Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/123064-0dd5-4fdc-ae85-0464896018a1/1/4toXQlmPkF43R4Xjyuh5neTGBaM.roa
File: 4toXQlmPkF43R4Xjyuh5neTGBaM.roa (raw, json)
Hash identifier: cP0aJ2jH7E9D9x73MlbzKts62mt+qHajH1dxMD1RKjQ=
Subject key identifier: E2:DA:17:42:59:8F:90:5E:37:47:85:E3:CA:E8:79:9D:E4:C6:05:A3
Certificate issuer: /CN=a30e4a07b3949cd59a706601658b7e3ccbbbaa6f
Certificate serial: 018449EBF075DC71A270871DE5B1F7467831
Authority key identifier: A3:0E:4A:07:B3:94:9C:D5:9A:70:66:01:65:8B:7E:3C:CB:BB:AA:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow5KB7OUnNWacGYBZYt-PMu7qm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/123064-0dd5-4fdc-ae85-0464896018a1/1/4toXQlmPkF43R4Xjyuh5neTGBaM.roa
Signing time: Sat 05 Nov 2022 22:31:49 +0000
ROA not before: Sat 05 Nov 2022 22:31:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204957
IP address blocks: 193.111.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:49:eb:f0:75:dc:71:a2:70:87:1d:e5:b1:f7:46:78:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30e4a07b3949cd59a706601658b7e3ccbbbaa6f
Validity
Not Before: Nov 5 22:31:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2da1742598f905e374785e3cae8799de4c605a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:24:2e:fb:5f:a3:66:30:5c:c1:0b:6f:55:29:
23:ca:ff:d6:3e:26:5b:b1:15:fb:c8:a6:e2:4a:45:
85:fe:4b:92:68:c1:19:b3:c8:a3:f5:56:ff:44:6b:
72:55:71:47:f3:7e:51:7d:99:f2:c7:02:87:80:a8:
50:a2:18:9d:56:3e:da:0b:23:50:aa:d7:51:c7:88:
2a:65:76:c6:cb:2f:8f:f7:b1:19:81:7b:34:21:08:
e0:49:7e:b1:18:33:7d:5d:25:93:87:f1:3e:11:45:
bf:a2:3f:5b:05:27:84:bb:71:8f:c0:1d:52:0f:6e:
07:a2:37:16:39:15:2a:05:a7:e6:fd:c2:f0:3d:49:
38:6f:70:9e:4a:bd:90:65:78:8f:2d:04:8a:1d:47:
65:c2:2a:71:cd:e9:0f:19:d8:76:0e:45:71:72:b6:
8b:ea:c2:b7:c1:ce:cd:2b:c2:67:b5:19:73:93:44:
e1:e3:47:67:63:0a:06:8f:64:8c:22:e0:9d:47:30:
98:26:0a:e9:04:8a:0f:14:ec:fe:26:38:82:7e:e0:
5e:49:0a:f4:a3:a0:21:b6:4e:fe:32:39:76:e7:e9:
b9:b9:6c:d2:31:00:16:af:05:77:14:e3:b8:ca:31:
c8:f3:42:47:a0:b9:cb:d8:19:55:84:fc:0d:03:08:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DA:17:42:59:8F:90:5E:37:47:85:E3:CA:E8:79:9D:E4:C6:05:A3
X509v3 Authority Key Identifier:
keyid:A3:0E:4A:07:B3:94:9C:D5:9A:70:66:01:65:8B:7E:3C:CB:BB:AA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow5KB7OUnNWacGYBZYt-PMu7qm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/123064-0dd5-4fdc-ae85-0464896018a1/1/4toXQlmPkF43R4Xjyuh5neTGBaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/123064-0dd5-4fdc-ae85-0464896018a1/1/ow5KB7OUnNWacGYBZYt-PMu7qm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.210.0/24
Signature Algorithm: sha256WithRSAEncryption
15:0d:81:d9:9d:ca:58:1e:e4:3a:e3:a5:8e:34:92:d6:c4:e2:
ba:37:e1:17:1e:d1:a5:a5:03:a1:7c:07:fa:a7:5b:45:a8:94:
4e:db:19:36:8f:da:7d:17:fe:15:05:85:4b:90:5d:88:fc:68:
e8:90:2c:bd:d5:97:67:1e:be:65:99:6b:8e:fb:b1:0f:7e:f5:
fd:a2:8f:4f:57:a6:e7:c3:69:a7:58:2f:6e:14:8a:4a:27:ad:
2d:4b:e3:77:96:8f:b7:3c:70:ac:be:6a:d9:39:d7:0c:61:22:
d5:06:a4:06:6e:83:98:a6:3f:72:1e:80:81:36:4d:4f:61:9c:
ba:a2:9f:ba:d3:05:29:53:04:51:c1:37:52:0b:d4:ae:97:5f:
6d:58:61:97:12:76:81:cb:db:08:95:be:e7:5c:cf:c3:56:2f:
f2:6b:33:a2:24:aa:d9:d1:90:be:14:22:aa:89:d6:6e:c3:f6:
cd:71:ec:98:a1:ed:a1:7d:4c:c4:b3:2f:b5:15:e3:87:bb:de:
52:e4:5a:7c:c1:f5:b0:82:ac:ca:00:9b:a3:c4:e7:d1:82:77:
7d:44:83:e4:fa:85:91:1f:3c:d4:cd:ae:77:e3:58:69:0a:d2:
f7:63:5b:1b:82:69:c1:54:ee:ad:ea:45:37:0f:5e:ab:f5:95:
bc:38:23:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRJ6/B13HGicIcd5bH3RngxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMGU0YTA3YjM5NDljZDU5YTcwNjYwMTY1OGI3ZTNjY2Ji
YmFhNmYwHhcNMjIxMTA1MjIzMTQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmRhMTc0MjU5OGY5MDVlMzc0Nzg1ZTNjYWU4Nzk5ZGU0YzYwNWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCQu+1+jZjBcwQtvVSkjyv/WPiZb
sRX7yKbiSkWF/kuSaMEZs8ij9Vb/RGtyVXFH835RfZnyxwKHgKhQohidVj7aCyNQ
qtdRx4gqZXbGyy+P97EZgXs0IQjgSX6xGDN9XSWTh/E+EUW/oj9bBSeEu3GPwB1S
D24HojcWORUqBafm/cLwPUk4b3CeSr2QZXiPLQSKHUdlwipxzekPGdh2DkVxcraL
6sK3wc7NK8JntRlzk0Th40dnYwoGj2SMIuCdRzCYJgrpBIoPFOz+JjiCfuBeSQr0
o6Ahtk7+Mjl25+m5uWzSMQAWrwV3FOO4yjHI80JHoLnL2BlVhPwNAwjUZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOLaF0JZj5BeN0eF48roeZ3kxgWjMB8GA1UdIwQY
MBaAFKMOSgezlJzVmnBmAWWLfjzLu6pvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3c1S0I3T1VuTldhY0dZQlpZdC1QTXU3cW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xMjMwNjQtMGRkNS00ZmRjLWFlODUt
MDQ2NDg5NjAxOGExLzEvNHRvWFFsbVBrRjQzUjRYanl1aDVuZVRHQmFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xMjMwNjQtMGRkNS00ZmRjLWFlODUtMDQ2NDg5NjAxOGEx
LzEvb3c1S0I3T1VuTldhY0dZQlpZdC1QTXU3cW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW/SMA0G
CSqGSIb3DQEBCwUAA4IBAQAVDYHZncpYHuQ646WONJLWxOK6N+EXHtGlpQOhfAf6
p1tFqJRO2xk2j9p9F/4VBYVLkF2I/GjokCy91ZdnHr5lmWuO+7EPfvX9oo9PV6bn
w2mnWC9uFIpKJ60tS+N3lo+3PHCsvmrZOdcMYSLVBqQGboOYpj9yHoCBNk1PYZy6
op+60wUpUwRRwTdSC9Sul19tWGGXEnaBy9sIlb7nXM/DVi/yazOiJKrZ0ZC+FCKq
idZuw/bNceyYoe2hfUzEsy+1FeOHu95S5Fp8wfWwgqzKAJujxOfRgnd9RIPk+oWR
HzzUza5341hpCtL3Y1sbgmnBVO6t6kU3D16r9ZW8OCPx
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:05:13 2025 by rpki-client