Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3u4jvWxX1n_HNZNnQjCTIeE0C7k.roa
File: 3u4jvWxX1n_HNZNnQjCTIeE0C7k.roa (raw, json)
Hash identifier: zuYZuRwMLR6YMUY+RJ+EmNR+fQgHhjoIM1/5D+9yBNA=
Subject key identifier: DE:EE:23:BD:6C:57:D6:7F:C7:35:93:67:42:30:93:21:E1:34:0B:B9
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427485B05D10A0D44A46CC64FA3A42A33
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3u4jvWxX1n_HNZNnQjCTIeE0C7k.roa
Signing time: Thu 02 Jan 2025 13:50:40 +0000
ROA not before: Thu 02 Jan 2025 13:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48803
IP address blocks: 193.183.148.0/22 maxlen: 22
193.183.192.0/22 maxlen: 22
193.183.212.0/22 maxlen: 22
193.183.250.0/23 maxlen: 23
193.234.72.0/22 maxlen: 22
193.234.108.0/22 maxlen: 22
194.68.117.0/24 maxlen: 24
194.132.224.0/22 maxlen: 22
194.132.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5b:05:d1:0a:0d:44:a4:6c:c6:4f:a3:a4:2a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=deee23bd6c57d67fc735936742309321e1340bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:4d:a4:ce:4c:41:2f:b0:d7:23:dc:85:70:
e7:17:22:47:eb:42:c0:48:01:57:46:30:d6:cf:00:
ae:fc:31:16:8d:f1:4b:da:65:fa:95:a3:39:43:b5:
59:03:bc:e7:07:b4:2b:39:8a:a5:f2:b9:54:e7:92:
64:fc:4a:b1:8e:f7:00:2e:c3:5f:7a:09:ad:76:1d:
61:bf:77:1b:59:2d:bf:f3:ad:be:55:7f:d5:81:c3:
05:ce:45:5e:35:21:42:49:34:76:ba:bd:14:12:2e:
69:bd:71:a0:7e:60:54:82:81:c0:12:45:62:75:4c:
90:52:00:75:1a:5f:7e:af:09:ba:39:97:dc:ff:82:
3d:7e:22:c9:d6:84:f1:de:79:61:e0:9f:0a:b8:bf:
b3:6f:b3:38:ec:43:cf:13:c0:22:59:08:bd:05:26:
69:f4:a0:7f:68:6a:17:89:dc:42:4d:5c:30:b5:e0:
92:21:76:7e:78:6a:c1:f6:80:91:41:1f:94:6d:db:
bb:6d:1a:af:c9:93:82:c7:8a:20:0b:ea:cf:78:b3:
9a:c8:18:84:48:94:2a:27:7a:b9:c3:37:72:d8:5c:
46:80:0b:9d:f4:f4:4a:2c:77:88:fc:8e:0e:b7:4a:
f6:bb:17:41:5c:42:1d:88:11:ad:49:9c:fa:a1:42:
b3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EE:23:BD:6C:57:D6:7F:C7:35:93:67:42:30:93:21:E1:34:0B:B9
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3u4jvWxX1n_HNZNnQjCTIeE0C7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.148.0/22
193.183.192.0/22
193.183.212.0/22
193.183.250.0/23
193.234.72.0/22
193.234.108.0/22
194.68.117.0/24
194.132.224.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:40:92:46:15:0f:4c:25:59:63:0f:09:75:10:51:72:73:e8:
6c:9e:b6:60:53:ab:c6:ac:66:f0:6b:a0:43:e3:de:34:65:37:
46:de:05:55:2b:10:24:7b:a6:7e:f7:7d:29:da:91:8f:f2:4f:
2e:f4:bd:36:47:2e:07:53:81:4b:f1:ad:92:99:62:3e:13:89:
9a:b4:55:85:30:59:b8:bc:3a:c9:99:4a:09:d2:3d:c4:14:c4:
b4:51:10:7a:24:79:d9:72:d6:d4:b4:d2:ea:59:b1:e4:4f:0b:
2d:9e:48:8c:e9:33:74:fb:bc:b4:54:89:1d:b1:ee:5d:e6:c6:
c8:4d:31:c5:5e:67:76:2f:4b:f2:fe:5e:6a:c8:f5:ac:dc:d7:
80:d0:c3:76:cc:13:a0:03:a3:ad:45:aa:ef:40:22:1c:66:fc:
0c:04:3e:f8:6f:27:a7:b1:43:39:17:3d:51:5e:97:37:88:7d:
4b:cc:02:97:97:4f:89:72:75:86:98:7d:82:68:9b:19:a9:7b:
43:9f:20:3a:83:37:1f:8d:76:6b:ef:c1:99:3e:59:b9:c8:04:
84:ba:f9:fb:11:77:c0:85:b2:6a:82:db:e8:95:b2:02:cd:14:
6f:33:70:57:27:19:4c:ff:95:71:02:61:ef:89:aa:33:58:3e:
62:21:f1:f1
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZQnSFsF0QoNRKRsxk+jpCozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMTAyMTM1MDQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWVlMjNiZDZjNTdkNjdmYzczNTkzNjc0MjMwOTMyMWUxMzQwYmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnglNpM5MQS+w1yPchXDnFyJH60LA
SAFXRjDWzwCu/DEWjfFL2mX6laM5Q7VZA7znB7QrOYql8rlU55Jk/EqxjvcALsNf
egmtdh1hv3cbWS2/862+VX/VgcMFzkVeNSFCSTR2ur0UEi5pvXGgfmBUgoHAEkVi
dUyQUgB1Gl9+rwm6OZfc/4I9fiLJ1oTx3nlh4J8KuL+zb7M47EPPE8AiWQi9BSZp
9KB/aGoXidxCTVwwteCSIXZ+eGrB9oCRQR+Ubdu7bRqvyZOCx4ogC+rPeLOayBiE
SJQqJ3q5wzdy2FxGgAud9PRKLHeI/I4Ot0r2uxdBXEIdiBGtSZz6oUKz3QIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFN7uI71sV9Z/xzWTZ0IwkyHhNAu5MB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvM3U0anZXeFgxbl9ITlpOblFqQ1RJZUUwQzdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCwbeUAwQC
wbfAAwQCwbfUAwQBwbf6AwQCwepIAwQCwepsAwQAwkR1AwQDwoTgMA0GCSqGSIb3
DQEBCwUAA4IBAQAqQJJGFQ9MJVljDwl1EFFyc+hsnrZgU6vGrGbwa6BD4940ZTdG
3gVVKxAke6Z+930p2pGP8k8u9L02Ry4HU4FL8a2SmWI+E4matFWFMFm4vDrJmUoJ
0j3EFMS0URB6JHnZctbUtNLqWbHkTwstnkiM6TN0+7y0VIkdse5d5sbITTHFXmd2
L0vy/l5qyPWs3NeA0MN2zBOgA6OtRarvQCIcZvwMBD74byensUM5Fz1RXpc3iH1L
zAKXl0+JcnWGmH2CaJsZqXtDnyA6gzcfjXZr78GZPlm5yASEuvn7EXfAhbJqgtvo
lbICzRRvM3BXJxlM/5VxAmHviaozWD5iIfHx
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:36 2025 by rpki-client