Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/xLnSF2b56sdGvEy1nIz5m5r51yI.roa
File: xLnSF2b56sdGvEy1nIz5m5r51yI.roa (raw, json)
Hash identifier: qVK23ObsKI6e1rTm6jUAy0nD1WL/SdzGZ0NJ7KNEkbc=
Subject key identifier: C4:B9:D2:17:66:F9:EA:C7:46:BC:4C:B5:9C:8C:F9:9B:9A:F9:D7:22
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 018CC3B730B368C6A4F843357007081B6C76
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/xLnSF2b56sdGvEy1nIz5m5r51yI.roa
Signing time: Mon 01 Jan 2024 06:30:11 +0000
ROA not before: Mon 01 Jan 2024 06:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 193.105.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:30:b3:68:c6:a4:f8:43:35:70:07:08:1b:6c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4b9d21766f9eac746bc4cb59c8cf99b9af9d722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:55:c3:ff:bf:2d:f1:66:03:60:37:71:d7:59:
ad:92:0b:87:42:3b:9b:c3:74:68:5c:7b:82:ab:a1:
ef:81:a6:ec:47:47:70:40:9e:55:b6:b8:ef:f4:0c:
b6:5d:58:71:15:40:7e:62:85:65:93:a6:d5:7b:47:
08:34:09:0c:fc:b4:47:c2:c4:50:7b:41:4e:4b:f0:
6c:ca:ba:b6:ce:00:dd:ac:3e:2a:00:36:e1:3c:0a:
2a:d5:d7:5e:aa:92:f0:dc:75:95:f1:4d:e0:a0:0c:
5e:f4:e0:3e:98:3f:29:3f:4e:d8:8b:25:a3:e7:a5:
6c:c6:5e:4d:8c:8a:9a:3e:92:4f:67:d9:45:b7:6b:
2e:eb:03:4b:e6:35:78:f0:e6:75:8e:40:98:1a:ef:
aa:eb:f6:44:d7:ad:f0:ef:e3:5d:99:20:52:21:cb:
75:64:5a:4f:ca:ff:c2:48:c3:2b:08:b6:f3:2d:53:
db:24:d7:7f:5a:99:c8:49:d0:b5:bc:54:ba:79:95:
9a:64:96:b3:8d:69:e6:83:7b:0f:e0:a1:cb:61:80:
1b:85:89:c3:94:30:46:06:2a:e3:26:8c:27:16:00:
70:01:12:e8:a7:db:63:0d:80:cd:7d:2e:e8:07:84:
68:7e:f9:18:e7:9c:23:68:c1:c2:d8:d1:fe:3d:ae:
e3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B9:D2:17:66:F9:EA:C7:46:BC:4C:B5:9C:8C:F9:9B:9A:F9:D7:22
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/xLnSF2b56sdGvEy1nIz5m5r51yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.212.0/24
Signature Algorithm: sha256WithRSAEncryption
83:75:fe:e8:fb:36:0c:b3:08:7a:3d:2d:bc:f6:95:32:7d:38:
84:93:fe:26:82:c1:94:c4:33:99:89:3e:82:31:87:59:a4:38:
39:2a:bc:41:b7:b6:f1:19:be:fc:d3:5b:10:78:50:d9:81:7e:
49:9c:c0:2e:2f:ab:05:9c:7f:7d:f7:94:b3:91:93:b5:5f:17:
b9:9c:17:e1:b5:7d:7a:03:73:3d:52:e1:90:4f:d4:0d:2d:fc:
0e:0a:91:a6:86:fa:4d:ea:9c:e0:45:1b:68:e2:f3:e2:20:c4:
76:11:b8:86:1c:7a:62:f2:b1:36:cb:e5:c4:88:5a:04:80:2e:
9d:da:c5:92:f9:61:44:6b:c9:19:d8:67:b5:92:9b:57:08:58:
ba:1b:2d:63:61:9f:86:3d:28:2a:03:4e:64:34:4a:83:63:b1:
a1:a4:27:3d:ff:2c:58:2f:3b:62:2c:76:8a:4c:f0:8f:e7:8c:
b6:a5:4e:d1:e9:45:4a:ef:50:1f:2f:db:31:b2:82:fb:2a:ee:
da:37:f9:4b:54:e4:09:1b:83:30:60:44:74:41:41:05:84:f0:
b4:6f:b3:75:b2:f3:1e:95:a2:6f:19:67:3f:5b:4b:ab:f9:be:
2b:2a:d3:5f:31:9d:4a:f0:73:e3:ec:77:d9:d1:1c:da:e6:3c:
5c:09:e8:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtzCzaMak+EM1cAcIG2x2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMGFlNjUxZGVmYjA2NjZjMjJiMmU1ZDdhZGQ1NjUzNDg3
MDc2YWYwHhcNMjQwMTAxMDYzMDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGI5ZDIxNzY2ZjllYWM3NDZiYzRjYjU5YzhjZjk5YjlhZjlkNzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31XD/78t8WYDYDdx11mtkguHQjub
w3RoXHuCq6HvgabsR0dwQJ5Vtrjv9Ay2XVhxFUB+YoVlk6bVe0cINAkM/LRHwsRQ
e0FOS/Bsyrq2zgDdrD4qADbhPAoq1ddeqpLw3HWV8U3goAxe9OA+mD8pP07YiyWj
56Vsxl5NjIqaPpJPZ9lFt2su6wNL5jV48OZ1jkCYGu+q6/ZE163w7+NdmSBSIct1
ZFpPyv/CSMMrCLbzLVPbJNd/WpnISdC1vFS6eZWaZJazjWnmg3sP4KHLYYAbhYnD
lDBGBirjJownFgBwARLop9tjDYDNfS7oB4RofvkY55wjaMHC2NH+Pa7j6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMS50hdm+erHRrxMtZyM+Zua+dciMB8GA1UdIwQY
MBaAFNsK5lHe+wZmwisuXXrdVlNIcHavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWIt
ZTBhYTg2ZDI1MGUzLzEveExuU0YyYjU2c2RHdkV5MW5JejVtNXI1MXlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWItZTBhYTg2ZDI1MGUz
LzEvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWnUMA0G
CSqGSIb3DQEBCwUAA4IBAQCDdf7o+zYMswh6PS289pUyfTiEk/4mgsGUxDOZiT6C
MYdZpDg5KrxBt7bxGb7801sQeFDZgX5JnMAuL6sFnH9995SzkZO1Xxe5nBfhtX16
A3M9UuGQT9QNLfwOCpGmhvpN6pzgRRto4vPiIMR2EbiGHHpi8rE2y+XEiFoEgC6d
2sWS+WFEa8kZ2Ge1kptXCFi6Gy1jYZ+GPSgqA05kNEqDY7GhpCc9/yxYLztiLHaK
TPCP54y2pU7R6UVK71AfL9sxsoL7Ku7aN/lLVOQJG4MwYER0QUEFhPC0b7N1svMe
laJvGWc/W0ur+b4rKtNfMZ1K8HPj7HfZ0Rza5jxcCeha
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:46 2025 by rpki-client