Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9dd732-37a9-4d76-aeb7-bfd652b7cf2f/1/qTnx5IRyTg9rYtWqAunOVWhBR8g.roa
File: qTnx5IRyTg9rYtWqAunOVWhBR8g.roa (raw, json)
Hash identifier: /3jgNriV3aDQqlcwrdX8MqrQ5qsTQMFh1g0NUrnk5Bg=
Subject key identifier: A9:39:F1:E4:84:72:4E:0F:6B:62:D5:AA:02:E9:CE:55:68:41:47:C8
Certificate issuer: /CN=91a6e7ce7d5a021fac332baf85410b5e3d61cd94
Certificate serial: 1D16A3
Authority key identifier: 91:A6:E7:CE:7D:5A:02:1F:AC:33:2B:AF:85:41:0B:5E:3D:61:CD:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kabnzn1aAh-sMyuvhUELXj1hzZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9dd732-37a9-4d76-aeb7-bfd652b7cf2f/1/qTnx5IRyTg9rYtWqAunOVWhBR8g.roa
Signing time: Sat 01 Jan 2022 01:01:16 +0000
ROA not before: Sat 01 Jan 2022 01:01:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210546
IP address blocks: 193.163.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1906339 (0x1d16a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a6e7ce7d5a021fac332baf85410b5e3d61cd94
Validity
Not Before: Jan 1 01:01:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a939f1e484724e0f6b62d5aa02e9ce55684147c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:45:f5:bc:25:09:ce:b5:30:fc:03:7e:fd:42:
ed:65:d6:82:ed:01:88:8a:ff:7f:f9:0b:80:0f:cf:
0e:b8:af:ae:bd:2c:bb:8b:aa:df:15:db:1e:7a:04:
eb:23:4b:e4:9d:97:6b:5c:37:19:f1:95:7c:90:d2:
14:d9:17:4e:64:85:a9:a1:eb:f8:bb:f2:98:ad:1a:
1a:fd:d0:a4:77:40:37:14:c1:43:e9:21:8a:9f:c3:
3c:6a:d6:b9:78:37:de:e9:a2:6e:bb:8a:0e:95:03:
a2:e0:2d:4b:6c:63:b9:d1:bb:e9:cc:dc:b5:2f:7d:
a8:4f:2c:d5:b3:2f:ca:ae:a5:66:b9:aa:5a:a5:57:
4a:99:4e:5c:5d:66:80:a3:64:d4:aa:5f:15:88:c8:
c3:57:7c:3f:36:13:1b:a5:ee:e7:73:71:69:75:10:
de:75:83:4b:d9:cf:b5:e8:ec:9c:43:00:b7:2b:b1:
1b:57:4c:f4:bd:51:da:39:5d:99:db:14:8e:33:5e:
16:2b:9d:c3:41:ea:7e:e3:ee:9f:06:b7:41:85:02:
79:d1:11:91:64:d7:d6:8a:3b:43:6b:98:eb:bb:f5:
28:3a:ae:58:89:f7:1f:9b:d6:21:fe:cd:95:9a:82:
0a:71:8d:02:3a:3c:f2:46:7a:61:8b:29:42:cb:ea:
d1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:39:F1:E4:84:72:4E:0F:6B:62:D5:AA:02:E9:CE:55:68:41:47:C8
X509v3 Authority Key Identifier:
keyid:91:A6:E7:CE:7D:5A:02:1F:AC:33:2B:AF:85:41:0B:5E:3D:61:CD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kabnzn1aAh-sMyuvhUELXj1hzZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9dd732-37a9-4d76-aeb7-bfd652b7cf2f/1/qTnx5IRyTg9rYtWqAunOVWhBR8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9dd732-37a9-4d76-aeb7-bfd652b7cf2f/1/kabnzn1aAh-sMyuvhUELXj1hzZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.203.0/24
Signature Algorithm: sha256WithRSAEncryption
16:bb:ed:0b:39:2f:66:cf:6f:d5:75:8e:74:cc:ed:7b:30:5c:
b9:17:79:00:ca:cb:f1:00:34:d7:eb:1a:7e:a8:64:00:6a:d4:
bb:e7:6d:04:31:ee:b9:74:d0:93:06:f0:c6:37:a1:8f:c4:3b:
d5:af:6b:62:0a:e4:49:0c:db:f2:31:fa:47:20:fd:8a:bc:97:
b2:11:19:b5:e0:6c:c7:46:76:5d:d7:bc:64:8d:24:d8:f5:6c:
98:ad:b1:5b:cf:69:2c:c9:0b:10:bd:06:94:4c:a7:13:3a:ca:
1c:8d:9a:ed:93:f8:01:e3:76:31:ff:b0:23:d4:ab:3d:d7:4d:
5f:23:2d:ed:9e:62:49:4a:f6:78:a4:24:0a:6e:66:56:c4:10:
11:d0:8d:8b:c9:be:9d:92:cd:ba:67:ee:ce:5d:96:e9:64:8f:
97:96:7a:f7:aa:db:93:0d:71:a1:df:0b:de:75:73:da:cd:07:
8a:ff:93:5a:b5:14:5c:b9:92:ac:67:de:b2:20:42:18:e8:99:
80:d5:d7:88:88:d6:29:db:93:ca:5a:53:37:04:d5:8c:2e:2e:
ac:b0:08:71:cb:ff:e8:22:bc:e3:70:7d:25:43:00:c9:94:4e:
41:4b:19:af:61:2f:da:86:e4:ff:77:5d:d1:69:7c:36:d2:13:
04:51:fd:5d
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDHRajMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkx
YTZlN2NlN2Q1YTAyMWZhYzMzMmJhZjg1NDEwYjVlM2Q2MWNkOTQwHhcNMjIwMTAx
MDEwMTE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhOTM5ZjFlNDg0NzI0
ZTBmNmI2MmQ1YWEwMmU5Y2U1NTY4NDE0N2M4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmEX1vCUJzrUw/AN+/ULtZdaC7QGIiv9/+QuAD88OuK+uvSy7
i6rfFdseegTrI0vknZdrXDcZ8ZV8kNIU2RdOZIWpoev4u/KYrRoa/dCkd0A3FMFD
6SGKn8M8ata5eDfe6aJuu4oOlQOi4C1LbGO50bvpzNy1L32oTyzVsy/KrqVmuapa
pVdKmU5cXWaAo2TUql8ViMjDV3w/NhMbpe7nc3FpdRDedYNL2c+16OycQwC3K7Eb
V0z0vVHaOV2Z2xSOM14WK53DQep+4+6fBrdBhQJ50RGRZNfWijtDa5jru/UoOq5Y
ifcfm9Yh/s2VmoIKcY0COjzyRnphiylCy+rRsQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFKk58eSEck4Pa2LVqgLpzlVoQUfIMB8GA1UdIwQYMBaAFJGm5859WgIfrDMr
r4VBC149Yc2UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
a2FibnpuMWFBaC1zTXl1dmhVRUxYajFoelpRLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC85YS85ZGQ3MzItMzdhOS00ZDc2LWFlYjctYmZkNjUyYjdjZjJmLzEv
cVRueDVJUnlUZzlyWXRXcUF1bk9WV2hCUjhnLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS85
ZGQ3MzItMzdhOS00ZDc2LWFlYjctYmZkNjUyYjdjZjJmLzEva2FibnpuMWFBaC1z
TXl1dmhVRUxYajFoelpRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaPLMA0GCSqGSIb3DQEBCwUAA4IB
AQAWu+0LOS9mz2/VdY50zO17MFy5F3kAysvxADTX6xp+qGQAatS7520EMe65dNCT
BvDGN6GPxDvVr2tiCuRJDNvyMfpHIP2KvJeyERm14GzHRnZd17xkjSTY9WyYrbFb
z2ksyQsQvQaUTKcTOsocjZrtk/gB43Yx/7Aj1Ks9101fIy3tnmJJSvZ4pCQKbmZW
xBAR0I2Lyb6dks26Z+7OXZbpZI+Xlnr3qtuTDXGh3wvedXPazQeK/5NatRRcuZKs
Z96yIEIY6JmA1deIiNYp25PKWlM3BNWMLi6ssAhxy//oIrzjcH0lQwDJlE5BSxmv
YS/ahuT/d13RaXw20hMEUf1d
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:40:19 2025 by rpki-client