Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/n0dC6ICu6DU9CgyLOBlhS-gy2jw.roa
File: n0dC6ICu6DU9CgyLOBlhS-gy2jw.roa (raw, json)
Hash identifier: IHvuJheLhS7xUqqudnNofqMQ2OT0YTvKs7eDHh5Lp14=
Subject key identifier: 9F:47:42:E8:80:AE:E8:35:3D:0A:0C:8B:38:19:61:4B:E8:32:DA:3C
Certificate issuer: /CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Certificate serial: 019155640098A1CF8C70184B6BA6D4C0F0BF
Authority key identifier: 66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/n0dC6ICu6DU9CgyLOBlhS-gy2jw.roa
Signing time: Thu 15 Aug 2024 09:35:02 +0000
ROA not before: Thu 15 Aug 2024 09:35:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206599
IP address blocks: 193.108.68.0/24 maxlen: 24
193.108.69.0/24 maxlen: 24
194.69.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:64:00:98:a1:cf:8c:70:18:4b:6b:a6:d4:c0:f0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Validity
Not Before: Aug 15 09:35:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f4742e880aee8353d0a0c8b3819614be832da3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fc:61:30:73:f2:84:04:a2:d5:47:6d:8f:a1:
84:6c:0d:64:a6:37:2d:4b:46:50:81:b7:d0:31:1b:
56:07:bc:e1:1b:73:de:f3:46:dd:45:c6:d2:fe:de:
b7:14:2d:08:4e:c7:2f:a4:56:c2:4b:eb:b2:5a:5d:
e0:1f:02:74:14:57:96:3f:cf:20:94:57:72:e1:21:
6f:c8:14:9e:ea:42:fa:68:96:9a:99:42:57:04:25:
2f:96:a3:d9:63:8b:26:d4:3a:88:35:02:6f:d5:68:
a5:54:c4:0a:5e:cd:ba:18:ff:3b:ee:ef:be:20:e2:
9d:cd:62:7f:d2:7d:8a:a2:4a:0c:57:c6:2a:19:ef:
8c:73:68:1c:74:d3:df:50:bd:9c:f6:4d:32:89:0c:
78:25:53:3e:07:2b:12:a3:45:0b:e9:84:ae:0f:5c:
5f:de:60:32:d1:a5:27:93:2b:19:4b:4b:af:b7:29:
fd:16:01:88:0f:fe:23:c1:7c:88:8f:3b:75:b3:4c:
2f:cb:ba:26:55:95:f8:96:90:b5:e2:f6:a7:7c:cb:
f7:ca:3e:88:ee:13:f2:24:33:46:13:9d:97:7e:22:
fc:c4:02:32:6d:75:e4:a4:67:1c:5c:6b:be:10:b3:
7f:4a:60:3a:5b:fb:b6:83:56:97:25:e1:31:9e:6c:
d8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:47:42:E8:80:AE:E8:35:3D:0A:0C:8B:38:19:61:4B:E8:32:DA:3C
X509v3 Authority Key Identifier:
keyid:66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/n0dC6ICu6DU9CgyLOBlhS-gy2jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.68.0/23
194.69.168.0/24
Signature Algorithm: sha256WithRSAEncryption
63:0d:c0:f1:f8:3d:21:d6:08:a0:48:3b:05:cb:13:87:d1:fd:
9d:3d:da:74:e8:c8:2d:4b:bb:e4:cb:55:fc:7d:7b:3a:68:6d:
c3:a6:51:b4:90:fe:b7:28:30:b9:43:f6:ac:db:b6:3b:28:fd:
c0:79:61:82:79:d2:59:d8:df:04:07:49:3e:ca:65:4a:a0:f7:
e4:8c:7e:10:f6:bb:90:20:bb:4b:79:cc:0b:30:56:09:69:6e:
5f:1a:c4:59:09:97:f9:f3:8b:9d:bf:d6:ac:f0:49:11:05:89:
b8:d2:1b:26:ea:16:ec:9f:9a:f7:ac:e6:82:3d:e6:22:48:9e:
d4:c0:1e:84:dd:6a:6f:ce:2f:69:36:a7:8a:8f:b4:21:00:5c:
a8:01:53:25:26:5a:23:3d:06:f7:c0:9b:87:07:4f:3d:d4:f8:
29:fc:45:c0:15:e4:99:16:70:c7:81:22:87:39:fd:71:9d:06:
d2:87:2f:d3:00:02:90:e1:a4:35:69:c3:a5:2e:ff:ca:3d:4a:
71:76:a3:8b:be:2e:dc:9d:be:d1:4b:1f:14:87:e0:e8:09:88:
88:e2:52:07:5a:b0:0d:2e:db:60:2e:a2:0b:a4:63:5a:a2:52:
ab:59:e2:5c:5e:f6:21:ed:28:d0:ba:a7:60:7f:2b:25:ae:02:
71:9f:82:24
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZFVZACYoc+McBhLa6bUwPC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NDc4OTI0MzcxNjBkZDU3NzdlZDNlZDc4ZDQ5YmM3MmI1
ZTFjNWUwHhcNMjQwODE1MDkzNTAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjQ3NDJlODgwYWVlODM1M2QwYTBjOGIzODE5NjE0YmU4MzJkYTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PxhMHPyhASi1Udtj6GEbA1kpjct
S0ZQgbfQMRtWB7zhG3Pe80bdRcbS/t63FC0ITscvpFbCS+uyWl3gHwJ0FFeWP88g
lFdy4SFvyBSe6kL6aJaamUJXBCUvlqPZY4sm1DqINQJv1WilVMQKXs26GP877u++
IOKdzWJ/0n2KokoMV8YqGe+Mc2gcdNPfUL2c9k0yiQx4JVM+BysSo0UL6YSuD1xf
3mAy0aUnkysZS0uvtyn9FgGID/4jwXyIjzt1s0wvy7omVZX4lpC14vanfMv3yj6I
7hPyJDNGE52XfiL8xAIybXXkpGccXGu+ELN/SmA6W/u2g1aXJeExnmzYzQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ9HQuiArug1PQoMizgZYUvoMto8MB8GA1UdIwQY
MBaAFGZHiSQ3Fg3Vd37T7XjUm8crXhxeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmtlSkpEY1dEZFYzZnRQdGVOU2J4eXRlSEY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xOTExOGMtYWU2MC00OGUzLWEwMzIt
ZjhhZjU2ODU2M2U0LzEvbjBkQzZJQ3U2RFU5Q2d5TE9CbGhTLWd5Mmp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xOTExOGMtYWU2MC00OGUzLWEwMzItZjhhZjU2ODU2M2U0
LzEvWmtlSkpEY1dEZFYzZnRQdGVOU2J4eXRlSEY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwWxEAwQA
wkWoMA0GCSqGSIb3DQEBCwUAA4IBAQBjDcDx+D0h1gigSDsFyxOH0f2dPdp06Mgt
S7vky1X8fXs6aG3DplG0kP63KDC5Q/as27Y7KP3AeWGCedJZ2N8EB0k+ymVKoPfk
jH4Q9ruQILtLecwLMFYJaW5fGsRZCZf584udv9as8EkRBYm40hsm6hbsn5r3rOaC
PeYiSJ7UwB6E3Wpvzi9pNqeKj7QhAFyoAVMlJlojPQb3wJuHB0891Pgp/EXAFeSZ
FnDHgSKHOf1xnQbShy/TAAKQ4aQ1acOlLv/KPUpxdqOLvi7cnb7RSx8Uh+DoCYiI
4lIHWrANLttgLqILpGNaolKrWeJcXvYh7SjQuqdgfyslrgJxn4Ik
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:41:21 2025 by rpki-client