Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Cv17ZmwA2Cdxrjayf6s4nI82L5s.roa
File: Cv17ZmwA2Cdxrjayf6s4nI82L5s.roa (raw, json)
Hash identifier: 4k6BYYTn1HEL72eUj5lpf7G2sjHD5CM5mY7+rontjKU=
Subject key identifier: 0A:FD:7B:66:6C:00:D8:27:71:AE:36:B2:7F:AB:38:9C:8F:36:2F:9B
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018C26A90AB0033B54BE3C1847D230379E1B
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Cv17ZmwA2Cdxrjayf6s4nI82L5s.roa
Signing time: Fri 01 Dec 2023 18:34:21 +0000
ROA not before: Fri 01 Dec 2023 18:34:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207633
IP address blocks: 194.116.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:26:a9:0a:b0:03:3b:54:be:3c:18:47:d2:30:37:9e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Dec 1 18:34:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0afd7b666c00d82771ae36b27fab389c8f362f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9b:3a:d5:8e:90:fd:7e:40:82:f9:10:80:6c:
23:1b:c7:0b:13:87:16:5f:47:76:48:de:df:a2:fa:
08:a9:56:b6:dc:d6:80:bd:cf:93:39:f7:a2:17:b0:
91:5b:0e:c7:75:8c:4f:f3:d7:e2:08:2c:ef:01:d7:
a2:8b:36:10:d7:83:72:e7:e4:1b:d3:48:53:53:ab:
ba:bc:e7:44:d1:3e:4e:60:7f:93:26:96:3e:bc:fd:
ae:f3:51:60:8e:ef:16:a5:6c:47:fe:87:d7:64:91:
53:79:99:7e:f9:34:6a:c4:e3:41:35:06:9d:aa:32:
aa:67:34:7a:a3:ff:85:48:c5:18:70:0e:5b:b0:c5:
89:99:ff:f5:50:ae:b2:67:b6:33:b2:fe:ba:e6:7a:
33:ec:63:9d:b1:7b:07:de:41:3b:69:68:77:cf:27:
51:be:cf:0e:26:f7:3e:94:25:16:b6:e8:bb:8f:f5:
70:5e:24:d5:ac:bd:8f:38:9a:4d:36:d4:8a:df:31:
04:19:e2:22:67:37:74:ad:96:aa:6f:35:ba:02:17:
84:7a:db:b6:02:4c:c0:da:2c:c1:c5:19:20:2c:8e:
95:04:55:64:72:ff:32:ba:64:2a:10:21:1e:03:94:
d6:87:ed:0c:9c:cc:5c:0a:92:0d:ce:a3:46:e0:5b:
a0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FD:7B:66:6C:00:D8:27:71:AE:36:B2:7F:AB:38:9C:8F:36:2F:9B
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Cv17ZmwA2Cdxrjayf6s4nI82L5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.237.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:45:5d:70:74:1f:57:9e:3f:9e:cb:6d:72:83:e0:9d:f6:31:
a6:e1:c8:c0:8a:3e:3d:dc:15:fe:08:c1:5a:ad:8f:02:57:ea:
00:34:6b:e6:b8:5d:89:19:d3:e5:34:93:bb:cb:bf:ac:1f:4a:
cb:8c:fd:51:b9:3e:86:df:2f:f0:6b:6f:a0:3a:01:3d:22:b2:
4e:0f:a5:aa:77:a7:c3:71:af:77:fe:a0:e8:d7:b8:b2:cd:28:
13:59:3d:14:88:f5:02:fc:bb:01:56:67:8c:1e:e1:1c:93:64:
6b:45:ac:97:48:d7:2e:11:8a:a2:db:6f:5d:85:ca:3e:ea:8f:
dd:04:9e:33:cb:66:ff:52:7d:2b:81:03:a5:4a:62:9e:2c:de:
f7:b0:c9:51:e6:23:65:ac:bd:c4:7e:25:69:de:18:c5:dd:57:
ab:85:5b:0e:90:c6:89:31:b9:79:b1:32:01:64:dd:75:b9:b3:
b8:9d:05:7f:a6:44:ac:f2:e9:b5:e1:9b:26:83:68:69:e7:1f:
f0:f7:c0:fa:85:54:c7:71:72:1c:11:9c:cb:3b:5f:f5:a0:fd:
d5:d1:d3:b1:72:70:8c:58:d2:30:ea:b7:ae:1c:56:97:2a:e1:
9a:29:ff:6f:9e:50:c8:8b:fb:a8:e6:45:aa:8d:9b:03:c8:df:
ef:cb:63:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYwmqQqwAztUvjwYR9IwN54bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjMxMjAxMTgzNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWZkN2I2NjZjMDBkODI3NzFhZTM2YjI3ZmFiMzg5YzhmMzYyZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZs61Y6Q/X5AgvkQgGwjG8cLE4cW
X0d2SN7fovoIqVa23NaAvc+TOfeiF7CRWw7HdYxP89fiCCzvAdeiizYQ14Ny5+Qb
00hTU6u6vOdE0T5OYH+TJpY+vP2u81Fgju8WpWxH/ofXZJFTeZl++TRqxONBNQad
qjKqZzR6o/+FSMUYcA5bsMWJmf/1UK6yZ7Yzsv665noz7GOdsXsH3kE7aWh3zydR
vs8OJvc+lCUWtui7j/VwXiTVrL2POJpNNtSK3zEEGeIiZzd0rZaqbzW6AheEetu2
AkzA2izBxRkgLI6VBFVkcv8yumQqECEeA5TWh+0MnMxcCpINzqNG4FugOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAr9e2ZsANgnca42sn+rOJyPNi+bMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvQ3YxN1ptd0EyQ2R4cmpheWY2czRuSTgyTDVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnTtMA0G
CSqGSIb3DQEBCwUAA4IBAQCfRV1wdB9Xnj+ey21yg+Cd9jGm4cjAij493BX+CMFa
rY8CV+oANGvmuF2JGdPlNJO7y7+sH0rLjP1RuT6G3y/wa2+gOgE9IrJOD6Wqd6fD
ca93/qDo17iyzSgTWT0UiPUC/LsBVmeMHuEck2RrRayXSNcuEYqi229dhco+6o/d
BJ4zy2b/Un0rgQOlSmKeLN73sMlR5iNlrL3EfiVp3hjF3VerhVsOkMaJMbl5sTIB
ZN11ubO4nQV/pkSs8um14Zsmg2hp5x/w98D6hVTHcXIcEZzLO1/1oP3V0dOxcnCM
WNIw6reuHFaXKuGaKf9vnlDIi/uo5kWqjZsDyN/vy2Pt
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:57 2025 by rpki-client