Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/uq0Ty9FTaErs0rzB7yOaaIcCy9E.roa
File: uq0Ty9FTaErs0rzB7yOaaIcCy9E.roa (raw, json)
Hash identifier: cH522XBAhZQR4is+g9SDDOs+Uj5P/+RJANdH54+jdMM=
Subject key identifier: BA:AD:13:CB:D1:53:68:4A:EC:D2:BC:C1:EF:23:9A:68:87:02:CB:D1
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 01941FFAA09BAE0D243BDC85088B1A4B97DB
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/uq0Ty9FTaErs0rzB7yOaaIcCy9E.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30781
IP address blocks: 193.200.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a0:9b:ae:0d:24:3b:dc:85:08:8b:1a:4b:97:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baad13cbd153684aecd2bcc1ef239a688702cbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:e7:b6:dd:f9:f6:5b:ac:0a:a7:c8:3a:95:
8b:2a:50:90:97:75:d8:8c:74:82:f6:a1:7d:40:9c:
20:f4:a3:36:50:f7:71:c9:f5:77:16:3b:0f:73:c1:
0d:b5:3d:91:dd:a4:0a:e0:de:eb:ef:5b:2a:10:3d:
db:8b:93:96:02:85:e4:65:c2:ca:9d:32:9b:11:56:
8c:d4:08:d8:d8:5b:54:09:e0:be:22:78:f6:1b:3e:
85:f4:36:d4:64:7b:8d:c2:2a:da:ab:40:41:21:e7:
21:46:c3:41:7b:83:09:a3:c5:a4:b6:2a:b4:fb:c6:
0a:d9:18:c6:33:04:3f:e2:b7:2d:2f:ba:f5:29:ba:
ee:ec:5f:82:ba:65:b1:ce:f7:c1:27:1f:ae:2c:56:
ee:da:d1:88:47:3f:88:e8:dc:27:b8:ec:35:a0:15:
17:45:93:75:47:32:f4:c8:b5:f9:c3:71:80:3c:0d:
93:9b:b2:1c:84:14:d2:28:29:f0:95:c0:c7:86:c7:
7c:9f:64:8f:6a:24:c0:1b:e2:f1:59:5f:0d:1e:4c:
a8:ea:14:60:7a:2a:3b:c9:fa:d5:af:90:6b:04:d3:
55:ed:90:5c:bb:20:28:69:8e:28:bf:80:00:27:19:
cc:3f:f7:f9:3c:6f:c0:f1:1e:62:29:04:52:a8:e7:
32:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AD:13:CB:D1:53:68:4A:EC:D2:BC:C1:EF:23:9A:68:87:02:CB:D1
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/uq0Ty9FTaErs0rzB7yOaaIcCy9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.60.0/24
Signature Algorithm: sha256WithRSAEncryption
73:19:1a:99:57:69:a4:67:00:9e:fb:11:0f:be:78:f3:79:bc:
2b:9d:ea:b5:0a:b4:80:40:1b:6a:1e:73:ed:73:a6:9d:3b:e6:
6f:ad:6a:08:10:74:ef:a6:97:98:0a:55:ba:50:ec:02:de:b4:
2a:9e:95:83:e4:ed:ba:a4:21:14:4f:ac:3b:f5:c6:65:da:85:
f1:4f:7f:ac:6e:1b:a7:eb:b0:e0:bd:52:68:ea:53:90:fc:0c:
88:5e:d1:c7:4d:ab:73:09:b9:4a:18:b8:3e:13:02:d5:0c:0a:
5a:e4:68:f0:fa:48:62:72:88:6e:34:0c:ed:27:dd:28:44:e1:
c6:cd:7c:cf:75:44:38:23:5f:ce:5d:1a:a7:c4:85:a6:b8:8f:
34:f2:a8:48:e1:a7:01:df:57:9c:78:3a:a4:02:53:7c:ba:8c:
98:00:fd:c1:24:ce:ea:88:a4:90:7a:5a:42:7c:7e:83:9c:0d:
40:a4:cd:ce:9c:fc:bf:51:fa:a7:82:33:06:ff:70:1a:23:7a:
91:72:7d:4d:8c:b1:4a:0e:a5:ce:69:1a:e3:36:02:27:f7:ce:
c2:89:17:f2:6d:a9:ed:16:09:76:33:8d:60:58:4d:31:fa:79:
38:df:c1:66:c6:09:85:b8:b5:a1:68:a7:3c:5b:d7:94:ba:1a:
b8:02:70:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+qCbrg0kO9yFCIsaS5fbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjkzMDg1YjVmNzVjMGYxMGRlMDhlMjJjYmU0YjA2MjQ1
MWIxNTAwHhcNMjUwMTAxMDM0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWFkMTNjYmQxNTM2ODRhZWNkMmJjYzFlZjIzOWE2ODg3MDJjYmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnXntt359lusCqfIOpWLKlCQl3XY
jHSC9qF9QJwg9KM2UPdxyfV3FjsPc8ENtT2R3aQK4N7r71sqED3bi5OWAoXkZcLK
nTKbEVaM1AjY2FtUCeC+Inj2Gz6F9DbUZHuNwiraq0BBIechRsNBe4MJo8Wktiq0
+8YK2RjGMwQ/4rctL7r1Kbru7F+CumWxzvfBJx+uLFbu2tGIRz+I6NwnuOw1oBUX
RZN1RzL0yLX5w3GAPA2Tm7IchBTSKCnwlcDHhsd8n2SPaiTAG+LxWV8NHkyo6hRg
eio7yfrVr5BrBNNV7ZBcuyAoaY4ov4AAJxnMP/f5PG/A8R5iKQRSqOcyLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLqtE8vRU2hK7NK8we8jmmiHAsvRMB8GA1UdIwQY
MBaAFPJpMIW191wPEN4I4iy+SwYkUbFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNzMzMjctOTc0Mi00MzViLTg2YzAt
NTVlODVlYTA5ZGRlLzEvdXEwVHk5RlRhRXJzMHJ6Qjd5T2FhSWNDeTlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xNzMzMjctOTc0Mi00MzViLTg2YzAtNTVlODVlYTA5ZGRl
LzEvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcg8MA0G
CSqGSIb3DQEBCwUAA4IBAQBzGRqZV2mkZwCe+xEPvnjzebwrneq1CrSAQBtqHnPt
c6adO+ZvrWoIEHTvppeYClW6UOwC3rQqnpWD5O26pCEUT6w79cZl2oXxT3+sbhun
67DgvVJo6lOQ/AyIXtHHTatzCblKGLg+EwLVDApa5Gjw+khicohuNAztJ90oROHG
zXzPdUQ4I1/OXRqnxIWmuI808qhI4acB31eceDqkAlN8uoyYAP3BJM7qiKSQelpC
fH6DnA1ApM3OnPy/UfqngjMG/3AaI3qRcn1NjLFKDqXOaRrjNgIn987CiRfybant
Fgl2M41gWE0x+nk438FmxgmFuLWhaKc8W9eUuhq4AnDW
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:21:44 2025 by rpki-client