Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/1-a4x5OOX4iisCDf6ed1yjE-GXUQ.roa
File: 1-a4x5OOX4iisCDf6ed1yjE-GXUQ.roa (raw, json)
Hash identifier: sw8ry0bOHDndmxXW/2FyYZ7exmAZ4VvNy12eeZpqa3o=
Subject key identifier: F9:AE:31:E4:E3:97:E2:28:AC:08:37:FA:79:DD:72:8C:4F:86:5D:44
Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial: 019423D6EDECC6EB5017C4682EE02738D70B
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/1-a4x5OOX4iisCDf6ed1yjE-GXUQ.roa
Signing time: Wed 01 Jan 2025 21:47:55 +0000
ROA not before: Wed 01 Jan 2025 21:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205330
IP address blocks: 193.239.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ed:ec:c6:eb:50:17:c4:68:2e:e0:27:38:d7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
Validity
Not Before: Jan 1 21:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9ae31e4e397e228ac0837fa79dd728c4f865d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e1:96:3b:7c:50:3e:5a:aa:4b:1a:75:de:b5:
03:0e:f1:ca:c1:29:ac:c9:65:47:67:16:93:29:df:
fc:85:ff:5f:6d:6c:0c:69:5b:55:6b:a9:9b:5f:1e:
bb:a9:d5:5e:90:83:bb:13:fe:1d:e7:f9:ed:d1:78:
81:42:5c:87:7b:a2:33:51:9a:df:82:7c:cb:25:d8:
95:2f:f2:87:ec:1f:0e:07:fd:bd:2f:5d:1b:08:a0:
51:00:6a:ae:30:dc:76:c5:82:6c:01:c1:63:97:60:
90:12:8b:a1:0f:ef:d0:d6:d8:25:90:66:90:b0:1e:
e3:fa:81:bb:9f:3f:56:a2:13:bb:09:fb:b9:7b:da:
0c:6d:b8:c9:1f:39:b0:23:fc:9c:b7:6e:c6:19:95:
57:0e:71:70:cb:a1:53:6d:42:6b:37:c3:bb:77:f6:
ea:6c:4d:72:bf:02:98:38:4e:d6:22:1c:96:e5:04:
b3:9e:f0:10:e7:dc:17:85:ec:16:60:b0:4f:a1:c7:
d5:a0:f7:51:94:f5:8b:cb:eb:9b:08:21:0f:49:8e:
f8:ad:7a:38:ea:a2:14:3a:e6:a5:fa:96:c9:b2:67:
0d:6a:fa:14:0d:7b:7d:8c:06:03:dc:73:ea:6f:fa:
d0:3e:7f:f2:f0:8e:f4:59:db:e4:5e:0c:93:aa:fa:
3b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AE:31:E4:E3:97:E2:28:AC:08:37:FA:79:DD:72:8C:4F:86:5D:44
X509v3 Authority Key Identifier:
keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/1-a4x5OOX4iisCDf6ed1yjE-GXUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.203.0/24
Signature Algorithm: sha256WithRSAEncryption
62:90:02:2d:9a:d2:33:23:28:cf:3d:29:e6:cd:a8:a0:50:1d:
5a:bc:df:21:de:f4:a2:86:a6:37:3c:1f:e0:9e:9c:ae:6d:30:
06:2c:75:26:fd:e0:28:6a:60:e1:dc:40:ab:d0:14:08:2b:60:
68:95:2a:1a:de:b2:2e:82:fc:f3:3b:19:c5:ec:6a:a0:99:05:
c0:ca:f8:73:49:14:a0:68:2d:0e:49:2b:1a:00:d4:be:c4:3a:
36:1f:58:55:f9:85:c5:48:02:8a:50:eb:5e:e8:fe:a7:ca:68:
84:7e:9a:45:3f:c6:13:b1:fc:dc:73:9b:0f:72:4e:23:96:c3:
17:d3:cd:d7:cd:81:fe:f2:3c:91:56:65:2c:42:ef:7c:0d:8a:
49:94:76:39:a2:03:70:d2:d3:c0:49:7e:57:e3:37:87:14:9c:
42:10:79:62:50:1e:42:e7:96:3e:73:85:8c:53:ce:69:98:b6:
00:f6:4b:f7:ad:2e:6e:f2:4a:ef:9b:d6:ec:0c:69:93:80:a3:
6b:4d:aa:c9:61:45:b0:c7:b8:89:40:9b:84:d8:09:4d:84:46:
6b:46:ae:b0:2d:6d:c4:50:4d:33:8f:23:20:39:75:ec:a5:27:
34:07:19:df:61:0d:5d:07:4d:8e:74:89:15:81:8f:39:96:3b:
ab:fa:69:19
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQj1u3sxutQF8RoLuAnONcLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YzI5NWNhNmVlOGNhZTcwMDZiNTc3YWY1NGUzNzY2MjNk
Zjc3OTkwHhcNMjUwMTAxMjE0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWFlMzFlNGUzOTdlMjI4YWMwODM3ZmE3OWRkNzI4YzRmODY1ZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eGWO3xQPlqqSxp13rUDDvHKwSms
yWVHZxaTKd/8hf9fbWwMaVtVa6mbXx67qdVekIO7E/4d5/nt0XiBQlyHe6IzUZrf
gnzLJdiVL/KH7B8OB/29L10bCKBRAGquMNx2xYJsAcFjl2CQEouhD+/Q1tglkGaQ
sB7j+oG7nz9WohO7Cfu5e9oMbbjJHzmwI/yct27GGZVXDnFwy6FTbUJrN8O7d/bq
bE1yvwKYOE7WIhyW5QSznvAQ59wXhewWYLBPocfVoPdRlPWLy+ubCCEPSY74rXo4
6qIUOual+pbJsmcNavoUDXt9jAYD3HPqb/rQPn/y8I70WdvkXgyTqvo7dQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPmuMeTjl+IorAg3+nndcoxPhl1EMB8GA1UdIwQY
MBaAFETClcpu6MrnAGtXevVON2Yj33eZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUt
NzU5OWI0NDFjZDFjLzEvMS1hNHg1T09YNGlpc0NEZjZlZDF5akUtR1hVUS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvM2QvMTdhODhkLTIzNmQtNGZhZC05MDM1LTc1OTliNDQxY2Qx
Yy8xL1JNS1Z5bTdveXVjQWExZDY5VTQzWmlQZmQ1ay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHvyzAN
BgkqhkiG9w0BAQsFAAOCAQEAYpACLZrSMyMozz0p5s2ooFAdWrzfId70ooamNzwf
4J6crm0wBix1Jv3gKGpg4dxAq9AUCCtgaJUqGt6yLoL88zsZxexqoJkFwMr4c0kU
oGgtDkkrGgDUvsQ6Nh9YVfmFxUgCilDrXuj+p8pohH6aRT/GE7H83HObD3JOI5bD
F9PN182B/vI8kVZlLELvfA2KSZR2OaIDcNLTwEl+V+M3hxScQhB5YlAeQueWPnOF
jFPOaZi2APZL960ubvJK75vW7Axpk4Cja02qyWFFsMe4iUCbhNgJTYRGa0ausC1t
xFBNM48jIDl17KUnNAcZ32ENXQdNjnSJFYGPOZY7q/ppGQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:23:15 2025 by rpki-client