Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/ScldZDNPQSfRnsRt5khqoPE91NU.roa
File: ScldZDNPQSfRnsRt5khqoPE91NU.roa (raw, json)
Hash identifier: KUeiCd9GvmA+LCWqv73j10Yntn6kGl4O83uDHMjp9xg=
Subject key identifier: 49:C9:5D:64:33:4F:41:27:D1:9E:C4:6D:E6:48:6A:A0:F1:3D:D4:D5
Certificate issuer: /CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
Certificate serial: 0194266B41E99069776C703E2705B8DC853B
Authority key identifier: EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/ScldZDNPQSfRnsRt5khqoPE91NU.roa
Signing time: Thu 02 Jan 2025 09:49:10 +0000
ROA not before: Thu 02 Jan 2025 09:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203170
IP address blocks: 193.177.232.0/23 maxlen: 24
193.177.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:41:e9:90:69:77:6c:70:3e:27:05:b8:dc:85:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
Validity
Not Before: Jan 2 09:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49c95d64334f4127d19ec46de6486aa0f13dd4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:63:7a:b4:f8:bb:97:12:bf:2e:88:a4:32:
3f:e7:8c:b5:73:e0:5e:97:15:c8:26:22:7c:22:ad:
cd:5f:16:a2:04:3b:ac:58:df:33:79:8f:3b:52:95:
99:3b:4d:61:71:a9:67:a0:f2:ea:12:00:08:16:36:
bf:24:f8:91:11:74:5c:f5:44:7a:4d:5d:65:aa:7c:
8d:3e:96:10:a7:88:23:50:03:0a:75:1a:e5:bf:e3:
63:83:8e:58:eb:1d:cf:4a:d8:9c:67:f2:78:65:7d:
a2:90:df:b1:eb:0b:dc:92:6d:de:1f:4a:a6:e7:19:
68:75:64:bd:e7:e1:b8:85:89:86:a3:fd:64:7a:ce:
64:ba:f7:67:75:11:af:a2:f0:9e:7f:4e:94:d1:dc:
7e:4a:fe:0b:36:19:3a:37:e4:35:8a:aa:a7:00:30:
76:68:f6:c1:ad:5f:6a:db:ef:19:8a:1f:6d:74:f9:
2e:8f:82:9f:81:9c:8c:f5:f4:dc:31:5e:06:8a:79:
e6:77:3c:f6:d3:be:55:78:44:60:74:7a:b5:ec:ee:
93:21:ef:d0:9f:1c:1b:bc:aa:3f:d8:8b:6d:25:c7:
e3:7c:88:6d:d7:f8:ad:c8:1b:a7:32:b6:24:dc:61:
db:a8:c8:3d:79:a2:e3:3f:db:91:ff:d1:49:fb:81:
c0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C9:5D:64:33:4F:41:27:D1:9E:C4:6D:E6:48:6A:A0:F1:3D:D4:D5
X509v3 Authority Key Identifier:
keyid:EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/ScldZDNPQSfRnsRt5khqoPE91NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.232.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:2f:13:90:59:fc:0e:c0:a2:c1:41:15:c8:7f:62:a6:d2:1c:
8c:b5:5c:f8:7e:d5:56:7d:e8:39:b0:8a:d0:53:94:bc:82:2f:
98:ee:f3:48:00:76:2e:6a:51:16:bd:fc:e5:e5:88:63:d9:1e:
65:c4:6b:e6:6a:04:90:b8:dd:75:a3:a5:b9:12:14:2f:1c:d8:
38:3e:20:1d:15:0d:88:21:50:de:98:0a:84:1e:ba:e4:36:6f:
c8:26:e7:8f:fc:3e:18:db:cd:6f:2c:d0:6c:0a:d3:1e:67:19:
d5:a1:6b:55:46:41:7d:ce:b6:c6:c4:e0:3a:b3:bc:7a:f4:cc:
e7:a0:0e:8b:15:43:df:fd:69:69:70:c0:6b:ac:37:48:37:f4:
bc:76:52:60:3c:41:69:8a:69:e1:ef:8f:f6:47:bf:0c:90:45:
47:2e:ee:fe:66:bd:9f:54:bc:d4:55:20:0d:fd:c0:a6:ac:f3:
09:8e:45:5b:37:de:07:59:10:23:3f:e5:f2:9b:56:59:5c:58:
03:34:ea:38:79:99:d5:e6:c3:23:4f:bb:87:70:a3:ad:96:6f:
f8:12:42:67:22:1c:29:02:c7:68:6c:1f:a9:62:09:c8:b9:9b:
3a:ce:5f:4f:7c:bc:cf:a1:10:db:e1:6a:8a:f2:ef:4e:72:d8:
f1:24:8e:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma0HpkGl3bHA+JwW43IU7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmODAzYTQ5MGZkNjIwMzUxOGJiZTY0NGJjNzIwOWFmYjc3
ZWM3YjQwHhcNMjUwMTAyMDk0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWM5NWQ2NDMzNGY0MTI3ZDE5ZWM0NmRlNjQ4NmFhMGYxM2RkNGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvBjerT4u5cSvy6IpDI/54y1c+Be
lxXIJiJ8Iq3NXxaiBDusWN8zeY87UpWZO01hcalnoPLqEgAIFja/JPiREXRc9UR6
TV1lqnyNPpYQp4gjUAMKdRrlv+Njg45Y6x3PSticZ/J4ZX2ikN+x6wvckm3eH0qm
5xlodWS95+G4hYmGo/1kes5kuvdndRGvovCef06U0dx+Sv4LNhk6N+Q1iqqnADB2
aPbBrV9q2+8Zih9tdPkuj4KfgZyM9fTcMV4Ginnmdzz2075VeERgdHq17O6TIe/Q
nxwbvKo/2IttJcfjfIht1/ityBunMrYk3GHbqMg9eaLjP9uR/9FJ+4HAyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEnJXWQzT0En0Z7EbeZIaqDxPdTVMB8GA1UdIwQY
MBaAFO+AOkkP1iA1GLvmRLxyCa+3fse0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzRBNlNRX1dJRFVZdS1aRXZISUpyN2QteDdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC84YzQ4YWMtZDk2YS00NDFhLWIxODYt
ODc4N2QwYmYxMjA3LzEvU2NsZFpETlBRU2ZSbnNSdDVraHFvUEU5MU5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC84YzQ4YWMtZDk2YS00NDFhLWIxODYtODc4N2QwYmYxMjA3
LzEvNzRBNlNRX1dJRFVZdS1aRXZISUpyN2QteDdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwbHoMA0G
CSqGSIb3DQEBCwUAA4IBAQBNLxOQWfwOwKLBQRXIf2Km0hyMtVz4ftVWfeg5sIrQ
U5S8gi+Y7vNIAHYualEWvfzl5Yhj2R5lxGvmagSQuN11o6W5EhQvHNg4PiAdFQ2I
IVDemAqEHrrkNm/IJueP/D4Y281vLNBsCtMeZxnVoWtVRkF9zrbGxOA6s7x69Mzn
oA6LFUPf/WlpcMBrrDdIN/S8dlJgPEFpimnh74/2R78MkEVHLu7+Zr2fVLzUVSAN
/cCmrPMJjkVbN94HWRAjP+Xym1ZZXFgDNOo4eZnV5sMjT7uHcKOtlm/4EkJnIhwp
AsdobB+pYgnIuZs6zl9PfLzPoRDb4WqK8u9OctjxJI5q
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:31 2025 by rpki-client