Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/tVk3cWsdi3hZrDEonwmclNGT-5M.roa
File: tVk3cWsdi3hZrDEonwmclNGT-5M.roa (raw, json)
Hash identifier: bJG7n4hjSkt99mV93dCKPOM2IO0DVMxNl1m0F3B2sm8=
Subject key identifier: B5:59:37:71:6B:1D:8B:78:59:AC:31:28:9F:09:9C:94:D1:93:FB:93
Certificate issuer: /CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
Certificate serial: 01941F8C99275C3FC1C47D177117E5B4DDFE
Authority key identifier: 1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/tVk3cWsdi3hZrDEonwmclNGT-5M.roa
Signing time: Wed 01 Jan 2025 01:48:15 +0000
ROA not before: Wed 01 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43462
IP address blocks: 193.46.75.0/24 maxlen: 24
2001:67c:1fc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:99:27:5c:3f:c1:c4:7d:17:71:17:e5:b4:dd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b55937716b1d8b7859ac31289f099c94d193fb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:cb:ee:d9:71:5e:ae:33:76:ab:b3:39:50:
06:53:ce:38:c1:d1:f2:e8:e1:04:c4:b7:44:a2:72:
f1:51:d0:f2:20:d8:b3:15:85:49:24:e1:85:13:32:
0e:ed:6d:e6:78:6a:e0:9e:8e:85:84:29:f1:c7:9f:
9a:74:0c:d0:ba:06:17:e5:67:2b:1c:02:00:85:c1:
c0:03:1b:fb:ff:a6:1f:de:7d:9d:37:bd:86:ef:15:
13:fa:f5:60:47:a8:ff:4b:00:1e:28:60:3e:7a:7c:
10:ee:6b:56:40:a3:68:75:b6:f6:2c:98:64:f4:4f:
08:69:ca:b6:69:6e:c7:58:ca:9d:d6:40:b5:bf:99:
1d:da:be:0f:0d:d5:64:70:0f:83:99:36:6b:db:66:
cf:e5:9d:70:52:12:e3:a1:9f:b0:0e:fb:2c:31:49:
b3:f6:44:b3:4f:1c:73:5d:dc:87:01:92:e2:74:70:
e5:1b:82:81:29:86:6a:75:8a:7e:e6:de:20:fd:e9:
f3:14:d7:de:38:d1:e0:da:20:bc:a5:a1:67:b4:f8:
35:79:f1:d4:95:2a:31:74:55:df:ed:e7:2a:ef:b4:
50:b0:6f:44:92:1c:cd:cc:22:d4:08:ae:20:3d:d6:
6f:50:93:68:05:49:0d:e6:e6:28:79:c3:5f:fc:aa:
57:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:59:37:71:6B:1D:8B:78:59:AC:31:28:9F:09:9C:94:D1:93:FB:93
X509v3 Authority Key Identifier:
keyid:1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/tVk3cWsdi3hZrDEonwmclNGT-5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.75.0/24
IPv6:
2001:67c:1fc::/48
Signature Algorithm: sha256WithRSAEncryption
0f:ea:e2:85:3d:5a:b3:98:fe:34:10:17:ad:c7:de:76:4d:f3:
80:b7:ba:98:e1:00:c7:22:d5:4e:b3:6d:c4:a2:79:94:15:d0:
4c:2f:cb:96:8d:89:ed:af:84:ea:20:33:61:6a:7e:d5:86:b5:
f3:e2:83:da:f9:49:17:67:8e:a3:35:de:b7:d7:48:9d:b6:8d:
49:fe:c2:64:c0:a8:7d:70:44:ac:90:d3:34:79:57:fe:5b:c6:
ba:66:a8:a0:86:cb:6c:50:8b:81:66:14:ea:86:6c:9f:b7:c5:
ed:83:08:19:15:70:be:33:66:86:e0:cd:55:91:8d:9c:8f:64:
3d:f2:73:8f:15:7f:b7:8c:4f:0d:ea:f9:bb:96:f4:aa:79:57:
1d:84:89:33:a3:0e:a0:af:ba:c4:ca:90:f5:c9:88:57:f2:f0:
65:b5:7a:38:27:5a:8c:71:a0:d5:96:96:79:56:17:a1:d0:52:
f8:8e:22:95:6f:64:af:e8:4f:42:24:05:00:9e:4f:b6:b2:07:
d7:5d:73:e0:45:2f:58:d7:95:2a:ab:ec:b6:7c:0a:4d:7e:a5:
6a:95:b8:42:f2:a8:3e:d7:0b:20:d4:c1:92:25:14:cb:74:3b:
c2:4a:a6:60:f8:cd:0b:2f:c1:fe:8e:b6:19:40:15:4b:9d:34:
2f:17:ab:3a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQfjJknXD/BxH0XcRfltN3+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNWRhOTEwOWY2MTRjN2M0MTU5YjMyMzFhMzg3NzcwMmE2
ZjIxY2UwHhcNMjUwMTAxMDE0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTU5Mzc3MTZiMWQ4Yjc4NTlhYzMxMjg5ZjA5OWM5NGQxOTNmYjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs7L7tlxXq4zdquzOVAGU844wdHy
6OEExLdEonLxUdDyINizFYVJJOGFEzIO7W3meGrgno6FhCnxx5+adAzQugYX5Wcr
HAIAhcHAAxv7/6Yf3n2dN72G7xUT+vVgR6j/SwAeKGA+enwQ7mtWQKNodbb2LJhk
9E8Iacq2aW7HWMqd1kC1v5kd2r4PDdVkcA+DmTZr22bP5Z1wUhLjoZ+wDvssMUmz
9kSzTxxzXdyHAZLidHDlG4KBKYZqdYp+5t4g/enzFNfeONHg2iC8paFntPg1efHU
lSoxdFXf7ecq77RQsG9EkhzNzCLUCK4gPdZvUJNoBUkN5uYoecNf/KpXJwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLVZN3FrHYt4WawxKJ8JnJTRk/uTMB8GA1UdIwQY
MBaAFB1dqRCfYUx8QVmzIxo4d3AqbyHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFYycEVKOWhUSHhCV2JNakdqaDNjQ3B2SWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zM2FjMGUtZTE5ZS00Yzg5LWJkZjMt
NzA2YTZmYzE2NGIxLzEvdFZrM2NXc2RpM2hackRFb253bWNsTkdULTVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8zM2FjMGUtZTE5ZS00Yzg5LWJkZjMtNzA2YTZmYzE2NGIx
LzEvSFYycEVKOWhUSHhCV2JNakdqaDNjQ3B2SWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwS5LMA8E
AgACMAkDBwAgAQZ8AfwwDQYJKoZIhvcNAQELBQADggEBAA/q4oU9WrOY/jQQF63H
3nZN84C3upjhAMci1U6zbcSieZQV0Ewvy5aNie2vhOogM2FqftWGtfPig9r5SRdn
jqM13rfXSJ22jUn+wmTAqH1wRKyQ0zR5V/5bxrpmqKCGy2xQi4FmFOqGbJ+3xe2D
CBkVcL4zZobgzVWRjZyPZD3yc48Vf7eMTw3q+buW9Kp5Vx2EiTOjDqCvusTKkPXJ
iFfy8GW1ejgnWoxxoNWWlnlWF6HQUviOIpVvZK/oT0IkBQCeT7ayB9ddc+BFL1jX
lSqr7LZ8Ck1+pWqVuELyqD7XCyDUwZIlFMt0O8JKpmD4zQsvwf6OthlAFUudNC8X
qzo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:59:31 2025 by rpki-client