Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/qlFHFeROOID5WaWVEHwvwxWAzLw.roa
File: qlFHFeROOID5WaWVEHwvwxWAzLw.roa (raw, json)
Hash identifier: //F8owzBylzzc3mWkvQYIjr2mTOF+4WmUYspBcjO8y4=
Subject key identifier: AA:51:47:15:E4:4E:38:80:F9:59:A5:95:10:7C:2F:C3:15:80:CC:BC
Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial: 0194266C0F4E6CD2795CC686455C3CF86D9D
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/qlFHFeROOID5WaWVEHwvwxWAzLw.roa
Signing time: Thu 02 Jan 2025 09:50:03 +0000
ROA not before: Thu 02 Jan 2025 09:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47461
IP address blocks: 193.108.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:0f:4e:6c:d2:79:5c:c6:86:45:5c:3c:f8:6d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Validity
Not Before: Jan 2 09:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa514715e44e3880f959a595107c2fc31580ccbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dc:fd:cf:54:de:d5:fe:a9:a2:0c:d2:16:3c:
5f:76:a1:8e:aa:e4:73:78:b2:82:d0:a6:1e:5c:2c:
aa:82:f0:8a:f9:df:3d:18:81:45:40:34:d4:c6:24:
f7:c5:4a:a7:94:4a:be:f5:7c:1c:25:11:66:72:b7:
60:d2:b4:8d:a9:7f:d0:e3:ce:80:9d:04:fd:b2:41:
82:db:6c:0a:f6:70:7a:02:f7:78:17:6a:ce:fa:19:
f5:f4:ec:4a:99:e5:78:bb:82:a8:a9:1d:72:c3:63:
f6:c4:c1:36:58:3d:d4:39:44:0d:be:6b:03:63:48:
e1:dc:db:b8:e9:6d:bb:4c:26:1c:f5:66:d2:a7:ae:
5e:2e:f8:c4:78:d5:2c:46:7c:e3:dc:7c:aa:59:80:
83:5f:a9:f5:43:cf:b5:a7:46:5f:a6:62:64:be:37:
6b:07:65:e4:78:7d:7e:b8:e4:b8:30:69:48:ff:9b:
ac:a6:7d:3c:4c:1f:61:85:fc:9e:a9:b2:6d:2b:57:
c3:e0:c9:cb:64:f6:fc:80:48:45:2e:b6:1f:62:61:
0f:14:60:c7:0d:c2:10:b1:ee:a5:51:23:69:fb:af:
3e:b5:ef:cb:98:34:99:65:5e:8e:ba:c4:80:5e:2d:
6c:4d:ad:85:ec:b4:cc:e1:82:e9:b5:45:71:d8:f0:
c2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:51:47:15:E4:4E:38:80:F9:59:A5:95:10:7C:2F:C3:15:80:CC:BC
X509v3 Authority Key Identifier:
keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/qlFHFeROOID5WaWVEHwvwxWAzLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.190.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:0b:6d:cf:7b:96:dd:ce:86:f1:62:dd:80:4f:93:39:80:fc:
80:4f:76:ef:91:9d:ef:67:05:0b:cd:6d:bb:58:55:4b:b5:e1:
48:7c:1d:40:75:82:f7:4e:59:9d:0a:8a:a6:60:1f:4c:ba:4b:
fd:37:b3:65:a3:32:d9:9e:09:63:7e:82:35:51:dc:5c:6c:88:
1d:0a:3e:9b:6f:d5:40:2d:74:76:2c:4a:2b:08:46:3b:da:24:
ff:9e:80:a5:c2:87:23:d7:cf:15:b2:87:5d:32:84:f5:b1:62:
d2:3b:e7:bd:27:8f:c3:cc:9f:a2:d2:45:60:52:e6:27:28:94:
d1:07:49:c1:f4:57:18:53:b2:1b:f5:b7:32:58:1b:04:84:db:
0b:ee:17:05:ba:65:72:2c:a2:ca:62:a7:13:ac:b4:1b:07:96:
68:72:0f:74:12:21:6e:33:50:ba:10:b4:95:06:d7:c3:d3:ea:
13:b3:0f:80:26:96:48:9d:06:e2:f9:75:a6:1d:33:e4:f1:95:
0d:e0:33:b1:34:10:35:8a:da:32:78:91:64:73:5e:b1:61:73:
b7:73:b3:f7:b7:61:ea:46:85:62:63:e6:08:46:d1:9e:d7:3a:
2b:46:d6:fd:99:1d:d5:54:60:e2:aa:8f:b7:79:50:f5:89:ee:
6c:f5:2d:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbA9ObNJ5XMaGRVw8+G2dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNWM4NTI4ZjgxNzg3YzQ4OWM1NGE5OTM4MzkyNjlmNWE2
YjFmOTQwHhcNMjUwMTAyMDk1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTUxNDcxNWU0NGUzODgwZjk1OWE1OTUxMDdjMmZjMzE1ODBjY2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dz9z1Te1f6pogzSFjxfdqGOquRz
eLKC0KYeXCyqgvCK+d89GIFFQDTUxiT3xUqnlEq+9XwcJRFmcrdg0rSNqX/Q486A
nQT9skGC22wK9nB6Avd4F2rO+hn19OxKmeV4u4KoqR1yw2P2xME2WD3UOUQNvmsD
Y0jh3Nu46W27TCYc9WbSp65eLvjEeNUsRnzj3HyqWYCDX6n1Q8+1p0ZfpmJkvjdr
B2XkeH1+uOS4MGlI/5uspn08TB9hhfyeqbJtK1fD4MnLZPb8gEhFLrYfYmEPFGDH
DcIQse6lUSNp+68+te/LmDSZZV6OusSAXi1sTa2F7LTM4YLptUVx2PDC1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKpRRxXkTjiA+VmllRB8L8MVgMy8MB8GA1UdIwQY
MBaAFH5chSj4F4fEicVKmTg5Jp9aax+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmx5RktQZ1hoOFNKeFVxWk9Ea21uMXBySDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYTEwYjUtMjFmNi00NmI5LWFhZDYt
M2Y3YTNlMDI1ZThiLzEvcWxGSEZlUk9PSUQ1V2FXVkVId3Z3eFdBekx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lYTEwYjUtMjFmNi00NmI5LWFhZDYtM2Y3YTNlMDI1ZThi
LzEvZmx5RktQZ1hoOFNKeFVxWk9Ea21uMXBySDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWy+MA0G
CSqGSIb3DQEBCwUAA4IBAQCeC23Pe5bdzobxYt2AT5M5gPyAT3bvkZ3vZwULzW27
WFVLteFIfB1AdYL3TlmdCoqmYB9Mukv9N7NlozLZngljfoI1UdxcbIgdCj6bb9VA
LXR2LEorCEY72iT/noClwocj188VsoddMoT1sWLSO+e9J4/DzJ+i0kVgUuYnKJTR
B0nB9FcYU7Ib9bcyWBsEhNsL7hcFumVyLKLKYqcTrLQbB5Zocg90EiFuM1C6ELSV
BtfD0+oTsw+AJpZInQbi+XWmHTPk8ZUN4DOxNBA1itoyeJFkc16xYXO3c7P3t2Hq
RoViY+YIRtGe1zorRtb9mR3VVGDiqo+3eVD1ie5s9S0C
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:33 2025 by rpki-client