Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/IQkntFvhRsdycQaCoTh6uWBlM0w.roa
File: IQkntFvhRsdycQaCoTh6uWBlM0w.roa (raw, json)
Hash identifier: ObXi/Gh86sV5Yu8bR/iyvVTSXYpSj+cAT5PW6Kmrdqo=
Subject key identifier: 21:09:27:B4:5B:E1:46:C7:72:71:06:82:A1:38:7A:B9:60:65:33:4C
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01941F8C3AA3B37C4D5182C8B73015F8AC5C
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/IQkntFvhRsdycQaCoTh6uWBlM0w.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212669
IP address blocks: 193.106.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3a:a3:b3:7c:4d:51:82:c8:b7:30:15:f8:ac:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=210927b45be146c772710682a1387ab96065334c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:4b:7b:c3:c7:b7:60:ce:2e:79:85:a9:f1:
72:11:f7:28:67:ea:d8:ae:8f:96:7c:65:27:fb:79:
79:88:b9:e4:6c:c5:af:95:88:f2:46:17:8f:e9:26:
c4:75:7c:86:07:bd:13:2c:23:16:42:bb:fc:8f:c7:
68:0f:65:1b:48:7e:78:ce:c9:23:67:b7:00:d6:44:
fc:23:08:29:a8:c3:b6:0f:3c:af:83:b1:f8:6a:c1:
13:13:db:0a:3a:ad:eb:36:97:c5:db:f2:90:2c:e4:
67:4f:56:c6:a2:c4:c3:75:40:39:d3:2c:30:a6:fc:
f0:8e:22:bc:d2:8f:c0:de:c4:94:15:a2:99:ab:ee:
67:9c:25:3c:93:4f:41:d9:5f:b0:bc:9b:de:63:eb:
6b:b4:fc:4d:10:55:e2:9a:0e:c9:e1:e4:49:bc:7d:
00:cf:25:bb:28:f2:a6:38:42:e6:05:0c:a4:58:f2:
26:7c:f2:e3:e5:87:45:80:b3:80:26:d4:0a:6b:99:
f3:84:62:6b:da:ee:bf:5f:fa:ca:53:1c:25:5b:6e:
21:02:e2:07:ee:9e:2b:59:99:80:81:d3:bb:3c:08:
48:77:16:67:61:26:ba:44:76:36:6f:f4:05:cb:19:
6b:6d:e0:21:a0:37:8d:90:a5:58:33:1e:dc:71:bd:
4e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:09:27:B4:5B:E1:46:C7:72:71:06:82:A1:38:7A:B9:60:65:33:4C
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/IQkntFvhRsdycQaCoTh6uWBlM0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.198.0/24
Signature Algorithm: sha256WithRSAEncryption
66:6c:ec:56:ce:6a:ac:2e:a3:93:49:c1:ef:ae:fe:41:44:de:
c2:5f:75:77:2b:72:f2:a9:22:74:38:c0:0c:2c:20:dd:f1:a7:
67:18:ef:05:12:56:27:0d:3c:f9:72:2b:5a:0a:7e:cd:70:18:
e8:b4:1c:8f:f1:cb:09:17:3e:74:19:99:81:57:51:49:ed:7c:
41:67:eb:7d:3c:be:03:ec:88:c3:e5:6e:d6:94:d5:bc:5c:11:
4d:d8:85:af:41:d6:f1:b6:fe:1f:bd:7c:7c:bb:3d:3e:87:4c:
87:85:f5:d5:df:df:ff:fe:28:13:46:8e:78:06:8a:89:a1:6e:
1f:92:5a:b7:5a:3d:22:1b:f0:08:4b:53:bb:c3:3f:42:69:ce:
ec:c8:74:61:9f:ae:fe:95:fe:3c:95:bb:01:10:fb:cb:69:ac:
89:6d:c9:ec:e2:89:3e:e4:75:8b:a5:1d:ee:5e:54:e1:c2:ff:
25:2c:84:76:5e:be:1c:ac:90:d1:65:8d:cf:dc:a6:78:5e:e6:
b4:22:3c:7c:8b:18:90:bb:8a:f7:cc:ef:ce:be:ac:59:3e:6b:
03:ac:ef:01:61:e6:5c:f5:2c:98:34:b5:6f:e8:9a:04:c3:0e:
31:9b:45:83:9d:a8:29:15:ae:ee:2f:14:54:20:fe:91:ff:57:
15:91:84:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjDqjs3xNUYLItzAV+KxcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm
NzMzMzkwHhcNMjUwMTAxMDE0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTA5MjdiNDViZTE0NmM3NzI3MTA2ODJhMTM4N2FiOTYwNjUzMzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa9Le8PHt2DOLnmFqfFyEfcoZ+rY
ro+WfGUn+3l5iLnkbMWvlYjyRheP6SbEdXyGB70TLCMWQrv8j8doD2UbSH54zskj
Z7cA1kT8IwgpqMO2Dzyvg7H4asETE9sKOq3rNpfF2/KQLORnT1bGosTDdUA50yww
pvzwjiK80o/A3sSUFaKZq+5nnCU8k09B2V+wvJveY+trtPxNEFXimg7J4eRJvH0A
zyW7KPKmOELmBQykWPImfPLj5YdFgLOAJtQKa5nzhGJr2u6/X/rKUxwlW24hAuIH
7p4rWZmAgdO7PAhIdxZnYSa6RHY2b/QFyxlrbeAhoDeNkKVYMx7ccb1OsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCEJJ7Rb4UbHcnEGgqE4erlgZTNMMB8GA1UdIwQY
MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt
ZGE3NTQzMGIxNmY2LzEvSVFrbnRGdmhSc2R5Y1FhQ29UaDZ1V0JsTTB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2
LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWrGMA0G
CSqGSIb3DQEBCwUAA4IBAQBmbOxWzmqsLqOTScHvrv5BRN7CX3V3K3LyqSJ0OMAM
LCDd8adnGO8FElYnDTz5citaCn7NcBjotByP8csJFz50GZmBV1FJ7XxBZ+t9PL4D
7IjD5W7WlNW8XBFN2IWvQdbxtv4fvXx8uz0+h0yHhfXV39///igTRo54BoqJoW4f
klq3Wj0iG/AIS1O7wz9Cac7syHRhn67+lf48lbsBEPvLaayJbcns4ok+5HWLpR3u
XlThwv8lLIR2Xr4crJDRZY3P3KZ4Xua0Ijx8ixiQu4r3zO/OvqxZPmsDrO8BYeZc
9SyYNLVv6JoEww4xm0WDnagpFa7uLxRUIP6R/1cVkYR9
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:56 2025 by rpki-client