Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/0H7Thc0vxzHE538Kg__IsozOYbE.roa
File: 0H7Thc0vxzHE538Kg__IsozOYbE.roa (raw, json)
Hash identifier: giCD6rVmFgKHziT2AIqsZO6VuG2Tfm2cxgqOASpwxX8=
Subject key identifier: D0:7E:D3:85:CD:2F:C7:31:C4:E7:7F:0A:83:FF:C8:B2:8C:CE:61:B1
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 0194282369198CDB302989958FAB975D1F58
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/0H7Thc0vxzHE538Kg__IsozOYbE.roa
Signing time: Thu 02 Jan 2025 17:49:56 +0000
ROA not before: Thu 02 Jan 2025 17:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49538
IP address blocks: 213.192.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:69:19:8c:db:30:29:89:95:8f:ab:97:5d:1f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Jan 2 17:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d07ed385cd2fc731c4e77f0a83ffc8b28cce61b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:e6:5a:44:b4:40:dc:98:80:41:27:69:4d:
d7:1b:d2:cc:d1:c4:81:8e:31:47:11:0c:44:3a:e7:
34:23:55:a8:50:2a:3e:f4:16:1b:67:8d:ba:7c:85:
56:be:8c:49:8a:82:46:d7:98:56:90:6d:22:ef:59:
be:19:ab:b0:a2:08:7f:50:cc:c7:c7:73:4e:7c:7f:
a8:83:00:8a:c8:f8:05:7c:a0:04:42:b2:ca:fa:00:
70:a7:33:e2:77:d8:4d:22:3d:2e:20:60:34:55:53:
e7:67:89:69:77:ac:93:0c:e3:d8:3c:36:ea:5f:4c:
b9:63:f8:b2:3b:6a:ea:14:e0:3a:e6:f9:11:3a:ca:
4b:eb:48:0e:60:4b:d1:32:0a:7d:04:45:84:b3:50:
73:72:1f:e2:8c:4d:38:40:0d:04:3a:a1:08:40:4d:
e7:ac:77:74:24:a6:50:e1:96:4e:28:80:7a:fa:72:
3c:0f:fc:d4:1d:c8:56:6d:be:d6:0d:08:af:42:ec:
cd:a3:07:74:c8:f3:e6:eb:9b:15:92:a5:06:c4:52:
f8:1a:b9:f0:9e:f5:b9:f0:e5:2a:c4:57:31:0a:b4:
7d:2c:71:66:1d:84:98:8a:32:32:d2:f0:8d:d8:19:
3e:80:da:bc:6f:11:7d:52:d4:c7:f0:f3:d7:94:af:
7c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7E:D3:85:CD:2F:C7:31:C4:E7:7F:0A:83:FF:C8:B2:8C:CE:61:B1
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/0H7Thc0vxzHE538Kg__IsozOYbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.236.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:d3:5e:99:35:37:62:02:c0:3c:e5:47:f0:4d:f3:10:ae:ed:
49:0f:b7:3c:c3:ad:65:69:88:18:77:8e:db:59:c2:30:27:4c:
ea:57:74:b3:0c:12:43:78:93:74:bb:86:31:0c:93:5b:66:a5:
5c:76:02:e7:b7:4d:1b:ff:b1:b5:94:10:c9:e7:02:6f:d1:9d:
af:de:5e:d6:19:db:f2:60:0c:ed:02:e2:73:6e:eb:eb:cc:9b:
5e:5b:1b:56:08:65:db:77:1b:df:d1:fc:87:f9:38:a0:0a:f7:
99:16:54:cd:69:40:7a:de:11:f8:6f:00:05:a8:25:5c:2b:07:
e1:86:6a:1c:c8:73:3e:f7:a2:c5:ee:42:16:64:cd:c0:c2:74:
7c:1e:6e:d6:e4:bc:35:21:62:18:06:be:a3:2a:19:e9:07:f2:
25:dc:b3:fa:8c:56:30:6a:49:bd:65:f7:fd:c3:b9:3c:53:dd:
09:5b:a1:4b:cf:3f:ef:07:9b:8e:e4:28:06:7f:ad:7a:5b:c8:
51:9a:3b:e1:77:4c:2c:15:d6:2c:84:ce:11:e2:6a:c0:63:e3:
6f:5c:64:d0:bd:a3:1b:7f:52:1e:64:6d:70:33:a9:dc:ca:98:
cb:72:5c:8f:27:bf:43:d2:f8:e4:a1:ae:03:dc:bd:96:c5:4a:
25:8e:7a:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI2kZjNswKYmVj6uXXR9YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx
ZDA5OWIwHhcNMjUwMTAyMTc0OTU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDdlZDM4NWNkMmZjNzMxYzRlNzdmMGE4M2ZmYzhiMjhjY2U2MWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8PmWkS0QNyYgEEnaU3XG9LM0cSB
jjFHEQxEOuc0I1WoUCo+9BYbZ426fIVWvoxJioJG15hWkG0i71m+Gauwogh/UMzH
x3NOfH+ogwCKyPgFfKAEQrLK+gBwpzPid9hNIj0uIGA0VVPnZ4lpd6yTDOPYPDbq
X0y5Y/iyO2rqFOA65vkROspL60gOYEvRMgp9BEWEs1Bzch/ijE04QA0EOqEIQE3n
rHd0JKZQ4ZZOKIB6+nI8D/zUHchWbb7WDQivQuzNowd0yPPm65sVkqUGxFL4Grnw
nvW58OUqxFcxCrR9LHFmHYSYijIy0vCN2Bk+gNq8bxF9UtTH8PPXlK98mwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNB+04XNL8cxxOd/CoP/yLKMzmGxMB8GA1UdIwQY
MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt
Mjc0NzNjYTYxMmRlLzEvMEg3VGhjMHZ4ekhFNTM4S2dfX0lzb3pPWWJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl
LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1cDsMA0G
CSqGSIb3DQEBCwUAA4IBAQBP016ZNTdiAsA85UfwTfMQru1JD7c8w61laYgYd47b
WcIwJ0zqV3SzDBJDeJN0u4YxDJNbZqVcdgLnt00b/7G1lBDJ5wJv0Z2v3l7WGdvy
YAztAuJzbuvrzJteWxtWCGXbdxvf0fyH+TigCveZFlTNaUB63hH4bwAFqCVcKwfh
hmocyHM+96LF7kIWZM3AwnR8Hm7W5Lw1IWIYBr6jKhnpB/Il3LP6jFYwakm9Zff9
w7k8U90JW6FLzz/vB5uO5CgGf616W8hRmjvhd0wsFdYshM4R4mrAY+NvXGTQvaMb
f1IeZG1wM6ncypjLclyPJ79D0vjkoa4D3L2WxUoljnqd
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:44:43 2025 by rpki-client