Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/E5UqsHXI4rxEYamOG66v7YvvX58.roa
File: E5UqsHXI4rxEYamOG66v7YvvX58.roa (raw, json)
Hash identifier: 58pJlWEPXnRDyDfxMzNI3/SbQdUBvyaiOkTUhmV+dLw=
Subject key identifier: 13:95:2A:B0:75:C8:E2:BC:44:61:A9:8E:1B:AE:AF:ED:8B:EF:5F:9F
Certificate issuer: /CN=25dd9b849c0dafae386f470123b09261ae355517
Certificate serial: 0194266A05D45EBDEBF732A63B822250F32F
Authority key identifier: 25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/E5UqsHXI4rxEYamOG66v7YvvX58.roa
Signing time: Thu 02 Jan 2025 09:47:50 +0000
ROA not before: Thu 02 Jan 2025 09:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25439
IP address blocks: 193.178.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:05:d4:5e:bd:eb:f7:32:a6:3b:82:22:50:f3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25dd9b849c0dafae386f470123b09261ae355517
Validity
Not Before: Jan 2 09:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13952ab075c8e2bc4461a98e1baeafed8bef5f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4e:f2:f7:ec:38:81:1c:a7:3a:7a:34:db:76:
af:a0:a2:ed:65:b3:95:ff:23:3a:9e:e9:29:a2:af:
45:b3:a6:5b:c3:93:8f:1c:d3:2e:be:cb:ad:07:d6:
49:21:ce:c5:0a:7d:8d:06:0e:54:84:fc:da:24:cd:
2f:5e:72:bf:d2:ef:f3:3e:6c:98:32:a4:18:a1:f7:
9e:0e:54:e5:d5:60:6e:17:24:54:f0:56:5e:d6:5c:
92:6e:22:c7:a0:ae:0b:51:d4:bb:d3:ee:b8:d0:5b:
91:1a:c0:17:47:09:ae:27:d6:dc:c2:88:8a:79:9c:
ac:57:18:41:9f:89:9c:bb:95:eb:7f:b0:79:6f:c2:
62:09:95:ad:15:05:35:73:ba:ec:76:0d:b4:d8:5d:
48:3e:80:e8:1a:3c:ce:32:e3:8a:da:35:e3:de:65:
d5:51:74:79:fd:54:47:1e:5e:a3:98:41:dd:39:cd:
0e:55:d5:b2:0b:ea:06:89:07:d4:51:bf:ba:aa:9b:
9b:dd:17:3c:c5:4b:de:86:46:91:30:e6:5e:5e:67:
62:42:bb:86:51:13:22:85:26:2b:d1:af:fe:08:cb:
e7:08:41:e9:a0:e0:45:07:ae:c2:2c:46:00:57:b2:
6e:f4:aa:a9:06:84:c1:f2:9d:af:a0:59:ca:d2:5b:
d9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:95:2A:B0:75:C8:E2:BC:44:61:A9:8E:1B:AE:AF:ED:8B:EF:5F:9F
X509v3 Authority Key Identifier:
keyid:25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/E5UqsHXI4rxEYamOG66v7YvvX58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.164.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c8:ab:03:12:4a:96:34:a0:93:99:09:1d:fb:59:2d:95:a5:
c2:d7:c9:42:2f:d4:23:3a:85:f3:72:23:dc:d2:a8:63:3e:f9:
c0:d4:04:10:a6:4e:ef:0d:5f:f2:8e:66:a5:72:aa:35:b7:26:
e8:0b:96:ef:d2:ed:87:fd:77:cf:f9:87:49:28:2b:da:f6:f8:
92:c7:bc:6e:ba:dc:95:4f:4d:02:64:93:96:2c:b9:e0:3d:81:
0a:81:1f:a2:6f:92:4c:f6:53:86:81:61:b7:5b:0e:6c:89:92:
83:f3:22:4c:e4:b7:eb:7c:bf:87:ba:6d:12:30:f4:02:71:54:
b1:ba:48:ba:d0:ab:f9:cf:73:a3:78:d3:5b:a8:c6:43:1e:26:
b9:30:8b:88:b5:e8:98:72:5a:8b:ea:49:c8:a9:36:2b:73:93:
f2:18:63:52:fe:b2:95:07:9f:a1:6b:ef:1f:9d:23:8f:d6:ae:
b1:33:8b:60:fd:b1:2f:d7:60:4c:35:7b:a9:6e:9e:25:3b:6d:
65:20:89:af:db:f6:3d:37:98:94:d3:fe:70:42:c6:a6:ad:59:
c6:52:51:c8:43:3f:2a:0f:5b:00:d6:e9:34:cd:5c:90:a1:4c:
f1:4c:43:dd:ca:62:c6:f6:ed:21:8d:5f:c4:1a:9f:db:04:53:
af:31:4c:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmagXUXr3r9zKmO4IiUPMvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZGQ5Yjg0OWMwZGFmYWUzODZmNDcwMTIzYjA5MjYxYWUz
NTU1MTcwHhcNMjUwMTAyMDk0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzk1MmFiMDc1YzhlMmJjNDQ2MWE5OGUxYmFlYWZlZDhiZWY1ZjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk7y9+w4gRynOno023avoKLtZbOV
/yM6nukpoq9Fs6Zbw5OPHNMuvsutB9ZJIc7FCn2NBg5UhPzaJM0vXnK/0u/zPmyY
MqQYofeeDlTl1WBuFyRU8FZe1lySbiLHoK4LUdS70+640FuRGsAXRwmuJ9bcwoiK
eZysVxhBn4mcu5Xrf7B5b8JiCZWtFQU1c7rsdg202F1IPoDoGjzOMuOK2jXj3mXV
UXR5/VRHHl6jmEHdOc0OVdWyC+oGiQfUUb+6qpub3Rc8xUvehkaRMOZeXmdiQruG
URMihSYr0a/+CMvnCEHpoOBFB67CLEYAV7Ju9KqpBoTB8p2voFnK0lvZqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBOVKrB1yOK8RGGpjhuur+2L71+fMB8GA1UdIwQY
MBaAFCXdm4ScDa+uOG9HASOwkmGuNVUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmQyYmhKd05yNjQ0YjBjQkk3Q1NZYTQxVlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9kNGU0MzQtNjM1Ni00NmZkLThiMzUt
N2ZmZDVjNTUwMzg1LzEvRTVVcXNIWEk0cnhFWWFtT0c2NnY3WXZ2WDU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9kNGU0MzQtNjM1Ni00NmZkLThiMzUtN2ZmZDVjNTUwMzg1
LzEvSmQyYmhKd05yNjQ0YjBjQkk3Q1NZYTQxVlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbKkMA0G
CSqGSIb3DQEBCwUAA4IBAQB2yKsDEkqWNKCTmQkd+1ktlaXC18lCL9QjOoXzciPc
0qhjPvnA1AQQpk7vDV/yjmalcqo1tyboC5bv0u2H/XfP+YdJKCva9viSx7xuutyV
T00CZJOWLLngPYEKgR+ib5JM9lOGgWG3Ww5siZKD8yJM5LfrfL+Hum0SMPQCcVSx
uki60Kv5z3OjeNNbqMZDHia5MIuIteiYclqL6knIqTYrc5PyGGNS/rKVB5+ha+8f
nSOP1q6xM4tg/bEv12BMNXupbp4lO21lIImv2/Y9N5iU0/5wQsamrVnGUlHIQz8q
D1sA1uk0zVyQoUzxTEPdymLG9u0hjV/EGp/bBFOvMUz1
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:30 2025 by rpki-client