Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/519e44-2b49-49ff-a019-e7c268680652/1/9DIpCNht9iYeJmKUWxHpUQNwQYQ.roa
File: 9DIpCNht9iYeJmKUWxHpUQNwQYQ.roa (raw, json)
Hash identifier: cC7gqfXLiek5nQuH+YPHKSvFy5WY6JgJeXSDnsMdGnk=
Subject key identifier: F4:32:29:08:D8:6D:F6:26:1E:26:62:94:5B:11:E9:51:03:70:41:84
Certificate issuer: /CN=0d0dbd6b8fce5c09a1a15c5a335d83501ed36cc7
Certificate serial: 06FE389F
Authority key identifier: 0D:0D:BD:6B:8F:CE:5C:09:A1:A1:5C:5A:33:5D:83:50:1E:D3:6C:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQ29a4_OXAmhoVxaM12DUB7TbMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/519e44-2b49-49ff-a019-e7c268680652/1/9DIpCNht9iYeJmKUWxHpUQNwQYQ.roa
Signing time: Sat 01 Jan 2022 09:53:43 +0000
ROA not before: Sat 01 Jan 2022 09:53:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39542
IP address blocks: 193.201.37.0/24 maxlen: 24
193.201.38.0/24 maxlen: 24
193.201.35.0/24 maxlen: 24
193.201.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117323935 (0x6fe389f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0dbd6b8fce5c09a1a15c5a335d83501ed36cc7
Validity
Not Before: Jan 1 09:53:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4322908d86df6261e2662945b11e95103704184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:9c:57:e3:16:a5:41:ce:5b:56:bd:b6:b4:
7a:65:06:5b:31:72:c3:e2:75:2d:dc:72:05:d4:ad:
a0:97:8c:bb:44:37:24:29:12:bf:b8:1b:bb:da:22:
5a:89:3d:76:aa:05:c6:f5:39:a6:b7:2c:dd:c4:f0:
51:b7:05:08:8f:bd:8f:71:5c:a9:e4:dd:24:d8:ea:
d1:13:34:9d:4e:5e:65:67:55:6f:19:ba:ee:05:6c:
cd:67:84:97:d7:83:c7:f5:73:80:2a:59:30:6d:f1:
9b:57:93:67:e0:bb:b7:78:7d:83:1f:99:7a:20:b2:
95:4d:dd:99:3d:f6:aa:19:74:eb:9b:59:8b:3e:60:
f8:c4:66:8c:f8:50:f4:5f:47:2e:dc:f5:ba:f5:4b:
d6:94:e4:80:45:cb:35:64:33:70:e7:7a:36:cd:14:
57:33:94:75:c9:05:a0:1e:fd:f0:58:41:a6:5a:75:
06:3f:18:b2:c1:43:af:d6:bf:a3:cb:c1:ee:cf:73:
14:4a:e8:ac:bd:75:36:ef:ae:17:b9:ee:bb:9b:36:
a9:4f:22:f1:5b:03:5a:9a:a9:cc:6b:ea:72:2d:ca:
27:2c:8b:c6:7f:1a:25:13:68:70:63:fa:78:de:92:
20:68:03:20:86:4b:80:4e:6c:25:96:05:5e:3c:7e:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:32:29:08:D8:6D:F6:26:1E:26:62:94:5B:11:E9:51:03:70:41:84
X509v3 Authority Key Identifier:
keyid:0D:0D:BD:6B:8F:CE:5C:09:A1:A1:5C:5A:33:5D:83:50:1E:D3:6C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQ29a4_OXAmhoVxaM12DUB7TbMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/519e44-2b49-49ff-a019-e7c268680652/1/9DIpCNht9iYeJmKUWxHpUQNwQYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/519e44-2b49-49ff-a019-e7c268680652/1/DQ29a4_OXAmhoVxaM12DUB7TbMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.35.0/24
193.201.37.0-193.201.38.255
193.201.43.0/24
Signature Algorithm: sha256WithRSAEncryption
73:9c:f0:da:01:ee:d3:66:e7:7f:e9:a2:29:1d:76:0c:9d:05:
de:83:fb:79:57:92:54:5e:c3:e0:b5:d7:ab:b0:63:15:bb:87:
97:89:21:95:ab:7f:c6:58:14:fd:cd:67:9b:c6:60:a0:f3:a1:
b6:d8:36:d9:31:39:62:f1:4c:03:ee:56:91:76:6b:cd:73:69:
8d:b8:c9:41:1d:60:9e:eb:9e:ab:38:3e:37:68:2d:cb:1f:1e:
b2:dc:bc:e0:7f:a8:11:04:27:4b:19:39:47:82:ce:37:2d:db:
32:cf:4d:c4:0d:de:8f:72:a6:3b:ac:23:b0:da:c7:45:ba:f7:
f7:30:df:66:13:1b:9a:94:c8:7e:93:6a:b2:43:82:6e:05:47:
75:26:62:a2:b3:15:69:f1:d4:21:e1:b0:0d:74:01:ff:4a:18:
65:cf:56:66:03:ab:fa:c4:9f:03:0a:f2:3c:b7:1b:3b:ba:36:
84:0a:aa:06:e4:48:38:a1:91:70:3f:1b:e5:e7:a1:fd:ff:28:
04:eb:81:24:5f:df:78:02:2f:3d:a0:10:c7:49:27:f6:45:3d:
d5:d2:34:b1:94:e0:f8:3d:25:36:3e:82:78:fc:78:e3:bb:dd:
34:04:b0:10:69:f4:6e:ad:43:12:6b:b8:fe:5d:b4:fd:2f:88:
46:b8:6b:bf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIEBv44nzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ZDBkYmQ2YjhmY2U1YzA5YTFhMTVjNWEzMzVkODM1MDFlZDM2Y2M3MB4XDTIyMDEw
MTA5NTM0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjQzMjI5MDhkODZk
ZjYyNjFlMjY2Mjk0NWIxMWU5NTEwMzcwNDE4NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALC/nFfjFqVBzltWvba0emUGWzFyw+J1LdxyBdStoJeMu0Q3
JCkSv7gbu9oiWok9dqoFxvU5prcs3cTwUbcFCI+9j3FcqeTdJNjq0RM0nU5eZWdV
bxm67gVszWeEl9eDx/VzgCpZMG3xm1eTZ+C7t3h9gx+ZeiCylU3dmT32qhl065tZ
iz5g+MRmjPhQ9F9HLtz1uvVL1pTkgEXLNWQzcOd6Ns0UVzOUdckFoB798FhBplp1
Bj8YssFDr9a/o8vB7s9zFErorL11Nu+uF7nuu5s2qU8i8VsDWpqpzGvqci3KJyyL
xn8aJRNocGP6eN6SIGgDIIZLgE5sJZYFXjx+aEECAwEAAaOCAh0wggIZMB0GA1Ud
DgQWBBT0MikI2G32Jh4mYpRbEelRA3BBhDAfBgNVHSMEGDAWgBQNDb1rj85cCaGh
XFozXYNQHtNsxzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0RRMjlhNF9PWEFtaG9WeGFNMTJEVUI3VGJNYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjYvNTE5ZTQ0LTJiNDktNDlmZi1hMDE5LWU3YzI2ODY4MDY1Mi8x
LzlESXBDTmh0OWlZZUptS1VXeEhwVVFOd1FZUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYv
NTE5ZTQ0LTJiNDktNDlmZi1hMDE5LWU3YzI2ODY4MDY1Mi8xL0RRMjlhNF9PWEFt
aG9WeGFNMTJEVUI3VGJNYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAz
BggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGgMEAMHJIzAMAwQAwcklAwQAwckmAwQA
wckrMA0GCSqGSIb3DQEBCwUAA4IBAQBznPDaAe7TZud/6aIpHXYMnQXeg/t5V5JU
XsPgtdersGMVu4eXiSGVq3/GWBT9zWebxmCg86G22DbZMTli8UwD7laRdmvNc2mN
uMlBHWCe656rOD43aC3LHx6y3Lzgf6gRBCdLGTlHgs43Ldsyz03EDd6PcqY7rCOw
2sdFuvf3MN9mExualMh+k2qyQ4JuBUd1JmKisxVp8dQh4bANdAH/Shhlz1ZmA6v6
xJ8DCvI8txs7ujaECqoG5Eg4oZFwPxvl56H9/ygE64EkX994Ai89oBDHSSf2RT3V
0jSxlOD4PSU2PoJ4/Hjju900BLAQafRurUMSa7j+XbT9L4hGuGu/
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:05 2025 by rpki-client