Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e0326a-9bdb-4289-841b-47704e17d31c/1/rhdUKwQ7sWFTOVcT1CGWVE7BPqI.roa
File: rhdUKwQ7sWFTOVcT1CGWVE7BPqI.roa (raw, json)
Hash identifier: KsaXslucjZ5c0DKoxHv9vwgZWKB1AJwoKAt9T2U+tBw=
Subject key identifier: AE:17:54:2B:04:3B:B1:61:53:39:57:13:D4:21:96:54:4E:C1:3E:A2
Certificate issuer: /CN=c5a4a2d4b0023a0abef6375dfdb3b49c1b422426
Certificate serial: 018A8ED1D2CD0A33C9709E4060F4393C1F5B
Authority key identifier: C5:A4:A2:D4:B0:02:3A:0A:BE:F6:37:5D:FD:B3:B4:9C:1B:42:24:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaSi1LACOgq-9jdd_bO0nBtCJCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e0326a-9bdb-4289-841b-47704e17d31c/1/rhdUKwQ7sWFTOVcT1CGWVE7BPqI.roa
Signing time: Wed 13 Sep 2023 13:53:50 +0000
ROA not before: Wed 13 Sep 2023 13:53:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 193.3.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8e:d1:d2:cd:0a:33:c9:70:9e:40:60:f4:39:3c:1f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a4a2d4b0023a0abef6375dfdb3b49c1b422426
Validity
Not Before: Sep 13 13:53:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae17542b043bb16153395713d42196544ec13ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3e:bd:a8:46:e8:e9:4d:f6:b8:98:b4:82:2a:
5b:fa:c5:15:f1:c8:59:66:25:93:16:04:a0:28:96:
d0:d4:78:a0:7e:d7:80:81:40:2a:26:36:db:10:f1:
9e:eb:97:f0:47:a3:c8:1d:25:dd:2c:ab:37:30:f4:
97:c1:dc:4e:34:f9:20:b4:43:ee:9a:c7:a2:d8:49:
21:15:c9:a9:8e:a7:fa:d0:34:d0:80:c0:e1:25:39:
14:2e:07:73:1e:70:80:ff:5d:1c:c7:63:38:14:65:
eb:2b:b7:67:96:e0:5f:20:81:9d:3e:35:74:c6:9a:
01:5d:b2:f9:f8:01:5b:32:1c:f1:bf:b6:19:48:96:
4d:3e:53:72:35:9b:d2:84:1c:6c:15:41:96:b5:cd:
98:7e:59:4d:af:b8:bf:3e:ca:a6:01:2a:ab:a7:17:
06:b5:fb:a3:f9:79:f4:58:2f:13:0e:33:f7:a3:0c:
7d:15:0e:40:53:f9:20:18:f1:1e:a9:ce:c3:a5:a4:
08:e9:6b:af:c1:76:32:be:4c:19:48:4a:60:23:2f:
66:80:8a:db:24:fa:79:bb:d2:d5:2a:39:8e:93:60:
f1:ab:68:61:f4:3b:d7:d0:f7:88:fa:fa:8a:f9:30:
7f:03:92:92:3b:29:19:61:57:1a:ec:12:7c:30:e9:
67:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:17:54:2B:04:3B:B1:61:53:39:57:13:D4:21:96:54:4E:C1:3E:A2
X509v3 Authority Key Identifier:
keyid:C5:A4:A2:D4:B0:02:3A:0A:BE:F6:37:5D:FD:B3:B4:9C:1B:42:24:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaSi1LACOgq-9jdd_bO0nBtCJCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e0326a-9bdb-4289-841b-47704e17d31c/1/rhdUKwQ7sWFTOVcT1CGWVE7BPqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e0326a-9bdb-4289-841b-47704e17d31c/1/xaSi1LACOgq-9jdd_bO0nBtCJCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.166.0/24
Signature Algorithm: sha256WithRSAEncryption
91:b8:67:00:bd:c5:b5:90:a1:08:c8:d0:8c:80:32:a4:96:0b:
13:78:d5:2f:58:e4:09:19:42:8e:1a:c6:ec:1b:49:a8:71:0c:
c9:7d:54:5c:25:d7:5f:66:eb:f5:be:19:ee:d0:bf:07:dc:a8:
59:9a:ce:af:5f:0d:47:51:ce:35:0f:fe:a4:20:16:d9:fb:58:
61:19:91:6c:d3:e2:36:59:70:4c:1f:7f:f6:c9:59:7d:b1:57:
29:50:87:22:46:d4:0f:a0:d1:99:7b:fe:76:52:73:23:99:d3:
74:6b:2e:31:9b:e9:5f:2e:a6:b3:68:b0:ab:a9:0f:b4:aa:17:
b8:fd:9d:03:06:89:5b:2f:ba:e2:13:d4:9d:c0:f2:4e:29:81:
2e:dc:57:8a:70:20:b6:4e:67:f5:fc:36:0f:a1:88:d0:f6:04:
a5:92:22:56:b4:02:61:f5:bc:e2:d4:6d:b2:ad:87:64:49:b2:
41:aa:b2:c9:e9:44:80:19:33:a2:35:cd:2f:2e:60:58:37:2d:
df:3d:92:c7:01:2b:75:55:93:b1:71:38:e1:6e:d5:db:f5:43:
af:7e:1d:0b:73:a2:81:4b:47:67:f1:ab:9a:9e:8b:a1:4d:fe:
c6:6c:9a:ae:70:d8:53:ca:12:cc:41:a1:46:df:cb:14:b1:98:
5c:09:ae:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqO0dLNCjPJcJ5AYPQ5PB9bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTRhMmQ0YjAwMjNhMGFiZWY2Mzc1ZGZkYjNiNDljMWI0
MjI0MjYwHhcNMjMwOTEzMTM1MzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTE3NTQyYjA0M2JiMTYxNTMzOTU3MTNkNDIxOTY1NDRlYzEzZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz69qEbo6U32uJi0gipb+sUV8chZ
ZiWTFgSgKJbQ1HigfteAgUAqJjbbEPGe65fwR6PIHSXdLKs3MPSXwdxONPkgtEPu
msei2EkhFcmpjqf60DTQgMDhJTkULgdzHnCA/10cx2M4FGXrK7dnluBfIIGdPjV0
xpoBXbL5+AFbMhzxv7YZSJZNPlNyNZvShBxsFUGWtc2YfllNr7i/PsqmASqrpxcG
tfuj+Xn0WC8TDjP3owx9FQ5AU/kgGPEeqc7DpaQI6WuvwXYyvkwZSEpgIy9mgIrb
JPp5u9LVKjmOk2Dxq2hh9DvX0PeI+vqK+TB/A5KSOykZYVca7BJ8MOlnCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK4XVCsEO7FhUzlXE9QhllROwT6iMB8GA1UdIwQY
MBaAFMWkotSwAjoKvvY3Xf2ztJwbQiQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFTaTFMQUNPZ3EtOWpkZF9iTzBuQnRDSkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lMDMyNmEtOWJkYi00Mjg5LTg0MWIt
NDc3MDRlMTdkMzFjLzEvcmhkVUt3UTdzV0ZUT1ZjVDFDR1dWRTdCUHFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9lMDMyNmEtOWJkYi00Mjg5LTg0MWItNDc3MDRlMTdkMzFj
LzEveGFTaTFMQUNPZ3EtOWpkZF9iTzBuQnRDSkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQOmMA0G
CSqGSIb3DQEBCwUAA4IBAQCRuGcAvcW1kKEIyNCMgDKklgsTeNUvWOQJGUKOGsbs
G0mocQzJfVRcJddfZuv1vhnu0L8H3KhZms6vXw1HUc41D/6kIBbZ+1hhGZFs0+I2
WXBMH3/2yVl9sVcpUIciRtQPoNGZe/52UnMjmdN0ay4xm+lfLqazaLCrqQ+0qhe4
/Z0DBolbL7riE9SdwPJOKYEu3FeKcCC2Tmf1/DYPoYjQ9gSlkiJWtAJh9bzi1G2y
rYdkSbJBqrLJ6USAGTOiNc0vLmBYNy3fPZLHASt1VZOxcTjhbtXb9UOvfh0Lc6KB
S0dn8auanouhTf7GbJqucNhTyhLMQaFG38sUsZhcCa6k
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:10:06 2025 by rpki-client