Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/9qzW7YnH36W9vXQ1K-UKRmz0zEQ.roa
File: 9qzW7YnH36W9vXQ1K-UKRmz0zEQ.roa (raw, json)
Hash identifier: J4D08zsa0EB7fStK9W20ZzcbFP+tabj/c0DhqsCIFd8=
Subject key identifier: F6:AC:D6:ED:89:C7:DF:A5:BD:BD:74:35:2B:E5:0A:46:6C:F4:CC:44
Certificate issuer: /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Certificate serial: 01942444A9F28F4F4D14B222DEF983294B1B
Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/9qzW7YnH36W9vXQ1K-UKRmz0zEQ.roa
Signing time: Wed 01 Jan 2025 23:47:47 +0000
ROA not before: Wed 01 Jan 2025 23:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 193.3.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a9:f2:8f:4f:4d:14:b2:22:de:f9:83:29:4b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Validity
Not Before: Jan 1 23:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6acd6ed89c7dfa5bdbd74352be50a466cf4cc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a4:cb:67:f0:57:79:2a:47:cc:85:44:cb:de:
5e:19:e6:ea:d6:28:57:17:e8:27:fe:0d:2d:03:50:
86:5b:55:8f:1c:79:98:6d:43:76:99:f8:52:18:73:
7c:df:5b:5f:dd:e9:45:d2:92:67:ab:50:37:30:2b:
3c:7c:37:7f:0f:e8:15:bf:a0:db:11:9d:7e:61:95:
0a:e5:e5:61:ee:4e:89:ac:04:25:1d:38:fe:18:d9:
37:78:85:60:70:87:e6:ae:a0:9d:a4:a9:22:8c:91:
ce:1a:d5:2c:40:96:4f:d2:4e:dc:24:bf:53:00:4d:
8d:d4:53:b0:72:aa:47:fc:d7:b8:70:f0:a4:b3:cc:
9e:82:0f:c5:1f:9e:a3:c2:8a:03:69:54:e5:74:b9:
95:b9:47:b7:22:12:d9:23:bf:1b:c8:6e:76:85:a8:
be:22:cc:99:41:46:72:31:7f:5f:1a:85:9b:0a:87:
4e:94:c6:da:02:49:d7:0a:40:b2:a5:5f:1c:d7:3d:
7e:a2:81:5e:ff:a7:5a:40:4d:0c:62:97:84:d9:17:
6c:bb:af:de:de:6a:9e:53:be:eb:9b:81:3e:f0:69:
af:18:d1:93:9e:f5:d8:3f:34:06:c2:44:f7:25:8a:
e7:aa:53:8a:7d:ea:9e:c4:ae:bb:a3:7f:34:33:67:
be:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AC:D6:ED:89:C7:DF:A5:BD:BD:74:35:2B:E5:0A:46:6C:F4:CC:44
X509v3 Authority Key Identifier:
keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/9qzW7YnH36W9vXQ1K-UKRmz0zEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.183.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:15:5b:6e:4d:4f:a3:42:d1:a3:6c:12:1e:d3:c0:5d:84:d2:
6e:f1:af:89:c5:ab:c0:39:87:5a:76:de:74:00:37:92:78:6e:
86:e0:bc:72:37:d7:c4:ba:f0:98:26:ad:1f:9e:a8:12:40:77:
b4:b1:9e:00:52:65:ec:62:19:92:2c:cb:de:9d:47:5f:c0:bf:
51:bf:2c:04:47:b0:74:96:6f:e5:b1:e8:c6:bc:74:2d:af:e5:
b1:47:74:ac:93:33:41:53:ab:8f:e7:77:7a:cc:9b:15:10:4f:
fc:cc:52:ce:c2:52:19:1e:15:92:74:92:fe:e4:1a:80:d8:90:
aa:57:aa:8b:6d:05:bb:fe:d6:b2:29:49:58:84:8b:1a:b4:95:
ab:8a:fb:ad:60:de:e0:d4:e1:28:1e:50:39:6a:a5:77:ca:47:
36:aa:c0:73:1b:d8:22:19:5a:9a:9b:f9:a7:c1:f7:d5:6d:d5:
ed:7c:a4:3f:61:c3:4c:a6:fd:35:f7:db:fe:67:86:e8:7a:9c:
c3:62:10:22:47:cc:be:97:5b:5e:97:99:cf:7c:1a:8d:87:36:
ef:76:ed:c4:be:1b:85:50:f6:eb:4c:9d:5a:11:12:bc:d6:d3:
ae:71:0c:c7:55:f4:af:35:c6:4b:23:6d:f0:98:46:6a:03:0c:
98:4b:33:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRKnyj09NFLIi3vmDKUsbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMzMyMGUwYmI1ZGJlMmJhOTcyNjkxYjc1ZDY4ZjQ4ZjZl
NTdmODgwHhcNMjUwMTAxMjM0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmFjZDZlZDg5YzdkZmE1YmRiZDc0MzUyYmU1MGE0NjZjZjRjYzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqTLZ/BXeSpHzIVEy95eGebq1ihX
F+gn/g0tA1CGW1WPHHmYbUN2mfhSGHN831tf3elF0pJnq1A3MCs8fDd/D+gVv6Db
EZ1+YZUK5eVh7k6JrAQlHTj+GNk3eIVgcIfmrqCdpKkijJHOGtUsQJZP0k7cJL9T
AE2N1FOwcqpH/Ne4cPCks8yegg/FH56jwooDaVTldLmVuUe3IhLZI78byG52hai+
IsyZQUZyMX9fGoWbCodOlMbaAknXCkCypV8c1z1+ooFe/6daQE0MYpeE2Rdsu6/e
3mqeU77rm4E+8GmvGNGTnvXYPzQGwkT3JYrnqlOKfeqexK67o380M2e+bwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPas1u2Jx9+lvb10NSvlCkZs9MxEMB8GA1UdIwQY
MBaAFEszIOC7Xb4rqXJpG3XWj0j25X+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83ZjA2NmMtOTRhOS00NzhkLTgwN2Ut
YTg5NzU5ZDcwNzFjLzEvOXF6VzdZbkgzNlc5dlhRMUstVUtSbXowekVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC83ZjA2NmMtOTRhOS00NzhkLTgwN2UtYTg5NzU5ZDcwNzFj
LzEvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQO3MA0G
CSqGSIb3DQEBCwUAA4IBAQB8FVtuTU+jQtGjbBIe08BdhNJu8a+JxavAOYdadt50
ADeSeG6G4LxyN9fEuvCYJq0fnqgSQHe0sZ4AUmXsYhmSLMvenUdfwL9RvywER7B0
lm/lsejGvHQtr+WxR3SskzNBU6uP53d6zJsVEE/8zFLOwlIZHhWSdJL+5BqA2JCq
V6qLbQW7/tayKUlYhIsatJWrivutYN7g1OEoHlA5aqV3ykc2qsBzG9giGVqam/mn
wffVbdXtfKQ/YcNMpv0199v+Z4boepzDYhAiR8y+l1tel5nPfBqNhzbvdu3EvhuF
UPbrTJ1aERK81tOucQzHVfSvNcZLI23wmEZqAwyYSzPv
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:26 2025 by rpki-client