Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/vIvVsHJ0xm9KWsOKo8t7mvzJhUY.roa
File: vIvVsHJ0xm9KWsOKo8t7mvzJhUY.roa (raw, json)
Hash identifier: A8A1HwLzG1pGgLrLpP5xuPgKXEc1TOEplW6JXucAwjk=
Subject key identifier: BC:8B:D5:B0:72:74:C6:6F:4A:5A:C3:8A:A3:CB:7B:9A:FC:C9:85:46
Certificate issuer: /CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Certificate serial: 0194266BA56A54615890AA5E23113C6C4F55
Authority key identifier: A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/vIvVsHJ0xm9KWsOKo8t7mvzJhUY.roa
Signing time: Thu 02 Jan 2025 09:49:36 +0000
ROA not before: Thu 02 Jan 2025 09:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31134
IP address blocks: 193.23.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a5:6a:54:61:58:90:aa:5e:23:11:3c:6c:4f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Validity
Not Before: Jan 2 09:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc8bd5b07274c66f4a5ac38aa3cb7b9afcc98546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ae:80:61:4d:ad:dc:5e:f9:a2:00:3d:ae:11:
4e:67:70:8f:65:94:3a:37:e1:df:08:9e:a4:ee:30:
c4:92:47:97:12:81:81:72:1b:a7:7a:38:fe:8c:b4:
49:ae:6a:a1:24:d2:06:72:5b:fa:4c:cf:d6:53:79:
b4:ed:20:ef:53:00:aa:d9:f2:e6:7c:fd:ae:7f:30:
2e:0a:93:7d:48:99:47:b4:eb:ca:fc:07:bf:28:9c:
bf:ba:20:a0:d4:81:0d:e0:75:33:d7:f6:fa:8c:d6:
12:76:71:1c:80:b9:c4:4e:22:72:3e:8e:f4:62:21:
77:b1:cd:40:46:57:c2:ba:09:f8:c4:34:eb:df:f3:
bb:e4:f4:a0:f2:c2:49:f6:84:ed:b7:f1:d1:0b:02:
b8:11:7e:45:8d:81:18:f3:5a:77:8c:b3:81:66:9f:
9d:d4:20:a5:69:db:a2:1a:3a:ea:d2:e7:f1:2e:87:
b1:c6:0d:2a:1c:e0:d1:2d:b8:b1:6b:f7:3d:ee:6d:
40:11:b9:76:50:ad:fd:9a:09:48:cb:0f:51:04:25:
2f:58:97:b2:ff:25:ba:86:ed:07:41:72:34:5d:9f:
74:18:50:28:5e:17:d4:ee:df:14:f0:90:eb:7d:9f:
83:5a:8f:c6:a9:55:02:38:fb:7d:6b:07:4b:e5:1c:
ab:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8B:D5:B0:72:74:C6:6F:4A:5A:C3:8A:A3:CB:7B:9A:FC:C9:85:46
X509v3 Authority Key Identifier:
keyid:A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/vIvVsHJ0xm9KWsOKo8t7mvzJhUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.62.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:32:c6:d4:65:54:3b:92:87:ef:82:6a:1e:bd:d7:93:1c:a3:
ac:6c:4c:88:31:84:0f:c3:9d:51:4c:3e:a7:6e:8c:0e:24:1a:
f9:64:cc:4a:63:d3:93:64:44:32:33:86:8e:7a:82:de:5b:4c:
9d:94:b8:a8:35:64:7c:f4:31:d5:01:f2:d6:c7:b8:e9:da:d6:
55:eb:ea:53:54:b5:81:d9:19:bc:b3:e8:3c:40:59:6f:a7:f8:
61:30:3e:4a:28:fb:11:95:5a:ef:02:57:b7:5d:42:63:cf:a0:
b6:18:e3:18:6c:2a:26:2b:a4:eb:cd:b0:73:82:a9:ee:2c:2f:
f3:f9:2c:6b:cc:2e:6d:5a:aa:b1:98:13:9a:37:8f:ea:e4:a5:
72:a3:a6:fd:43:d2:e3:4d:f1:2e:54:0a:a8:69:de:32:70:eb:
92:05:dd:ab:04:d8:dc:60:87:f1:e1:b3:6a:72:27:ac:56:10:
f1:18:6e:02:e3:8e:3d:58:b7:ba:b1:6d:55:7d:f0:a1:a7:3f:
a3:1f:c9:86:5b:0c:4b:2f:5f:12:8a:fc:05:88:3a:f9:ad:9c:
5b:ae:f8:ca:ca:4d:05:45:32:07:a3:b6:c3:73:9a:5d:08:bd:
58:8e:12:70:21:42:4a:e3:15:cf:02:2a:5d:90:2b:39:8c:98:
6b:97:70:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma6VqVGFYkKpeIxE8bE9VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMzY4YTc0MWM3YWM2ODk2NWU5MGQ0ZTZjYjI2ODQ4ZWIz
Yjk5MmIwHhcNMjUwMTAyMDk0OTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzhiZDViMDcyNzRjNjZmNGE1YWMzOGFhM2NiN2I5YWZjYzk4NTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK6AYU2t3F75ogA9rhFOZ3CPZZQ6
N+HfCJ6k7jDEkkeXEoGBchunejj+jLRJrmqhJNIGclv6TM/WU3m07SDvUwCq2fLm
fP2ufzAuCpN9SJlHtOvK/Ae/KJy/uiCg1IEN4HUz1/b6jNYSdnEcgLnETiJyPo70
YiF3sc1ARlfCugn4xDTr3/O75PSg8sJJ9oTtt/HRCwK4EX5FjYEY81p3jLOBZp+d
1CCladuiGjrq0ufxLoexxg0qHODRLbixa/c97m1AEbl2UK39mglIyw9RBCUvWJey
/yW6hu0HQXI0XZ90GFAoXhfU7t8U8JDrfZ+DWo/GqVUCOPt9awdL5RyriQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLyL1bBydMZvSlrDiqPLe5r8yYVGMB8GA1UdIwQY
MBaAFKA2inQcesaJZekNTmyyaEjrO5krMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0RhS2RCeDZ4b2xsNlExT2JMSm9TT3M3bVNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9hOWZlOTktYTUzNS00NGFiLWExYmIt
NWUzMGI4NmZkMWFiLzEvdkl2VnNISjB4bTlLV3NPS284dDdtdnpKaFVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9hOWZlOTktYTUzNS00NGFiLWExYmItNWUzMGI4NmZkMWFi
LzEvb0RhS2RCeDZ4b2xsNlExT2JMSm9TT3M3bVNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRc+MA0G
CSqGSIb3DQEBCwUAA4IBAQB/MsbUZVQ7kofvgmoevdeTHKOsbEyIMYQPw51RTD6n
bowOJBr5ZMxKY9OTZEQyM4aOeoLeW0ydlLioNWR89DHVAfLWx7jp2tZV6+pTVLWB
2Rm8s+g8QFlvp/hhMD5KKPsRlVrvAle3XUJjz6C2GOMYbComK6TrzbBzgqnuLC/z
+SxrzC5tWqqxmBOaN4/q5KVyo6b9Q9LjTfEuVAqoad4ycOuSBd2rBNjcYIfx4bNq
ciesVhDxGG4C4449WLe6sW1VffChpz+jH8mGWwxLL18SivwFiDr5rZxbrvjKyk0F
RTIHo7bDc5pdCL1YjhJwIUJK4xXPAipdkCs5jJhrl3AT
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:34 2025 by rpki-client