Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Ro11uzcn2TLRlpJuPsNSR8HZZ64.roa
File: Ro11uzcn2TLRlpJuPsNSR8HZZ64.roa (raw, json)
Hash identifier: jvXsqC5aiJkKLkPxcxN4QBNmMCT59ThsgJQ9Gj/Jbl4=
Subject key identifier: 46:8D:75:BB:37:27:D9:32:D1:96:92:6E:3E:C3:52:47:C1:D9:67:AE
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427485237FADFFBCF5A7478F544BD9065
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Ro11uzcn2TLRlpJuPsNSR8HZZ64.roa
Signing time: Thu 02 Jan 2025 13:50:38 +0000
ROA not before: Thu 02 Jan 2025 13:50:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39651
IP address blocks: 193.180.247.0/24 maxlen: 24
193.234.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:52:37:fa:df:fb:cf:5a:74:78:f5:44:bd:90:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=468d75bb3727d932d196926e3ec35247c1d967ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bb:ed:dd:f4:a9:b1:71:7f:2e:e4:2f:cd:72:
2d:03:6e:29:8c:48:ed:37:1c:f5:1f:0b:8d:ec:52:
2f:9c:22:83:7a:f2:20:bf:12:2e:be:58:41:3d:02:
7e:a9:0d:d3:b0:ff:9e:73:45:26:49:39:6e:ee:9b:
f4:5f:ce:fa:7a:10:c3:f7:26:c3:35:bf:65:bd:c1:
e0:38:94:a5:0f:9d:9a:11:a6:2b:ef:bf:e6:02:79:
aa:1f:83:d9:b4:2d:29:8f:d6:c2:2e:ee:ff:bb:7c:
54:32:8b:38:1c:44:ab:dc:78:24:ea:09:bb:f9:b3:
02:78:c9:04:1f:94:6f:bb:e9:e0:23:e8:8a:55:07:
50:18:b3:04:27:2c:88:8b:19:73:cd:2b:c5:c3:1b:
88:71:59:19:5e:78:f2:a3:af:18:b0:18:87:c1:ff:
0b:c2:ec:a4:72:96:4d:5a:66:5a:32:14:20:11:68:
55:d8:e1:b3:af:50:d8:cf:0f:3a:41:72:78:11:b9:
6e:0a:54:e7:c8:f4:48:59:de:3e:96:34:1b:65:d4:
e5:68:79:0e:d2:33:ea:c8:22:f5:0b:91:3b:20:a4:
2d:70:22:a9:83:65:d2:e9:75:d2:be:eb:cd:1d:b0:
09:5b:4c:0a:5d:24:6d:f3:9c:c6:7e:bd:b4:0c:e0:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8D:75:BB:37:27:D9:32:D1:96:92:6E:3E:C3:52:47:C1:D9:67:AE
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Ro11uzcn2TLRlpJuPsNSR8HZZ64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.247.0/24
193.234.87.0/24
Signature Algorithm: sha256WithRSAEncryption
81:ce:19:43:02:15:ac:90:b8:ef:0a:39:f5:bf:00:d3:60:84:
78:c8:a0:fe:f6:fb:74:ab:26:ff:dc:77:41:f2:d3:2e:f1:23:
7f:39:11:02:e1:1f:4c:2e:23:3b:6a:c0:50:74:01:75:3a:cc:
69:9e:3f:6e:45:22:32:9d:3c:5a:f6:53:60:11:62:c8:b4:06:
8c:ee:ad:e6:2c:16:93:d8:7d:a7:6e:de:49:72:bc:e6:69:61:
c1:e2:11:25:fc:87:86:8e:26:e0:de:4e:db:3f:6d:f6:bc:a3:
1a:21:fa:29:81:a7:2f:5f:48:31:7c:b4:59:a9:f3:b3:1d:07:
84:d1:fe:df:b2:3c:9e:55:ac:a3:c0:63:89:28:6c:9e:2d:c2:
ce:b5:70:6b:e8:0a:e3:f9:51:96:3c:30:3c:7b:cf:52:82:c8:
45:58:c0:a4:62:fd:d4:b9:35:aa:4b:76:86:20:91:dd:ee:5a:
46:38:0d:6d:63:5e:73:93:c0:21:4d:f6:25:f0:88:89:ad:d3:
29:9c:a5:be:bd:93:5a:bb:dc:21:85:4e:69:e6:f5:4c:5a:4e:
0b:29:8a:31:f2:f4:60:07:3e:a0:e8:b9:32:96:e8:a3:d5:24:
9a:02:25:e1:69:6b:b0:25:52:81:2b:28:25:41:b9:0b:ab:15:
1b:cd:99:c2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQnSFI3+t/7z1p0ePVEvZBlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMTAyMTM1MDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjhkNzViYjM3MjdkOTMyZDE5NjkyNmUzZWMzNTI0N2MxZDk2N2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLvt3fSpsXF/LuQvzXItA24pjEjt
Nxz1HwuN7FIvnCKDevIgvxIuvlhBPQJ+qQ3TsP+ec0UmSTlu7pv0X876ehDD9ybD
Nb9lvcHgOJSlD52aEaYr77/mAnmqH4PZtC0pj9bCLu7/u3xUMos4HESr3Hgk6gm7
+bMCeMkEH5Rvu+ngI+iKVQdQGLMEJyyIixlzzSvFwxuIcVkZXnjyo68YsBiHwf8L
wuykcpZNWmZaMhQgEWhV2OGzr1DYzw86QXJ4EbluClTnyPRIWd4+ljQbZdTlaHkO
0jPqyCL1C5E7IKQtcCKpg2XS6XXSvuvNHbAJW0wKXSRt85zGfr20DOA5jwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEaNdbs3J9ky0ZaSbj7DUkfB2WeuMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvUm8xMXV6Y24yVExSbHBKdVBzTlNSOEhaWjY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwbT3AwQA
wepXMA0GCSqGSIb3DQEBCwUAA4IBAQCBzhlDAhWskLjvCjn1vwDTYIR4yKD+9vt0
qyb/3HdB8tMu8SN/OREC4R9MLiM7asBQdAF1Osxpnj9uRSIynTxa9lNgEWLItAaM
7q3mLBaT2H2nbt5JcrzmaWHB4hEl/IeGjibg3k7bP232vKMaIfopgacvX0gxfLRZ
qfOzHQeE0f7fsjyeVayjwGOJKGyeLcLOtXBr6Arj+VGWPDA8e89SgshFWMCkYv3U
uTWqS3aGIJHd7lpGOA1tY15zk8AhTfYl8IiJrdMpnKW+vZNau9whhU5p5vVMWk4L
KYox8vRgBz6g6Lkyluij1SSaAiXhaWuwJVKBKyglQbkLqxUbzZnC
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:20 2025 by rpki-client