Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5f69da-4f26-47df-a9a9-6bee97ffd968/1/sRS2eTdvxBmLLjs5Zf3cOySbIgs.roa
File: sRS2eTdvxBmLLjs5Zf3cOySbIgs.roa (raw, json)
Hash identifier: n5lDSD0zPiMA1MCpQUwR4vZ7HMNaMDGWY6PzHnpP7OA=
Subject key identifier: B1:14:B6:79:37:6F:C4:19:8B:2E:3B:39:65:FD:DC:3B:24:9B:22:0B
Certificate issuer: /CN=14d01cae1ddfd4d437e7b7feea5ea46e30405090
Certificate serial: 018864E366E5B2B03E413CF43C26F5D34CE8
Authority key identifier: 14:D0:1C:AE:1D:DF:D4:D4:37:E7:B7:FE:EA:5E:A4:6E:30:40:50:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNAcrh3f1NQ357f-6l6kbjBAUJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5f69da-4f26-47df-a9a9-6bee97ffd968/1/sRS2eTdvxBmLLjs5Zf3cOySbIgs.roa
Signing time: Mon 29 May 2023 00:23:24 +0000
ROA not before: Mon 29 May 2023 00:23:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198193
IP address blocks: 176.101.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:64:e3:66:e5:b2:b0:3e:41:3c:f4:3c:26:f5:d3:4c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d01cae1ddfd4d437e7b7feea5ea46e30405090
Validity
Not Before: May 29 00:23:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b114b679376fc4198b2e3b3965fddc3b249b220b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b6:ab:5c:9a:3b:c7:f8:c8:06:69:5d:16:94:
8c:df:bd:2b:5d:21:00:a4:ec:4c:d8:e9:92:31:cb:
de:11:54:6e:60:80:02:85:fa:a3:0f:be:25:92:61:
2c:26:c8:67:47:7c:10:81:8f:08:a6:3a:e6:fd:e7:
98:67:32:87:29:20:b1:d9:c2:b4:3d:bb:59:c3:16:
68:5d:18:8f:22:0f:7a:e5:7b:10:8d:49:a3:ec:8e:
2f:62:d5:d9:1a:0e:48:c7:18:0e:2b:bd:ff:9b:af:
ea:68:8c:21:b1:83:e3:93:88:5c:1c:39:6d:b3:90:
02:1e:72:c3:ec:0d:88:d0:60:34:93:6d:cd:91:b7:
01:2d:d7:13:44:a7:0c:c6:ff:74:0c:30:a4:9b:ae:
57:55:38:fa:89:3a:ee:b8:70:a5:13:72:b2:3e:89:
76:96:d1:7d:d2:fc:20:76:e5:05:2f:b8:19:9c:b5:
c0:a6:ef:bd:81:c2:04:7b:2c:e7:68:b0:b2:e5:f5:
54:a0:3b:e5:b9:5d:9e:93:0a:65:a1:2a:7f:21:d7:
f2:0d:68:17:c6:8d:72:5f:fb:87:34:82:bb:59:30:
49:65:ed:9a:b2:9b:48:85:02:23:6d:3e:b8:17:73:
2a:7e:42:fc:38:9e:60:ad:e2:92:26:29:09:73:9c:
1a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:14:B6:79:37:6F:C4:19:8B:2E:3B:39:65:FD:DC:3B:24:9B:22:0B
X509v3 Authority Key Identifier:
keyid:14:D0:1C:AE:1D:DF:D4:D4:37:E7:B7:FE:EA:5E:A4:6E:30:40:50:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNAcrh3f1NQ357f-6l6kbjBAUJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5f69da-4f26-47df-a9a9-6bee97ffd968/1/sRS2eTdvxBmLLjs5Zf3cOySbIgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5f69da-4f26-47df-a9a9-6bee97ffd968/1/FNAcrh3f1NQ357f-6l6kbjBAUJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.101.16.0/20
Signature Algorithm: sha256WithRSAEncryption
86:fe:21:cb:85:37:da:fd:a8:59:00:43:97:a3:75:a2:43:77:
55:3e:a6:8f:dc:87:1a:9e:ed:3e:c3:92:48:fb:a0:92:e6:7d:
ac:bc:e8:cd:d4:9a:8e:2b:54:9e:8e:7c:e5:0b:d7:3b:ad:47:
cf:fd:e3:23:26:0b:28:80:af:b4:bd:5c:ae:bd:e4:99:2f:78:
d4:a5:6c:e3:52:aa:f9:a8:f8:cf:98:56:57:1b:aa:d0:a6:e5:
47:ef:c4:35:13:cf:d1:63:e4:1a:15:05:fe:a5:fd:ca:14:83:
36:8d:94:be:ef:a1:9a:69:7c:c1:d5:9c:be:54:7d:2f:77:cd:
4e:0e:ed:e1:b7:9a:74:98:45:66:d6:e9:44:cf:9e:d4:53:a6:
3b:9b:b1:54:d6:c9:db:23:85:05:af:61:cb:12:81:3c:8e:46:
f6:97:24:c1:00:96:0b:15:71:82:ad:9b:75:3c:d2:35:2c:30:
c8:5b:77:91:55:2d:ef:83:0a:1d:28:6a:bd:a8:fb:76:f9:10:
2d:7f:10:50:34:f4:48:5c:67:8a:03:9a:c3:a8:67:5f:bd:c9:
ab:a5:82:bb:df:b4:5d:05:40:1e:f7:f5:77:a5:4d:bf:be:b5:
69:ef:d7:50:9e:54:0d:73:c7:92:00:6a:46:75:72:0f:d1:1f:
5d:05:fc:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhk42blsrA+QTz0PCb100zoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZDAxY2FlMWRkZmQ0ZDQzN2U3YjdmZWVhNWVhNDZlMzA0
MDUwOTAwHhcNMjMwNTI5MDAyMzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTE0YjY3OTM3NmZjNDE5OGIyZTNiMzk2NWZkZGMzYjI0OWIyMjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7arXJo7x/jIBmldFpSM370rXSEA
pOxM2OmSMcveEVRuYIAChfqjD74lkmEsJshnR3wQgY8Ipjrm/eeYZzKHKSCx2cK0
PbtZwxZoXRiPIg965XsQjUmj7I4vYtXZGg5IxxgOK73/m6/qaIwhsYPjk4hcHDlt
s5ACHnLD7A2I0GA0k23NkbcBLdcTRKcMxv90DDCkm65XVTj6iTruuHClE3KyPol2
ltF90vwgduUFL7gZnLXApu+9gcIEeyznaLCy5fVUoDvluV2ekwploSp/IdfyDWgX
xo1yX/uHNIK7WTBJZe2asptIhQIjbT64F3MqfkL8OJ5greKSJikJc5waJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLEUtnk3b8QZiy47OWX93DskmyILMB8GA1UdIwQY
MBaAFBTQHK4d39TUN+e3/upepG4wQFCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5BY3JoM2YxTlEzNTdmLTZsNmtiakJBVUpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81ZjY5ZGEtNGYyNi00N2RmLWE5YTkt
NmJlZTk3ZmZkOTY4LzEvc1JTMmVUZHZ4Qm1MTGpzNVpmM2NPeVNiSWdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS81ZjY5ZGEtNGYyNi00N2RmLWE5YTktNmJlZTk3ZmZkOTY4
LzEvRk5BY3JoM2YxTlEzNTdmLTZsNmtiakJBVUpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEsGUQMA0G
CSqGSIb3DQEBCwUAA4IBAQCG/iHLhTfa/ahZAEOXo3WiQ3dVPqaP3Icanu0+w5JI
+6CS5n2svOjN1JqOK1SejnzlC9c7rUfP/eMjJgsogK+0vVyuveSZL3jUpWzjUqr5
qPjPmFZXG6rQpuVH78Q1E8/RY+QaFQX+pf3KFIM2jZS+76GaaXzB1Zy+VH0vd81O
Du3ht5p0mEVm1ulEz57UU6Y7m7FU1snbI4UFr2HLEoE8jkb2lyTBAJYLFXGCrZt1
PNI1LDDIW3eRVS3vgwodKGq9qPt2+RAtfxBQNPRIXGeKA5rDqGdfvcmrpYK737Rd
BUAe9/V3pU2/vrVp79dQnlQNc8eSAGpGdXIP0R9dBfz9
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:51:48 2025 by rpki-client