Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/K5dYt7lb9gS6Y4bTS8duva31gvM.roa
File: K5dYt7lb9gS6Y4bTS8duva31gvM.roa (raw, json)
Hash identifier: JfUFTyGmQsKMLzEfnb5KXENtjRP1+B6pBuw/0roQoKU=
Subject key identifier: 2B:97:58:B7:B9:5B:F6:04:BA:63:86:D3:4B:C7:6E:BD:AD:F5:82:F3
Certificate issuer: /CN=39b8b4f04973f37cc69fb7c23468f953f149420e
Certificate serial: 019427B515CF50A40369F8347532DC1A5A12
Authority key identifier: 39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/K5dYt7lb9gS6Y4bTS8duva31gvM.roa
Signing time: Thu 02 Jan 2025 15:49:26 +0000
ROA not before: Thu 02 Jan 2025 15:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25377
IP address blocks: 193.177.1.0/24 maxlen: 24
193.177.2.0/23 maxlen: 23
193.177.4.0/22 maxlen: 22
193.177.8.0/21 maxlen: 21
193.177.16.0/20 maxlen: 20
193.177.32.0/19 maxlen: 19
193.177.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:15:cf:50:a4:03:69:f8:34:75:32:dc:1a:5a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b8b4f04973f37cc69fb7c23468f953f149420e
Validity
Not Before: Jan 2 15:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b9758b7b95bf604ba6386d34bc76ebdadf582f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e3:5c:2b:7c:f1:7b:ec:ab:59:8f:50:48:21:
ee:9c:a8:68:30:45:81:47:68:d4:b3:c6:cf:c6:1f:
6f:91:bd:b0:10:0c:dc:31:4b:96:e4:37:fc:1e:ef:
c3:fe:94:56:2f:1c:9c:41:c4:bb:79:3d:e2:bf:1a:
90:f7:83:50:1a:c2:16:1e:40:9e:77:c9:2c:1b:7c:
0e:69:f2:46:f3:be:b8:89:26:5c:ed:39:aa:86:f4:
0c:63:8e:4e:19:eb:a1:8f:f0:d5:2e:72:49:23:96:
33:91:00:b1:82:02:10:dd:f4:c4:3d:78:e4:04:69:
72:77:e7:c5:27:5b:d2:2b:01:19:64:e8:0d:67:30:
74:65:51:56:8e:99:96:3f:91:5b:97:26:0d:a5:88:
c7:91:b5:d9:b6:07:3b:d6:40:f3:64:5a:af:f8:e4:
55:11:bb:82:8b:50:06:85:ac:00:08:af:dd:18:12:
c9:07:27:b5:17:39:18:de:0c:c5:98:11:4a:89:d4:
3a:f6:df:38:e2:23:35:29:90:5b:75:95:83:56:09:
89:eb:3c:76:e5:ad:e7:ab:a9:2f:7d:f9:5e:c6:dd:
95:d5:22:ba:5e:c3:7c:e6:15:f2:e6:f4:23:fc:28:
90:2b:4d:ca:5b:71:ea:57:9a:8f:3c:3a:29:5b:1b:
ad:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:97:58:B7:B9:5B:F6:04:BA:63:86:D3:4B:C7:6E:BD:AD:F5:82:F3
X509v3 Authority Key Identifier:
keyid:39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/K5dYt7lb9gS6Y4bTS8duva31gvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.1.0-193.177.127.255
Signature Algorithm: sha256WithRSAEncryption
75:a7:1b:ab:53:68:6d:37:ba:60:db:54:75:da:0f:e5:3b:60:
4b:a9:44:76:ee:76:95:8e:f1:54:43:fe:49:1f:95:d6:4f:f6:
ab:14:83:36:81:db:d3:95:54:fe:b9:e4:d9:b5:ff:b9:ee:ac:
bd:12:89:aa:e5:f0:54:cb:c5:e4:dd:8f:d5:01:bd:d6:ad:f9:
91:28:4f:2c:29:b4:66:85:e8:4e:79:d8:27:ec:db:a2:c4:73:
33:77:2c:e9:9e:e8:63:eb:d8:c4:6c:f6:07:4f:14:06:a3:2b:
df:9d:96:52:64:88:0b:9d:76:25:e5:a7:61:fc:0a:7c:01:a5:
23:56:52:1c:f3:ed:32:f3:c4:bd:85:0a:72:b0:16:b4:42:ed:
e7:19:04:7f:60:b4:70:69:23:aa:f3:56:46:6a:fd:1e:dd:d6:
5d:5f:d1:02:fa:83:10:7e:fb:86:38:7c:eb:6b:fb:37:cb:31:
64:0c:65:8b:23:2c:bf:1f:31:05:cf:a6:05:49:ae:61:17:18:
db:6b:de:22:9a:8f:59:de:9d:c4:51:a8:44:77:d3:7f:f2:7d:
9c:c0:f9:28:38:8d:fa:ad:d9:51:28:82:01:8f:c0:43:50:fc:
10:21:86:10:5d:fb:62:74:bd:1f:bb:32:87:bd:1d:e3:21:ce:
ea:9c:a1:17
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQntRXPUKQDafg0dTLcGloSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YjhiNGYwNDk3M2YzN2NjNjlmYjdjMjM0NjhmOTUzZjE0
OTQyMGUwHhcNMjUwMTAyMTU0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjk3NThiN2I5NWJmNjA0YmE2Mzg2ZDM0YmM3NmViZGFkZjU4MmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeNcK3zxe+yrWY9QSCHunKhoMEWB
R2jUs8bPxh9vkb2wEAzcMUuW5Df8Hu/D/pRWLxycQcS7eT3ivxqQ94NQGsIWHkCe
d8ksG3wOafJG8764iSZc7TmqhvQMY45OGeuhj/DVLnJJI5YzkQCxggIQ3fTEPXjk
BGlyd+fFJ1vSKwEZZOgNZzB0ZVFWjpmWP5FblyYNpYjHkbXZtgc71kDzZFqv+ORV
EbuCi1AGhawACK/dGBLJBye1FzkY3gzFmBFKidQ69t844iM1KZBbdZWDVgmJ6zx2
5a3nq6kvfflext2V1SK6XsN85hXy5vQj/CiQK03KW3HqV5qPPDopWxut9wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCuXWLe5W/YEumOG00vHbr2t9YLzMB8GA1UdIwQY
MBaAFDm4tPBJc/N8xp+3wjRo+VPxSUIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2JpMDhFbHo4M3pHbjdmQ05HajVVX0ZKUWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi84YWNjNGItZTBhMi00ZDIxLWI4NjQt
OTkwMzA3ZDIwM2M4LzEvSzVkWXQ3bGI5Z1M2WTRiVFM4ZHV2YTMxZ3ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi84YWNjNGItZTBhMi00ZDIxLWI4NjQtOTkwMzA3ZDIwM2M4
LzEvT2JpMDhFbHo4M3pHbjdmQ05HajVVX0ZKUWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADBsQED
BAfBsQAwDQYJKoZIhvcNAQELBQADggEBAHWnG6tTaG03umDbVHXaD+U7YEupRHbu
dpWO8VRD/kkfldZP9qsUgzaB29OVVP655Nm1/7nurL0Siarl8FTLxeTdj9UBvdat
+ZEoTywptGaF6E552Cfs26LEczN3LOme6GPr2MRs9gdPFAajK9+dllJkiAuddiXl
p2H8CnwBpSNWUhzz7TLzxL2FCnKwFrRC7ecZBH9gtHBpI6rzVkZq/R7d1l1f0QL6
gxB++4Y4fOtr+zfLMWQMZYsjLL8fMQXPpgVJrmEXGNtr3iKaj1nencRRqER303/y
fZzA+Sg4jfqt2VEoggGPwENQ/BAhhhBd+2J0vR+7Moe9HeMhzuqcoRc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:04:24 2025 by rpki-client