Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/h_pQhnrE430cVPVrVeHdwNqGdWQ.roa
File: h_pQhnrE430cVPVrVeHdwNqGdWQ.roa (raw, json)
Hash identifier: jiL4T5HKXcvptd8nzfsvbD/UWOoD6EiqjHWGsrec+qg=
Subject key identifier: 87:FA:50:86:7A:C4:E3:7D:1C:54:F5:6B:55:E1:DD:C0:DA:86:75:64
Certificate issuer: /CN=19e3d11f72ddbed8361285b499b932191203b756
Certificate serial: 01942747B1AE9278BA0E79C4C43FD0CBDD48
Authority key identifier: 19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/h_pQhnrE430cVPVrVeHdwNqGdWQ.roa
Signing time: Thu 02 Jan 2025 13:49:57 +0000
ROA not before: Thu 02 Jan 2025 13:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211440
IP address blocks: 193.109.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b1:ae:92:78:ba:0e:79:c4:c4:3f:d0:cb:dd:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e3d11f72ddbed8361285b499b932191203b756
Validity
Not Before: Jan 2 13:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87fa50867ac4e37d1c54f56b55e1ddc0da867564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:94:26:57:ae:e2:25:e6:b0:1f:92:b8:03:77:
cd:d9:61:9e:84:6b:3d:40:f4:f1:a0:bf:aa:ad:ce:
b4:5d:cf:d6:54:e5:79:08:b7:c4:3b:be:15:d3:2a:
77:bb:1d:17:51:60:f0:e3:f2:2d:16:a1:7a:73:51:
91:b1:13:a9:bf:d2:fa:14:3b:09:fe:46:79:69:eb:
e9:7c:df:d0:7a:87:1c:e4:f0:13:25:27:0f:e1:ec:
86:30:ba:d2:5f:50:d4:80:c2:4b:a0:e0:69:5c:2f:
0c:fd:2a:be:59:76:44:18:77:a1:48:08:d6:79:08:
9d:9f:16:03:a4:11:e5:80:9b:af:55:95:d0:ab:b4:
0f:15:71:5c:ac:d0:41:ce:c4:52:94:82:f4:af:dd:
ee:19:55:9a:64:a8:b2:d4:3b:87:25:b6:0c:74:71:
c6:c9:e5:ee:06:ac:9e:3a:5c:09:19:84:23:71:2a:
bc:54:8e:ba:ae:84:ec:b0:b7:71:2b:dc:3d:4f:4c:
96:aa:2d:02:b4:7b:cd:0e:ba:b4:f5:58:ae:2b:3f:
1f:06:12:b4:f5:f1:f0:7d:c8:b6:0d:52:fd:7b:64:
12:6b:99:1b:61:46:ca:aa:00:ca:24:9f:49:d3:76:
a3:7a:cc:6d:39:08:ef:f6:09:b8:69:cd:e2:39:50:
a6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FA:50:86:7A:C4:E3:7D:1C:54:F5:6B:55:E1:DD:C0:DA:86:75:64
X509v3 Authority Key Identifier:
keyid:19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/h_pQhnrE430cVPVrVeHdwNqGdWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.252.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d5:ca:9a:31:a1:45:75:b0:68:0b:10:3c:a8:98:cb:c2:08:
7f:84:1c:56:6c:71:9d:89:71:78:fd:ca:5c:62:43:d7:05:be:
b3:a9:07:66:9b:42:37:11:f5:45:16:e2:e9:e6:a5:38:4d:a8:
4e:61:70:05:f4:2a:ce:b0:0b:d4:83:a8:1f:3d:8a:75:95:f1:
72:ed:83:20:5a:95:40:76:fc:b9:90:7a:a9:32:3c:f0:33:49:
fd:26:29:b1:e7:6f:3c:3e:8d:25:a1:0d:00:85:92:9a:fb:bd:
f8:bc:2c:4d:f0:12:32:f8:87:ce:7d:60:2e:3a:e7:61:83:37:
15:f7:70:7b:86:aa:4f:42:7a:c5:b2:bb:48:cd:b5:25:96:75:
d4:1a:5d:58:0b:93:ef:b7:df:48:f5:aa:81:c4:6f:72:60:3b:
e9:ab:42:de:c1:45:13:e0:35:12:db:ea:4b:9f:c1:84:24:03:
ba:05:8c:90:03:00:b7:22:41:73:a0:a8:a6:23:2e:3a:a0:21:
4d:c0:dd:d7:bb:09:bf:7e:68:b6:a3:0b:d6:6d:43:79:67:7c:
56:76:88:8c:7c:6f:9e:d8:e8:1b:74:b3:c3:e0:3f:cb:fa:63:
bf:87:21:0e:12:30:13:32:f2:f8:62:33:aa:08:81:63:67:f3:
ad:fc:c9:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR7Gukni6DnnExD/Qy91IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZTNkMTFmNzJkZGJlZDgzNjEyODViNDk5YjkzMjE5MTIw
M2I3NTYwHhcNMjUwMTAyMTM0OTU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2ZhNTA4NjdhYzRlMzdkMWM1NGY1NmI1NWUxZGRjMGRhODY3NTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pQmV67iJeawH5K4A3fN2WGehGs9
QPTxoL+qrc60Xc/WVOV5CLfEO74V0yp3ux0XUWDw4/ItFqF6c1GRsROpv9L6FDsJ
/kZ5aevpfN/Qeocc5PATJScP4eyGMLrSX1DUgMJLoOBpXC8M/Sq+WXZEGHehSAjW
eQidnxYDpBHlgJuvVZXQq7QPFXFcrNBBzsRSlIL0r93uGVWaZKiy1DuHJbYMdHHG
yeXuBqyeOlwJGYQjcSq8VI66roTssLdxK9w9T0yWqi0CtHvNDrq09ViuKz8fBhK0
9fHwfci2DVL9e2QSa5kbYUbKqgDKJJ9J03ajesxtOQjv9gm4ac3iOVCmeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIf6UIZ6xON9HFT1a1Xh3cDahnVkMB8GA1UdIwQY
MBaAFBnj0R9y3b7YNhKFtJm5MhkSA7dWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2VQUkgzTGR2dGcyRW9XMG1ia3lHUklEdDFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jNWY3YjgtZDJjMS00NmRlLTlkYjQt
MDY5YmZhZjJiY2U0LzEvaF9wUWhuckU0MzBjVlBWclZlSGR3TnFHZFdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9jNWY3YjgtZDJjMS00NmRlLTlkYjQtMDY5YmZhZjJiY2U0
LzEvR2VQUkgzTGR2dGcyRW9XMG1ia3lHUklEdDFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW38MA0G
CSqGSIb3DQEBCwUAA4IBAQCO1cqaMaFFdbBoCxA8qJjLwgh/hBxWbHGdiXF4/cpc
YkPXBb6zqQdmm0I3EfVFFuLp5qU4TahOYXAF9CrOsAvUg6gfPYp1lfFy7YMgWpVA
dvy5kHqpMjzwM0n9Jimx5288Po0loQ0AhZKa+734vCxN8BIy+IfOfWAuOudhgzcV
93B7hqpPQnrFsrtIzbUllnXUGl1YC5Pvt99I9aqBxG9yYDvpq0LewUUT4DUS2+pL
n8GEJAO6BYyQAwC3IkFzoKimIy46oCFNwN3Xuwm/fmi2owvWbUN5Z3xWdoiMfG+e
2OgbdLPD4D/L+mO/hyEOEjATMvL4YjOqCIFjZ/Ot/Mlf
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:24:18 2025 by rpki-client