Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/K0elnSjthwyDpqUrzqz0WWkS5i4.roa
File: K0elnSjthwyDpqUrzqz0WWkS5i4.roa (raw, json)
Hash identifier: gy/lZpvudI4NuVtj5Cr7txBBixWEIa8xyvy8FV7O+jc=
Subject key identifier: 2B:47:A5:9D:28:ED:87:0C:83:A6:A5:2B:CE:AC:F4:59:69:12:E6:2E
Certificate issuer: /CN=6e831066ea8fe20b067a136006b7af906633843b
Certificate serial: 019425FDBCCB5589EFE8F50B82A5793A0B2B
Authority key identifier: 6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/K0elnSjthwyDpqUrzqz0WWkS5i4.roa
Signing time: Thu 02 Jan 2025 07:49:33 +0000
ROA not before: Thu 02 Jan 2025 07:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49923
IP address blocks: 193.104.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:bc:cb:55:89:ef:e8:f5:0b:82:a5:79:3a:0b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e831066ea8fe20b067a136006b7af906633843b
Validity
Not Before: Jan 2 07:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b47a59d28ed870c83a6a52bceacf4596912e62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c5:02:f4:39:29:36:fc:46:b6:21:63:70:ca:
77:e6:f9:47:4a:82:68:d5:d5:f8:76:40:4f:6a:23:
3a:3f:2d:9d:be:c8:76:01:d4:94:3a:02:0b:61:a8:
ea:c4:4d:5e:d1:f1:9d:b0:73:e3:7e:dd:3c:8e:58:
4e:5c:7e:fd:1e:ed:28:9c:ce:8d:21:3c:bf:47:29:
a4:e4:4a:f5:71:61:60:36:f2:3f:e7:c3:b8:a4:de:
07:cd:c0:3c:e2:93:3a:bb:f0:8d:60:45:ff:bd:58:
bc:9f:a6:e4:1d:fa:b3:9d:6a:91:28:d8:ef:a3:6c:
45:5e:a4:98:49:e8:5a:50:26:15:b6:34:39:ff:41:
91:f6:aa:99:49:2c:20:7c:65:86:a3:40:49:a3:94:
4b:84:2a:21:8c:b7:64:cb:9d:5d:eb:57:ff:4e:eb:
24:1e:82:d2:3b:88:2d:2b:cb:df:a2:b4:76:41:01:
4a:c8:a9:bc:01:56:bb:c8:7f:d0:75:eb:d5:13:5b:
12:0e:3e:06:04:a6:a5:c1:6f:be:66:12:ce:68:08:
83:b0:e3:a2:c6:ad:55:88:07:ab:98:e5:ab:89:83:
28:0b:54:b6:9d:02:6a:db:0c:12:cc:61:79:96:be:
5c:4f:3f:59:66:09:6f:54:27:fe:9d:44:bb:7a:b1:
71:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:47:A5:9D:28:ED:87:0C:83:A6:A5:2B:CE:AC:F4:59:69:12:E6:2E
X509v3 Authority Key Identifier:
keyid:6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/K0elnSjthwyDpqUrzqz0WWkS5i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.48.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:43:94:c4:13:6b:49:8a:e0:97:ae:e2:14:e6:a1:98:d6:9f:
d1:c7:53:83:18:46:3b:9a:1b:97:ba:00:93:e0:e8:92:b9:4a:
32:0a:5d:20:6f:ba:25:58:d8:39:0a:d5:df:06:c4:c0:93:cb:
97:ae:36:17:ab:3d:d3:60:9e:5d:58:76:d8:9f:03:ca:2c:c3:
78:56:7f:0f:38:6f:12:31:d1:4b:ce:19:11:31:6c:5e:5a:0a:
52:ce:93:5c:02:6e:d5:a1:f6:bc:99:7c:8d:31:c5:ec:9e:1b:
6b:2c:7b:52:7d:6d:76:5a:de:d1:13:04:dd:f5:bd:39:52:8d:
ca:70:d3:2a:db:f3:b2:06:37:a2:89:37:ab:65:a6:a5:9c:b7:
86:eb:14:79:48:05:a7:71:53:16:98:4f:1b:90:51:55:8d:09:
1f:6d:88:96:e3:0f:5c:3e:1b:38:1f:b4:c8:fb:35:58:ef:c3:
9a:b8:22:5c:e9:47:2e:0a:e1:6f:99:06:98:e4:ba:51:c3:4f:
50:b5:06:54:a6:df:09:50:40:c8:ac:77:c6:4e:63:3d:55:d4:
9e:b5:26:55:a5:57:ec:99:33:00:06:8b:ef:00:df:a3:0e:b7:
7c:a3:4f:f5:b5:93:c6:d3:a3:ed:13:18:ca:7d:cb:ea:78:f5:
17:40:1b:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/bzLVYnv6PULgqV5OgsrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODMxMDY2ZWE4ZmUyMGIwNjdhMTM2MDA2YjdhZjkwNjYz
Mzg0M2IwHhcNMjUwMTAyMDc0OTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjQ3YTU5ZDI4ZWQ4NzBjODNhNmE1MmJjZWFjZjQ1OTY5MTJlNjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcUC9DkpNvxGtiFjcMp35vlHSoJo
1dX4dkBPaiM6Py2dvsh2AdSUOgILYajqxE1e0fGdsHPjft08jlhOXH79Hu0onM6N
ITy/Rymk5Er1cWFgNvI/58O4pN4HzcA84pM6u/CNYEX/vVi8n6bkHfqznWqRKNjv
o2xFXqSYSehaUCYVtjQ5/0GR9qqZSSwgfGWGo0BJo5RLhCohjLdky51d61f/Tusk
HoLSO4gtK8vforR2QQFKyKm8AVa7yH/QdevVE1sSDj4GBKalwW++ZhLOaAiDsOOi
xq1ViAermOWriYMoC1S2nQJq2wwSzGF5lr5cTz9ZZglvVCf+nUS7erFxZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCtHpZ0o7YcMg6alK86s9FlpEuYuMB8GA1UdIwQY
MBaAFG6DEGbqj+ILBnoTYAa3r5BmM4Q7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9NUVp1cVA0Z3NHZWhOZ0JyZXZrR1l6aERzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iZDE5ZmQtZjM2OS00MmJmLTkyNmYt
MmE0ZGQyM2EyZjlhLzEvSzBlbG5TanRod3lEcHFVcnpxejBXV2tTNWk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9iZDE5ZmQtZjM2OS00MmJmLTkyNmYtMmE0ZGQyM2EyZjlh
LzEvYm9NUVp1cVA0Z3NHZWhOZ0JyZXZrR1l6aERzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWgwMA0G
CSqGSIb3DQEBCwUAA4IBAQAtQ5TEE2tJiuCXruIU5qGY1p/Rx1ODGEY7mhuXugCT
4OiSuUoyCl0gb7olWNg5CtXfBsTAk8uXrjYXqz3TYJ5dWHbYnwPKLMN4Vn8POG8S
MdFLzhkRMWxeWgpSzpNcAm7Vofa8mXyNMcXsnhtrLHtSfW12Wt7REwTd9b05Uo3K
cNMq2/OyBjeiiTerZaalnLeG6xR5SAWncVMWmE8bkFFVjQkfbYiW4w9cPhs4H7TI
+zVY78OauCJc6UcuCuFvmQaY5LpRw09QtQZUpt8JUEDIrHfGTmM9VdSetSZVpVfs
mTMABovvAN+jDrd8o0/1tZPG06PtExjKfcvqePUXQBsM
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:16:55 2025 by rpki-client