Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/21W9uhOLCfGBSLMK8xlCrH8tOg4.roa
File: 21W9uhOLCfGBSLMK8xlCrH8tOg4.roa (raw, json)
Hash identifier: AjEuF2+0cRLXo4E2JHpp6w+dtVFDkzA5bZ7j4AtGGgA=
Subject key identifier: DB:55:BD:BA:13:8B:09:F1:81:48:B3:0A:F3:19:42:AC:7F:2D:3A:0E
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 0194228D7244DEFAA6D2A67CAD7097794C3B
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/21W9uhOLCfGBSLMK8xlCrH8tOg4.roa
Signing time: Wed 01 Jan 2025 15:48:02 +0000
ROA not before: Wed 01 Jan 2025 15:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2603
IP address blocks: 193.10.68.0/24 maxlen: 24
193.10.94.0/24 maxlen: 24
193.10.95.0/24 maxlen: 24
193.10.252.0/24 maxlen: 24
193.10.254.0/24 maxlen: 24
193.10.255.0/24 maxlen: 24
193.11.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:72:44:de:fa:a6:d2:a6:7c:ad:70:97:79:4c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 15:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db55bdba138b09f18148b30af31942ac7f2d3a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:d0:47:c6:b3:a9:11:93:8a:fa:3e:cd:5f:
08:23:a4:51:8f:a9:e5:7e:a9:3d:76:3c:bd:47:a1:
a9:51:cc:2b:72:b8:9d:23:cc:cb:92:0e:1a:44:90:
96:c8:d6:58:42:d8:b2:df:bf:48:d5:d0:a1:68:4e:
10:b5:c0:65:9c:47:75:72:28:b3:33:bf:2a:6d:1f:
f6:ef:12:f0:93:98:32:55:26:bf:2b:67:b4:dc:b8:
2d:91:b4:25:fc:62:8b:ff:c7:86:90:bb:cc:80:c5:
b1:e4:09:4b:cc:aa:1d:4f:4f:c9:7a:be:be:90:8d:
48:f4:2b:f2:fc:48:e2:2e:b7:83:33:bf:65:3e:17:
30:53:40:8e:66:16:4d:f6:0e:bb:54:77:e0:dd:f6:
b2:ff:30:7e:cb:97:9e:6c:e6:47:e4:99:85:a8:ed:
d3:f9:90:ce:f7:0c:48:f8:2a:69:55:4c:14:01:c5:
dc:f9:01:d5:16:3a:a7:6a:f3:7e:38:3e:da:93:24:
2c:cd:f5:1c:e9:07:54:f1:ad:fb:ff:4d:dc:e8:e2:
a6:81:c3:7c:11:e2:64:d1:ed:e3:66:cf:6c:84:be:
9b:35:59:d6:84:c4:ba:80:1a:2f:fa:7a:40:28:2f:
d0:89:00:ae:c6:86:5d:44:45:cd:67:02:ab:81:0c:
55:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:55:BD:BA:13:8B:09:F1:81:48:B3:0A:F3:19:42:AC:7F:2D:3A:0E
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/21W9uhOLCfGBSLMK8xlCrH8tOg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.10.68.0/24
193.10.94.0/23
193.10.252.0/24
193.10.254.0/23
193.11.3.0/24
Signature Algorithm: sha256WithRSAEncryption
40:85:33:c3:42:e9:a6:ed:3a:dc:b5:ac:10:e4:f6:d0:ec:21:
dc:55:98:fd:63:5f:2f:f9:78:34:b5:dc:50:ce:02:04:bd:20:
ee:47:ed:8e:24:88:c0:dd:19:d6:1e:64:60:57:99:dc:d2:fd:
5c:9d:ec:ba:56:cb:55:64:08:99:d0:43:22:79:6f:01:3a:74:
a1:0b:9f:76:97:60:8b:78:53:72:29:5a:11:08:0f:8e:af:bd:
fc:a8:ec:1e:10:31:b4:93:b5:7e:9c:2e:93:d5:2a:8c:93:f9:
b6:b3:88:6e:aa:ea:47:62:2b:04:3e:c4:83:d2:30:f6:eb:50:
91:a3:75:de:be:42:71:9d:64:2e:27:8e:e0:a3:47:83:d4:10:
d1:d1:22:1c:f1:10:82:e6:be:f3:36:74:d5:d7:6d:51:4d:8e:
cf:28:23:57:8a:e6:8b:f8:52:5d:5f:3b:e4:7a:05:23:c9:0c:
61:c2:36:3c:aa:41:7a:09:e1:3e:d0:bd:1d:f9:a5:b8:df:7d:
a1:13:88:02:d5:de:7b:14:36:e2:6c:ba:fb:93:02:f5:c4:a8:
01:e6:91:35:74:1b:10:47:e4:34:8d:99:7a:59:11:9c:7d:28:
d2:2d:eb:aa:6b:ea:b2:04:52:73:25:02:31:b9:ff:5a:77:51:
70:49:1f:aa
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQijXJE3vqm0qZ8rXCXeUw7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5
NGM1ZjIwHhcNMjUwMTAxMTU0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjU1YmRiYTEzOGIwOWYxODE0OGIzMGFmMzE5NDJhYzdmMmQzYTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcrQR8azqRGTivo+zV8II6RRj6nl
fqk9djy9R6GpUcwrcridI8zLkg4aRJCWyNZYQtiy379I1dChaE4QtcBlnEd1ciiz
M78qbR/27xLwk5gyVSa/K2e03LgtkbQl/GKL/8eGkLvMgMWx5AlLzKodT0/Jer6+
kI1I9Cvy/EjiLreDM79lPhcwU0COZhZN9g67VHfg3fay/zB+y5eebOZH5JmFqO3T
+ZDO9wxI+CppVUwUAcXc+QHVFjqnavN+OD7akyQszfUc6QdU8a37/03c6OKmgcN8
EeJk0e3jZs9shL6bNVnWhMS6gBov+npAKC/QiQCuxoZdREXNZwKrgQxVWQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFNtVvboTiwnxgUizCvMZQqx/LToOMB8GA1UdIwQY
MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt
NDY0ZWIxODNiNTY4LzEvMjFXOXVoT0xDZkdCU0xNSzh4bENySDh0T2c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4
LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAwQpEAwQB
wQpeAwQAwQr8AwQBwQr+AwQAwQsDMA0GCSqGSIb3DQEBCwUAA4IBAQBAhTPDQumm
7TrctawQ5PbQ7CHcVZj9Y18v+Xg0tdxQzgIEvSDuR+2OJIjA3RnWHmRgV5nc0v1c
ney6VstVZAiZ0EMieW8BOnShC592l2CLeFNyKVoRCA+Or738qOweEDG0k7V+nC6T
1SqMk/m2s4huqupHYisEPsSD0jD261CRo3XevkJxnWQuJ47go0eD1BDR0SIc8RCC
5r7zNnTV121RTY7PKCNXiuaL+FJdXzvkegUjyQxhwjY8qkF6CeE+0L0d+aW4332h
E4gC1d57FDbibLr7kwL1xKgB5pE1dBsQR+Q0jZl6WRGcfSjSLeuqa+qyBFJzJQIx
uf9ad1FwSR+q
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:39 2025 by rpki-client