Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/11b1a0-22f2-40e7-a45f-cb95a286990d/1/gJjBdEhczPBgcYsXxCIGdcjhQrM.roa
File: gJjBdEhczPBgcYsXxCIGdcjhQrM.roa (raw, json)
Hash identifier: h/OSKcsfGbA0K5TU5eXQmXf64LeWPfa40kBbV1g8cu8=
Subject key identifier: 80:98:C1:74:48:5C:CC:F0:60:71:8B:17:C4:22:06:75:C8:E1:42:B3
Certificate issuer: /CN=aa9318ec68abf7fea3bc9972bca3bde8a14cbd54
Certificate serial: 0185719E695076CC5C205B4268CB69451495
Authority key identifier: AA:93:18:EC:68:AB:F7:FE:A3:BC:99:72:BC:A3:BD:E8:A1:4C:BD:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpMY7Gir9_6jvJlyvKO96KFMvVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/11b1a0-22f2-40e7-a45f-cb95a286990d/1/gJjBdEhczPBgcYsXxCIGdcjhQrM.roa
Signing time: Mon 02 Jan 2023 08:34:45 +0000
ROA not before: Mon 02 Jan 2023 08:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 193.163.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:69:50:76:cc:5c:20:5b:42:68:cb:69:45:14:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9318ec68abf7fea3bc9972bca3bde8a14cbd54
Validity
Not Before: Jan 2 08:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8098c174485cccf060718b17c4220675c8e142b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b6:cd:cd:41:34:04:70:b5:b2:e1:02:6b:6a:
51:d1:29:0e:22:36:04:bf:26:34:ee:3e:0a:8d:de:
e8:13:c2:bb:09:51:a4:50:01:d5:94:1f:7c:9c:4c:
1e:b1:dc:19:28:f4:ef:fc:47:da:90:72:79:99:1b:
72:81:50:2f:0e:ee:31:37:a0:70:c3:af:b9:eb:b6:
99:b3:3c:14:e1:a2:6d:bc:da:22:ac:ba:78:41:e7:
db:51:84:7e:fe:23:82:6e:e9:d7:68:15:fa:77:87:
ce:7d:48:ab:c0:84:69:5a:80:58:92:af:45:21:ee:
c9:c3:82:ab:38:f2:71:01:35:4c:d9:dc:e3:1a:cc:
b7:1f:74:5f:ad:8e:08:7f:0d:bf:27:55:fd:a5:d7:
82:02:ce:b4:9a:2d:18:bf:80:ae:ae:fa:ef:ec:e5:
90:cf:0c:80:e9:cd:95:da:e7:3f:a7:48:f6:6c:75:
4d:59:61:7d:06:9b:60:c2:d8:15:74:78:c9:85:51:
28:e8:b5:9f:53:0e:9c:f2:81:8c:ba:cb:53:63:ba:
fd:50:44:93:d8:04:40:a1:86:5c:94:68:75:05:8a:
e1:09:f2:02:ff:11:04:12:fd:a4:ad:e8:37:32:41:
e7:08:16:18:db:2c:9d:a2:f7:6a:40:ec:bc:68:1f:
e6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:98:C1:74:48:5C:CC:F0:60:71:8B:17:C4:22:06:75:C8:E1:42:B3
X509v3 Authority Key Identifier:
keyid:AA:93:18:EC:68:AB:F7:FE:A3:BC:99:72:BC:A3:BD:E8:A1:4C:BD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpMY7Gir9_6jvJlyvKO96KFMvVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/11b1a0-22f2-40e7-a45f-cb95a286990d/1/gJjBdEhczPBgcYsXxCIGdcjhQrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/11b1a0-22f2-40e7-a45f-cb95a286990d/1/qpMY7Gir9_6jvJlyvKO96KFMvVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.207.0/24
Signature Algorithm: sha256WithRSAEncryption
27:36:e4:51:15:bd:c5:67:b5:b7:f3:4c:61:f6:41:7a:43:1f:
e3:a1:69:de:da:a3:c3:0c:bb:12:fc:76:5c:3f:bb:c8:c1:59:
a4:2c:da:1e:d0:f6:00:2e:bf:55:c7:4c:3b:e4:39:ab:bd:41:
4f:1e:56:84:91:10:70:24:bd:56:97:e4:c4:16:a6:22:06:93:
30:54:09:38:f9:4c:84:da:e6:ee:46:6e:51:21:5c:c3:78:4a:
ce:a9:fb:ef:a4:43:7a:c1:08:8f:24:68:49:6d:97:3a:30:5f:
2b:1a:54:e3:44:94:63:e0:1a:4b:eb:cc:86:99:82:f8:66:b9:
a5:e0:fc:e6:4a:b8:2a:e7:11:05:cb:d3:c5:2e:b6:30:de:a2:
91:6c:66:fc:4d:c0:7e:09:b4:d8:2f:fa:e6:49:33:53:48:1c:
8a:aa:d4:f0:ec:f5:3a:5a:8f:9a:36:3c:20:4a:b8:fb:2b:79:
f4:c4:9d:79:93:98:14:13:c5:da:13:98:b2:af:24:98:e9:93:
b8:b9:91:7a:d5:14:7a:f5:a1:3d:11:fd:ad:ca:b1:f7:29:06:
b9:7d:52:7b:2b:16:16:61:8a:84:75:5c:e0:1e:ce:51:3f:ee:
ec:cb:68:17:5f:2f:5d:be:8e:ed:05:54:ae:a1:44:d8:d4:17:
74:eb:69:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxnmlQdsxcIFtCaMtpRRSVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhOTMxOGVjNjhhYmY3ZmVhM2JjOTk3MmJjYTNiZGU4YTE0
Y2JkNTQwHhcNMjMwMTAyMDgzNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDk4YzE3NDQ4NWNjY2YwNjA3MThiMTdjNDIyMDY3NWM4ZTE0MmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbbNzUE0BHC1suECa2pR0SkOIjYE
vyY07j4Kjd7oE8K7CVGkUAHVlB98nEwesdwZKPTv/EfakHJ5mRtygVAvDu4xN6Bw
w6+567aZszwU4aJtvNoirLp4QefbUYR+/iOCbunXaBX6d4fOfUirwIRpWoBYkq9F
Ie7Jw4KrOPJxATVM2dzjGsy3H3RfrY4Ifw2/J1X9pdeCAs60mi0Yv4Curvrv7OWQ
zwyA6c2V2uc/p0j2bHVNWWF9BptgwtgVdHjJhVEo6LWfUw6c8oGMustTY7r9UEST
2ARAoYZclGh1BYrhCfIC/xEEEv2kreg3MkHnCBYY2yydovdqQOy8aB/mowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFICYwXRIXMzwYHGLF8QiBnXI4UKzMB8GA1UdIwQY
MBaAFKqTGOxoq/f+o7yZcryjveihTL1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXBNWTdHaXI5XzZqdkpseXZLTzk2S0ZNdlZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xMWIxYTAtMjJmMi00MGU3LWE0NWYt
Y2I5NWEyODY5OTBkLzEvZ0pqQmRFaGN6UEJnY1lzWHhDSUdkY2poUXJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8xMWIxYTAtMjJmMi00MGU3LWE0NWYtY2I5NWEyODY5OTBk
LzEvcXBNWTdHaXI5XzZqdkpseXZLTzk2S0ZNdlZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaPPMA0G
CSqGSIb3DQEBCwUAA4IBAQAnNuRRFb3FZ7W380xh9kF6Qx/joWne2qPDDLsS/HZc
P7vIwVmkLNoe0PYALr9Vx0w75DmrvUFPHlaEkRBwJL1Wl+TEFqYiBpMwVAk4+UyE
2ubuRm5RIVzDeErOqfvvpEN6wQiPJGhJbZc6MF8rGlTjRJRj4BpL68yGmYL4Zrml
4PzmSrgq5xEFy9PFLrYw3qKRbGb8TcB+CbTYL/rmSTNTSByKqtTw7PU6Wo+aNjwg
Srj7K3n0xJ15k5gUE8XaE5iyrySY6ZO4uZF61RR69aE9Ef2tyrH3KQa5fVJ7KxYW
YYqEdVzgHs5RP+7sy2gXXy9dvo7tBVSuoUTY1Bd062mZ
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:07:42 2025 by rpki-client