Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/uiEwRDzyo2IATe2UZ8J34lJkwOQ.roa
File: uiEwRDzyo2IATe2UZ8J34lJkwOQ.roa (raw, json)
Hash identifier: qd8Q/scpzUgFvAn3rGCEs42W3qdpmfptd5u2EgNgXK4=
Subject key identifier: BA:21:30:44:3C:F2:A3:62:00:4D:ED:94:67:C2:77:E2:52:64:C0:E4
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 019424B3E89EFD94E18B66D4A5020B1A1F0A
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/uiEwRDzyo2IATe2UZ8J34lJkwOQ.roa
Signing time: Thu 02 Jan 2025 01:49:17 +0000
ROA not before: Thu 02 Jan 2025 01:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201934
IP address blocks: 193.38.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e8:9e:fd:94:e1:8b:66:d4:a5:02:0b:1a:1f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 01:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba2130443cf2a362004ded9467c277e25264c0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1e:d0:5e:54:88:6c:28:47:67:d7:f4:dc:67:
d8:05:1f:a5:79:b5:b5:05:17:48:d7:8f:b2:a1:32:
3d:bd:9a:28:14:cf:c0:66:5d:76:06:3f:8a:e8:44:
21:0f:82:ae:44:51:d3:ed:8b:76:5e:75:7a:5c:8b:
cf:5f:55:ee:d6:41:9d:85:69:31:a1:4c:44:64:a5:
f2:d7:64:2b:d2:43:10:1d:e3:60:3d:1b:ae:c7:e3:
81:e6:9a:a6:61:69:b3:4f:7b:dc:34:69:7b:1c:28:
71:77:23:88:87:44:be:11:83:9b:65:e1:be:81:62:
c1:99:bc:48:59:d7:a5:30:5a:00:fa:9e:40:12:61:
31:1a:68:99:cb:68:60:d7:d9:4b:54:36:62:b0:8b:
36:14:48:1f:90:1d:9a:d7:00:8a:9e:41:29:92:d8:
f5:38:27:e2:22:e0:4b:aa:fe:90:43:b2:bd:0c:b4:
73:59:0d:c7:8a:30:ba:9c:47:18:46:d8:3b:df:95:
5f:e8:68:8d:90:9f:da:a6:14:e8:c6:3d:20:64:7c:
96:cc:03:62:2d:90:3b:7f:8b:1d:00:55:10:92:f5:
de:19:1e:1e:82:75:11:42:64:a5:24:e5:7a:17:bd:
2a:ec:d6:de:33:ec:79:16:1f:7a:36:6c:ed:3b:06:
9b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:21:30:44:3C:F2:A3:62:00:4D:ED:94:67:C2:77:E2:52:64:C0:E4
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/uiEwRDzyo2IATe2UZ8J34lJkwOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.252.0/24
Signature Algorithm: sha256WithRSAEncryption
96:2c:b4:81:75:e7:8c:ba:a2:46:cf:aa:34:01:02:1c:49:fe:
a6:3e:c0:8d:17:6e:90:cf:39:ee:3d:57:f3:1c:02:b6:07:60:
f1:6d:16:84:8c:d9:54:61:f6:62:50:79:92:42:ef:c4:f7:cb:
86:10:82:08:eb:29:09:d1:94:2d:90:52:ff:73:41:69:fe:2f:
4b:f5:8d:77:48:e7:42:c2:fc:04:df:74:e7:6b:b0:7b:9e:4d:
94:b4:ce:8b:43:bd:c7:c4:53:c6:dc:c9:aa:c8:c5:70:54:5e:
cc:1b:74:d5:1c:4e:13:44:94:be:28:92:f3:17:f0:f0:c2:bd:
20:86:d7:8d:fe:04:b1:6c:f3:fc:6b:31:cc:c9:6f:d2:28:96:
01:7e:56:16:4e:c6:ba:56:fd:3d:b6:04:3f:9b:20:65:64:dd:
45:cd:0b:e1:93:9a:44:6f:5c:61:16:d0:38:13:fd:5f:27:0b:
c6:ef:3b:1d:5a:6f:27:f7:11:dd:3b:1c:ea:0d:5f:73:96:6b:
c4:2c:7c:df:62:0b:1a:0e:3a:60:0e:e1:1d:53:30:52:be:22:
76:90:97:00:c5:b1:0f:eb:bb:2a:d7:46:ef:31:a8:1f:67:88:
3c:1c:9e:19:1e:c4:45:ef:ab:d8:ef:ba:46:3d:bb:a8:78:f5:
01:a7:f7:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks+ie/ZThi2bUpQILGh8KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZjU0M2UyM2UyOWZiMDM3NDhkMDkzOTcyNmYzMGZlOWFm
ZmExOWUwHhcNMjUwMTAyMDE0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTIxMzA0NDNjZjJhMzYyMDA0ZGVkOTQ2N2MyNzdlMjUyNjRjMGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh7QXlSIbChHZ9f03GfYBR+lebW1
BRdI14+yoTI9vZooFM/AZl12Bj+K6EQhD4KuRFHT7Yt2XnV6XIvPX1Xu1kGdhWkx
oUxEZKXy12Qr0kMQHeNgPRuux+OB5pqmYWmzT3vcNGl7HChxdyOIh0S+EYObZeG+
gWLBmbxIWdelMFoA+p5AEmExGmiZy2hg19lLVDZisIs2FEgfkB2a1wCKnkEpktj1
OCfiIuBLqv6QQ7K9DLRzWQ3HijC6nEcYRtg735Vf6GiNkJ/aphToxj0gZHyWzANi
LZA7f4sdAFUQkvXeGR4egnURQmSlJOV6F70q7NbeM+x5Fh96NmztOwab/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLohMEQ88qNiAE3tlGfCd+JSZMDkMB8GA1UdIwQY
MBaAFAv1Q+I+KfsDdI0JOXJvMP6a/6GeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMt
YTM1ZmM0MzhkNGNhLzEvdWlFd1JEenlvMklBVGUyVVo4SjM0bEprd09RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMtYTM1ZmM0MzhkNGNh
LzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSb8MA0G
CSqGSIb3DQEBCwUAA4IBAQCWLLSBdeeMuqJGz6o0AQIcSf6mPsCNF26QzznuPVfz
HAK2B2DxbRaEjNlUYfZiUHmSQu/E98uGEIII6ykJ0ZQtkFL/c0Fp/i9L9Y13SOdC
wvwE33Tna7B7nk2UtM6LQ73HxFPG3MmqyMVwVF7MG3TVHE4TRJS+KJLzF/Dwwr0g
hteN/gSxbPP8azHMyW/SKJYBflYWTsa6Vv09tgQ/myBlZN1FzQvhk5pEb1xhFtA4
E/1fJwvG7zsdWm8n9xHdOxzqDV9zlmvELHzfYgsaDjpgDuEdUzBSviJ2kJcAxbEP
67sq10bvMagfZ4g8HJ4ZHsRF76vY77pGPbuoePUBp/dW
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:36:24 2025 by rpki-client