Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/rDcpoyvrVBT_cWdGmT4H-hyPLg0.roa
File: rDcpoyvrVBT_cWdGmT4H-hyPLg0.roa (raw, json)
Hash identifier: ZIVMbBVJwlrHJ75Ki0ODTTpJ9+ylEgTfPq67Cig5C+s=
Subject key identifier: AC:37:29:A3:2B:EB:54:14:FF:71:67:46:99:3E:07:FA:1C:8F:2E:0D
Certificate issuer: /CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
Certificate serial: 0194206877DA3690B53487A05F950F6DEA8E
Authority key identifier: 78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/rDcpoyvrVBT_cWdGmT4H-hyPLg0.roa
Signing time: Wed 01 Jan 2025 05:48:24 +0000
ROA not before: Wed 01 Jan 2025 05:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15962
IP address blocks: 193.193.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:77:da:36:90:b5:34:87:a0:5f:95:0f:6d:ea:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
Validity
Not Before: Jan 1 05:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac3729a32beb5414ff716746993e07fa1c8f2e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:6a:71:2c:ed:40:46:0c:5a:36:e1:e9:ce:
b5:a2:fc:25:68:2c:3e:59:90:e9:25:15:94:9a:4c:
21:29:16:d9:c2:0f:11:9e:38:7a:67:de:a2:43:2a:
b9:54:67:01:31:50:45:4a:0a:f2:16:4c:8f:55:12:
63:85:39:e3:b1:1e:f1:35:ca:1b:31:72:68:83:cd:
a5:11:f1:50:a2:37:ff:92:24:0a:f6:c2:33:7f:76:
9d:eb:a9:e5:eb:1f:33:70:cd:c4:1b:11:3e:9a:b4:
96:d8:0c:05:4c:1e:2b:fd:b7:3a:68:e9:53:ef:ee:
5d:8e:c5:9a:7c:82:3a:b1:1c:71:55:a3:88:1c:a0:
bf:81:43:03:e5:13:ec:25:ca:31:1a:20:2d:21:94:
89:36:66:84:39:81:bc:3b:f1:e5:91:a3:b0:a3:8d:
80:67:fe:3a:e7:64:66:a0:3d:b6:90:1d:a2:b4:be:
6a:8d:3d:88:cc:22:f9:b0:34:09:8b:e8:b4:34:47:
2f:7a:94:0e:7a:b1:42:81:5b:8d:81:30:18:fb:cb:
b5:bc:4d:51:06:4a:3f:fc:96:5e:6a:7f:0e:9e:62:
84:a2:a6:0d:3b:c7:1d:2c:ec:a8:f1:21:a4:e1:a9:
d6:ae:ed:82:19:3d:52:dd:fc:d9:54:28:9b:1d:dc:
b4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:37:29:A3:2B:EB:54:14:FF:71:67:46:99:3E:07:FA:1C:8F:2E:0D
X509v3 Authority Key Identifier:
keyid:78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/rDcpoyvrVBT_cWdGmT4H-hyPLg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.193.170.0/24
Signature Algorithm: sha256WithRSAEncryption
27:1d:e4:08:0b:4d:74:90:2b:e1:b2:42:c1:23:64:68:e4:a1:
53:74:41:6e:aa:7c:8b:8f:a7:ae:21:92:2f:86:55:83:2e:df:
59:7c:f3:8e:62:7e:42:3c:9e:cc:db:34:4a:6d:98:94:56:c7:
36:25:8a:a7:ff:bd:fc:a4:1d:58:dc:4a:c9:9c:e9:e8:3b:3a:
6d:bd:4e:7a:a4:71:e2:1a:10:9f:b6:fe:f0:f0:40:49:3b:4a:
d9:0c:26:17:fa:3d:5e:69:1b:22:33:9b:10:dd:d3:22:e6:23:
d8:ad:57:4e:ea:76:57:03:f9:b0:40:fa:bd:79:dc:9c:fa:aa:
df:7b:c9:fb:9e:52:37:46:cd:79:c3:b6:08:f5:54:e9:75:49:
3d:34:34:48:ec:6c:25:18:f0:0c:f3:44:1e:0d:c7:a6:40:20:
8f:89:51:72:47:75:d3:1f:a8:22:58:95:bd:24:cc:5b:b9:dd:
ab:cd:03:c0:5a:68:a2:7f:33:33:a1:5b:d6:2b:47:58:2d:f2:
60:78:33:b4:2d:41:2a:b8:7e:08:da:ad:5c:d9:bd:2a:49:52:
f2:de:00:0c:ed:7a:f7:3e:3d:65:76:b7:54:af:8a:bf:a5:95:
65:49:07:9e:ef:6b:9f:e5:b7:d5:75:d4:4e:63:78:f5:70:fb:
24:5f:16:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaHfaNpC1NIegX5UPbeqOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YjBiMTlkNTBkNjFhN2UzMzNmM2QzMDBmMTE0OWNlZmRl
N2I2NGYwHhcNMjUwMTAxMDU0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzM3MjlhMzJiZWI1NDE0ZmY3MTY3NDY5OTNlMDdmYTFjOGYyZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskNqcSztQEYMWjbh6c61ovwlaCw+
WZDpJRWUmkwhKRbZwg8Rnjh6Z96iQyq5VGcBMVBFSgryFkyPVRJjhTnjsR7xNcob
MXJog82lEfFQojf/kiQK9sIzf3ad66nl6x8zcM3EGxE+mrSW2AwFTB4r/bc6aOlT
7+5djsWafII6sRxxVaOIHKC/gUMD5RPsJcoxGiAtIZSJNmaEOYG8O/HlkaOwo42A
Z/4652RmoD22kB2itL5qjT2IzCL5sDQJi+i0NEcvepQOerFCgVuNgTAY+8u1vE1R
Bko//JZean8OnmKEoqYNO8cdLOyo8SGk4anWru2CGT1S3fzZVCibHdy0gwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKw3KaMr61QU/3FnRpk+B/ocjy4NMB8GA1UdIwQY
MBaAFHiwsZ1Q1hp+Mz89MA8RSc7957ZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUxDeG5WRFdHbjR6UHowd0R4Rkp6djNudGs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lOGNmYjAtOTU2OC00MTU3LWI4MDIt
ZjBlZDlhMmFiNjU0LzEvckRjcG95dnJWQlRfY1dkR21UNEgtaHlQTGcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lOGNmYjAtOTU2OC00MTU3LWI4MDItZjBlZDlhMmFiNjU0
LzEvZUxDeG5WRFdHbjR6UHowd0R4Rkp6djNudGs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcGqMA0G
CSqGSIb3DQEBCwUAA4IBAQAnHeQIC010kCvhskLBI2Ro5KFTdEFuqnyLj6euIZIv
hlWDLt9ZfPOOYn5CPJ7M2zRKbZiUVsc2JYqn/738pB1Y3ErJnOnoOzptvU56pHHi
GhCftv7w8EBJO0rZDCYX+j1eaRsiM5sQ3dMi5iPYrVdO6nZXA/mwQPq9edyc+qrf
e8n7nlI3Rs15w7YI9VTpdUk9NDRI7GwlGPAM80QeDcemQCCPiVFyR3XTH6giWJW9
JMxbud2rzQPAWmiifzMzoVvWK0dYLfJgeDO0LUEquH4I2q1c2b0qSVLy3gAM7Xr3
Pj1ldrdUr4q/pZVlSQee72uf5bfVddROY3j1cPskXxbO
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:24 2025 by rpki-client