Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/8OUuy6RxMKAA3VbPAT05z8x14Y0.roa
File: 8OUuy6RxMKAA3VbPAT05z8x14Y0.roa (raw, json)
Hash identifier: /S82CRuIWRkEgkIG58XNeFsI8Jv6K3dyodJP/54XncE=
Subject key identifier: F0:E5:2E:CB:A4:71:30:A0:00:DD:56:CF:01:3D:39:CF:CC:75:E1:8D
Certificate issuer: /CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Certificate serial: 019422FBAC75FF53F9F148F319E98839EF9B
Authority key identifier: 37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/8OUuy6RxMKAA3VbPAT05z8x14Y0.roa
Signing time: Wed 01 Jan 2025 17:48:26 +0000
ROA not before: Wed 01 Jan 2025 17:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 193.97.184.0/24 maxlen: 24
193.97.185.0/24 maxlen: 24
193.97.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ac:75:ff:53:f9:f1:48:f3:19:e9:88:39:ef:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Validity
Not Before: Jan 1 17:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0e52ecba47130a000dd56cf013d39cfcc75e18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:7d:38:8d:19:c3:21:71:45:0c:23:ec:19:
01:ff:1f:8f:c0:b8:17:28:b5:f8:ef:ca:2a:51:7e:
f0:3b:9b:97:8e:26:6a:9a:31:fd:86:ce:1d:bd:f2:
4f:75:06:30:c5:03:8d:76:3f:15:8f:8d:23:19:e5:
c1:b6:b4:fd:c0:07:79:d2:b8:6f:8a:5e:06:65:6d:
38:86:c4:9a:61:53:45:c0:9b:37:fb:96:19:3a:fd:
4f:ae:31:36:34:9b:7a:0b:19:a7:76:9e:a9:ed:07:
45:a0:ad:d1:48:66:d6:b0:3f:11:e6:c2:c9:a1:b1:
0e:fa:c9:8b:40:c3:ff:6b:10:84:56:7a:21:d1:99:
2f:38:75:c6:8c:98:ce:17:93:11:15:93:c4:48:ff:
c7:79:4c:d8:fc:4b:a2:eb:1b:ea:03:59:4d:22:ee:
fd:fb:da:e3:cd:e6:00:4f:7e:15:0d:fb:57:9a:11:
79:4d:49:21:dd:8f:c9:2a:14:33:89:97:06:c7:2a:
0e:1c:9a:46:11:6d:9e:00:8f:3f:8d:a9:59:1a:ef:
05:cf:02:3a:84:d7:ac:fd:06:1a:77:1f:f2:48:7e:
9d:dc:c5:b8:75:24:29:40:e8:00:5f:81:35:ba:88:
05:12:60:4b:a7:48:7c:1d:e0:f5:7e:4c:ea:ea:93:
e1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E5:2E:CB:A4:71:30:A0:00:DD:56:CF:01:3D:39:CF:CC:75:E1:8D
X509v3 Authority Key Identifier:
keyid:37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/8OUuy6RxMKAA3VbPAT05z8x14Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.97.184.0-193.97.186.255
Signature Algorithm: sha256WithRSAEncryption
5f:47:35:73:9b:61:bf:f2:69:7a:6a:0f:2f:49:a8:26:68:07:
6c:48:8f:6e:80:f1:5e:5c:df:f3:b8:50:fd:dc:40:83:52:25:
97:b6:3e:63:8d:f9:5d:ae:46:1c:00:f1:0a:ca:7c:ac:05:83:
d0:8d:f8:60:8d:af:c3:7d:08:d7:c7:70:3f:e0:5f:cd:68:a7:
9c:11:34:8d:3c:2d:42:1c:91:b1:ee:d1:4f:35:17:5a:0d:64:
eb:84:d6:10:23:18:88:2d:26:02:10:73:7d:1b:f0:c6:02:66:
66:3e:33:99:c5:63:00:9e:c9:f6:c8:45:88:42:70:d8:e9:39:
96:d3:c6:1a:c6:bc:59:53:89:84:c8:94:48:e1:4d:56:e2:15:
55:12:33:b1:4c:66:a8:82:ac:b6:d8:5b:b3:15:f9:70:6f:4f:
ca:64:72:75:80:05:78:1b:12:f0:c9:1c:50:22:65:68:c2:ef:
c1:80:c7:01:50:4f:32:08:8d:f8:e7:38:52:3d:64:1b:52:94:
5e:20:bf:79:68:c9:67:c5:f7:ab:76:db:99:f4:2d:40:ed:58:
1c:e1:86:1b:65:29:12:0a:f9:bc:08:ca:10:55:9f:89:ea:75:
97:f6:9e:65:6f:a6:ba:51:7a:5b:1a:76:1e:37:54:f6:e9:d7:
1d:73:66:b2
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQi+6x1/1P58UjzGemIOe+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NjAyNTM5ZWMzMmMzOTE5ZmYxY2JjOTU5NGRkY2FiODE1
Njc0YzUwHhcNMjUwMTAxMTc0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGU1MmVjYmE0NzEzMGEwMDBkZDU2Y2YwMTNkMzljZmNjNzVlMThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYp9OI0ZwyFxRQwj7BkB/x+PwLgX
KLX478oqUX7wO5uXjiZqmjH9hs4dvfJPdQYwxQONdj8Vj40jGeXBtrT9wAd50rhv
il4GZW04hsSaYVNFwJs3+5YZOv1PrjE2NJt6Cxmndp6p7QdFoK3RSGbWsD8R5sLJ
obEO+smLQMP/axCEVnoh0ZkvOHXGjJjOF5MRFZPESP/HeUzY/Eui6xvqA1lNIu79
+9rjzeYAT34VDftXmhF5TUkh3Y/JKhQziZcGxyoOHJpGEW2eAI8/jalZGu8FzwI6
hNes/QYadx/ySH6d3MW4dSQpQOgAX4E1uogFEmBLp0h8HeD1fkzq6pPhLQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFPDlLsukcTCgAN1WzwE9Oc/MdeGNMB8GA1UdIwQY
MBaAFDdgJTnsMsORn/HLyVlN3KuBVnTFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjJBbE9ld3l3NUdmOGN2SldVM2NxNEZXZE1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8yMTU1ZjEtOTc2YS00ZjdlLTk1YTQt
MDc2ZTFkNzdhZWJlLzEvOE9VdXk2UnhNS0FBM1ZiUEFUMDV6OHgxNFkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8yMTU1ZjEtOTc2YS00ZjdlLTk1YTQtMDc2ZTFkNzdhZWJl
LzEvTjJBbE9ld3l3NUdmOGN2SldVM2NxNEZXZE1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPBYbgD
BADBYbowDQYJKoZIhvcNAQELBQADggEBAF9HNXObYb/yaXpqDy9JqCZoB2xIj26A
8V5c3/O4UP3cQINSJZe2PmON+V2uRhwA8QrKfKwFg9CN+GCNr8N9CNfHcD/gX81o
p5wRNI08LUIckbHu0U81F1oNZOuE1hAjGIgtJgIQc30b8MYCZmY+M5nFYwCeyfbI
RYhCcNjpOZbTxhrGvFlTiYTIlEjhTVbiFVUSM7FMZqiCrLbYW7MV+XBvT8pkcnWA
BXgbEvDJHFAiZWjC78GAxwFQTzIIjfjnOFI9ZBtSlF4gv3loyWfF96t225n0LUDt
WBzhhhtlKRIK+bwIyhBVn4nqdZf2nmVvprpRelsadh43VPbp1x1zZrI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:22 2025 by rpki-client