Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/k0f9OoQq6B1aLa4kFQEIGk8_qxc.roa
File: k0f9OoQq6B1aLa4kFQEIGk8_qxc.roa (raw, json)
Hash identifier: Zg6lE/FaFkljjUzS9qnwhWnpjXkAlp/DGZm1wnoBwyI=
Subject key identifier: 93:47:FD:3A:84:2A:E8:1D:5A:2D:AE:24:15:01:08:1A:4F:3F:AB:17
Certificate issuer: /CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Certificate serial: 0194258F2141D085953B5DE8C5846D4E344E
Authority key identifier: 5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/k0f9OoQq6B1aLa4kFQEIGk8_qxc.roa
Signing time: Thu 02 Jan 2025 05:48:44 +0000
ROA not before: Thu 02 Jan 2025 05:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 193.186.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:21:41:d0:85:95:3b:5d:e8:c5:84:6d:4e:34:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Validity
Not Before: Jan 2 05:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9347fd3a842ae81d5a2dae241501081a4f3fab17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d5:03:3d:f4:0c:6f:e9:99:9f:bd:2d:6a:82:
2d:39:56:6c:da:73:8a:51:97:5b:08:7f:85:d2:48:
71:4e:27:65:34:32:88:c5:13:4b:1f:18:23:ad:09:
48:4f:95:dd:b0:ad:c0:4a:34:34:5b:02:70:38:a5:
9c:1f:22:aa:ec:a9:ab:2d:52:b8:89:66:e2:b3:0e:
5d:d2:62:fd:35:9b:b6:2f:5b:d1:1a:39:3d:93:9e:
1b:12:4e:c4:ac:31:6f:6e:8e:7b:d7:27:8d:40:1c:
12:38:54:00:ab:52:ca:6d:f5:21:82:da:e6:49:60:
e1:e0:6c:81:8c:04:01:ae:6c:8f:fe:65:4d:0d:b3:
3b:8a:15:65:7d:23:ed:ab:a3:56:b9:64:7e:4e:b1:
55:41:d5:20:50:30:74:84:02:91:9f:3a:b3:e9:88:
92:25:58:27:70:a4:c0:32:b0:0a:f0:09:13:cb:7e:
be:07:61:a2:ed:cd:14:7e:66:28:5d:72:f1:59:5c:
8c:23:fc:e5:50:e2:8e:f2:ad:b6:66:e1:b7:f7:d3:
0b:65:de:cd:2c:5f:d6:d2:41:81:bc:fd:8e:a9:68:
b2:b0:86:3e:26:ea:72:ab:99:72:08:21:62:c0:76:
e8:d4:98:da:86:3e:b7:39:e2:0f:f4:91:da:c9:1e:
0d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:47:FD:3A:84:2A:E8:1D:5A:2D:AE:24:15:01:08:1A:4F:3F:AB:17
X509v3 Authority Key Identifier:
keyid:5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/k0f9OoQq6B1aLa4kFQEIGk8_qxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.208.0/24
Signature Algorithm: sha256WithRSAEncryption
08:90:a0:4e:c2:11:a2:2e:ab:15:81:29:b8:10:76:7c:1a:9e:
b1:e8:74:a2:b3:17:08:c9:7a:ad:2b:55:72:79:16:1e:d7:db:
8d:52:f2:68:0a:67:17:17:a5:77:90:52:49:6a:a9:1b:7d:aa:
a4:c8:17:72:b9:ff:b6:9a:3a:8f:dd:bb:10:e9:b1:76:d5:8e:
5a:74:bd:cd:3c:f7:2a:2b:91:06:de:f2:d2:ab:fd:61:a2:49:
32:42:94:c2:13:b9:0a:b8:a7:b2:2d:db:c0:13:eb:58:31:f5:
8f:06:ac:5c:81:57:2c:da:b0:59:bd:b6:de:57:1b:5b:e6:bc:
eb:92:e7:ec:f6:39:92:fb:3f:7f:4b:4b:23:ff:17:c6:1f:b0:
f3:1f:3b:91:9f:9a:f6:1c:31:cd:5d:ad:9e:a9:38:e7:83:ed:
b0:52:e6:95:1c:a1:46:f7:11:00:a1:73:64:0f:fa:d2:19:45:
0e:99:92:00:84:65:66:72:0a:a5:77:05:8d:41:16:5c:95:e9:
e0:06:c8:83:bb:fe:77:c0:08:2d:e3:1b:61:c3:8f:b3:c2:7f:
aa:7e:67:c1:10:c1:91:61:c8:c3:28:a8:f6:f4:3d:ea:71:2e:
19:41:27:63:c0:23:0b:26:cf:00:45:f5:a1:fe:77:98:d6:ec:
6d:49:f2:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljyFB0IWVO13oxYRtTjROMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViOTA1NTFlM2MxN2UwYTAyZDI4ZDZkY2EyNzlkYjNlNDE0
N2Y5OTEwHhcNMjUwMTAyMDU0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzQ3ZmQzYTg0MmFlODFkNWEyZGFlMjQxNTAxMDgxYTRmM2ZhYjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidUDPfQMb+mZn70taoItOVZs2nOK
UZdbCH+F0khxTidlNDKIxRNLHxgjrQlIT5XdsK3ASjQ0WwJwOKWcHyKq7KmrLVK4
iWbisw5d0mL9NZu2L1vRGjk9k54bEk7ErDFvbo571yeNQBwSOFQAq1LKbfUhgtrm
SWDh4GyBjAQBrmyP/mVNDbM7ihVlfSPtq6NWuWR+TrFVQdUgUDB0hAKRnzqz6YiS
JVgncKTAMrAK8AkTy36+B2Gi7c0UfmYoXXLxWVyMI/zlUOKO8q22ZuG399MLZd7N
LF/W0kGBvP2OqWiysIY+Jupyq5lyCCFiwHbo1Jjahj63OeIP9JHayR4NdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJNH/TqEKugdWi2uJBUBCBpPP6sXMB8GA1UdIwQY
MBaAFFuQVR48F+CgLSjW3KJ52z5BR/mRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzVCVkhqd1g0S0F0S05iY29ubmJQa0ZILVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jMTkyYTQtNzZiMi00NjVkLTg4MTgt
YTMwZTMzYTcwYjFlLzEvazBmOU9vUXE2QjFhTGE0a0ZRRUlHazhfcXhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jMTkyYTQtNzZiMi00NjVkLTg4MTgtYTMwZTMzYTcwYjFl
LzEvVzVCVkhqd1g0S0F0S05iY29ubmJQa0ZILVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbrQMA0G
CSqGSIb3DQEBCwUAA4IBAQAIkKBOwhGiLqsVgSm4EHZ8Gp6x6HSisxcIyXqtK1Vy
eRYe19uNUvJoCmcXF6V3kFJJaqkbfaqkyBdyuf+2mjqP3bsQ6bF21Y5adL3NPPcq
K5EG3vLSq/1hokkyQpTCE7kKuKeyLdvAE+tYMfWPBqxcgVcs2rBZvbbeVxtb5rzr
kufs9jmS+z9/S0sj/xfGH7DzHzuRn5r2HDHNXa2eqTjng+2wUuaVHKFG9xEAoXNk
D/rSGUUOmZIAhGVmcgqldwWNQRZclengBsiDu/53wAgt4xthw4+zwn+qfmfBEMGR
YcjDKKj29D3qcS4ZQSdjwCMLJs8ARfWh/neY1uxtSfLh
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:12:35 2025 by rpki-client