Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/tH9WPK3_uWF3vLS6DlnKVCMMN0E.roa
File: tH9WPK3_uWF3vLS6DlnKVCMMN0E.roa (raw, json)
Hash identifier: EHLhUNTXUDdrdsOY3Wig8TACqPCPV2imol00Ow5NhQ4=
Subject key identifier: B4:7F:56:3C:AD:FF:B9:61:77:BC:B4:BA:0E:59:CA:54:23:0C:37:41
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01942827ECD294914ADBA6BF7235C08B3DFB
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/tH9WPK3_uWF3vLS6DlnKVCMMN0E.roa
Signing time: Thu 02 Jan 2025 17:54:52 +0000
ROA not before: Thu 02 Jan 2025 17:54:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46562
IP address blocks: 193.37.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:ec:d2:94:91:4a:db:a6:bf:72:35:c0:8b:3d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 17:54:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b47f563cadffb96177bcb4ba0e59ca54230c3741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:9a:c0:9f:1f:61:81:a7:69:49:63:c1:57:
3d:fb:fe:99:6c:5c:da:f9:10:5a:08:ec:1e:ef:c6:
71:e9:0b:b1:6b:d1:ac:0a:a3:36:af:fe:7c:22:47:
51:b8:c8:34:ad:ce:ab:22:33:7f:8e:0b:af:70:48:
9e:41:28:3a:de:96:90:14:f1:80:8e:36:9f:ba:83:
dd:1a:e7:23:dd:60:be:ad:a8:4c:2a:8c:7a:27:0b:
52:2c:fd:22:4e:30:ae:80:75:af:42:35:5b:d3:71:
8a:9c:81:02:2f:83:6c:24:53:d9:1b:2d:d6:3d:84:
36:44:73:ee:cd:fc:2e:da:29:8a:01:54:cd:4b:78:
15:1e:ae:3b:72:da:6e:dc:9d:12:cd:9e:e8:2a:ed:
dc:71:f8:07:9c:9d:58:2a:0f:4f:f6:d2:8b:0f:2f:
ed:c0:7a:90:4a:78:ce:37:5c:a0:89:8c:44:70:88:
3f:25:50:b1:a8:e5:8d:b1:40:b0:fd:92:00:2d:37:
40:84:c2:8e:4d:71:a8:fe:d3:8f:4e:a4:9a:38:38:
db:c7:68:b7:0b:e5:bc:5b:74:55:2f:2f:9d:d0:0a:
2f:a2:dd:ad:b2:07:4e:1a:12:ff:1c:d5:27:95:c1:
b1:e0:33:19:7b:cd:ba:c0:b1:de:5a:42:9a:85:f3:
ae:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7F:56:3C:AD:FF:B9:61:77:BC:B4:BA:0E:59:CA:54:23:0C:37:41
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/tH9WPK3_uWF3vLS6DlnKVCMMN0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.199.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c9:05:23:86:22:43:7f:2f:65:98:cb:a7:2d:e5:ee:37:88:
96:d3:5f:18:be:40:9b:24:f2:87:32:89:0f:0f:8a:ac:54:e9:
8e:b0:5f:68:64:c2:10:1c:54:50:f4:fd:fe:45:1e:3a:e0:1f:
51:a3:b5:32:14:57:48:de:94:bb:6b:51:49:57:a9:d7:75:72:
e7:9c:36:05:35:4d:9e:d7:c2:86:d6:ad:fc:0f:b5:9c:9c:31:
5a:32:3a:f5:60:2b:e6:86:2f:f3:44:1f:b1:25:46:81:1f:4d:
b2:18:b3:c3:a0:7a:37:8b:b5:bd:a6:ae:82:45:ef:d6:09:6e:
6d:a5:47:f8:da:4f:17:58:68:cf:70:53:01:a1:50:d2:cf:03:
41:8a:31:f4:37:b3:49:a0:d7:9d:ac:9d:48:35:f7:e3:74:ed:
6d:26:21:48:51:42:9b:56:16:e4:81:c7:ab:b3:9e:0f:22:d0:
a0:9a:b5:12:9f:5e:58:4f:8a:71:c7:f7:82:ed:a5:f5:4c:2f:
9f:aa:e2:05:31:61:c6:c1:ad:2d:de:30:de:77:65:31:6f:25:
e2:d8:79:b0:34:9a:69:13:d6:bd:53:01:19:f3:53:6b:da:51:
88:b6:a2:1e:7c:f4:0a:3a:0b:28:dc:ed:c4:c7:2a:67:87:5e:
e5:23:8c:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJ+zSlJFK26a/cjXAiz37MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjUwMTAyMTc1NDUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDdmNTYzY2FkZmZiOTYxNzdiY2I0YmEwZTU5Y2E1NDIzMGMzNzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYuawJ8fYYGnaUljwVc9+/6ZbFza
+RBaCOwe78Zx6Quxa9GsCqM2r/58IkdRuMg0rc6rIjN/jguvcEieQSg63paQFPGA
jjafuoPdGucj3WC+rahMKox6JwtSLP0iTjCugHWvQjVb03GKnIECL4NsJFPZGy3W
PYQ2RHPuzfwu2imKAVTNS3gVHq47ctpu3J0SzZ7oKu3ccfgHnJ1YKg9P9tKLDy/t
wHqQSnjON1ygiYxEcIg/JVCxqOWNsUCw/ZIALTdAhMKOTXGo/tOPTqSaODjbx2i3
C+W8W3RVLy+d0Aovot2tsgdOGhL/HNUnlcGx4DMZe826wLHeWkKahfOuJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLR/Vjyt/7lhd7y0ug5ZylQjDDdBMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvdEg5V1BLM191V0YzdkxTNkRsbktWQ01NTjBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSXHMA0G
CSqGSIb3DQEBCwUAA4IBAQAJyQUjhiJDfy9lmMunLeXuN4iW018YvkCbJPKHMokP
D4qsVOmOsF9oZMIQHFRQ9P3+RR464B9Ro7UyFFdI3pS7a1FJV6nXdXLnnDYFNU2e
18KG1q38D7WcnDFaMjr1YCvmhi/zRB+xJUaBH02yGLPDoHo3i7W9pq6CRe/WCW5t
pUf42k8XWGjPcFMBoVDSzwNBijH0N7NJoNedrJ1INffjdO1tJiFIUUKbVhbkgcer
s54PItCgmrUSn15YT4pxx/eC7aX1TC+fquIFMWHGwa0t3jDed2UxbyXi2HmwNJpp
E9a9UwEZ81Nr2lGItqIefPQKOgso3O3Exypnh17lI4xR
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:38:40 2025 by rpki-client