Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BqP8gTtDEV4mU7wR_W9r02oyog0.roa
File: BqP8gTtDEV4mU7wR_W9r02oyog0.roa (raw, json)
Hash identifier: ef4y9Z4sEtYNV/ZCkE2Iat5JYHKMubPgyevSh35tunk=
Subject key identifier: 06:A3:FC:81:3B:43:11:5E:26:53:BC:11:FD:6F:6B:D3:6A:32:A2:0D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAF4B0EC15A2467A621767EFA631AF
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BqP8gTtDEV4mU7wR_W9r02oyog0.roa
Signing time: Sun 01 Jan 2023 10:05:18 +0000
ROA not before: Sun 01 Jan 2023 10:05:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51132
IP address blocks: 193.181.43.0/24 maxlen: 24
193.181.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:f4:b0:ec:15:a2:46:7a:62:17:67:ef:a6:31:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06a3fc813b43115e2653bc11fd6f6bd36a32a20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:56:a1:56:6b:a2:80:06:44:4e:18:bd:be:
58:77:94:b4:8f:81:b6:be:29:88:0e:51:ea:04:4a:
4b:80:ac:60:06:1c:1a:b7:34:00:e7:e1:2e:7c:60:
2e:dd:07:98:74:0f:be:4f:0c:9a:14:02:f2:3d:ab:
c8:32:ab:02:2b:aa:38:e1:99:b3:67:9c:68:3d:02:
73:9d:5e:7f:7f:c9:91:70:1f:81:51:7a:e7:67:ec:
fb:11:82:eb:76:00:be:62:fa:a8:d2:bf:08:58:99:
02:52:5c:8e:29:42:8e:21:79:f1:7a:02:d9:ca:7e:
bf:ef:de:4f:f7:6e:09:fd:33:79:ac:93:98:39:09:
d5:7e:04:d5:63:03:dc:7f:be:01:81:59:5a:13:38:
73:1f:b4:54:29:6b:80:c3:42:bd:ba:94:03:d7:71:
e5:fc:cc:5f:2f:7a:a1:43:e3:93:f3:bb:04:5f:5f:
b9:d5:bb:68:1d:3c:e2:91:83:7e:12:97:cd:f3:fc:
67:f8:67:6c:e2:96:88:3b:44:69:d5:a8:f2:fc:5d:
4f:b4:de:8b:42:8d:7a:38:e4:26:56:2d:56:f5:38:
66:bb:32:a3:d7:6a:b0:c4:ae:ac:2a:ca:dc:19:a6:
f7:6d:b9:3a:8f:20:6c:d1:df:b1:dd:61:dd:d9:50:
0b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A3:FC:81:3B:43:11:5E:26:53:BC:11:FD:6F:6B:D3:6A:32:A2:0D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BqP8gTtDEV4mU7wR_W9r02oyog0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.43.0/24
193.181.48.0/22
Signature Algorithm: sha256WithRSAEncryption
91:8e:82:36:4d:74:80:3e:8f:8d:db:8f:b9:e8:69:74:dd:d7:
25:47:d2:c1:55:6f:ce:bb:bc:50:86:43:b5:41:73:64:46:89:
22:e3:5a:57:4c:b8:50:40:b7:57:1f:7e:91:f1:41:1b:64:2c:
43:30:49:d9:fa:a6:10:da:96:4f:27:51:e2:5f:a7:b4:76:53:
2a:77:c4:b2:ec:da:3b:79:80:7c:4e:26:5b:a2:f7:f1:7c:50:
8a:4d:eb:44:73:47:4e:fc:5c:4b:e5:e9:f5:f2:13:da:90:2b:
b7:ec:2d:e2:38:1a:d6:24:d8:0a:3d:9b:e2:ee:15:de:54:db:
61:51:aa:53:ba:99:1b:b2:d4:e3:68:62:68:5c:77:2c:bf:e2:
05:c8:d2:a1:8c:b7:e9:32:ae:8b:bf:0e:0d:80:87:b7:3d:1c:
83:a8:ba:90:18:af:e9:ab:1d:db:d0:b2:a2:85:a4:e3:e2:d3:
be:91:f9:65:30:6c:6c:02:05:b0:eb:7b:c9:55:10:f3:b9:67:
fa:b7:93:bf:55:8c:25:d8:4c:fe:d1:b2:d2:83:50:9c:90:70:
17:84:b5:49:06:bd:0c:64:15:f6:f4:c6:da:7c:45:4d:0a:68:
af:56:73:06:7f:4b:95:9c:4d:2d:f8:8c:2d:26:67:e1:ae:24:
23:4b:bd:9c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVsyvSw7BWiRnpiF2fvpjGvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjMwMTAxMTAwNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmEzZmM4MTNiNDMxMTVlMjY1M2JjMTFmZDZmNmJkMzZhMzJhMjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSdWoVZrooAGRE4Yvb5Yd5S0j4G2
vimIDlHqBEpLgKxgBhwatzQA5+EufGAu3QeYdA++TwyaFALyPavIMqsCK6o44Zmz
Z5xoPQJznV5/f8mRcB+BUXrnZ+z7EYLrdgC+Yvqo0r8IWJkCUlyOKUKOIXnxegLZ
yn6/795P924J/TN5rJOYOQnVfgTVYwPcf74BgVlaEzhzH7RUKWuAw0K9upQD13Hl
/MxfL3qhQ+OT87sEX1+51btoHTzikYN+EpfN8/xn+Gds4paIO0Rp1ajy/F1PtN6L
Qo16OOQmVi1W9ThmuzKj12qwxK6sKsrcGab3bbk6jyBs0d+x3WHd2VALHQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAaj/IE7QxFeJlO8Ef1va9NqMqINMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvQnFQOGdUdERFVjRtVTd3Ul9XOXIwMm95b2cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwbUrAwQC
wbUwMA0GCSqGSIb3DQEBCwUAA4IBAQCRjoI2TXSAPo+N24+56Gl03dclR9LBVW/O
u7xQhkO1QXNkRoki41pXTLhQQLdXH36R8UEbZCxDMEnZ+qYQ2pZPJ1HiX6e0dlMq
d8Sy7No7eYB8TiZbovfxfFCKTetEc0dO/FxL5en18hPakCu37C3iOBrWJNgKPZvi
7hXeVNthUapTupkbstTjaGJoXHcsv+IFyNKhjLfpMq6Lvw4NgIe3PRyDqLqQGK/p
qx3b0LKihaTj4tO+kfllMGxsAgWw63vJVRDzuWf6t5O/VYwl2Ez+0bLSg1CckHAX
hLVJBr0MZBX29MbafEVNCmivVnMGf0uVnE0t+IwtJmfhriQjS72c
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:14 2025 by rpki-client