Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/scTpjmBPVtpmk2iyuFSVq2caLTA.roa
File: scTpjmBPVtpmk2iyuFSVq2caLTA.roa (raw, json)
Hash identifier: soRiwcgYjvvPsJmPt1LLzDQ901dQXHqAdbvUyjzTo70=
Subject key identifier: B1:C4:E9:8E:60:4F:56:DA:66:93:68:B2:B8:54:95:AB:67:1A:2D:30
Certificate issuer: /CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Certificate serial: 0194228E3AE457166F0662F0E9680C1423DB
Authority key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/scTpjmBPVtpmk2iyuFSVq2caLTA.roa
Signing time: Wed 01 Jan 2025 15:48:54 +0000
ROA not before: Wed 01 Jan 2025 15:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12480
IP address blocks: 193.101.11.0/24 maxlen: 24
193.101.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3a:e4:57:16:6f:06:62:f0:e9:68:0c:14:23:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Validity
Not Before: Jan 1 15:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1c4e98e604f56da669368b2b85495ab671a2d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:05:a6:77:24:ce:bc:79:36:5a:da:79:99:1f:
39:91:a7:a1:c3:f0:2c:9d:7c:9d:9c:ef:91:8a:1e:
3b:75:a6:6e:b7:8c:d1:e8:25:06:d6:5e:ff:4a:9a:
f1:ff:a5:8a:52:6c:c1:d2:9e:0c:6a:c4:f6:44:61:
a7:0f:c9:ad:b6:62:51:13:cd:d7:40:f4:41:b4:1c:
fd:18:65:99:ba:07:f4:78:f1:aa:f6:7e:9c:52:57:
fe:ac:cf:53:e5:d2:95:66:a5:31:0b:d0:70:39:c3:
b6:bc:62:52:93:87:d4:35:51:1b:5c:61:4c:aa:40:
bc:bb:21:91:ab:7d:c4:3f:d6:b0:13:66:3b:ce:7c:
d7:cc:96:00:c4:cf:9e:78:72:03:6c:a9:8b:d4:b3:
15:e0:0f:02:80:14:b5:99:f8:42:a4:4b:ed:95:81:
ff:74:89:e3:f3:89:ed:cd:11:da:1a:bb:e6:05:11:
b2:fc:04:7a:72:cc:d1:ca:bf:1a:b2:0f:9d:93:7d:
44:b3:a0:39:71:5c:ba:c3:73:5f:ff:75:80:a4:d0:
17:e2:0d:c7:cb:9b:1b:a3:0b:f2:7e:3f:ca:34:3a:
d1:84:17:fb:d0:b3:c3:cf:65:f1:cf:ee:c5:68:53:
bf:ee:7d:70:ce:a8:ec:c2:20:0e:9c:05:8c:a7:92:
42:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C4:E9:8E:60:4F:56:DA:66:93:68:B2:B8:54:95:AB:67:1A:2D:30
X509v3 Authority Key Identifier:
keyid:45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/scTpjmBPVtpmk2iyuFSVq2caLTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.101.11.0/24
193.101.24.0/21
Signature Algorithm: sha256WithRSAEncryption
74:d4:be:41:71:7f:2e:3d:0f:88:54:18:e3:9f:df:67:21:b5:
32:15:1f:40:b5:b2:ed:2e:11:92:8b:53:1f:c8:7f:3b:dc:69:
58:80:62:09:46:73:e1:69:e6:4a:37:47:dd:d1:84:af:4e:ad:
67:45:b9:a3:ee:ef:23:89:55:61:95:6f:60:b2:a5:40:35:76:
06:40:d9:e6:c7:98:63:95:65:ef:e4:05:65:72:f1:9e:9e:3f:
3c:a6:55:d2:66:c6:34:6c:14:02:28:6e:ff:53:77:26:4d:42:
29:e7:f3:42:19:fe:cc:a2:50:e5:bc:72:11:35:46:ec:ed:7d:
33:1f:ac:16:2b:3a:d5:24:d2:c6:42:b8:ae:cc:26:f1:91:db:
40:22:df:38:37:26:d5:34:00:a3:2c:ce:50:b0:20:e7:0b:99:
af:e7:cd:1d:d7:89:50:ed:35:8f:6f:9a:52:6a:93:71:e7:11:
82:8b:f8:a5:e6:43:b9:68:ab:1e:1b:8a:a6:fe:7c:ef:4b:ee:
be:e8:92:42:72:15:40:81:55:a5:c2:7e:82:70:1a:41:50:d2:
84:12:7b:da:34:9c:a0:bf:16:45:b0:6c:67:88:ed:a5:8a:10:
13:dc:25:f6:cd:16:c3:e2:d0:38:55:c5:7f:bf:15:65:9f:71:
6a:c9:48:59
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQijjrkVxZvBmLw6WgMFCPbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MGM1ODEyNDhiMTFhZTJhNDZmNTUyZTVjYTQzYzY5ZDY1
ZTcyYTgwHhcNMjUwMTAxMTU0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWM0ZTk4ZTYwNGY1NmRhNjY5MzY4YjJiODU0OTVhYjY3MWEyZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gWmdyTOvHk2Wtp5mR85kaehw/As
nXydnO+Rih47daZut4zR6CUG1l7/Sprx/6WKUmzB0p4MasT2RGGnD8mttmJRE83X
QPRBtBz9GGWZugf0ePGq9n6cUlf+rM9T5dKVZqUxC9BwOcO2vGJSk4fUNVEbXGFM
qkC8uyGRq33EP9awE2Y7znzXzJYAxM+eeHIDbKmL1LMV4A8CgBS1mfhCpEvtlYH/
dInj84ntzRHaGrvmBRGy/AR6cszRyr8asg+dk31Es6A5cVy6w3Nf/3WApNAX4g3H
y5sbowvyfj/KNDrRhBf70LPDz2Xxz+7FaFO/7n1wzqjswiAOnAWMp5JCAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLHE6Y5gT1baZpNosrhUlatnGi0wMB8GA1UdIwQY
MBaAFEUMWBJIsRripG9VLlykPGnWXnKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xY2YwYjItYzUxZC00NWY1LTg0ZGMt
NzQ5OWE4MjMxZjU2LzEvc2NUcGptQlBWdHBtazJpeXVGU1ZxMmNhTFRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xY2YwYjItYzUxZC00NWY1LTg0ZGMtNzQ5OWE4MjMxZjU2
LzEvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwWULAwQD
wWUYMA0GCSqGSIb3DQEBCwUAA4IBAQB01L5BcX8uPQ+IVBjjn99nIbUyFR9AtbLt
LhGSi1MfyH873GlYgGIJRnPhaeZKN0fd0YSvTq1nRbmj7u8jiVVhlW9gsqVANXYG
QNnmx5hjlWXv5AVlcvGenj88plXSZsY0bBQCKG7/U3cmTUIp5/NCGf7MolDlvHIR
NUbs7X0zH6wWKzrVJNLGQriuzCbxkdtAIt84NybVNACjLM5QsCDnC5mv580d14lQ
7TWPb5pSapNx5xGCi/il5kO5aKseG4qm/nzvS+6+6JJCchVAgVWlwn6CcBpBUNKE
EnvaNJygvxZFsGxniO2lihAT3CX2zRbD4tA4VcV/vxVln3FqyUhZ
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:08:40 2025 by rpki-client