Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/qdU5r0eoyeBHUa1NS90_R0v_QXg.roa
File: qdU5r0eoyeBHUa1NS90_R0v_QXg.roa (raw, json)
Hash identifier: VQ2X9ZLs6HKDrETPNNW9FW4YLxSUU+RRG8UFpA6pPfw=
Subject key identifier: A9:D5:39:AF:47:A8:C9:E0:47:51:AD:4D:4B:DD:3F:47:4B:FF:41:78
Certificate issuer: /CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Certificate serial: 019425FDA242EAA80750E3CE59F5EC288B37
Authority key identifier: 1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/qdU5r0eoyeBHUa1NS90_R0v_QXg.roa
Signing time: Thu 02 Jan 2025 07:49:26 +0000
ROA not before: Thu 02 Jan 2025 07:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201228
IP address blocks: 193.5.184.0/24 maxlen: 24
193.5.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a2:42:ea:a8:07:50:e3:ce:59:f5:ec:28:8b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Validity
Not Before: Jan 2 07:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9d539af47a8c9e04751ad4d4bdd3f474bff4178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:73:e8:1a:d1:42:3d:e4:05:3e:cb:7d:7a:
5e:e7:43:c8:30:85:57:c3:02:c3:1d:ff:2f:3d:d5:
bd:8b:72:1a:c9:f0:47:e3:0c:57:50:91:5f:d7:fa:
ee:b2:99:35:14:c0:32:22:27:9b:74:7a:01:78:7f:
c9:19:be:e7:f4:ac:34:c5:61:b1:d1:3b:d9:7a:d9:
d8:8b:c2:e0:18:42:35:bd:4d:c7:5e:fc:5a:71:cb:
9e:85:25:8b:ed:7b:55:cf:86:40:78:61:db:5d:9a:
b0:c2:b9:00:4c:4a:8c:78:18:18:c7:ff:e7:55:0a:
68:ab:7f:43:02:25:ca:8d:1d:de:0d:3b:28:44:b7:
88:45:5a:68:12:8f:d4:86:60:b7:f6:d2:01:44:92:
ae:b2:2c:35:89:b2:d6:39:17:1d:b9:25:4d:83:3e:
03:93:c6:88:e0:c8:9e:63:f6:84:88:3d:d2:61:7f:
66:12:f5:cc:a4:ce:66:70:2d:18:25:14:7f:e7:06:
87:8e:99:17:28:df:fc:be:cd:c4:18:b8:1f:1d:4d:
41:0f:8e:24:c3:1d:df:44:38:01:d8:2c:a6:4d:4a:
58:79:88:5a:37:b1:28:b8:9e:9b:95:84:47:69:47:
ce:55:56:31:d5:81:60:3e:fe:37:85:15:8d:1d:b1:
0a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D5:39:AF:47:A8:C9:E0:47:51:AD:4D:4B:DD:3F:47:4B:FF:41:78
X509v3 Authority Key Identifier:
keyid:1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/qdU5r0eoyeBHUa1NS90_R0v_QXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.184.0/24
193.5.190.0/24
Signature Algorithm: sha256WithRSAEncryption
16:98:6b:5f:14:d0:82:52:3b:de:1a:97:82:5b:6c:55:51:3b:
36:34:9c:1e:a5:e6:2a:fa:8b:9b:be:54:76:ca:3f:3f:7c:b0:
55:85:95:50:2b:29:2f:31:81:b3:68:d8:90:22:bc:a3:5e:d2:
67:1d:27:1c:1d:27:d1:de:0c:53:6d:23:10:f3:48:2f:bc:b6:
89:2c:77:14:3b:99:ed:51:e9:38:be:5b:42:89:e0:8c:af:fb:
13:69:c2:ff:0a:e4:ed:b9:68:ce:c9:b5:2c:c6:1d:de:7c:d3:
12:1d:3f:c7:96:b1:b1:79:5f:c7:be:44:b8:76:ad:6a:4b:cd:
0b:ca:c1:93:e5:88:21:9a:4e:d3:c2:4c:a7:22:eb:36:fb:7a:
58:7d:19:67:07:b6:d9:d0:d7:db:be:c8:55:3f:9b:37:e3:54:
91:e5:92:49:29:44:f3:5c:07:8a:5a:b5:82:25:df:1b:12:65:
db:5c:6b:87:7e:2e:77:ed:c3:76:58:76:d3:61:10:54:c0:92:
d6:90:88:59:88:71:01:e8:a0:02:fc:37:02:9e:e8:ab:a5:e4:
c8:e5:ba:28:ec:f1:67:f3:78:6e:37:4a:ca:ce:4e:a6:75:20:
49:29:40:da:4e:ee:34:e7:22:bc:0a:2e:11:1c:e9:73:b7:7c:
11:de:13:04
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQl/aJC6qgHUOPOWfXsKIs3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYWFiYTdkYTdjOGYzNmM4YjI3NWNhNzM4NDkxY2VkY2Ni
NWUzMTIwHhcNMjUwMTAyMDc0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWQ1MzlhZjQ3YThjOWUwNDc1MWFkNGQ0YmRkM2Y0NzRiZmY0MTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzpz6BrRQj3kBT7LfXpe50PIMIVX
wwLDHf8vPdW9i3IayfBH4wxXUJFf1/ruspk1FMAyIiebdHoBeH/JGb7n9Kw0xWGx
0TvZetnYi8LgGEI1vU3HXvxaccuehSWL7XtVz4ZAeGHbXZqwwrkATEqMeBgYx//n
VQpoq39DAiXKjR3eDTsoRLeIRVpoEo/UhmC39tIBRJKusiw1ibLWORcduSVNgz4D
k8aI4MieY/aEiD3SYX9mEvXMpM5mcC0YJRR/5waHjpkXKN/8vs3EGLgfHU1BD44k
wx3fRDgB2CymTUpYeYhaN7EouJ6blYRHaUfOVVYx1YFgPv43hRWNHbEKcwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKnVOa9HqMngR1GtTUvdP0dL/0F4MB8GA1UdIwQY
MBaAFBqqun2nyPNsiydcpzhJHO3MteMSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3FxNmZhZkk4MnlMSjF5bk9Fa2M3Y3kxNHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hNzNmMDktMWI5ZC00YzI2LWIwMWQt
MGU4YTk0ODVhOWEyLzEvcWRVNXIwZW95ZUJIVWExTlM5MF9SMHZfUVhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9hNzNmMDktMWI5ZC00YzI2LWIwMWQtMGU4YTk0ODVhOWEy
LzEvR3FxNmZhZkk4MnlMSjF5bk9Fa2M3Y3kxNHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwQW4AwQA
wQW+MA0GCSqGSIb3DQEBCwUAA4IBAQAWmGtfFNCCUjveGpeCW2xVUTs2NJwepeYq
+oubvlR2yj8/fLBVhZVQKykvMYGzaNiQIryjXtJnHSccHSfR3gxTbSMQ80gvvLaJ
LHcUO5ntUek4vltCieCMr/sTacL/CuTtuWjOybUsxh3efNMSHT/HlrGxeV/HvkS4
dq1qS80LysGT5Yghmk7TwkynIus2+3pYfRlnB7bZ0NfbvshVP5s341SR5ZJJKUTz
XAeKWrWCJd8bEmXbXGuHfi537cN2WHbTYRBUwJLWkIhZiHEB6KAC/DcCnuirpeTI
5boo7PFn83huN0rKzk6mdSBJKUDaTu405yK8Ci4RHOlzt3wR3hME
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:10:01 2025 by rpki-client