GXlPqfefI3jnN8JuxFu0kHRpVZm9ZgqecyjmdOWN8gZC
KVqzqzvvKVyzCKn3nVI/DAeRopyt2uqfvuL1dFOfUjOi4P3x3YCBtfLjpML1eX/y
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:42 2025 by rpki-client