Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/qvV18edZ4nG1g9Z6XFGjfB91HGk.roa
File: qvV18edZ4nG1g9Z6XFGjfB91HGk.roa (raw, json)
Hash identifier: xA0FHg4k3qhHIOcw440t6o/vgKfLrTtDa1pgd5bBDMs=
Subject key identifier: AA:F5:75:F1:E7:59:E2:71:B5:83:D6:7A:5C:51:A3:7C:1F:75:1C:69
Certificate issuer: /CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Certificate serial: 019424B3E46F7F1D7D9E4DC78C3403DDD13F
Authority key identifier: D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/qvV18edZ4nG1g9Z6XFGjfB91HGk.roa
Signing time: Thu 02 Jan 2025 01:49:16 +0000
ROA not before: Thu 02 Jan 2025 01:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212829
IP address blocks: 193.36.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e4:6f:7f:1d:7d:9e:4d:c7:8c:34:03:dd:d1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Validity
Not Before: Jan 2 01:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aaf575f1e759e271b583d67a5c51a37c1f751c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:18:32:56:1f:00:1a:f6:e4:5b:c4:a4:12:
ae:b3:cf:57:d9:43:f2:e1:bf:8d:a9:d8:30:c2:c9:
e0:9f:df:62:30:49:f4:43:2f:3c:39:fb:8b:4c:fc:
0c:c5:fc:33:91:0b:23:c5:cb:80:27:bf:91:1c:73:
66:df:30:0c:00:e8:75:05:f1:b0:90:2a:a8:34:46:
0a:f0:66:68:67:9c:94:f7:4d:27:5a:24:05:0d:c7:
93:81:70:84:cc:69:a3:db:4a:5e:32:11:c7:44:a7:
f2:d7:77:9a:ec:e2:28:63:ef:6b:d6:68:f0:87:86:
89:58:f7:b5:16:27:42:43:27:08:4c:67:e2:81:13:
4e:d8:9d:d3:77:97:07:da:ab:4d:dc:2e:06:a7:21:
89:93:f8:4e:51:f4:2d:87:54:b9:38:03:57:ca:a6:
d5:0d:83:a4:47:f7:54:cc:55:9b:67:e0:32:79:b7:
1f:9d:69:99:b1:91:8a:03:a0:6e:77:11:56:ab:0c:
a4:b9:51:39:82:c3:19:d5:d0:30:19:2f:bd:6f:5b:
2f:e5:f2:df:7c:a9:91:33:96:34:3d:22:f6:34:8b:
45:33:7d:60:1d:6c:79:66:1a:09:95:ae:e4:84:d5:
bb:bc:e8:36:ae:48:20:2a:49:a8:77:04:f4:90:fd:
87:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F5:75:F1:E7:59:E2:71:B5:83:D6:7A:5C:51:A3:7C:1F:75:1C:69
X509v3 Authority Key Identifier:
keyid:D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/qvV18edZ4nG1g9Z6XFGjfB91HGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.183.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:38:ed:ae:3c:1a:63:3f:f4:58:e2:52:cf:29:3c:19:cd:7d:
6d:63:4d:3f:7e:d8:6d:0a:07:cd:81:18:aa:e4:fa:f5:c8:72:
6c:8e:90:ef:95:52:e9:1f:3d:38:a5:9f:44:89:10:ea:1a:84:
93:4b:e8:06:ae:79:d4:15:cc:44:47:d0:91:25:da:3a:d2:00:
dc:01:40:67:76:12:a1:45:43:67:15:5f:8a:dd:75:07:2f:31:
80:88:05:c8:04:fb:86:5c:1d:c9:68:77:8d:18:57:a9:d0:5b:
cc:f8:a1:26:ed:e2:19:2a:dd:7d:2a:46:bb:4f:d7:e2:bd:f4:
4e:5a:c5:b6:33:76:3c:ac:c2:d7:b1:88:1f:c1:4c:cd:de:39:
d4:c0:9a:33:4f:a5:c0:35:0f:65:70:d7:aa:b0:d6:a9:8b:bb:
6c:c5:07:8c:d7:d7:cb:d5:b0:9c:cc:b5:75:d3:6b:41:cf:66:
e8:19:b3:96:e5:4e:8d:68:36:1f:b5:54:d9:28:06:9e:d8:c4:
c2:22:5f:5d:04:19:4c:a1:4a:76:0f:08:e1:b8:66:84:2a:3b:
ba:75:fa:7b:1b:8b:49:90:66:c2:de:a3:29:67:dd:95:12:8d:
b2:fd:15:4b:90:43:22:f5:01:01:e4:0e:b4:3e:0c:f4:2d:a2:
17:fb:42:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks+Rvfx19nk3HjDQD3dE/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZmI5NmVhM2FmNTFjNTMyZDdlOGZlOGM5NDM3NmY1MWUx
ZWE0MDIwHhcNMjUwMTAyMDE0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWY1NzVmMWU3NTllMjcxYjU4M2Q2N2E1YzUxYTM3YzFmNzUxYzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQgYMlYfABr25FvEpBKus89X2UPy
4b+Nqdgwwsngn99iMEn0Qy88OfuLTPwMxfwzkQsjxcuAJ7+RHHNm3zAMAOh1BfGw
kCqoNEYK8GZoZ5yU900nWiQFDceTgXCEzGmj20peMhHHRKfy13ea7OIoY+9r1mjw
h4aJWPe1FidCQycITGfigRNO2J3Td5cH2qtN3C4GpyGJk/hOUfQth1S5OANXyqbV
DYOkR/dUzFWbZ+AyebcfnWmZsZGKA6BudxFWqwykuVE5gsMZ1dAwGS+9b1sv5fLf
fKmRM5Y0PSL2NItFM31gHWx5ZhoJla7khNW7vOg2rkggKkmodwT0kP2HsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKr1dfHnWeJxtYPWelxRo3wfdRxpMB8GA1UdIwQY
MBaAFNj7luo69RxTLX6P6MlDdvUeHqQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlB1VzZqcjFIRk10Zm9fb3lVTjI5UjRlcEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81M2ZmYTAtOTA2MC00NzJjLWFhYzIt
OGViODVlMzI4M2UyLzEvcXZWMThlZFo0bkcxZzlaNlhGR2pmQjkxSEdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS81M2ZmYTAtOTA2MC00NzJjLWFhYzItOGViODVlMzI4M2Uy
LzEvMlB1VzZqcjFIRk10Zm9fb3lVTjI5UjRlcEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSS3MA0G
CSqGSIb3DQEBCwUAA4IBAQBMOO2uPBpjP/RY4lLPKTwZzX1tY00/fthtCgfNgRiq
5Pr1yHJsjpDvlVLpHz04pZ9EiRDqGoSTS+gGrnnUFcxER9CRJdo60gDcAUBndhKh
RUNnFV+K3XUHLzGAiAXIBPuGXB3JaHeNGFep0FvM+KEm7eIZKt19Kka7T9fivfRO
WsW2M3Y8rMLXsYgfwUzN3jnUwJozT6XANQ9lcNeqsNapi7tsxQeM19fL1bCczLV1
02tBz2boGbOW5U6NaDYftVTZKAae2MTCIl9dBBlMoUp2DwjhuGaEKju6dfp7G4tJ
kGbC3qMpZ92VEo2y/RVLkEMi9QEB5A60Pgz0LaIX+0Lj
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:04:17 2025 by rpki-client