Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/j5QtHlhxEZZOM5CvXJMLssoxGGc.roa
File: j5QtHlhxEZZOM5CvXJMLssoxGGc.roa (raw, json)
Hash identifier: 8L3ZEU7bcEWssZWSFVojRb4D5wALELFNA26f5J8ZxnI=
Subject key identifier: 8F:94:2D:1E:58:71:11:96:4E:33:90:AF:5C:93:0B:B2:CA:31:18:67
Certificate issuer: /CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Certificate serial: 0194214413AF832E5AABC296B41C76F41638
Authority key identifier: AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/j5QtHlhxEZZOM5CvXJMLssoxGGc.roa
Signing time: Wed 01 Jan 2025 09:48:17 +0000
ROA not before: Wed 01 Jan 2025 09:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42525
IP address blocks: 193.27.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:13:af:83:2e:5a:ab:c2:96:b4:1c:76:f4:16:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Validity
Not Before: Jan 1 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f942d1e587111964e3390af5c930bb2ca311867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:58:93:45:71:1b:84:67:24:9a:6b:db:ed:
ea:4e:67:30:81:7c:a3:ea:90:d5:0c:8a:88:ec:49:
ff:c1:ad:9b:2a:61:a9:1f:3d:1e:7a:fb:a9:d7:d6:
8d:62:99:2c:f6:12:4a:25:f8:c9:84:8e:32:5f:17:
f4:41:d0:e8:a0:ae:86:2a:ac:c0:fd:71:d9:9e:4d:
7f:52:55:47:ac:68:3c:42:96:c3:cc:19:e4:02:63:
62:88:90:13:ed:c1:22:f3:3f:cf:79:d2:29:e1:00:
fa:de:2e:e0:ef:89:fb:58:62:5b:1b:63:56:f1:c7:
43:06:7e:e3:8c:0b:92:61:33:84:3b:51:f8:67:5f:
ad:f6:d8:c3:5e:d9:98:bd:81:54:87:df:cb:2e:e2:
81:f8:fb:8c:ae:18:be:2e:46:14:16:62:98:05:97:
7f:0b:51:e3:ed:da:a3:aa:5c:78:61:3c:3b:9a:16:
3a:45:a2:f9:ff:f1:6a:9c:95:9f:9b:e4:3c:80:6f:
d3:f2:d9:ee:e6:3a:bc:2b:67:14:1f:09:e1:8b:bf:
e8:d1:92:f4:74:e2:61:c8:ce:34:f6:09:f9:6b:4d:
f5:2d:bc:76:1e:08:a2:a6:48:b6:02:67:9f:d7:fe:
7c:22:c2:90:95:b7:6b:53:5e:f3:32:96:a8:d2:d9:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:94:2D:1E:58:71:11:96:4E:33:90:AF:5C:93:0B:B2:CA:31:18:67
X509v3 Authority Key Identifier:
keyid:AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/j5QtHlhxEZZOM5CvXJMLssoxGGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.3.0/24
Signature Algorithm: sha256WithRSAEncryption
98:88:23:78:3e:2d:83:3f:82:06:0e:0c:83:39:f2:fb:ea:74:
40:8f:c7:ca:71:95:7d:a1:52:5f:ce:7d:ac:6c:3c:c6:1a:ed:
ff:71:3a:11:7b:ea:07:a2:46:90:4b:90:25:8e:37:61:1a:56:
10:e4:81:50:79:5c:29:d2:14:df:59:da:c2:d5:2f:97:4f:fd:
56:98:6f:80:cc:85:fb:9e:5f:bb:de:bd:25:98:71:44:26:a1:
17:0a:2c:e4:2a:e7:5b:0f:d4:4e:b0:8f:d5:da:81:e9:f9:fd:
1a:54:0c:79:c7:c9:83:e1:2a:79:37:bb:1b:2b:1a:90:09:81:
6f:8c:40:10:34:86:ed:09:b7:03:cd:26:2d:bc:a7:0c:f3:a3:
3e:20:d9:04:da:23:9f:32:8b:1d:3f:b6:a1:ac:07:32:6f:64:
de:ff:3a:86:92:e0:9f:32:50:07:87:74:86:1a:d7:26:05:9d:
c4:b0:c0:69:bf:50:f0:37:d9:23:57:9d:0d:28:43:a3:b2:37:
d3:7d:04:ef:da:70:88:43:16:fd:a4:de:17:62:36:7e:f4:af:
12:be:bb:62:74:b1:4e:54:c6:2e:45:be:ef:96:b4:40:e4:38:
a4:d2:d2:a5:e5:87:33:e2:ea:e6:6f:ca:40:39:82:d4:51:f6:
14:a9:c2:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRBOvgy5aq8KWtBx29BY4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNjAzNDZkMDgxYjFjNWM4MTBiMzk0YzY2ZTEwNTEyYmJm
NGQ4YzkwHhcNMjUwMTAxMDk0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Zjk0MmQxZTU4NzExMTk2NGUzMzkwYWY1YzkzMGJiMmNhMzExODY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1FYk0VxG4RnJJpr2+3qTmcwgXyj
6pDVDIqI7En/wa2bKmGpHz0eevup19aNYpks9hJKJfjJhI4yXxf0QdDooK6GKqzA
/XHZnk1/UlVHrGg8QpbDzBnkAmNiiJAT7cEi8z/PedIp4QD63i7g74n7WGJbG2NW
8cdDBn7jjAuSYTOEO1H4Z1+t9tjDXtmYvYFUh9/LLuKB+PuMrhi+LkYUFmKYBZd/
C1Hj7dqjqlx4YTw7mhY6RaL5//FqnJWfm+Q8gG/T8tnu5jq8K2cUHwnhi7/o0ZL0
dOJhyM409gn5a031Lbx2Hgiipki2Amef1/58IsKQlbdrU17zMpao0tmhiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI+ULR5YcRGWTjOQr1yTC7LKMRhnMB8GA1UdIwQY
MBaAFK9gNG0IGxxcgQs5TGbhBRK79NjJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjJBMGJRZ2JIRnlCQ3psTVp1RUZFcnYwMk1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iNjYwZjQtODhjYi00NWYzLWE3MWEt
MjYzOTgzOWY4MjhkLzEvajVRdEhsaHhFWlpPTTVDdlhKTUxzc294R0djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9iNjYwZjQtODhjYi00NWYzLWE3MWEtMjYzOTgzOWY4Mjhk
LzEvcjJBMGJRZ2JIRnlCQ3psTVp1RUZFcnYwMk1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRsDMA0G
CSqGSIb3DQEBCwUAA4IBAQCYiCN4Pi2DP4IGDgyDOfL76nRAj8fKcZV9oVJfzn2s
bDzGGu3/cToRe+oHokaQS5AljjdhGlYQ5IFQeVwp0hTfWdrC1S+XT/1WmG+AzIX7
nl+73r0lmHFEJqEXCizkKudbD9ROsI/V2oHp+f0aVAx5x8mD4Sp5N7sbKxqQCYFv
jEAQNIbtCbcDzSYtvKcM86M+INkE2iOfMosdP7ahrAcyb2Te/zqGkuCfMlAHh3SG
GtcmBZ3EsMBpv1DwN9kjV50NKEOjsjfTfQTv2nCIQxb9pN4XYjZ+9K8SvrtidLFO
VMYuRb7vlrRA5Dik0tKl5Ycz4urmb8pAOYLUUfYUqcJ1
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:30 2025 by rpki-client