Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/n7oiIAJ3HiRbiimrW8pvlbU2qKc.roa
File: n7oiIAJ3HiRbiimrW8pvlbU2qKc.roa (raw, json)
Hash identifier: BVAB8ks2xA7n8Svk0EK9ms/Hip5r3WliuXM/g6wKlto=
Subject key identifier: 9F:BA:22:20:02:77:1E:24:5B:8A:29:AB:5B:CA:6F:95:B5:36:A8:A7
Certificate issuer: /CN=ee0581767af4579e44da977b1082d94b3c7b9298
Certificate serial: 019427470FCB311C3705A0B628AAD35254DD
Authority key identifier: EE:05:81:76:7A:F4:57:9E:44:DA:97:7B:10:82:D9:4B:3C:7B:92:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gWBdnr0V55E2pd7EILZSzx7kpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/n7oiIAJ3HiRbiimrW8pvlbU2qKc.roa
Signing time: Thu 02 Jan 2025 13:49:16 +0000
ROA not before: Thu 02 Jan 2025 13:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6453
IP address blocks: 193.105.119.0/24 maxlen: 24
195.85.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:0f:cb:31:1c:37:05:a0:b6:28:aa:d3:52:54:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0581767af4579e44da977b1082d94b3c7b9298
Validity
Not Before: Jan 2 13:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fba222002771e245b8a29ab5bca6f95b536a8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b5:76:d7:06:ed:bb:28:4a:b8:54:de:e2:41:
66:83:75:92:dd:bd:42:9c:02:fb:a1:41:16:40:2b:
0b:7f:b4:eb:18:ef:42:4c:f2:73:7e:ca:8d:90:68:
8b:dd:92:61:14:34:8e:c4:53:db:a7:7c:0e:7c:1c:
fd:2b:44:01:53:f3:d0:a2:13:08:17:c9:0f:45:e9:
6c:b6:89:70:71:d6:00:6a:fe:6a:1e:52:6a:2c:d3:
ba:1d:7a:b1:7d:fa:85:64:8e:25:54:9a:2c:6d:f0:
64:08:b8:e1:64:b1:1b:a6:2e:24:8e:b6:ba:ea:63:
81:a2:f2:ee:62:25:bb:13:fa:16:e3:1b:95:3b:d5:
e3:e0:9a:0c:0f:55:b4:2e:60:94:af:1f:27:7f:0a:
64:d5:40:6b:9a:32:47:34:bb:ba:9d:cb:d1:c1:cf:
5c:29:df:e4:57:e5:5d:5e:a9:d7:d4:e9:70:57:83:
a4:2e:65:f7:87:ee:c2:93:ca:d3:9d:b8:6e:ce:73:
d4:1f:4c:53:6e:ee:1b:6c:8e:c2:06:2e:46:5f:94:
44:e3:00:16:b4:c0:8f:f8:12:fb:74:2f:7f:87:4d:
4e:dc:09:5f:a7:4e:1a:62:91:ec:aa:4a:4b:ba:21:
a3:57:ac:46:31:7d:2e:e5:f6:d0:d1:02:e4:53:0c:
ac:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BA:22:20:02:77:1E:24:5B:8A:29:AB:5B:CA:6F:95:B5:36:A8:A7
X509v3 Authority Key Identifier:
keyid:EE:05:81:76:7A:F4:57:9E:44:DA:97:7B:10:82:D9:4B:3C:7B:92:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gWBdnr0V55E2pd7EILZSzx7kpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/n7oiIAJ3HiRbiimrW8pvlbU2qKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/7gWBdnr0V55E2pd7EILZSzx7kpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.119.0/24
195.85.224.0/24
Signature Algorithm: sha256WithRSAEncryption
10:d8:dd:6f:0a:cb:70:48:5c:e8:46:56:4a:69:bf:f6:fe:1a:
c2:e7:eb:ff:e5:c9:c9:8a:f7:f8:23:a1:b0:d2:e7:70:57:1b:
80:5d:77:64:5d:7d:2b:bb:eb:a4:cd:c0:e0:56:6d:7f:2c:d0:
77:fd:03:b3:2c:32:ef:a5:d6:75:67:fb:6e:74:f1:50:c5:1c:
31:ed:3d:10:51:e7:a9:a6:81:12:1d:1a:db:e7:85:7e:9d:e9:
5d:09:6b:83:ba:bd:4a:cc:77:f3:e9:2e:32:86:f0:ad:76:fa:
7e:b9:f6:ce:20:05:da:f3:14:46:ea:53:92:43:5a:71:62:cc:
f6:3e:de:5f:6d:d0:fa:af:52:cc:8d:02:32:4f:e0:62:7f:24:
85:1d:81:ee:c3:d4:a9:17:4b:8d:76:8c:52:c7:c1:f6:b4:3c:
6c:5b:7f:d0:d3:44:be:89:de:c0:74:53:fc:33:35:9f:30:46:
43:a1:67:c5:38:00:7e:e7:bb:1e:34:88:e7:8f:4a:3a:0d:01:
04:79:3e:4b:f9:53:a0:e8:d3:07:b8:30:41:04:47:f0:9a:45:
7d:dc:49:ab:87:72:48:d0:3b:bf:d8:b8:3e:40:62:90:a4:54:
69:cd:b8:ee:41:73:c4:cf:a4:fc:c3:e4:11:89:dd:40:cf:fb:
fc:ca:f7:76
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQnRw/LMRw3BaC2KKrTUlTdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDU4MTc2N2FmNDU3OWU0NGRhOTc3YjEwODJkOTRiM2M3
YjkyOTgwHhcNMjUwMTAyMTM0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmJhMjIyMDAyNzcxZTI0NWI4YTI5YWI1YmNhNmY5NWI1MzZhOGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07V21wbtuyhKuFTe4kFmg3WS3b1C
nAL7oUEWQCsLf7TrGO9CTPJzfsqNkGiL3ZJhFDSOxFPbp3wOfBz9K0QBU/PQohMI
F8kPRelstolwcdYAav5qHlJqLNO6HXqxffqFZI4lVJosbfBkCLjhZLEbpi4kjra6
6mOBovLuYiW7E/oW4xuVO9Xj4JoMD1W0LmCUrx8nfwpk1UBrmjJHNLu6ncvRwc9c
Kd/kV+VdXqnX1OlwV4OkLmX3h+7Ck8rTnbhuznPUH0xTbu4bbI7CBi5GX5RE4wAW
tMCP+BL7dC9/h01O3Alfp04aYpHsqkpLuiGjV6xGMX0u5fbQ0QLkUwysLwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ+6IiACdx4kW4opq1vKb5W1NqinMB8GA1UdIwQY
MBaAFO4FgXZ69FeeRNqXexCC2Us8e5KYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dXQmRucjBWNTVFMnBkN0VJTFpTeng3a3BnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wYjhmMTEtYTAxMS00NzY0LWJjZjMt
NmRiYmEyYjFkY2E3LzEvbjdvaUlBSjNIaVJiaWltclc4cHZsYlUycUtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8wYjhmMTEtYTAxMS00NzY0LWJjZjMtNmRiYmEyYjFkY2E3
LzEvN2dXQmRucjBWNTVFMnBkN0VJTFpTeng3a3BnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwWl3AwQA
w1XgMA0GCSqGSIb3DQEBCwUAA4IBAQAQ2N1vCstwSFzoRlZKab/2/hrC5+v/5cnJ
ivf4I6Gw0udwVxuAXXdkXX0ru+ukzcDgVm1/LNB3/QOzLDLvpdZ1Z/tudPFQxRwx
7T0QUeeppoESHRrb54V+neldCWuDur1KzHfz6S4yhvCtdvp+ufbOIAXa8xRG6lOS
Q1pxYsz2Pt5fbdD6r1LMjQIyT+BifySFHYHuw9SpF0uNdoxSx8H2tDxsW3/Q00S+
id7AdFP8MzWfMEZDoWfFOAB+57seNIjnj0o6DQEEeT5L+VOg6NMHuDBBBEfwmkV9
3Emrh3JI0Du/2Lg+QGKQpFRpzbjuQXPEz6T8w+QRid1Az/v8yvd2
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:31 2025 by rpki-client