Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/SrGxiEcbv0Zc7-cVhdHTCkDoX9w.roa
File: SrGxiEcbv0Zc7-cVhdHTCkDoX9w.roa (raw, json)
Hash identifier: iavVdmhGOCEa+iXrvr89fSP+yPeTS+0oRnvgbRj+J3g=
Subject key identifier: 4A:B1:B1:88:47:1B:BF:46:5C:EF:E7:15:85:D1:D3:0A:40:E8:5F:DC
Certificate issuer: /CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Certificate serial: 019425FDA2140B58434B18F1F6810C828747
Authority key identifier: 1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/SrGxiEcbv0Zc7-cVhdHTCkDoX9w.roa
Signing time: Thu 02 Jan 2025 07:49:26 +0000
ROA not before: Thu 02 Jan 2025 07:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196722
IP address blocks: 193.5.180.0/24 maxlen: 24
193.5.181.0/24 maxlen: 24
193.5.182.0/24 maxlen: 24
193.5.185.0/24 maxlen: 24
193.5.186.0/24 maxlen: 24
193.5.187.0/24 maxlen: 24
193.5.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a2:14:0b:58:43:4b:18:f1:f6:81:0c:82:87:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Validity
Not Before: Jan 2 07:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ab1b188471bbf465cefe71585d1d30a40e85fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:55:8e:ac:ff:36:1c:1d:a6:2f:51:14:0a:a6:
59:0e:0f:79:e3:8a:d1:78:b1:98:e6:37:ee:df:e7:
14:92:db:9a:f9:10:20:09:03:55:c9:87:2b:2e:fd:
9b:70:41:23:ec:23:d9:69:2b:19:df:b1:25:16:cd:
2e:bf:70:54:d8:25:fd:da:fe:b0:d0:7e:78:f5:23:
91:da:bb:ca:54:c1:55:d4:f3:66:c2:65:cb:ed:33:
11:58:1e:fe:19:14:2a:ee:35:22:36:9c:69:71:f7:
00:73:51:4a:f5:c4:9c:5c:de:85:6f:c1:bc:27:ad:
07:1b:6a:40:ea:29:8f:d0:5e:24:6f:09:28:4e:49:
d2:17:0f:cc:8f:d4:eb:e4:f9:a0:12:34:c7:37:97:
c1:03:b5:09:a5:c0:2e:60:eb:d0:ea:6a:9d:11:5f:
80:76:e6:c7:42:6b:c2:04:64:1f:fc:e2:cd:33:06:
ec:b8:38:02:df:3e:17:b9:a0:9a:d1:b5:11:34:d3:
83:56:bd:cd:2d:bc:a1:8f:23:a3:2c:2b:79:c1:27:
e3:76:98:8b:14:40:d8:ce:df:36:11:62:07:17:97:
5d:b5:d7:b9:f0:bd:af:08:eb:d5:bb:a3:aa:e4:15:
31:bc:66:64:e1:f4:48:4e:4d:4e:64:a3:4b:58:dc:
01:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B1:B1:88:47:1B:BF:46:5C:EF:E7:15:85:D1:D3:0A:40:E8:5F:DC
X509v3 Authority Key Identifier:
keyid:1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/SrGxiEcbv0Zc7-cVhdHTCkDoX9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.180.0-193.5.182.255
193.5.185.0-193.5.188.255
Signature Algorithm: sha256WithRSAEncryption
8b:35:37:9d:a2:8c:a6:10:d6:39:6e:c4:6c:bf:48:41:ef:d2:
dc:3d:38:1b:e3:ce:b9:aa:e1:4d:a1:1a:25:d6:e1:58:da:1a:
ef:6d:be:b5:8d:9d:bc:61:d9:ee:c4:10:bc:96:2f:d4:9d:55:
c7:16:16:ee:85:bf:43:1e:31:5a:56:45:19:d8:5e:0f:d8:1c:
36:de:a0:56:ef:bc:56:44:3f:fd:c9:df:de:e8:d5:02:3c:b4:
b2:f8:7e:66:b2:bc:38:25:be:01:3c:1b:6b:d4:3e:0a:66:7c:
9a:8e:e1:15:c6:c9:e9:c8:b8:cc:bc:52:56:bf:2c:8d:3f:32:
24:69:2e:24:9c:85:39:09:84:f4:a5:35:ad:9d:0b:ec:ee:10:
30:27:00:89:1f:4e:8f:87:28:2f:05:85:74:bf:4c:c9:ef:06:
c7:c3:05:f0:7c:58:85:ec:65:c2:38:8d:a1:a6:fa:7e:f7:16:
0e:bd:69:35:72:73:b9:cd:e6:26:e3:40:21:15:97:bc:10:1e:
41:39:9d:98:7b:35:49:d9:ee:f2:9d:43:ce:75:f4:fa:e7:71:
e1:a3:f1:78:9e:9b:58:58:76:6e:21:dd:ff:28:a8:86:23:da:
06:8a:61:43:23:b9:f8:84:85:e4:ec:ad:d6:e7:02:9b:6a:f0:
32:26:ef:e7
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZQl/aIUC1hDSxjx9oEMgodHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYWFiYTdkYTdjOGYzNmM4YjI3NWNhNzM4NDkxY2VkY2Ni
NWUzMTIwHhcNMjUwMTAyMDc0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWIxYjE4ODQ3MWJiZjQ2NWNlZmU3MTU4NWQxZDMwYTQwZTg1ZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31WOrP82HB2mL1EUCqZZDg9544rR
eLGY5jfu3+cUktua+RAgCQNVyYcrLv2bcEEj7CPZaSsZ37ElFs0uv3BU2CX92v6w
0H549SOR2rvKVMFV1PNmwmXL7TMRWB7+GRQq7jUiNpxpcfcAc1FK9cScXN6Fb8G8
J60HG2pA6imP0F4kbwkoTknSFw/Mj9Tr5PmgEjTHN5fBA7UJpcAuYOvQ6mqdEV+A
dubHQmvCBGQf/OLNMwbsuDgC3z4XuaCa0bURNNODVr3NLbyhjyOjLCt5wSfjdpiL
FEDYzt82EWIHF5ddtde58L2vCOvVu6Oq5BUxvGZk4fRITk1OZKNLWNwBEQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFEqxsYhHG79GXO/nFYXR0wpA6F/cMB8GA1UdIwQY
MBaAFBqqun2nyPNsiydcpzhJHO3MteMSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3FxNmZhZkk4MnlMSjF5bk9Fa2M3Y3kxNHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hNzNmMDktMWI5ZC00YzI2LWIwMWQt
MGU4YTk0ODVhOWEyLzEvU3JHeGlFY2J2MFpjNy1jVmhkSFRDa0RvWDl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9hNzNmMDktMWI5ZC00YzI2LWIwMWQtMGU4YTk0ODVhOWEy
LzEvR3FxNmZhZkk4MnlMSjF5bk9Fa2M3Y3kxNHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBALBBbQD
BADBBbYwDAMEAMEFuQMEAMEFvDANBgkqhkiG9w0BAQsFAAOCAQEAizU3naKMphDW
OW7EbL9IQe/S3D04G+POuarhTaEaJdbhWNoa722+tY2dvGHZ7sQQvJYv1J1VxxYW
7oW/Qx4xWlZFGdheD9gcNt6gVu+8VkQ//cnf3ujVAjy0svh+ZrK8OCW+ATwba9Q+
CmZ8mo7hFcbJ6ci4zLxSVr8sjT8yJGkuJJyFOQmE9KU1rZ0L7O4QMCcAiR9Oj4co
LwWFdL9Mye8Gx8MF8HxYhexlwjiNoab6fvcWDr1pNXJzuc3mJuNAIRWXvBAeQTmd
mHs1Sdnu8p1DznX0+udx4aPxeJ6bWFh2biHd/yiohiPaBophQyO5+ISF5Oyt1ucC
m2rwMibv5w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:13 2025 by rpki-client