Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/5HmMCa33oQkcP4vjMSxOX1ZmZJw.roa
File: 5HmMCa33oQkcP4vjMSxOX1ZmZJw.roa (raw, json)
Hash identifier: jPS8TjokjkbYWnjETsrt1SmOHP68saIPoOOevbjEY2o=
Subject key identifier: E4:79:8C:09:AD:F7:A1:09:1C:3F:8B:E3:31:2C:4E:5F:56:66:64:9C
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0194A73C7DA9F51FC2672921F095FFBB4AE5
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/5HmMCa33oQkcP4vjMSxOX1ZmZJw.roa
Signing time: Mon 27 Jan 2025 10:09:06 +0000
ROA not before: Mon 27 Jan 2025 10:09:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205570
IP address blocks: 188.132.190.0/24 maxlen: 24
188.132.206.0/24 maxlen: 24
188.132.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:3c:7d:a9:f5:1f:c2:67:29:21:f0:95:ff:bb:4a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 27 10:09:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4798c09adf7a1091c3f8be3312c4e5f5666649c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5b:5d:96:e4:22:3e:3e:40:35:6f:ba:21:07:
b0:3a:f4:15:89:7e:e6:61:5a:7b:fc:78:d2:c8:27:
3d:67:5d:14:4d:bb:8c:2f:ea:c4:29:55:9b:e2:0b:
6c:cf:8e:28:d7:97:69:14:0d:86:3e:5d:eb:c1:55:
7d:79:6d:ff:3a:ca:89:12:46:32:e8:f5:02:25:60:
a1:ef:df:d4:9e:02:47:7d:9d:d0:cd:16:50:3f:52:
68:60:55:ff:42:c1:9a:b7:45:dc:5e:4d:67:e4:15:
5d:6e:ef:02:47:4b:65:51:27:27:5d:81:51:2e:fc:
ec:0d:67:bc:9c:5b:0f:a4:3f:d3:5f:53:11:37:50:
14:93:0c:00:2b:35:44:5a:91:f3:0e:83:48:4c:17:
1e:6e:69:b6:9a:af:48:b8:86:93:87:e8:d5:67:ec:
e5:61:55:41:38:69:72:84:69:f1:78:ba:df:86:76:
c6:46:de:bc:67:5d:6d:54:c4:3b:80:f1:df:bc:c0:
5c:d1:94:10:35:5a:40:de:b3:82:36:02:95:38:00:
86:0a:23:b1:dc:f0:01:e6:ff:f6:e4:b1:92:70:93:
34:5e:7b:88:ae:58:d3:24:18:f5:ef:32:5a:59:3e:
99:a2:a1:ee:54:40:44:a1:48:c3:84:85:4b:80:b9:
de:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:79:8C:09:AD:F7:A1:09:1C:3F:8B:E3:31:2C:4E:5F:56:66:64:9C
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/5HmMCa33oQkcP4vjMSxOX1ZmZJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.190.0/24
188.132.206.0/23
Signature Algorithm: sha256WithRSAEncryption
13:39:77:e4:01:a0:eb:91:b2:f4:39:c7:6e:83:d3:a8:47:4d:
5c:49:87:69:15:6f:fc:2f:ec:05:b5:75:45:fd:16:27:49:9f:
d0:07:98:5d:4a:e4:3c:d0:e4:12:7c:5f:89:ac:e6:88:7a:ae:
77:73:3e:52:a9:18:0b:d6:90:37:2c:ec:85:31:2d:5c:0c:e6:
b0:6f:bd:58:ab:da:00:15:69:aa:50:0f:8e:96:b0:ea:c0:39:
d0:11:f3:1d:d5:b1:5c:42:c7:62:bc:40:69:96:a3:e3:2f:ef:
5b:fa:c9:6f:25:ea:30:21:23:70:3f:a9:96:c6:5f:bc:1b:63:
86:2b:95:1d:6d:2d:22:90:80:c9:7d:5f:b0:a3:d5:d4:9d:5a:
e5:57:bc:98:fb:6d:31:d3:af:40:49:e5:d9:14:07:36:9f:e9:
cd:52:6c:1b:69:ef:08:5b:61:91:08:54:44:50:df:e1:d2:81:
19:8f:9f:1e:bc:99:c8:41:26:06:a6:8c:de:11:80:47:26:2d:
df:a6:67:9e:04:f4:53:f2:ad:2a:d0:34:09:36:e4:18:6f:90:
e4:ee:d8:3f:9b:3c:4c:6c:3b:40:6f:46:3a:86:35:6f:53:0e:
6b:4e:81:23:0b:ba:44:d0:4e:5a:36:37:da:7c:a2:79:f4:e8:
46:d2:f9:cb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZSnPH2p9R/CZykh8JX/u0rlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjUwMTI3MTAwOTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDc5OGMwOWFkZjdhMTA5MWMzZjhiZTMzMTJjNGU1ZjU2NjY2NDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoltdluQiPj5ANW+6IQewOvQViX7m
YVp7/HjSyCc9Z10UTbuML+rEKVWb4gtsz44o15dpFA2GPl3rwVV9eW3/OsqJEkYy
6PUCJWCh79/UngJHfZ3QzRZQP1JoYFX/QsGat0XcXk1n5BVdbu8CR0tlUScnXYFR
LvzsDWe8nFsPpD/TX1MRN1AUkwwAKzVEWpHzDoNITBcebmm2mq9IuIaTh+jVZ+zl
YVVBOGlyhGnxeLrfhnbGRt68Z11tVMQ7gPHfvMBc0ZQQNVpA3rOCNgKVOACGCiOx
3PAB5v/25LGScJM0XnuIrljTJBj17zJaWT6ZoqHuVEBEoUjDhIVLgLne1QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOR5jAmt96EJHD+L4zEsTl9WZmScMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvNUhtTUNhMzNvUWtjUDR2ak1TeE9YMVptWkp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvIS+AwQB
vITOMA0GCSqGSIb3DQEBCwUAA4IBAQATOXfkAaDrkbL0Ocdug9OoR01cSYdpFW/8
L+wFtXVF/RYnSZ/QB5hdSuQ80OQSfF+JrOaIeq53cz5SqRgL1pA3LOyFMS1cDOaw
b71Yq9oAFWmqUA+OlrDqwDnQEfMd1bFcQsdivEBplqPjL+9b+slvJeowISNwP6mW
xl+8G2OGK5UdbS0ikIDJfV+wo9XUnVrlV7yY+20x069ASeXZFAc2n+nNUmwbae8I
W2GRCFREUN/h0oEZj58evJnIQSYGpozeEYBHJi3fpmeeBPRT8q0q0DQJNuQYb5Dk
7tg/mzxMbDtAb0Y6hjVvUw5rToEjC7pE0E5aNjfafKJ59OhG0vnL
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:34:39 2025 by rpki-client