Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/M7QfzJgwvGD37CAu66WgBIA1U8I.roa
File: M7QfzJgwvGD37CAu66WgBIA1U8I.roa (raw, json)
Hash identifier: 3kI7qcvP/rbXPqQGtR+iUvoIfjNBUlBm7eubuJg9J3I=
Subject key identifier: 33:B4:1F:CC:98:30:BC:60:F7:EC:20:2E:EB:A5:A0:04:80:35:53:C2
Certificate issuer: /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial: 01942368EA8EF551774345DF69DF47ECF1DD
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/M7QfzJgwvGD37CAu66WgBIA1U8I.roa
Signing time: Wed 01 Jan 2025 19:47:45 +0000
ROA not before: Wed 01 Jan 2025 19:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21032
IP address blocks: 193.58.88.0/22 maxlen: 24
2a0c:94c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:ea:8e:f5:51:77:43:45:df:69:df:47:ec:f1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Validity
Not Before: Jan 1 19:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33b41fcc9830bc60f7ec202eeba5a004803553c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:04:20:b0:6a:d9:21:a3:f5:e8:0c:2c:ea:54:
2b:76:fb:e4:fc:4b:bc:14:fd:07:bf:5a:0f:33:c6:
e6:c4:1d:82:52:d0:72:ae:9f:d6:a3:89:04:e7:ca:
7a:a4:4f:6b:99:0e:67:31:2b:7d:4d:88:3a:9a:7f:
c6:31:62:57:33:f1:83:55:21:6d:a0:e3:65:ad:cc:
ab:ca:ae:e3:62:99:56:fd:5d:0a:ac:9b:19:d1:de:
54:e4:b6:05:81:8c:7e:5b:59:12:e1:d5:d6:fb:af:
fc:9b:70:72:bd:5b:19:cf:22:18:25:c2:f9:76:32:
1c:12:7c:d3:6c:30:fd:ad:a9:be:e5:1a:27:cc:4d:
ad:dd:d8:84:5a:85:9c:4e:4a:ba:03:85:95:4f:2e:
43:aa:ad:0f:26:e0:5a:33:9d:24:1f:7f:26:02:3b:
99:5a:59:9d:33:13:89:8f:fd:19:a1:74:5c:22:28:
fb:8a:4f:e6:dd:26:3b:a2:a6:c6:0d:ac:bd:9c:7a:
91:8f:c8:73:a1:b0:f7:62:6b:ff:0f:ef:ee:31:7e:
0e:60:e7:5a:7f:3e:4d:e4:9b:7b:fc:d8:ca:89:ee:
30:a1:89:6a:c0:a6:4c:75:04:6f:66:8a:a9:c7:a4:
2e:2c:53:e2:bd:75:87:9d:99:28:f9:95:8d:de:9a:
b5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B4:1F:CC:98:30:BC:60:F7:EC:20:2E:EB:A5:A0:04:80:35:53:C2
X509v3 Authority Key Identifier:
keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/M7QfzJgwvGD37CAu66WgBIA1U8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.88.0/22
IPv6:
2a0c:94c0::/29
Signature Algorithm: sha256WithRSAEncryption
1a:7e:d8:e7:fc:19:d0:35:79:74:90:47:63:0e:1a:f0:8d:a3:
c1:0a:91:91:4d:cf:66:f0:4a:26:a7:a8:9f:71:65:a5:be:8a:
c2:72:98:5f:2f:65:f1:21:22:7c:a9:73:d0:03:a5:cb:65:7e:
41:1b:43:79:dc:da:b2:b4:6c:f4:90:6c:cc:97:95:da:90:9d:
bf:d9:83:df:c1:40:6d:fd:91:95:a7:59:5b:e9:22:81:2b:7e:
12:10:33:b4:64:b7:9e:43:ab:f7:02:23:47:b6:3a:a3:14:b2:
e7:16:3e:5f:77:f2:fc:11:82:13:18:ef:3c:b5:d7:af:22:9a:
8e:a9:b8:7e:fb:70:a3:fa:78:e1:ef:12:74:b8:58:74:f0:41:
20:67:11:84:36:a4:5d:8f:ab:c9:23:b1:6d:cc:de:5d:42:d5:
95:5b:fc:5a:8a:62:17:ad:8d:88:59:67:2c:9e:4f:af:96:b8:
09:b2:83:6a:f1:7c:96:e2:65:ab:93:e2:16:04:2d:aa:ef:45:
52:94:91:f4:2a:53:d4:8c:aa:66:71:8a:91:a3:e8:74:ab:06:
39:a1:28:2b:76:de:3e:83:29:6d:93:c8:ef:7c:6f:37:1a:85:
c8:d1:76:bf:84:87:f8:29:ce:73:ee:3c:44:f7:d9:6a:57:70:
a0:8f:4a:cd
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQjaOqO9VF3Q0Xfad9H7PHdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MjNmZTZkYWQ4YWQ0ZmRhZWU2ZGQ2OTgzYzFlNTVjZGU4
NDgyYTIwHhcNMjUwMTAxMTk0NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2I0MWZjYzk4MzBiYzYwZjdlYzIwMmVlYmE1YTAwNDgwMzU1M2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwQgsGrZIaP16Aws6lQrdvvk/Eu8
FP0Hv1oPM8bmxB2CUtByrp/Wo4kE58p6pE9rmQ5nMSt9TYg6mn/GMWJXM/GDVSFt
oONlrcyryq7jYplW/V0KrJsZ0d5U5LYFgYx+W1kS4dXW+6/8m3ByvVsZzyIYJcL5
djIcEnzTbDD9ram+5RonzE2t3diEWoWcTkq6A4WVTy5Dqq0PJuBaM50kH38mAjuZ
WlmdMxOJj/0ZoXRcIij7ik/m3SY7oqbGDay9nHqRj8hzobD3Ymv/D+/uMX4OYOda
fz5N5Jt7/NjKie4woYlqwKZMdQRvZoqpx6QuLFPivXWHnZko+ZWN3pq1FQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDO0H8yYMLxg9+wgLuuloASANVPCMB8GA1UdIwQY
MBaAFKgj/m2titT9rubdaYPB5VzehIKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUNQLWJhMksxUDJ1NXQxcGc4SGxYTjZFZ3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wMzg1NjAtMjZkNi00NTVkLWE4ZjQt
OWJmZGYyMjUxMjY3LzEvTTdRZnpKZ3d2R0QzN0NBdTY2V2dCSUExVThJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wMzg1NjAtMjZkNi00NTVkLWE4ZjQtOWJmZGYyMjUxMjY3
LzEvcUNQLWJhMksxUDJ1NXQxcGc4SGxYTjZFZ3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwTpYMA0E
AgACMAcDBQMqDJTAMA0GCSqGSIb3DQEBCwUAA4IBAQAaftjn/BnQNXl0kEdjDhrw
jaPBCpGRTc9m8Eomp6ifcWWlvorCcphfL2XxISJ8qXPQA6XLZX5BG0N53NqytGz0
kGzMl5XakJ2/2YPfwUBt/ZGVp1lb6SKBK34SEDO0ZLeeQ6v3AiNHtjqjFLLnFj5f
d/L8EYITGO88tdevIpqOqbh++3Cj+njh7xJ0uFh08EEgZxGENqRdj6vJI7FtzN5d
QtWVW/xaimIXrY2IWWcsnk+vlrgJsoNq8XyW4mWrk+IWBC2q70VSlJH0KlPUjKpm
cYqRo+h0qwY5oSgrdt4+gyltk8jvfG83GoXI0Xa/hIf4Kc5z7jxE99lqV3Cgj0rN
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:23:07 2025 by rpki-client