Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a4cd0d-af14-49c3-9481-35479c54dcbd/1/8PzBSdujNIrE9ZxwXkq7Jh0bBAs.roa
File: 8PzBSdujNIrE9ZxwXkq7Jh0bBAs.roa (raw, json)
Hash identifier: 4Awpnumk+tPfHQxPVq+VsOA860hCJdP+GfTQ/2K+zcA=
Subject key identifier: F0:FC:C1:49:DB:A3:34:8A:C4:F5:9C:70:5E:4A:BB:26:1D:1B:04:0B
Certificate issuer: /CN=2fe4173626f4602640e8d4e96b54a1a096abe78b
Certificate serial: 019420682E209BFDC4F0A7C360008335331A
Authority key identifier: 2F:E4:17:36:26:F4:60:26:40:E8:D4:E9:6B:54:A1:A0:96:AB:E7:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-QXNib0YCZA6NTpa1ShoJar54s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a4cd0d-af14-49c3-9481-35479c54dcbd/1/8PzBSdujNIrE9ZxwXkq7Jh0bBAs.roa
Signing time: Wed 01 Jan 2025 05:48:05 +0000
ROA not before: Wed 01 Jan 2025 05:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211419
IP address blocks: 193.38.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:2e:20:9b:fd:c4:f0:a7:c3:60:00:83:35:33:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe4173626f4602640e8d4e96b54a1a096abe78b
Validity
Not Before: Jan 1 05:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0fcc149dba3348ac4f59c705e4abb261d1b040b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:01:6f:b6:1a:52:80:18:9f:61:fe:a3:50:
fb:9e:39:2d:99:cc:0a:a0:38:ad:4a:b8:e5:06:64:
af:73:17:0f:3f:20:ca:7e:1f:70:eb:4b:99:1a:e3:
cc:f4:ce:3a:84:9f:96:24:ce:ef:49:70:44:6f:2c:
89:79:25:07:f3:06:53:38:21:8f:6f:48:2d:04:c4:
46:bc:7f:e0:09:ba:4f:7e:ab:00:b0:ad:cf:31:be:
fc:64:f0:9c:d6:74:bd:f2:fa:e0:f9:52:6f:8c:22:
64:41:65:f9:80:1d:2b:85:4d:77:e1:b2:64:ef:7e:
5f:12:0b:eb:34:21:97:6d:93:50:d2:d4:f1:6c:fb:
d0:a0:5f:e0:fa:ef:1f:d8:ed:ed:4a:e0:5f:a3:28:
e5:ee:bb:7c:77:ef:93:b8:7c:fb:9b:c4:43:e4:8d:
e5:27:cf:37:2d:48:2e:7a:24:3e:59:da:42:59:2b:
4a:00:af:8f:cd:46:8d:8a:b8:6b:7c:28:04:cc:3b:
77:ad:f4:aa:07:74:5e:c0:05:ca:dc:18:f3:06:51:
70:25:c4:e5:d4:f9:da:99:52:31:77:47:74:69:eb:
f0:bc:3d:9e:9e:17:e4:d8:80:bf:c3:88:7a:96:24:
80:95:ca:13:7a:3c:ea:a5:fe:46:91:dc:ce:78:7d:
5b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FC:C1:49:DB:A3:34:8A:C4:F5:9C:70:5E:4A:BB:26:1D:1B:04:0B
X509v3 Authority Key Identifier:
keyid:2F:E4:17:36:26:F4:60:26:40:E8:D4:E9:6B:54:A1:A0:96:AB:E7:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-QXNib0YCZA6NTpa1ShoJar54s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a4cd0d-af14-49c3-9481-35479c54dcbd/1/8PzBSdujNIrE9ZxwXkq7Jh0bBAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a4cd0d-af14-49c3-9481-35479c54dcbd/1/L-QXNib0YCZA6NTpa1ShoJar54s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.247.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:af:f8:d1:05:b5:0a:a0:7d:69:9f:ab:4e:53:57:94:44:b0:
b5:b3:59:9b:b8:00:70:7c:27:b2:64:b6:61:e0:68:0f:c1:c9:
df:02:ac:8c:26:21:78:79:79:f9:a2:da:ef:81:68:78:95:e7:
f9:24:ac:15:97:de:ca:37:ed:98:6e:c4:23:0e:2c:3f:2a:b2:
a3:bb:9d:18:fe:a8:35:67:e9:09:d2:82:a6:09:65:aa:53:ed:
3a:ac:50:48:b1:7a:a5:61:05:aa:9c:6f:84:5f:1a:24:b4:c7:
35:2a:b0:02:7f:72:af:7c:b1:35:ee:13:88:cc:2e:9b:c8:7d:
63:2e:36:0e:0a:13:52:ad:6f:1d:33:2d:ce:ff:15:db:61:20:
62:1b:cf:fd:55:f3:47:b2:d1:67:29:1c:1f:b9:ea:5e:ec:83:
3c:2e:7d:a7:02:6f:eb:46:d7:e2:68:31:c0:9a:61:e9:58:12:
fd:95:b6:82:da:ef:13:2b:17:e7:13:18:92:e2:40:7c:18:1a:
9d:8b:cf:b6:e1:66:c9:79:f8:2e:a3:3b:cd:17:89:2a:3f:52:
30:c6:f1:50:df:f4:3f:50:f0:30:43:7f:67:64:f0:63:a5:67:
a3:ea:eb:ab:37:21:13:4a:fd:02:dd:9c:a1:8d:63:b0:7d:38:
64:fb:6f:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaC4gm/3E8KfDYACDNTMaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZTQxNzM2MjZmNDYwMjY0MGU4ZDRlOTZiNTRhMWEwOTZh
YmU3OGIwHhcNMjUwMTAxMDU0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGZjYzE0OWRiYTMzNDhhYzRmNTljNzA1ZTRhYmIyNjFkMWIwNDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulIBb7YaUoAYn2H+o1D7njktmcwK
oDitSrjlBmSvcxcPPyDKfh9w60uZGuPM9M46hJ+WJM7vSXBEbyyJeSUH8wZTOCGP
b0gtBMRGvH/gCbpPfqsAsK3PMb78ZPCc1nS98vrg+VJvjCJkQWX5gB0rhU134bJk
735fEgvrNCGXbZNQ0tTxbPvQoF/g+u8f2O3tSuBfoyjl7rt8d++TuHz7m8RD5I3l
J883LUgueiQ+WdpCWStKAK+PzUaNirhrfCgEzDt3rfSqB3RewAXK3BjzBlFwJcTl
1PnamVIxd0d0aevwvD2enhfk2IC/w4h6liSAlcoTejzqpf5GkdzOeH1bswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPD8wUnbozSKxPWccF5KuyYdGwQLMB8GA1UdIwQY
MBaAFC/kFzYm9GAmQOjU6WtUoaCWq+eLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTC1RWE5pYjBZQ1pBNk5UcGExU2hvSmFyNTRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hNGNkMGQtYWYxNC00OWMzLTk0ODEt
MzU0NzljNTRkY2JkLzEvOFB6QlNkdWpOSXJFOVp4d1hrcTdKaDBiQkFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9hNGNkMGQtYWYxNC00OWMzLTk0ODEtMzU0NzljNTRkY2Jk
LzEvTC1RWE5pYjBZQ1pBNk5UcGExU2hvSmFyNTRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSb3MA0G
CSqGSIb3DQEBCwUAA4IBAQCcr/jRBbUKoH1pn6tOU1eURLC1s1mbuABwfCeyZLZh
4GgPwcnfAqyMJiF4eXn5otrvgWh4lef5JKwVl97KN+2YbsQjDiw/KrKju50Y/qg1
Z+kJ0oKmCWWqU+06rFBIsXqlYQWqnG+EXxoktMc1KrACf3KvfLE17hOIzC6byH1j
LjYOChNSrW8dMy3O/xXbYSBiG8/9VfNHstFnKRwfuepe7IM8Ln2nAm/rRtfiaDHA
mmHpWBL9lbaC2u8TKxfnExiS4kB8GBqdi8+24WbJefguozvNF4kqP1IwxvFQ3/Q/
UPAwQ39nZPBjpWej6uurNyETSv0C3ZyhjWOwfThk+2/g
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:08 2025 by rpki-client