Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/Ph-U5dqNHzdXtAC4s8SqLkw0HnU.roa
File: Ph-U5dqNHzdXtAC4s8SqLkw0HnU.roa (raw, json)
Hash identifier: Useq54Tz9psDJFY8ug181fsHtAqbkZCsf85Cmb59VeM=
Subject key identifier: 3E:1F:94:E5:DA:8D:1F:37:57:B4:00:B8:B3:C4:AA:2E:4C:34:1E:75
Certificate issuer: /CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62
Certificate serial: 019424B3B3FBC5FEB46AAADDCADEB01FAAEF
Authority key identifier: EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/Ph-U5dqNHzdXtAC4s8SqLkw0HnU.roa
Signing time: Thu 02 Jan 2025 01:49:04 +0000
ROA not before: Thu 02 Jan 2025 01:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35101
IP address blocks: 193.227.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b3:fb:c5:fe:b4:6a:aa:dd:ca:de:b0:1f:aa:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62
Validity
Not Before: Jan 2 01:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e1f94e5da8d1f3757b400b8b3c4aa2e4c341e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:c6:88:3e:32:6f:89:2d:ed:5b:d4:de:96:
05:8d:1f:0d:4f:f3:d6:65:2a:b4:08:13:76:6d:9f:
15:20:5b:12:f2:09:d2:6e:63:83:20:c3:3c:79:90:
5e:be:47:43:dd:ab:c0:37:45:45:60:f0:af:03:4e:
a5:4c:40:19:34:22:55:70:7d:3c:db:19:ef:ec:85:
37:0d:f9:2a:21:72:81:15:31:4f:54:eb:b6:0c:de:
11:16:ed:02:4f:32:67:4f:91:e2:8c:59:ca:ce:7a:
f8:40:e4:91:b0:1b:df:be:d3:73:fa:b8:c2:20:3c:
76:bc:75:67:be:25:00:53:c1:b1:c1:da:0d:35:d0:
3b:4a:18:aa:6f:3b:f0:eb:53:8c:57:ef:b6:aa:89:
ea:ed:11:dd:2a:43:62:7c:32:02:aa:ad:f1:25:b7:
59:3c:1e:20:96:f9:bc:c1:c3:8c:a7:26:0e:02:e8:
8f:fa:ae:12:f2:e9:cc:9e:f1:ad:ac:48:86:dc:84:
e5:8f:f3:0d:b7:fc:ed:90:0c:87:99:74:38:00:73:
46:50:49:e4:0f:b3:c5:5a:cf:70:e5:3c:91:5c:35:
d2:fb:2b:d0:3e:cc:db:3d:60:45:c8:dc:bc:3f:f8:
67:f0:58:ca:2e:32:b0:5e:0a:ab:0e:c5:43:f9:04:
fd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1F:94:E5:DA:8D:1F:37:57:B4:00:B8:B3:C4:AA:2E:4C:34:1E:75
X509v3 Authority Key Identifier:
keyid:EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/Ph-U5dqNHzdXtAC4s8SqLkw0HnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.130.0/24
Signature Algorithm: sha256WithRSAEncryption
03:4e:5b:47:70:48:21:20:b4:8b:60:bd:c3:e8:7e:1a:12:bc:
cd:bd:07:ae:39:9b:c7:49:90:76:0e:49:e3:a4:f4:d2:ec:4d:
94:46:24:85:ab:a6:c3:cc:e4:21:92:06:b2:ea:30:5c:7d:21:
8c:7e:bb:96:e8:80:f1:48:e7:ff:f2:d3:9c:e8:07:a5:97:2c:
24:cb:c9:ae:48:e8:c5:d6:e2:12:4e:0c:98:4e:26:d3:7d:81:
89:22:9f:8f:9c:3c:03:6e:35:ff:6c:7b:cc:a0:b1:57:cf:c2:
57:02:a6:b3:cf:c5:80:6a:93:5a:6a:8a:73:61:de:a7:17:20:
31:e6:d9:82:34:20:e6:63:2c:1f:4d:14:50:89:67:75:cd:89:
fe:d8:5d:5b:9b:35:0d:7c:76:fa:4b:30:fc:80:17:9f:65:1f:
2e:55:70:13:23:9d:fe:bb:db:00:a5:5b:f8:37:44:cc:83:6a:
5f:3a:16:9d:ef:d5:d1:cb:06:9b:ca:88:60:8c:0a:45:e5:0b:
fc:f4:a3:13:70:ef:a8:df:e3:12:35:d6:11:93:17:01:78:c9:
46:e8:e2:43:e3:b2:c5:ed:91:f0:d3:b4:b7:ab:df:23:5a:52:
24:46:71:67:a7:ad:a1:a8:3f:6f:8e:6a:b7:6d:ef:54:73:de:
0c:73:62:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks7P7xf60aqrdyt6wH6rvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhOTBlZDY4NDhhOWNhMWVmMjAxMGU2MzRjZTIxYjZjOWFk
ZGViNjIwHhcNMjUwMTAyMDE0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTFmOTRlNWRhOGQxZjM3NTdiNDAwYjhiM2M0YWEyZTRjMzQxZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdrGiD4yb4kt7VvU3pYFjR8NT/PW
ZSq0CBN2bZ8VIFsS8gnSbmODIMM8eZBevkdD3avAN0VFYPCvA06lTEAZNCJVcH08
2xnv7IU3DfkqIXKBFTFPVOu2DN4RFu0CTzJnT5HijFnKznr4QOSRsBvfvtNz+rjC
IDx2vHVnviUAU8GxwdoNNdA7Shiqbzvw61OMV++2qonq7RHdKkNifDICqq3xJbdZ
PB4glvm8wcOMpyYOAuiP+q4S8unMnvGtrEiG3ITlj/MNt/ztkAyHmXQ4AHNGUEnk
D7PFWs9w5TyRXDXS+yvQPszbPWBFyNy8P/hn8FjKLjKwXgqrDsVD+QT9oQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD4flOXajR83V7QAuLPEqi5MNB51MB8GA1UdIwQY
MBaAFOqQ7WhIqcoe8gEOY0ziG2ya3etiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnBEdGFFaXB5aDd5QVE1alRPSWJiSnJkNjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi85YzFlODMtZTcxNC00YzQ1LTg2ODUt
NTg2YjZkMDQ3ODc4LzEvUGgtVTVkcU5IemRYdEFDNHM4U3FMa3cwSG5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi85YzFlODMtZTcxNC00YzQ1LTg2ODUtNTg2YjZkMDQ3ODc4
LzEvNnBEdGFFaXB5aDd5QVE1alRPSWJiSnJkNjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweOCMA0G
CSqGSIb3DQEBCwUAA4IBAQADTltHcEghILSLYL3D6H4aErzNvQeuOZvHSZB2Dknj
pPTS7E2URiSFq6bDzOQhkgay6jBcfSGMfruW6IDxSOf/8tOc6Aellywky8muSOjF
1uISTgyYTibTfYGJIp+PnDwDbjX/bHvMoLFXz8JXAqazz8WAapNaaopzYd6nFyAx
5tmCNCDmYywfTRRQiWd1zYn+2F1bmzUNfHb6SzD8gBefZR8uVXATI53+u9sApVv4
N0TMg2pfOhad79XRywabyohgjApF5Qv89KMTcO+o3+MSNdYRkxcBeMlG6OJD47LF
7ZHw07S3q98jWlIkRnFnp62hqD9vjmq3be9Uc94Mc2KI
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:39:52 2025 by rpki-client