Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/yo4e6Dd_pcrThs4Ucnd01TxRwfY.roa
File: yo4e6Dd_pcrThs4Ucnd01TxRwfY.roa (raw, json)
Hash identifier: zRJvfuooLD1ukObnKFMb0zFwDQ9keCDuprZkYYzC4qc=
Subject key identifier: CA:8E:1E:E8:37:7F:A5:CA:D3:86:CE:14:72:77:74:D5:3C:51:C1:F6
Certificate issuer: /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Certificate serial: 019421B21B465E15E44D0FAD6C14EFE52050
Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/yo4e6Dd_pcrThs4Ucnd01TxRwfY.roa
Signing time: Wed 01 Jan 2025 11:48:27 +0000
ROA not before: Wed 01 Jan 2025 11:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5483
IP address blocks: 193.16.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1b:46:5e:15:e4:4d:0f:ad:6c:14:ef:e5:20:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Validity
Not Before: Jan 1 11:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca8e1ee8377fa5cad386ce14727774d53c51c1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:4b:83:89:94:4f:a8:74:33:34:be:4e:8f:
cb:95:9c:36:ca:84:8b:19:ce:d1:c1:ec:5c:ff:4e:
65:33:5b:4e:35:a7:c0:84:83:68:3e:0e:71:f0:3b:
7c:7e:60:15:72:99:9a:e1:16:68:d1:6b:f8:7c:28:
ec:2e:49:c1:52:53:9f:5c:08:ce:5e:03:b3:0a:1f:
1c:fc:8f:ff:00:95:21:0b:54:57:78:e5:46:4e:34:
4e:f3:58:9d:74:71:f4:22:bf:34:21:49:17:46:80:
f2:d1:42:8c:75:f9:99:6f:f5:71:85:10:52:1f:66:
38:f2:dc:2d:38:1e:e7:89:f6:c7:02:13:d7:ec:99:
d2:1b:28:25:95:78:49:19:d1:f1:87:b8:4e:8e:fe:
16:bb:6d:60:a1:ab:94:0c:33:6a:60:b1:39:89:d6:
b4:9b:7e:d2:42:7f:bb:45:61:ca:5e:d3:09:ff:76:
e2:99:d1:a7:13:fc:16:34:a5:a7:89:1f:72:f7:da:
28:10:1f:0c:b2:0f:d9:34:03:d2:46:c4:e5:c1:36:
39:f8:13:57:cd:6d:6e:0d:bc:a7:08:51:fe:5d:10:
8b:f4:84:cf:09:72:ef:b3:34:3a:e2:24:b4:28:75:
0c:fc:56:41:db:1d:be:3e:23:d8:e9:5c:e8:49:ef:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8E:1E:E8:37:7F:A5:CA:D3:86:CE:14:72:77:74:D5:3C:51:C1:F6
X509v3 Authority Key Identifier:
keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/yo4e6Dd_pcrThs4Ucnd01TxRwfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.218.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:56:1c:9c:10:67:5c:87:a8:b5:c2:5f:a9:bd:48:4a:d5:fa:
9a:f0:4c:55:98:bb:09:5d:87:61:2c:d5:85:78:78:a8:c0:05:
bd:ef:d8:c9:9c:ad:04:11:de:5d:d6:8b:f1:42:72:9a:38:1d:
1f:3a:68:09:e1:cf:6d:db:e5:40:ec:95:ab:27:a5:7b:af:8f:
48:68:12:27:f5:47:60:a8:5e:79:0a:08:23:75:c0:45:81:ae:
32:e3:f1:b0:3d:6e:d2:04:c5:50:4b:a9:11:04:de:f7:3a:77:
6f:76:91:a2:03:80:ce:32:d2:c6:d0:b3:55:ca:fd:bb:ba:41:
ac:e4:b5:d4:9a:5c:1c:fc:fc:26:39:36:05:82:5b:ee:6d:31:
24:a0:de:74:9b:f5:cd:97:0d:c8:a6:33:65:e5:59:fc:6e:a3:
2c:39:e1:9b:f7:d7:01:67:e2:68:f6:1b:a7:86:2a:2b:9c:eb:
48:bb:dc:80:d7:f6:b0:cd:8e:74:d5:33:60:ee:59:f4:f0:ec:
4c:77:c9:93:8b:8a:4b:eb:a8:e0:93:02:5f:6b:f4:ce:c5:52:
8e:02:77:d0:1b:14:22:8a:cb:79:ac:c1:91:91:ba:70:f5:6d:
91:6d:b6:cf:ed:28:8b:ef:83:2b:a9:6d:a3:63:4f:46:21:65:
7c:c5:85:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhshtGXhXkTQ+tbBTv5SBQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMTJkYmZjNDY2YmQzNDgwOTBlZGMxYWUzMjkyNTIyZTlk
NzNiZDkwHhcNMjUwMTAxMTE0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYThlMWVlODM3N2ZhNWNhZDM4NmNlMTQ3Mjc3NzRkNTNjNTFjMWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdRLg4mUT6h0MzS+To/LlZw2yoSL
Gc7Rwexc/05lM1tONafAhINoPg5x8Dt8fmAVcpma4RZo0Wv4fCjsLknBUlOfXAjO
XgOzCh8c/I//AJUhC1RXeOVGTjRO81iddHH0Ir80IUkXRoDy0UKMdfmZb/VxhRBS
H2Y48twtOB7nifbHAhPX7JnSGygllXhJGdHxh7hOjv4Wu21goauUDDNqYLE5ida0
m37SQn+7RWHKXtMJ/3bimdGnE/wWNKWniR9y99ooEB8Msg/ZNAPSRsTlwTY5+BNX
zW1uDbynCFH+XRCL9ITPCXLvszQ64iS0KHUM/FZB2x2+PiPY6VzoSe+fiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMqOHug3f6XK04bOFHJ3dNU8UcH2MB8GA1UdIwQY
MBaAFI8S2/xGa9NICQ7cGuMpJSLp1zvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhMYl9FWnIwMGdKRHR3YTR5a2xJdW5YTzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zOWI1MDktYTY3Yy00NjNiLTk2ODgt
NGIwOWJkOGVkMDRhLzEveW80ZTZEZF9wY3JUaHM0VWNuZDAxVHhSd2ZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8zOWI1MDktYTY3Yy00NjNiLTk2ODgtNGIwOWJkOGVkMDRh
LzEvanhMYl9FWnIwMGdKRHR3YTR5a2xJdW5YTzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRDaMA0G
CSqGSIb3DQEBCwUAA4IBAQCeVhycEGdch6i1wl+pvUhK1fqa8ExVmLsJXYdhLNWF
eHiowAW979jJnK0EEd5d1ovxQnKaOB0fOmgJ4c9t2+VA7JWrJ6V7r49IaBIn9Udg
qF55CggjdcBFga4y4/GwPW7SBMVQS6kRBN73OndvdpGiA4DOMtLG0LNVyv27ukGs
5LXUmlwc/PwmOTYFglvubTEkoN50m/XNlw3IpjNl5Vn8bqMsOeGb99cBZ+Jo9hun
hiornOtIu9yA1/awzY501TNg7ln08OxMd8mTi4pL66jgkwJfa/TOxVKOAnfQGxQi
ist5rMGRkbpw9W2RbbbP7SiL74MrqW2jY09GIWV8xYXI
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:20:38 2025 by rpki-client