Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/eG2TuLX8aQVwCJ3-wzt6pkOEazU.roa
File: eG2TuLX8aQVwCJ3-wzt6pkOEazU.roa (raw, json)
Hash identifier: I5NjIqWx/H03PJ2xIH/VMY1e8Yxikj5eCAeypnxIYcY=
Subject key identifier: 78:6D:93:B8:B5:FC:69:05:70:08:9D:FE:C3:3B:7A:A6:43:84:6B:35
Certificate issuer: /CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
Certificate serial: 019422FB931D67000E93D9472370BA557BB6
Authority key identifier: C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/eG2TuLX8aQVwCJ3-wzt6pkOEazU.roa
Signing time: Wed 01 Jan 2025 17:48:19 +0000
ROA not before: Wed 01 Jan 2025 17:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 193.34.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:93:1d:67:00:0e:93:d9:47:23:70:ba:55:7b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
Validity
Not Before: Jan 1 17:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=786d93b8b5fc690570089dfec33b7aa643846b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:30:1e:0e:fb:f4:95:09:c9:95:93:b5:ac:
8d:ed:62:91:48:3a:53:0f:a1:21:cb:aa:fa:6a:df:
44:25:76:e4:26:90:16:e4:92:93:58:9e:28:f5:69:
21:60:73:87:6e:ac:ba:52:c7:a1:d3:c3:34:d1:c8:
27:11:86:0c:cc:f7:3c:80:70:1e:1d:18:a7:5a:43:
d1:1a:9a:9c:85:09:7f:b5:cf:ce:da:ed:2e:4b:84:
4a:d8:e1:19:62:91:15:2b:62:95:f3:ac:b9:30:e8:
92:54:81:68:59:2b:d3:a2:3c:da:37:8a:42:8d:ba:
2a:b7:1e:5b:0d:62:02:f3:d9:97:12:45:26:04:08:
0a:2b:5e:c5:d9:17:97:20:d6:cd:ae:eb:20:41:79:
28:0a:b3:b0:6f:f3:6f:eb:93:69:83:26:9f:2d:a2:
24:9c:85:f1:a9:50:df:e0:09:0b:8b:74:e0:75:ab:
c8:d7:28:f5:18:97:41:58:a6:95:ae:3a:44:19:8d:
33:cf:c8:fd:62:19:a0:fb:82:fa:c6:52:29:55:8c:
26:31:11:a3:fa:cf:78:b4:03:c3:75:bd:84:a0:49:
15:54:57:2f:38:9d:1d:0a:41:e1:60:71:15:d7:cd:
e4:b4:3a:ae:6b:47:cb:ed:17:e2:40:ed:c9:71:40:
4a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6D:93:B8:B5:FC:69:05:70:08:9D:FE:C3:3B:7A:A6:43:84:6B:35
X509v3 Authority Key Identifier:
keyid:C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/eG2TuLX8aQVwCJ3-wzt6pkOEazU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.82.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:2e:45:99:54:f7:5f:11:28:d4:29:b0:f4:2e:c3:4b:07:e5:
41:4c:c4:5e:97:4d:0c:52:d8:51:09:72:53:6c:42:10:e7:6f:
0a:ef:bb:bf:72:31:3a:83:b7:98:4f:69:af:d7:4d:dd:6d:d6:
78:04:9f:a1:89:4f:03:d7:76:af:3b:51:21:59:04:d1:5b:4a:
77:48:fa:18:43:4f:cf:9d:0f:86:14:bd:33:1a:74:b8:fd:ce:
3c:23:74:9d:dc:ee:87:85:b5:37:03:f3:3d:98:91:96:ed:f0:
48:62:bf:32:78:a7:6f:de:07:98:31:e9:2f:9c:eb:31:dd:f2:
15:cf:13:ff:6c:fb:ba:f7:c4:52:db:10:ac:5d:75:ab:de:9f:
9d:f3:2f:62:83:c8:c1:fd:7d:d6:46:af:b2:52:b1:15:af:25:
b1:77:c8:9a:79:7c:05:f2:15:97:27:ab:10:12:ac:4d:29:c6:
ed:b0:82:16:6b:7f:43:5f:15:db:a7:e9:c9:fb:e1:b4:08:6a:
2f:f7:28:6d:9f:4f:30:8a:67:bf:24:6e:db:b2:32:17:de:39:
b8:ad:20:2f:7a:16:76:af:21:cf:f3:8d:8b:f3:8e:63:33:24:
ab:fa:9c:15:e3:c4:80:59:2e:d5:0d:d7:f8:72:7b:ee:2c:61:
da:06:3d:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+5MdZwAOk9lHI3C6VXu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYThlODY0OGUwYmEzNmEzMjNhYjlkZjYzNDFkNjY4YmRh
NmI0ZDIwHhcNMjUwMTAxMTc0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODZkOTNiOGI1ZmM2OTA1NzAwODlkZmVjMzNiN2FhNjQzODQ2YjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSEwHg779JUJyZWTtayN7WKRSDpT
D6Ehy6r6at9EJXbkJpAW5JKTWJ4o9WkhYHOHbqy6Useh08M00cgnEYYMzPc8gHAe
HRinWkPRGpqchQl/tc/O2u0uS4RK2OEZYpEVK2KV86y5MOiSVIFoWSvTojzaN4pC
jboqtx5bDWIC89mXEkUmBAgKK17F2ReXINbNrusgQXkoCrOwb/Nv65NpgyafLaIk
nIXxqVDf4AkLi3TgdavI1yj1GJdBWKaVrjpEGY0zz8j9Yhmg+4L6xlIpVYwmMRGj
+s94tAPDdb2EoEkVVFcvOJ0dCkHhYHEV183ktDqua0fL7RfiQO3JcUBKvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHhtk7i1/GkFcAid/sM7eqZDhGs1MB8GA1UdIwQY
MBaAFMOo6GSOC6NqMjq532NB1mi9prTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzZqb1pJNExvMm95T3JuZlkwSFdhTDJtdE5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81YTNkMjAtZWNhYS00MGVhLTlkYjIt
ZDU5ODQ1ZmI5YjNkLzEvZUcyVHVMWDhhUVZ3Q0ozLXd6dDZwa09FYXpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC81YTNkMjAtZWNhYS00MGVhLTlkYjItZDU5ODQ1ZmI5YjNk
LzEvdzZqb1pJNExvMm95T3JuZlkwSFdhTDJtdE5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSJSMA0G
CSqGSIb3DQEBCwUAA4IBAQB7LkWZVPdfESjUKbD0LsNLB+VBTMRel00MUthRCXJT
bEIQ528K77u/cjE6g7eYT2mv103dbdZ4BJ+hiU8D13avO1EhWQTRW0p3SPoYQ0/P
nQ+GFL0zGnS4/c48I3Sd3O6HhbU3A/M9mJGW7fBIYr8yeKdv3geYMekvnOsx3fIV
zxP/bPu698RS2xCsXXWr3p+d8y9ig8jB/X3WRq+yUrEVryWxd8iaeXwF8hWXJ6sQ
EqxNKcbtsIIWa39DXxXbp+nJ++G0CGov9yhtn08wime/JG7bsjIX3jm4rSAvehZ2
ryHP842L845jMySr+pwV48SAWS7VDdf4cnvuLGHaBj1Q
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:53 2025 by rpki-client