Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/h04E6GUTfk7g-nszYeXV5v59Z7g.roa
File: h04E6GUTfk7g-nszYeXV5v59Z7g.roa (raw, json)
Hash identifier: D0nODnBLfeAlBTbUkjxGcmmT4S/QYeiGnt9Aow5Sjx0=
Subject key identifier: 87:4E:04:E8:65:13:7E:4E:E0:FA:7B:33:61:E5:D5:E6:FE:7D:67:B8
Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b
Certificate serial: 01942143FBEBBCFE80D2337159D5120B282D
Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/h04E6GUTfk7g-nszYeXV5v59Z7g.roa
Signing time: Wed 01 Jan 2025 09:48:11 +0000
ROA not before: Wed 01 Jan 2025 09:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25094
IP address blocks: 194.154.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fb:eb:bc:fe:80:d2:33:71:59:d5:12:0b:28:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=874e04e865137e4ee0fa7b3361e5d5e6fe7d67b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:75:fa:06:28:c5:6d:ea:b7:d3:2e:80:dd:
f5:9d:f9:d4:02:bc:fd:63:95:9c:36:1a:92:03:ef:
45:53:fb:96:3b:0e:45:f5:ee:93:78:1f:29:f4:1d:
22:00:19:2f:c1:65:c0:e0:f8:da:32:ed:14:51:be:
ab:85:59:fb:ca:65:86:76:68:75:09:db:a1:17:ce:
39:ed:99:92:00:5a:0b:8e:ab:2c:46:ae:dc:24:5c:
9e:c4:d5:86:e1:64:26:5d:45:8d:02:00:89:37:a8:
b0:94:e4:54:e4:90:70:a0:a4:37:9f:d6:e6:04:de:
21:42:62:c9:36:fe:63:09:e4:c9:ae:2d:5a:54:50:
40:ac:c7:54:de:10:6a:a0:95:61:2e:08:07:a9:09:
6d:98:f6:64:d1:7d:e3:0b:cd:84:f3:86:8f:47:b1:
e0:6d:a7:06:b0:b9:42:63:65:48:bb:3d:74:e6:86:
11:22:ce:42:4e:88:33:6d:af:6a:71:9d:e6:20:53:
8f:df:01:07:eb:5c:6f:c2:02:f3:19:04:83:54:55:
63:c4:d5:a6:77:b4:cd:f0:7b:84:b4:74:2e:12:96:
e2:83:e7:4d:f1:78:2b:8f:ba:62:1e:89:42:8f:d0:
58:54:eb:9f:2a:e7:fe:ed:c4:78:78:47:a3:64:91:
e6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4E:04:E8:65:13:7E:4E:E0:FA:7B:33:61:E5:D5:E6:FE:7D:67:B8
X509v3 Authority Key Identifier:
keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/h04E6GUTfk7g-nszYeXV5v59Z7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.154.205.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a2:e0:bb:fb:81:49:9e:65:cf:83:26:f0:f6:d7:b7:f2:ba:
41:1d:50:ba:2b:37:8e:43:84:43:9c:32:13:2d:49:b9:b3:a4:
4f:85:8c:ca:77:ca:ae:00:dc:bb:b5:c6:f0:bd:cb:67:08:05:
b7:c5:ca:bf:49:9a:33:20:36:49:bc:fc:df:26:21:1d:71:ac:
1e:de:46:33:4d:e0:fa:e2:63:f0:ee:f5:f5:3b:20:d6:ad:8b:
60:e9:50:04:de:0b:1f:1d:36:6d:14:03:ef:2e:d7:69:a7:83:
03:69:2f:a5:cb:6b:13:f5:9b:b7:64:c0:8b:26:c4:de:bb:d1:
0b:26:52:2b:9e:35:94:f3:2f:4c:ad:c5:ff:74:62:a0:06:b1:
e6:ed:fe:28:28:d6:12:c0:b6:82:c8:77:52:5b:ee:8d:09:73:
0b:c7:28:88:e2:1f:8a:f1:d2:79:72:8c:7d:05:ed:f8:f2:2c:
17:91:39:e3:c6:ce:aa:0c:bc:de:46:db:5f:d9:59:0d:97:b9:
bc:9c:e0:d6:b0:b9:6a:31:04:03:b0:b1:54:97:e5:76:61:55:
7b:d1:bd:2e:04:83:56:21:2d:84:68:c0:71:d4:1b:f6:09:10:
9c:52:48:a4:39:e1:74:31:d4:7a:dd:0e:37:66:e1:43:96:13:
60:88:bb:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ/vrvP6A0jNxWdUSCygtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NjNkYTZlYjNiN2EwN2ZkYzQ1MjU4ODMwMDQ5NzBkNjQw
YjAzNmIwHhcNMjUwMTAxMDk0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzRlMDRlODY1MTM3ZTRlZTBmYTdiMzM2MWU1ZDVlNmZlN2Q2N2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqql1+gYoxW3qt9MugN31nfnUArz9
Y5WcNhqSA+9FU/uWOw5F9e6TeB8p9B0iABkvwWXA4PjaMu0UUb6rhVn7ymWGdmh1
CduhF8457ZmSAFoLjqssRq7cJFyexNWG4WQmXUWNAgCJN6iwlORU5JBwoKQ3n9bm
BN4hQmLJNv5jCeTJri1aVFBArMdU3hBqoJVhLggHqQltmPZk0X3jC82E84aPR7Hg
bacGsLlCY2VIuz105oYRIs5CTogzba9qcZ3mIFOP3wEH61xvwgLzGQSDVFVjxNWm
d7TN8HuEtHQuEpbig+dN8Xgrj7piHolCj9BYVOufKuf+7cR4eEejZJHmWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIdOBOhlE35O4Pp7M2Hl1eb+fWe4MB8GA1UdIwQY
MBaAFPVj2m6zt6B/3EUliDAElw1kCwNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdQYWJyTzNvSF9jUlNXSU1BU1hEV1FMQTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy82MzU2NGYtYWNhMS00NjNkLWJlMWUt
ZTU1MjBhYTdiYTM3LzEvaDA0RTZHVVRmazdnLW5zelllWFY1djU5WjdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy82MzU2NGYtYWNhMS00NjNkLWJlMWUtZTU1MjBhYTdiYTM3
LzEvOVdQYWJyTzNvSF9jUlNXSU1BU1hEV1FMQTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwprNMA0G
CSqGSIb3DQEBCwUAA4IBAQBEouC7+4FJnmXPgybw9te38rpBHVC6KzeOQ4RDnDIT
LUm5s6RPhYzKd8quANy7tcbwvctnCAW3xcq/SZozIDZJvPzfJiEdcawe3kYzTeD6
4mPw7vX1OyDWrYtg6VAE3gsfHTZtFAPvLtdpp4MDaS+ly2sT9Zu3ZMCLJsTeu9EL
JlIrnjWU8y9MrcX/dGKgBrHm7f4oKNYSwLaCyHdSW+6NCXMLxyiI4h+K8dJ5cox9
Be348iwXkTnjxs6qDLzeRttf2VkNl7m8nODWsLlqMQQDsLFUl+V2YVV70b0uBINW
IS2EaMBx1Bv2CRCcUkikOeF0MdR63Q43ZuFDlhNgiLtE
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:48 2025 by rpki-client