Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/J46kuUmF_sgE0zFOUz0hgWBo52M.roa
File: J46kuUmF_sgE0zFOUz0hgWBo52M.roa (raw, json)
Hash identifier: jPrLPvaHVRm/LYCKQXvlkQimqCpYkjCK3g37WDkRjQ0=
Subject key identifier: 27:8E:A4:B9:49:85:FE:C8:04:D3:31:4E:53:3D:21:81:60:68:E7:63
Certificate issuer: /CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Certificate serial: 019421B25BAE0395394755D9235885EE28A5
Authority key identifier: 20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/J46kuUmF_sgE0zFOUz0hgWBo52M.roa
Signing time: Wed 01 Jan 2025 11:48:44 +0000
ROA not before: Wed 01 Jan 2025 11:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49362
IP address blocks: 193.9.160.0/19 maxlen: 19
2a0d:aa00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:5b:ae:03:95:39:47:55:d9:23:58:85:ee:28:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Validity
Not Before: Jan 1 11:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=278ea4b94985fec804d3314e533d21816068e763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:34:6f:77:18:11:dd:b5:cb:93:58:9a:5a:
09:a6:81:a9:94:a4:c3:3a:49:51:0d:73:6d:04:9f:
e3:33:75:ce:13:78:de:78:21:ac:e3:11:5e:f5:18:
73:f5:7d:61:96:b6:68:c1:e2:00:58:cd:4f:0d:79:
0c:78:6e:de:b9:1e:1e:48:2b:8a:da:a6:f8:4e:26:
98:6d:40:77:d2:34:58:e6:3d:9c:d6:26:d2:f2:33:
45:cd:52:1c:0e:f8:d2:65:5e:f9:3b:cf:85:04:65:
56:5c:f9:fc:cb:59:26:2d:0b:b5:fe:4e:2c:d9:da:
13:94:c8:76:e2:f6:bd:88:b0:01:b2:6c:8d:43:4e:
e8:7e:a3:e5:ad:41:2c:2f:cc:b8:b4:70:b3:49:47:
37:91:05:ec:57:34:9e:e6:85:f9:b2:4b:23:1f:d8:
81:d3:c4:d0:d6:db:e0:15:ac:30:1b:77:05:41:44:
39:2a:ee:00:27:dc:41:22:73:12:c4:16:b0:d0:ec:
a2:78:bd:93:55:e9:ec:bb:da:a3:18:67:35:28:fb:
11:72:fc:59:a4:7e:30:ce:60:b1:bc:6d:8e:2e:22:
73:c1:14:eb:ec:73:db:fd:96:56:42:50:60:41:df:
93:76:ff:15:82:60:bf:99:08:76:a9:03:ff:66:49:
91:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8E:A4:B9:49:85:FE:C8:04:D3:31:4E:53:3D:21:81:60:68:E7:63
X509v3 Authority Key Identifier:
keyid:20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/J46kuUmF_sgE0zFOUz0hgWBo52M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.160.0/19
IPv6:
2a0d:aa00::/29
Signature Algorithm: sha256WithRSAEncryption
8a:65:16:2b:c5:2f:5a:88:55:d0:d0:bd:c6:b0:20:ac:0c:f9:
cb:73:8c:53:17:17:30:cc:e6:4a:74:61:13:c6:ac:24:4f:ab:
cb:74:10:91:d6:66:85:b0:7c:48:3c:05:18:55:85:d4:c6:df:
d4:09:c7:96:23:16:48:21:dd:e5:7e:14:15:8f:ad:92:46:7e:
df:f7:32:d0:c2:17:a1:57:69:ee:da:05:88:e6:4d:cc:99:af:
9d:79:93:48:59:7f:aa:7a:89:c5:d6:5f:25:f9:c8:df:9f:3f:
41:f0:58:16:ec:2f:45:54:97:14:5c:b4:98:7d:eb:3c:7f:e0:
98:7a:33:98:65:6f:c2:ab:5f:41:1a:fe:13:8f:44:9f:04:ee:
85:57:b6:6a:a9:57:b3:45:9c:4d:ed:ed:1b:b9:37:23:cc:5f:
c3:22:9d:85:29:49:c7:d8:6b:09:0c:be:96:de:d4:4e:36:22:
3c:04:3b:8a:42:59:30:b2:2a:00:c8:e1:5c:44:ad:1c:10:46:
ad:50:92:33:0e:30:7c:14:d3:ad:0a:c7:a4:b1:69:17:14:ce:
5f:01:e4:d7:f6:fd:fc:33:48:c5:ef:9f:59:2c:64:f1:fa:f3:
65:9f:48:e3:af:10:8e:53:8e:06:46:c5:39:0d:d3:6d:0f:7b:
58:25:29:a0
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQhsluuA5U5R1XZI1iF7iilMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMzFiYzdmNzFiYjBkMWE4NTY2ZmQ0NjA0MjE0NTA3YzBk
NDcxMWIwHhcNMjUwMTAxMTE0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzhlYTRiOTQ5ODVmZWM4MDRkMzMxNGU1MzNkMjE4MTYwNjhlNzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRY0b3cYEd21y5NYmloJpoGplKTD
OklRDXNtBJ/jM3XOE3jeeCGs4xFe9Rhz9X1hlrZoweIAWM1PDXkMeG7euR4eSCuK
2qb4TiaYbUB30jRY5j2c1ibS8jNFzVIcDvjSZV75O8+FBGVWXPn8y1kmLQu1/k4s
2doTlMh24va9iLABsmyNQ07ofqPlrUEsL8y4tHCzSUc3kQXsVzSe5oX5sksjH9iB
08TQ1tvgFawwG3cFQUQ5Ku4AJ9xBInMSxBaw0OyieL2TVensu9qjGGc1KPsRcvxZ
pH4wzmCxvG2OLiJzwRTr7HPb/ZZWQlBgQd+Tdv8VgmC/mQh2qQP/ZkmRWwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCeOpLlJhf7IBNMxTlM9IYFgaOdjMB8GA1UdIwQY
MBaAFCAxvH9xuw0ahWb9RgQhRQfA1HEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSURHOGYzRzdEUnFGWnYxR0JDRkZCOERVY1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNDE1MTktNDZmYy00NGRhLWE5YWYt
ZTNmNGJiY2JiYmQ3LzEvSjQ2a3VVbUZfc2dFMHpGT1V6MGhnV0JvNTJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iNDE1MTktNDZmYy00NGRhLWE5YWYtZTNmNGJiY2JiYmQ3
LzEvSURHOGYzRzdEUnFGWnYxR0JDRkZCOERVY1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFwQmgMA0E
AgACMAcDBQMqDaoAMA0GCSqGSIb3DQEBCwUAA4IBAQCKZRYrxS9aiFXQ0L3GsCCs
DPnLc4xTFxcwzOZKdGETxqwkT6vLdBCR1maFsHxIPAUYVYXUxt/UCceWIxZIId3l
fhQVj62SRn7f9zLQwhehV2nu2gWI5k3Mma+deZNIWX+qeonF1l8l+cjfnz9B8FgW
7C9FVJcUXLSYfes8f+CYejOYZW/Cq19BGv4Tj0SfBO6FV7ZqqVezRZxN7e0buTcj
zF/DIp2FKUnH2GsJDL6W3tRONiI8BDuKQlkwsioAyOFcRK0cEEatUJIzDjB8FNOt
CseksWkXFM5fAeTX9v38M0jF759ZLGTx+vNln0jjrxCOU44GRsU5DdNtD3tYJSmg
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:04 2025 by rpki-client