Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/Y8AXUYDP-qGUFi9hzn6P0gBawaM.roa
File: Y8AXUYDP-qGUFi9hzn6P0gBawaM.roa (raw, json)
Hash identifier: PbgeAgI/Sj2ZS05Cb4sm9ySYZjOm8LnX+ij5E01wZBw=
Subject key identifier: 63:C0:17:51:80:CF:FA:A1:94:16:2F:61:CE:7E:8F:D2:00:5A:C1:A3
Certificate issuer: /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Certificate serial: 019426D971516FA4A769B01507433CA03F83
Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/Y8AXUYDP-qGUFi9hzn6P0gBawaM.roa
Signing time: Thu 02 Jan 2025 11:49:32 +0000
ROA not before: Thu 02 Jan 2025 11:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50592
IP address blocks: 193.105.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:71:51:6f:a4:a7:69:b0:15:07:43:3c:a0:3f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Validity
Not Before: Jan 2 11:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63c0175180cffaa194162f61ce7e8fd2005ac1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:5f:9c:4b:70:0b:d0:63:19:4c:f2:07:cb:
75:de:60:99:e5:52:12:06:e0:8e:1a:ea:c4:e2:82:
51:79:d6:8f:0b:59:e8:bb:d9:7d:f6:f0:96:7a:6f:
d4:e9:f8:cc:1a:63:56:60:78:97:1a:f7:3f:0f:4a:
fa:a1:2c:ce:76:60:ff:23:6d:4d:e6:f3:57:69:f9:
e3:66:21:95:25:51:a2:c4:b5:30:cf:81:07:03:d1:
a9:ef:ba:83:38:f6:86:6d:aa:77:a4:7f:3d:90:f4:
1f:df:73:05:99:53:0a:a1:f0:7c:5e:56:8f:a7:ed:
c9:f8:b7:d4:1b:70:e9:0e:ee:e0:bb:08:0b:4a:84:
f4:20:38:ec:63:24:d8:01:95:e5:3d:80:c9:74:43:
2c:19:03:b8:be:67:24:b6:b6:c5:77:0a:e8:35:4e:
8f:32:68:a8:25:3b:86:16:4f:e5:fd:8f:57:7c:ad:
ae:57:15:23:f2:75:ba:10:b9:d6:76:b3:e2:ad:25:
0d:68:ad:0c:fd:d9:8e:7c:aa:d7:72:76:6b:5a:ba:
c6:2a:66:70:1e:a7:7f:de:d1:71:17:3e:cd:79:2a:
c9:65:19:f8:7e:74:d3:3f:64:98:79:34:69:51:1c:
32:2d:b9:1e:cb:5a:0b:bd:36:7b:66:9f:52:13:c2:
e0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C0:17:51:80:CF:FA:A1:94:16:2F:61:CE:7E:8F:D2:00:5A:C1:A3
X509v3 Authority Key Identifier:
keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/Y8AXUYDP-qGUFi9hzn6P0gBawaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.115.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:63:90:ca:2b:2d:a9:67:73:50:f0:a9:76:f2:82:e5:b1:d7:
fe:00:f9:9b:89:14:c0:c1:d5:1e:1e:07:b7:55:77:0e:57:27:
ff:cf:65:e0:29:68:43:81:40:21:29:46:7e:7e:08:96:fb:c9:
6c:34:b2:b6:08:27:df:da:a8:f2:4f:58:6a:3f:65:c0:90:53:
26:eb:88:62:b6:e7:0c:b5:6f:93:0c:78:af:08:de:c2:7a:0a:
4a:83:76:10:5a:66:fe:dc:8a:89:bc:4f:13:cd:b2:d7:a6:7e:
2a:ca:76:d6:d3:b3:f6:39:2f:8c:db:cc:01:81:38:55:f2:6a:
1f:73:50:37:51:a6:85:d1:41:19:cc:75:dc:0d:fe:dd:3a:ab:
5c:b1:50:3b:04:75:fe:0e:aa:3a:6f:86:ba:2b:09:ef:2b:5e:
ba:49:83:40:88:b2:be:ef:b2:05:2a:b4:05:e8:de:b9:95:9a:
2b:07:2a:8c:d5:7a:2b:37:f2:51:81:22:ef:9b:e8:f7:89:2c:
f2:d9:f3:34:1d:05:18:a8:e7:ab:7c:bd:81:14:bf:3b:93:8d:
89:69:92:d4:d8:8f:d4:68:ec:76:14:0e:34:03:cf:63:a0:40:
05:da:10:79:43:3a:27:91:c6:94:03:af:a8:9e:02:34:ec:34:
0e:69:5d:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2XFRb6SnabAVB0M8oD+DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYTEzYjkyMmVlN2ViYjlhZWNkZTE5YTcwZDBlMjViNzc3
NTBkMDIwHhcNMjUwMTAyMTE0OTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2MwMTc1MTgwY2ZmYWExOTQxNjJmNjFjZTdlOGZkMjAwNWFjMWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXdfnEtwC9BjGUzyB8t13mCZ5VIS
BuCOGurE4oJRedaPC1nou9l99vCWem/U6fjMGmNWYHiXGvc/D0r6oSzOdmD/I21N
5vNXafnjZiGVJVGixLUwz4EHA9Gp77qDOPaGbap3pH89kPQf33MFmVMKofB8XlaP
p+3J+LfUG3DpDu7guwgLSoT0IDjsYyTYAZXlPYDJdEMsGQO4vmcktrbFdwroNU6P
MmioJTuGFk/l/Y9XfK2uVxUj8nW6ELnWdrPirSUNaK0M/dmOfKrXcnZrWrrGKmZw
Hqd/3tFxFz7NeSrJZRn4fnTTP2SYeTRpURwyLbkey1oLvTZ7Zp9SE8LgjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGPAF1GAz/qhlBYvYc5+j9IAWsGjMB8GA1UdIwQY
MBaAFOChO5Iu5+u5rs3hmnDQ4lt3dQ0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9mNzdjNWItMTliMi00YmMxLThmYWEt
MTBiMDIxMWQ5NmZjLzEvWThBWFVZRFAtcUdVRmk5aHpuNlAwZ0Jhd2FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9mNzdjNWItMTliMi00YmMxLThmYWEtMTBiMDIxMWQ5NmZj
LzEvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWlzMA0G
CSqGSIb3DQEBCwUAA4IBAQBdY5DKKy2pZ3NQ8Kl28oLlsdf+APmbiRTAwdUeHge3
VXcOVyf/z2XgKWhDgUAhKUZ+fgiW+8lsNLK2CCff2qjyT1hqP2XAkFMm64hitucM
tW+TDHivCN7CegpKg3YQWmb+3IqJvE8TzbLXpn4qynbW07P2OS+M28wBgThV8mof
c1A3UaaF0UEZzHXcDf7dOqtcsVA7BHX+Dqo6b4a6KwnvK166SYNAiLK+77IFKrQF
6N65lZorByqM1XorN/JRgSLvm+j3iSzy2fM0HQUYqOerfL2BFL87k42JaZLU2I/U
aOx2FA40A89joEAF2hB5QzonkcaUA6+ongI07DQOaV2P
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:49 2025 by rpki-client