Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/fTOQFI1UvSwnT9wznNbLZs3UG2U.roa
File: fTOQFI1UvSwnT9wznNbLZs3UG2U.roa (raw, json)
Hash identifier: L/h45q4tkE5FoRZ0DX9ltIgAYeRk4jVnxVfoOe4XvCw=
Subject key identifier: 7D:33:90:14:8D:54:BD:2C:27:4F:DC:33:9C:D6:CB:66:CD:D4:1B:65
Certificate issuer: /CN=e24bc2870de2599daf66497f5729c74b33ef993a
Certificate serial: 01942143D96D3B85AB7BC001C5EFE8627CD9
Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/fTOQFI1UvSwnT9wznNbLZs3UG2U.roa
Signing time: Wed 01 Jan 2025 09:48:02 +0000
ROA not before: Wed 01 Jan 2025 09:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 193.178.185.0/24 maxlen: 24
2001:7f8:19::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d9:6d:3b:85:ab:7b:c0:01:c5:ef:e8:62:7c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a
Validity
Not Before: Jan 1 09:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d3390148d54bd2c274fdc339cd6cb66cdd41b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:b0:63:35:61:26:e7:fa:b6:a1:86:59:8e:
7c:f7:59:ee:0c:d2:67:fb:03:00:54:2c:45:76:67:
3c:27:ea:73:42:d3:8a:63:92:ce:de:ff:f9:27:b1:
e1:e8:50:be:08:aa:f0:91:1d:e8:bc:38:16:81:17:
60:86:29:1e:e3:d0:24:c0:82:bf:b7:c5:6d:87:34:
28:e6:cb:3b:1e:19:49:de:7e:34:35:4d:0e:5d:61:
ab:4b:50:f9:be:ec:97:26:8c:e5:06:33:c3:fe:8e:
e6:d0:55:ac:f6:62:29:d8:c5:b6:db:1e:60:d9:8d:
7f:ff:72:51:3e:fb:d4:1a:5a:cb:da:16:a0:c2:b3:
de:6a:e9:e2:6f:90:a4:a2:d7:a8:6e:75:c5:82:72:
d1:04:02:54:9b:59:5d:73:22:5a:8a:61:4f:63:14:
77:15:31:86:6e:25:39:e1:e3:ab:41:08:86:a1:96:
00:9a:d4:a2:3b:91:3b:3c:f5:5d:6d:ba:1b:66:50:
49:c4:1d:55:e6:fc:73:3d:5f:c1:e7:84:84:19:d5:
a3:e2:66:3d:28:cf:52:1c:31:ec:ee:0b:25:fe:01:
df:10:99:3a:08:73:2c:3d:ab:f6:6c:f6:b1:23:1c:
72:f2:f5:cc:17:ee:45:56:dc:1c:d3:a9:51:f1:fe:
4c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:33:90:14:8D:54:BD:2C:27:4F:DC:33:9C:D6:CB:66:CD:D4:1B:65
X509v3 Authority Key Identifier:
keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/fTOQFI1UvSwnT9wznNbLZs3UG2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.185.0/24
IPv6:
2001:7f8:19::/48
Signature Algorithm: sha256WithRSAEncryption
63:1a:84:4b:93:9d:49:94:bd:68:b5:cb:63:6c:34:d7:a1:5d:
13:90:10:09:98:33:a9:ff:09:c0:9b:2f:98:7b:3e:c6:8f:70:
75:2a:ca:f4:8b:5e:a0:e1:f8:a3:43:9c:2d:df:65:fb:70:22:
0f:47:0f:6f:57:63:ff:68:ee:24:ff:03:64:14:ee:b9:dd:54:
5a:85:39:7f:11:e1:45:00:1a:3a:bd:05:e1:b2:3c:42:54:fe:
7c:c1:35:05:74:95:4d:d9:32:d5:27:32:bf:27:9c:4b:11:1f:
0d:ac:d0:db:dd:72:a1:ad:53:2b:64:a4:58:1e:68:e7:6c:e1:
d1:89:c9:b3:97:21:22:24:bb:9e:1d:f2:3a:ed:1d:37:c7:26:
b4:72:ec:40:7d:54:39:22:7a:4a:81:5b:59:81:64:f2:6e:da:
cf:4a:54:14:fb:bf:00:d1:f8:9b:91:a6:b6:2a:26:e5:d8:04:
12:15:65:19:2b:ca:e0:0f:55:a2:3d:4d:6d:02:ad:f7:3a:e1:
e4:5d:11:86:23:1c:bc:a5:33:1b:0b:a3:04:5e:94:ba:a8:ea:
8a:9c:c6:50:3d:70:93:bb:2f:19:72:d6:d9:fa:8f:4b:5f:8d:
ab:a5:6d:fb:4a:1a:cd:61:da:8f:ff:3e:d9:93:f2:a4:57:e3:
c6:1b:c2:55
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQhQ9ltO4Wre8ABxe/oYnzZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNGJjMjg3MGRlMjU5OWRhZjY2NDk3ZjU3MjljNzRiMzNl
Zjk5M2EwHhcNMjUwMTAxMDk0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDMzOTAxNDhkNTRiZDJjMjc0ZmRjMzM5Y2Q2Y2I2NmNkZDQxYjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG+wYzVhJuf6tqGGWY5891nuDNJn
+wMAVCxFdmc8J+pzQtOKY5LO3v/5J7Hh6FC+CKrwkR3ovDgWgRdghike49AkwIK/
t8VthzQo5ss7HhlJ3n40NU0OXWGrS1D5vuyXJozlBjPD/o7m0FWs9mIp2MW22x5g
2Y1//3JRPvvUGlrL2hagwrPeaunib5CkoteobnXFgnLRBAJUm1ldcyJaimFPYxR3
FTGGbiU54eOrQQiGoZYAmtSiO5E7PPVdbbobZlBJxB1V5vxzPV/B54SEGdWj4mY9
KM9SHDHs7gsl/gHfEJk6CHMsPav2bPaxIxxy8vXMF+5FVtwc06lR8f5MmwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH0zkBSNVL0sJ0/cM5zWy2bN1BtlMB8GA1UdIwQY
MBaAFOJLwocN4lmdr2ZJf1cpx0sz75k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGt2Q2h3M2lXWjJ2WmtsX1Z5bkhTelB2bVRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iZTE3MjAtODAxZS00ZjllLWE1YzEt
NjhhMmYwYmI1YjdhLzEvZlRPUUZJMVV2U3duVDl3em5OYkxaczNVRzJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9iZTE3MjAtODAxZS00ZjllLWE1YzEtNjhhMmYwYmI1Yjdh
LzEvNGt2Q2h3M2lXWjJ2WmtsX1Z5bkhTelB2bVRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwbK5MA8E
AgACMAkDBwAgAQf4ABkwDQYJKoZIhvcNAQELBQADggEBAGMahEuTnUmUvWi1y2Ns
NNehXROQEAmYM6n/CcCbL5h7PsaPcHUqyvSLXqDh+KNDnC3fZftwIg9HD29XY/9o
7iT/A2QU7rndVFqFOX8R4UUAGjq9BeGyPEJU/nzBNQV0lU3ZMtUnMr8nnEsRHw2s
0NvdcqGtUytkpFgeaOds4dGJybOXISIku54d8jrtHTfHJrRy7EB9VDkiekqBW1mB
ZPJu2s9KVBT7vwDR+JuRprYqJuXYBBIVZRkryuAPVaI9TW0Crfc64eRdEYYjHLyl
MxsLowRelLqo6oqcxlA9cJO7Lxly1tn6j0tfjaulbftKGs1h2o//PtmT8qRX48Yb
wlU=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:28:01 2025 by rpki-client