Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/fN3g4mx_1rVKAkRQ-lIi_ER4sho.roa
File: fN3g4mx_1rVKAkRQ-lIi_ER4sho.roa (raw, json)
Hash identifier: MPW7XbRrCtcS5Wy9TYSfB0MXejVdBxsMTEskuWIrBt8=
Subject key identifier: 7C:DD:E0:E2:6C:7F:D6:B5:4A:02:44:50:FA:52:22:FC:44:78:B2:1A
Certificate issuer: /CN=6d4fc7125c4350892c04de89a673de118c8a4e91
Certificate serial: D0ADFA
Authority key identifier: 6D:4F:C7:12:5C:43:50:89:2C:04:DE:89:A6:73:DE:11:8C:8A:4E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bU_HElxDUIksBN6JpnPeEYyKTpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/fN3g4mx_1rVKAkRQ-lIi_ER4sho.roa
Signing time: Sat 01 Jan 2022 13:06:55 +0000
ROA not before: Sat 01 Jan 2022 13:06:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.38.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13676026 (0xd0adfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d4fc7125c4350892c04de89a673de118c8a4e91
Validity
Not Before: Jan 1 13:06:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cdde0e26c7fd6b54a024450fa5222fc4478b21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:c8:48:46:f6:f0:4f:a8:97:76:5e:18:38:
85:f1:e0:e7:75:d6:1c:e1:7a:eb:9a:c6:11:09:fa:
61:aa:8d:a0:a3:f8:01:f1:fb:ae:f5:8c:0b:9e:af:
f9:60:9a:67:0f:ac:ad:4b:0c:d2:73:c7:06:8c:48:
94:2b:43:07:a6:90:b5:b9:89:8a:e7:74:43:77:fe:
2a:08:2c:12:6d:b4:1e:30:fe:5e:31:61:42:6f:bd:
97:71:ec:47:54:ff:3f:6b:37:fb:4a:3a:63:ee:da:
0b:c0:1c:7c:0d:7d:2c:b8:19:09:0e:d4:28:78:30:
b5:7d:5e:25:09:3e:63:f2:3a:37:8c:7e:be:2d:2c:
ab:2f:f1:25:fc:df:79:3f:5e:e0:32:61:1c:ec:25:
58:c1:67:73:0b:3d:96:37:23:3e:4e:17:f3:ad:1b:
af:83:3e:73:ce:8d:5d:a7:96:c2:0f:1a:5c:0e:62:
9f:7f:f5:b9:7c:d0:54:7a:1d:6f:ac:96:36:e8:05:
80:c6:4f:50:67:7e:8f:2b:d3:e0:f7:b0:13:c7:bf:
3b:1d:37:a6:3d:4e:05:ac:d7:ba:71:ca:08:84:cc:
58:7f:65:14:55:38:19:53:dd:54:64:40:72:15:3c:
6d:1b:bb:4a:e2:50:d1:ff:20:7e:ed:7e:ea:36:a7:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DD:E0:E2:6C:7F:D6:B5:4A:02:44:50:FA:52:22:FC:44:78:B2:1A
X509v3 Authority Key Identifier:
keyid:6D:4F:C7:12:5C:43:50:89:2C:04:DE:89:A6:73:DE:11:8C:8A:4E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bU_HElxDUIksBN6JpnPeEYyKTpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/fN3g4mx_1rVKAkRQ-lIi_ER4sho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/bU_HElxDUIksBN6JpnPeEYyKTpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.244.0/24
Signature Algorithm: sha256WithRSAEncryption
54:73:d5:cc:98:09:00:fc:5b:33:c9:7d:fd:4d:73:31:79:ae:
97:05:f4:8d:04:a0:72:4e:03:63:cf:6c:aa:83:37:1e:ed:0a:
ff:f9:0b:40:73:12:49:68:56:c8:c1:4e:38:0a:81:2c:d3:3f:
a8:30:74:06:7b:f8:b5:59:cf:ee:55:52:bc:d5:b3:c3:fa:bd:
4b:1c:30:5c:48:14:fa:9c:3c:14:d9:2c:44:a3:43:5a:2f:a1:
04:2a:69:c8:15:68:0e:70:c3:c7:74:30:84:fc:1f:75:a6:2a:
5d:5e:d6:3c:04:87:fa:31:2f:9f:b7:3c:b5:d2:62:77:7c:c3:
af:9e:fe:80:f7:e6:ac:c1:96:a0:fe:ec:43:35:2b:b2:0e:6a:
3e:1e:8b:b7:b4:28:44:a1:8e:29:61:6a:63:4c:98:bc:bf:e7:
4e:b6:41:da:c4:23:81:14:9c:2c:0f:17:f3:a9:e9:1d:13:4c:
23:34:ce:e9:75:ea:09:b7:a8:35:10:d9:44:58:e5:8e:39:05:
da:89:2b:bd:04:ef:b5:4d:9d:09:73:4d:b6:98:9b:f4:36:bb:
92:cb:d5:8f:59:f5:f7:e9:8f:82:cb:91:63:90:0c:37:10:ae:
d4:6e:80:bd:7a:db:ab:08:e8:26:5a:63:a3:90:2e:a1:dc:35:
34:89:f1:ef
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEANCt+jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZDRmYzcxMjVjNDM1MDg5MmMwNGRlODlhNjczZGUxMThjOGE0ZTkxMB4XDTIyMDEw
MTEzMDY1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2NkZGUwZTI2Yzdm
ZDZiNTRhMDI0NDUwZmE1MjIyZmM0NDc4YjIxYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALi8yEhG9vBPqJd2Xhg4hfHg53XWHOF665rGEQn6YaqNoKP4
AfH7rvWMC56v+WCaZw+srUsM0nPHBoxIlCtDB6aQtbmJiud0Q3f+KggsEm20HjD+
XjFhQm+9l3HsR1T/P2s3+0o6Y+7aC8AcfA19LLgZCQ7UKHgwtX1eJQk+Y/I6N4x+
vi0sqy/xJfzfeT9e4DJhHOwlWMFncws9ljcjPk4X860br4M+c86NXaeWwg8aXA5i
n3/1uXzQVHodb6yWNugFgMZPUGd+jyvT4PewE8e/Ox03pj1OBazXunHKCITMWH9l
FFU4GVPdVGRAchU8bRu7SuJQ0f8gfu1+6jancE8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR83eDibH/WtUoCRFD6UiL8RHiyGjAfBgNVHSMEGDAWgBRtT8cSXENQiSwE
3ommc94RjIpOkTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JVX0hFbHhEVUlrc0JONkpwblBlRVl5S1RwRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTIvNGQyZDkwLTA0YmItNDRkZC1hYjFiLTJhOWRiOTQyYWRiNy8x
L2ZOM2c0bXhfMXJWS0FrUlEtbElpX0VSNHNoby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIv
NGQyZDkwLTA0YmItNDRkZC1hYjFiLTJhOWRiOTQyYWRiNy8xL2JVX0hFbHhEVUlr
c0JONkpwblBlRVl5S1RwRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEm9DANBgkqhkiG9w0BAQsFAAOC
AQEAVHPVzJgJAPxbM8l9/U1zMXmulwX0jQSgck4DY89sqoM3Hu0K//kLQHMSSWhW
yMFOOAqBLNM/qDB0Bnv4tVnP7lVSvNWzw/q9SxwwXEgU+pw8FNksRKNDWi+hBCpp
yBVoDnDDx3QwhPwfdaYqXV7WPASH+jEvn7c8tdJid3zDr57+gPfmrMGWoP7sQzUr
sg5qPh6Lt7QoRKGOKWFqY0yYvL/nTrZB2sQjgRScLA8X86npHRNMIzTO6XXqCbeo
NRDZRFjljjkF2okrvQTvtU2dCXNNtpib9Da7ksvVj1n19+mPgsuRY5AMNxCu1G6A
vXrbqwjoJlpjo5Auodw1NInx7w==
-----END CERTIFICATE-----
Generated at Wed Mar 12 12:47:11 2025 by rpki-client