Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/sZiCl9lv80fsle91xuU3_BKnt_s.roa
File: sZiCl9lv80fsle91xuU3_BKnt_s.roa (raw, json)
Hash identifier: FzOmDkg8UvmI+LcJN7K+9dJBFFV57UBgPrTOJAC0yec=
Subject key identifier: B1:98:82:97:D9:6F:F3:47:EC:95:EF:75:C6:E5:37:FC:12:A7:B7:FB
Certificate issuer: /CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Certificate serial: 019424B284B342BA22DEF3D94E54E3615BED
Authority key identifier: 0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/sZiCl9lv80fsle91xuU3_BKnt_s.roa
Signing time: Thu 02 Jan 2025 01:47:46 +0000
ROA not before: Thu 02 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 193.176.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:84:b3:42:ba:22:de:f3:d9:4e:54:e3:61:5b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Validity
Not Before: Jan 2 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1988297d96ff347ec95ef75c6e537fc12a7b7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:aa:3e:bf:55:53:5e:02:fa:8d:20:41:23:
26:32:85:e4:fd:47:45:84:7b:07:e3:91:0f:ad:8e:
af:7e:5e:bb:e4:a5:e6:a7:64:e0:b9:9c:f7:4d:7e:
c6:50:ac:93:96:ec:df:67:0a:43:af:53:de:9f:fa:
41:bb:f6:8e:2c:5b:af:a2:95:20:5d:81:dd:99:d7:
e8:48:38:8f:b5:c8:db:a6:e0:1e:ac:82:df:f6:fd:
40:20:7c:fa:01:f9:da:d0:43:00:89:4f:0a:99:21:
ed:75:a3:e4:fc:1f:87:cf:b5:fb:9c:e2:cb:1f:18:
fd:10:ef:30:62:60:2f:42:85:a5:52:08:e8:5a:3c:
7a:b4:09:3f:bd:4d:6c:49:17:e8:29:b1:5a:13:27:
63:7a:79:ad:93:73:ac:9d:a8:67:be:9b:3c:02:c1:
99:2a:ba:0c:a6:c9:c6:7f:80:b3:7f:35:9a:5f:63:
da:b1:03:96:03:2a:58:fd:05:b8:16:90:3f:f8:91:
d4:91:ea:dc:29:2e:5c:63:90:59:e3:a9:e3:af:0e:
90:6c:b4:d6:4f:0e:35:8d:a3:f6:67:4f:41:e7:c0:
9e:84:13:d1:7f:a3:11:06:16:b6:7f:2b:28:40:88:
c1:7e:c8:7b:1c:43:60:e9:80:68:94:a3:64:f1:f2:
cc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:98:82:97:D9:6F:F3:47:EC:95:EF:75:C6:E5:37:FC:12:A7:B7:FB
X509v3 Authority Key Identifier:
keyid:0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/sZiCl9lv80fsle91xuU3_BKnt_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.186.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:fe:96:80:1a:ab:5a:d6:48:01:1d:f3:1e:85:29:3c:36:06:
05:ca:2f:a5:ef:6d:69:e9:ee:93:5e:c8:7a:66:fc:9b:eb:79:
fe:64:55:5e:11:61:98:85:58:0e:70:02:e0:db:be:65:61:69:
cc:8a:0e:3b:cc:b6:db:9f:6f:08:12:6e:cc:63:8f:3f:6a:dc:
32:4a:7d:9f:f0:bb:3e:b1:ee:ee:32:f2:94:db:be:f8:4f:17:
d9:da:81:f9:e5:71:b3:1a:98:5a:4b:f8:0c:13:69:30:af:c6:
bc:41:f3:cb:e3:a0:8c:0d:c7:e7:04:63:fd:5e:24:49:67:29:
14:8c:95:31:d6:ba:71:6b:9f:fd:a1:51:93:4d:cc:7e:b9:8a:
f0:e2:b2:9f:7b:9f:49:7c:7c:3a:11:40:f3:fd:46:46:68:17:
fb:3a:f2:47:24:24:33:90:25:b6:2b:36:bd:98:8a:40:7d:db:
50:ae:f2:82:18:bb:7a:2d:be:0b:01:e7:dc:f5:57:25:a1:6f:
ae:e4:36:70:e4:c0:25:aa:b5:e7:83:65:46:4a:7f:80:e8:fc:
4f:03:4e:c8:16:41:53:a1:65:85:22:ff:f5:3e:02:30:48:84:
65:1c:78:95:0f:bb:0e:d8:6a:89:71:ca:47:34:40:91:7f:6a:
fd:b8:18:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQksoSzQroi3vPZTlTjYVvtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZWQ0M2Y0MDljYjM1Y2ViNWU3N2I1NmQwYmJjOWE0Y2My
ZDI2OTMwHhcNMjUwMTAyMDE0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTk4ODI5N2Q5NmZmMzQ3ZWM5NWVmNzVjNmU1MzdmYzEyYTdiN2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiuqPr9VU14C+o0gQSMmMoXk/UdF
hHsH45EPrY6vfl675KXmp2TguZz3TX7GUKyTluzfZwpDr1Pen/pBu/aOLFuvopUg
XYHdmdfoSDiPtcjbpuAerILf9v1AIHz6Afna0EMAiU8KmSHtdaPk/B+Hz7X7nOLL
Hxj9EO8wYmAvQoWlUgjoWjx6tAk/vU1sSRfoKbFaEydjenmtk3Osnahnvps8AsGZ
KroMpsnGf4CzfzWaX2PasQOWAypY/QW4FpA/+JHUkercKS5cY5BZ46njrw6QbLTW
Tw41jaP2Z09B58CehBPRf6MRBha2fysoQIjBfsh7HENg6YBolKNk8fLM2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLGYgpfZb/NH7JXvdcblN/wSp7f7MB8GA1UdIwQY
MBaAFAvtQ/QJyzXOted7VtC7yaTMLSaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy0xRDlBbkxOYzYxNTN0VzBMdkpwTXd0SnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jNzQzY2ItODEzNy00NTVhLWE1NzMt
ZDgwOGIxYWZhODgxLzEvc1ppQ2w5bHY4MGZzbGU5MXh1VTNfQktudF9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9jNzQzY2ItODEzNy00NTVhLWE1NzMtZDgwOGIxYWZhODgx
LzEvQy0xRDlBbkxOYzYxNTN0VzBMdkpwTXd0SnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbC6MA0G
CSqGSIb3DQEBCwUAA4IBAQDL/paAGqta1kgBHfMehSk8NgYFyi+l721p6e6TXsh6
Zvyb63n+ZFVeEWGYhVgOcALg275lYWnMig47zLbbn28IEm7MY48/atwySn2f8Ls+
se7uMvKU2774TxfZ2oH55XGzGphaS/gME2kwr8a8QfPL46CMDcfnBGP9XiRJZykU
jJUx1rpxa5/9oVGTTcx+uYrw4rKfe59JfHw6EUDz/UZGaBf7OvJHJCQzkCW2Kza9
mIpAfdtQrvKCGLt6Lb4LAefc9VcloW+u5DZw5MAlqrXng2VGSn+A6PxPA07IFkFT
oWWFIv/1PgIwSIRlHHiVD7sO2GqJccpHNECRf2r9uBhh
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:12:23 2025 by rpki-client