Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/FkEtOcybmkeU2VY4ZDNh4TQD4Us.roa
File: FkEtOcybmkeU2VY4ZDNh4TQD4Us.roa (raw, json)
Hash identifier: /n0EorQrNvumpJCJEydj0xjM/0IAJCZt4aRyN0+hfTc=
Subject key identifier: 16:41:2D:39:CC:9B:9A:47:94:D9:56:38:64:33:61:E1:34:03:E1:4B
Certificate issuer: /CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Certificate serial: 01941FFA9D9D56CAA28519B50F0BC845E7AF
Authority key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/FkEtOcybmkeU2VY4ZDNh4TQD4Us.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30815
IP address blocks: 193.25.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9d:9d:56:ca:a2:85:19:b5:0f:0b:c8:45:e7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16412d39cc9b9a4794d95638643361e13403e14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:73:87:fa:ce:a6:17:0f:87:4c:d8:4e:35:
a3:cc:b4:fb:e0:41:f4:12:2f:c3:75:5e:45:7b:42:
d3:8b:24:93:0e:74:3b:4a:33:09:a6:f8:29:e2:0f:
33:e2:b4:fd:5d:ac:18:2d:08:c3:1a:c5:4b:6d:4c:
98:a3:f4:a1:d6:f6:b4:59:7c:78:6e:13:02:62:80:
7c:98:65:78:ad:09:3c:a8:fc:6c:8d:34:ae:84:3f:
81:60:ec:84:f6:ae:05:de:5e:9f:b8:3d:07:52:6f:
18:1e:4f:70:67:cf:54:a3:c2:41:26:05:54:de:40:
83:5f:ff:d8:b2:22:a7:7f:86:ad:94:b8:d6:08:69:
db:dd:a9:13:29:c6:c8:c8:fe:8d:1e:0d:e9:66:1c:
6a:10:9e:ef:34:d1:10:27:e0:cf:b3:92:65:98:58:
2f:6e:39:a7:b1:e0:79:a1:8a:3c:68:96:82:3c:84:
5e:c0:83:3a:96:cc:c1:08:6c:9c:0d:27:a5:84:fc:
51:ff:e4:d5:72:7f:4d:60:6b:dd:0d:01:77:fc:a2:
4b:85:f4:ab:70:c7:8f:90:ac:1a:9a:32:7f:a3:c7:
f7:99:3f:b2:f2:3b:9e:2a:9c:4a:cb:3c:98:79:ee:
33:70:33:27:f7:96:03:95:de:a9:ad:c2:22:5b:46:
fc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:41:2D:39:CC:9B:9A:47:94:D9:56:38:64:33:61:E1:34:03:E1:4B
X509v3 Authority Key Identifier:
keyid:D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/FkEtOcybmkeU2VY4ZDNh4TQD4Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.205.0/24
Signature Algorithm: sha256WithRSAEncryption
73:97:b5:5e:2c:ca:4e:55:8e:5d:fe:f6:99:ea:93:a4:34:29:
de:0b:c5:ea:d1:7e:83:55:3c:6a:24:36:0e:43:5b:16:d8:a4:
84:c2:65:15:4c:ae:a5:99:6a:75:f1:58:58:e6:bb:52:52:89:
da:bb:48:05:6b:5e:f5:a1:55:1f:39:67:6d:37:c5:cc:0c:0b:
54:a7:bf:33:97:a3:27:06:b2:06:fd:90:e8:1f:34:37:9c:15:
88:00:0d:4a:b0:73:67:d3:23:4b:85:71:de:eb:2b:20:06:74:
52:26:a7:76:86:88:bf:42:ee:c4:93:ab:f1:9e:e5:b0:4a:95:
4a:12:d4:27:1e:90:7c:77:39:52:ee:fd:00:2a:e7:ff:ba:9c:
f4:9d:b2:26:3b:f3:34:a6:82:1a:65:2f:6c:52:cf:4b:39:fb:
d8:95:c9:40:56:ba:6e:51:66:0d:4a:b4:09:77:92:15:58:9e:
1a:27:c9:4d:1a:93:05:b4:f7:3c:b9:dc:04:b8:7c:14:78:97:
d2:01:7c:d1:83:bd:5c:eb:c4:a0:a5:ed:8c:f6:f9:86:b3:b6:
ef:57:29:55:75:45:e2:78:4c:16:1a:ab:89:9e:d3:ea:7e:f1:
89:95:c9:51:37:be:3f:09:7f:b6:10:5a:8e:48:ba:9a:45:1d:
d5:19:8d:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+p2dVsqihRm1DwvIReevMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMTEzYWYzZjM2YmI5MmEwZjJmYmRhZmUzYjY3MWY2Yjlm
Y2VmYTgwHhcNMjUwMTAxMDM0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjQxMmQzOWNjOWI5YTQ3OTRkOTU2Mzg2NDMzNjFlMTM0MDNlMTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg9zh/rOphcPh0zYTjWjzLT74EH0
Ei/DdV5Fe0LTiySTDnQ7SjMJpvgp4g8z4rT9XawYLQjDGsVLbUyYo/Sh1va0WXx4
bhMCYoB8mGV4rQk8qPxsjTSuhD+BYOyE9q4F3l6fuD0HUm8YHk9wZ89Uo8JBJgVU
3kCDX//YsiKnf4atlLjWCGnb3akTKcbIyP6NHg3pZhxqEJ7vNNEQJ+DPs5JlmFgv
bjmnseB5oYo8aJaCPIRewIM6lszBCGycDSelhPxR/+TVcn9NYGvdDQF3/KJLhfSr
cMePkKwamjJ/o8f3mT+y8jueKpxKyzyYee4zcDMn95YDld6prcIiW0b8wwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBZBLTnMm5pHlNlWOGQzYeE0A+FLMB8GA1UdIwQY
MBaAFNEROvPza7kqDy+9r+O2cfa5/O+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFJFNjhfTnJ1U29QTDcydjQ3Wng5cm44NzZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84OGY5MjYtODk1Yy00NmNlLTllNmIt
MDBjZTlmMDhhZDgzLzEvRmtFdE9jeWJta2VVMlZZNFpETmg0VFFENFVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi84OGY5MjYtODk1Yy00NmNlLTllNmItMDBjZTlmMDhhZDgz
LzEvMFJFNjhfTnJ1U29QTDcydjQ3Wng5cm44NzZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRnNMA0G
CSqGSIb3DQEBCwUAA4IBAQBzl7VeLMpOVY5d/vaZ6pOkNCneC8Xq0X6DVTxqJDYO
Q1sW2KSEwmUVTK6lmWp18VhY5rtSUonau0gFa171oVUfOWdtN8XMDAtUp78zl6Mn
BrIG/ZDoHzQ3nBWIAA1KsHNn0yNLhXHe6ysgBnRSJqd2hoi/Qu7Ek6vxnuWwSpVK
EtQnHpB8dzlS7v0AKuf/upz0nbImO/M0poIaZS9sUs9LOfvYlclAVrpuUWYNSrQJ
d5IVWJ4aJ8lNGpMFtPc8udwEuHwUeJfSAXzRg71c68Sgpe2M9vmGs7bvVylVdUXi
eEwWGquJntPqfvGJlclRN74/CX+2EFqOSLqaRR3VGY0w
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:41 2025 by rpki-client