Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/L2MFVzLu5kpVjnsb4Kb2Ip5hD4I.roa
File: L2MFVzLu5kpVjnsb4Kb2Ip5hD4I.roa (raw, json)
Hash identifier: wDHsr026DvaBiTyi7BBF/QmvI/bBUdaI/D33HJF38Y8=
Subject key identifier: 2F:63:05:57:32:EE:E6:4A:55:8E:7B:1B:E0:A6:F6:22:9E:61:0F:82
Certificate issuer: /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Certificate serial: 01942444B89CA7BD174D5F58AD4943DB0C93
Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/L2MFVzLu5kpVjnsb4Kb2Ip5hD4I.roa
Signing time: Wed 01 Jan 2025 23:47:50 +0000
ROA not before: Wed 01 Jan 2025 23:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49945
IP address blocks: 193.33.130.0/23 maxlen: 23
193.33.130.0/24 maxlen: 24
193.33.131.0/24 maxlen: 24
193.33.136.0/23 maxlen: 23
193.33.136.0/24 maxlen: 24
193.33.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b8:9c:a7:bd:17:4d:5f:58:ad:49:43:db:0c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Validity
Not Before: Jan 1 23:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f63055732eee64a558e7b1be0a6f6229e610f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:90:80:11:86:bc:2f:b4:89:20:83:d8:8a:
21:9a:6b:f6:30:5d:5d:11:6d:25:65:98:60:0c:8c:
ab:71:8d:4d:7e:05:af:b3:25:00:b8:ce:70:f4:58:
c2:60:bf:9a:8b:e2:f4:49:68:5d:4e:f1:aa:c1:b5:
40:04:c1:01:05:3f:2b:81:05:51:6e:98:1e:09:7d:
1e:1b:64:50:08:ba:73:6d:23:c6:6d:c4:a3:fb:7d:
d1:e3:e8:69:87:90:41:ff:73:a4:34:05:e9:c7:cf:
43:5a:72:a6:4c:8f:12:d9:e4:4c:d3:0d:24:06:65:
2f:e7:0c:84:75:f3:0d:81:29:02:bd:90:16:57:8e:
74:fd:26:01:91:78:ab:1b:82:0d:e0:eb:ef:a4:93:
65:fe:29:93:52:44:8a:25:1a:a6:8a:ea:25:e3:a3:
aa:7e:71:25:39:1e:c2:6c:e2:b5:9f:b0:ad:0a:3f:
66:90:ed:1b:37:1b:bd:ab:46:88:8f:a9:71:49:d4:
e4:6a:94:79:8d:7d:1d:ed:4f:ea:78:fb:e7:99:06:
03:d1:bb:80:6e:77:19:0e:cc:58:ef:c3:8e:7e:19:
39:ba:a8:38:f0:50:a1:e8:48:bc:6a:06:11:fd:5a:
77:3f:59:99:af:e6:0b:74:be:13:9c:d5:aa:05:ca:
a1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:63:05:57:32:EE:E6:4A:55:8E:7B:1B:E0:A6:F6:22:9E:61:0F:82
X509v3 Authority Key Identifier:
keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/L2MFVzLu5kpVjnsb4Kb2Ip5hD4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.130.0/23
193.33.136.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:e8:9a:cc:bf:ab:fc:28:48:03:94:f4:4d:54:32:b4:9d:52:
05:d0:7b:09:60:bb:2a:7b:29:51:ae:7f:f8:c8:c8:f2:73:1d:
c2:02:95:a9:bd:72:c1:25:fd:26:cf:41:c9:2f:2b:30:f0:d2:
a4:d2:41:f2:72:21:0a:99:e8:98:02:30:17:37:de:10:b3:74:
15:3a:d2:d6:0e:1c:60:10:2d:6a:99:90:2a:73:a8:1a:bd:f0:
79:9c:a1:97:0d:3f:b6:90:b1:47:a3:06:67:a2:70:21:b9:44:
f4:ca:af:b7:50:c9:f0:84:4b:95:1f:08:0d:54:7d:36:03:f4:
ed:25:17:6b:1f:fe:f1:ce:e8:35:7d:63:72:73:60:e1:c6:0a:
b6:f4:d6:e4:f6:b3:6f:33:e1:0d:41:78:58:18:7b:8f:78:f3:
9b:b8:40:86:fb:c8:31:1b:61:f4:56:dd:60:cf:03:1f:f3:c5:
76:03:1a:84:9b:19:b4:13:79:7d:b2:fc:cc:00:d2:66:c2:23:
c3:98:36:29:ba:1e:f6:8e:ab:ed:d4:01:ca:ff:8b:3c:2e:bc:
ae:d3:eb:8a:6c:7c:52:ec:02:da:b8:b5:98:a1:40:e1:c6:bc:
fe:c0:27:27:bf:04:c5:30:ef:4f:6f:b1:53:28:17:20:19:72:
72:b6:6f:67
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQkRLicp70XTV9YrUlD2wyTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMWJkOTczMmU2Y2RkNmU3NDk0ZDc5MTg3ZmNhODU1YjUx
OTk5MDkwHhcNMjUwMTAxMjM0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjYzMDU1NzMyZWVlNjRhNTU4ZTdiMWJlMGE2ZjYyMjllNjEwZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/qQgBGGvC+0iSCD2Iohmmv2MF1d
EW0lZZhgDIyrcY1NfgWvsyUAuM5w9FjCYL+ai+L0SWhdTvGqwbVABMEBBT8rgQVR
bpgeCX0eG2RQCLpzbSPGbcSj+33R4+hph5BB/3OkNAXpx89DWnKmTI8S2eRM0w0k
BmUv5wyEdfMNgSkCvZAWV450/SYBkXirG4IN4OvvpJNl/imTUkSKJRqmiuol46Oq
fnElOR7CbOK1n7CtCj9mkO0bNxu9q0aIj6lxSdTkapR5jX0d7U/qePvnmQYD0buA
bncZDsxY78OOfhk5uqg48FCh6Ei8agYR/Vp3P1mZr+YLdL4TnNWqBcqhrQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC9jBVcy7uZKVY57G+Cm9iKeYQ+CMB8GA1UdIwQY
MBaAFJ8b2XMubN1udJTXkYf8qFW1GZkJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnh2WmN5NXMzVzUwbE5lUmhfeW9WYlVabVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xNGVhZDktY2JiMS00NjM5LTgxYTct
ZDhiODIwMmQ3Nzg2LzEvTDJNRlZ6THU1a3BWam5zYjRLYjJJcDVoRDRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8xNGVhZDktY2JiMS00NjM5LTgxYTctZDhiODIwMmQ3Nzg2
LzEvbnh2WmN5NXMzVzUwbE5lUmhfeW9WYlVabVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwSGCAwQB
wSGIMA0GCSqGSIb3DQEBCwUAA4IBAQAb6JrMv6v8KEgDlPRNVDK0nVIF0HsJYLsq
eylRrn/4yMjycx3CApWpvXLBJf0mz0HJLysw8NKk0kHyciEKmeiYAjAXN94Qs3QV
OtLWDhxgEC1qmZAqc6gavfB5nKGXDT+2kLFHowZnonAhuUT0yq+3UMnwhEuVHwgN
VH02A/TtJRdrH/7xzug1fWNyc2Dhxgq29Nbk9rNvM+ENQXhYGHuPePObuECG+8gx
G2H0Vt1gzwMf88V2AxqEmxm0E3l9svzMANJmwiPDmDYpuh72jqvt1AHK/4s8Lryu
0+uKbHxS7ALauLWYoUDhxrz+wCcnvwTFMO9Pb7FTKBcgGXJytm9n
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:19 2025 by rpki-client