Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/0Z-KgCbnH-7-i6HmUta6xwTJGFc.roa
File: 0Z-KgCbnH-7-i6HmUta6xwTJGFc.roa (raw, json)
Hash identifier: CQhB99jgLnCeUfjuKP+rQh+nxxrjqKEU/QGxy6HMLAc=
Subject key identifier: D1:9F:8A:80:26:E7:1F:EE:FE:8B:A1:E6:52:D6:BA:C7:04:C9:18:57
Certificate issuer: /CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
Certificate serial: 01950508E03CED63A59A44E5D4739A2FA0C6
Authority key identifier: 0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/0Z-KgCbnH-7-i6HmUta6xwTJGFc.roa
Signing time: Fri 14 Feb 2025 15:17:02 +0000
ROA not before: Fri 14 Feb 2025 15:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25000
IP address blocks: 193.201.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:05:08:e0:3c:ed:63:a5:9a:44:e5:d4:73:9a:2f:a0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
Validity
Not Before: Feb 14 15:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d19f8a8026e71feefe8ba1e652d6bac704c91857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:61:5d:75:b6:dd:00:30:05:6d:ca:9e:de:e7:
91:07:16:55:85:e4:ac:ad:98:21:e3:26:aa:b2:41:
56:40:8d:06:97:ab:63:3e:fd:ae:2f:f8:51:93:8a:
f1:62:ba:dd:fd:d7:da:38:c2:14:63:00:51:5a:58:
28:d9:3c:ac:13:22:bd:2d:3a:43:83:9b:3d:a1:39:
02:ca:45:88:9f:01:b5:d4:7a:a3:f0:89:c9:c7:b5:
6d:02:21:f5:fb:02:24:9b:35:5a:3e:dd:0c:50:01:
ec:0d:7c:64:91:ba:73:65:52:65:ac:97:64:38:a0:
e7:f6:ac:a7:e0:b1:3f:b1:38:b4:9f:50:0f:c9:f1:
ac:d8:83:e5:5a:fe:07:26:53:f8:51:5d:e4:a8:e7:
d3:f3:91:fa:93:41:61:11:62:c0:31:9b:50:7c:33:
9e:75:bd:89:cb:0f:60:a4:5d:34:ea:46:47:e2:05:
24:41:7f:51:7b:e7:1c:1c:72:fc:54:7a:98:e0:f7:
ee:b6:1f:16:5b:7b:58:5c:f6:2a:bc:1a:87:91:99:
61:e3:5e:22:90:3e:a9:f2:c2:15:d7:b8:c5:f8:68:
8b:d1:bb:ac:d5:1a:20:71:a9:f6:2f:69:0b:dd:ba:
02:f6:29:6c:2e:d5:29:d9:09:54:1d:ee:2a:ff:70:
c8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9F:8A:80:26:E7:1F:EE:FE:8B:A1:E6:52:D6:BA:C7:04:C9:18:57
X509v3 Authority Key Identifier:
keyid:0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/0Z-KgCbnH-7-i6HmUta6xwTJGFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.98.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:6e:ce:d9:99:c4:76:87:33:38:fb:42:75:3e:93:da:85:25:
c9:05:ee:62:dd:33:cc:f5:4f:9d:a3:a6:ac:5a:23:71:66:13:
2b:c0:f7:c8:d0:6d:c6:29:fd:8e:be:9d:2a:b0:ae:0f:11:07:
86:5f:af:8d:c3:1c:51:e6:d4:89:61:ae:44:fe:4c:e1:1e:a0:
ab:72:13:11:57:9d:26:41:42:fa:f6:08:ff:f8:5b:2f:c7:6a:
e3:17:16:b2:12:54:a0:84:a8:0c:82:05:82:a2:dd:5c:49:9e:
01:74:5c:81:ac:48:29:ba:91:37:44:ca:f9:1d:0a:b2:0f:e9:
1c:99:f9:21:cd:3f:23:15:b1:9d:4d:45:77:83:17:f7:ee:4e:
78:82:79:b2:f7:be:e5:7c:ab:97:76:a3:89:fd:c6:ba:a2:45:
92:ed:a4:76:13:5b:09:60:46:24:29:26:90:10:e0:c0:e2:54:
bf:b1:91:a6:75:78:56:99:91:33:00:50:5f:a6:62:3f:e4:2a:
10:f4:8b:44:5f:1a:47:1e:b5:7a:e2:ae:74:80:c6:87:81:af:
aa:3e:6c:2f:36:88:da:d2:0a:cd:9e:41:c5:2e:bf:74:40:0b:
67:09:c2:33:48:cf:36:dc:55:a9:ca:90:82:be:d3:c9:1a:26:
97:bc:c2:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUFCOA87WOlmkTl1HOaL6DGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYjUxMGQ3YzkxNWE0YmU2ZGY2YjE2ZmY1ODJmZDJkNmFk
MjM2MDUwHhcNMjUwMjE0MTUxNzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTlmOGE4MDI2ZTcxZmVlZmU4YmExZTY1MmQ2YmFjNzA0YzkxODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WFddbbdADAFbcqe3ueRBxZVheSs
rZgh4yaqskFWQI0Gl6tjPv2uL/hRk4rxYrrd/dfaOMIUYwBRWlgo2TysEyK9LTpD
g5s9oTkCykWInwG11Hqj8InJx7VtAiH1+wIkmzVaPt0MUAHsDXxkkbpzZVJlrJdk
OKDn9qyn4LE/sTi0n1APyfGs2IPlWv4HJlP4UV3kqOfT85H6k0FhEWLAMZtQfDOe
db2Jyw9gpF006kZH4gUkQX9Re+ccHHL8VHqY4Pfuth8WW3tYXPYqvBqHkZlh414i
kD6p8sIV17jF+GiL0bus1Rogcan2L2kL3boC9ilsLtUp2QlUHe4q/3DI4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNGfioAm5x/u/ouh5lLWuscEyRhXMB8GA1UdIwQY
MBaAFA61ENfJFaS+bfaxb/WC/S1q0jYFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85NmJlM2QtZDdkMi00NzUzLWE3ODMt
ZDYzOGEzYmU4OGNhLzEvMFotS2dDYm5ILTctaTZIbVV0YTZ4d1RKR0ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85NmJlM2QtZDdkMi00NzUzLWE3ODMtZDYzOGEzYmU4OGNh
LzEvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcliMA0G
CSqGSIb3DQEBCwUAA4IBAQC3bs7ZmcR2hzM4+0J1PpPahSXJBe5i3TPM9U+do6as
WiNxZhMrwPfI0G3GKf2Ovp0qsK4PEQeGX6+NwxxR5tSJYa5E/kzhHqCrchMRV50m
QUL69gj/+Fsvx2rjFxayElSghKgMggWCot1cSZ4BdFyBrEgpupE3RMr5HQqyD+kc
mfkhzT8jFbGdTUV3gxf37k54gnmy977lfKuXdqOJ/ca6okWS7aR2E1sJYEYkKSaQ
EODA4lS/sZGmdXhWmZEzAFBfpmI/5CoQ9ItEXxpHHrV64q50gMaHga+qPmwvNoja
0grNnkHFLr90QAtnCcIzSM823FWpypCCvtPJGiaXvMKS
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:49:30 2025 by rpki-client