Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/3s8R9sRZRUNgHAycT7iMGkpoqeI.roa
File: 3s8R9sRZRUNgHAycT7iMGkpoqeI.roa (raw, json)
Hash identifier: LAbsSBnsWLcRul98ZPfO4H8aiix0SGvDORk1UP26ViE=
Subject key identifier: DE:CF:11:F6:C4:59:45:43:60:1C:0C:9C:4F:B8:8C:1A:4A:68:A9:E2
Certificate issuer: /CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Certificate serial: 019427486146F794A8676A655720E77464AA
Authority key identifier: 5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/3s8R9sRZRUNgHAycT7iMGkpoqeI.roa
Signing time: Thu 02 Jan 2025 13:50:42 +0000
ROA not before: Thu 02 Jan 2025 13:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20810
IP address blocks: 193.29.228.0/24 maxlen: 24
194.113.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:61:46:f7:94:a8:67:6a:65:57:20:e7:74:64:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Validity
Not Before: Jan 2 13:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=decf11f6c4594543601c0c9c4fb88c1a4a68a9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:a9:54:85:01:11:18:1b:f9:e2:24:84:2d:
02:1f:a0:72:5a:90:12:56:2a:55:96:5b:31:36:b0:
42:4a:d9:f1:92:71:1f:b9:93:32:fc:2e:fb:3d:e2:
16:ed:0f:55:95:71:65:5d:87:32:08:1b:95:d4:48:
2b:f3:cb:3a:92:e3:55:31:3e:5f:bc:8f:88:54:b2:
cb:fc:c6:6a:5e:f9:10:78:f0:bc:91:59:55:36:54:
49:c9:2a:57:96:03:c6:c0:16:f8:25:fe:f3:c7:54:
fa:e4:82:3b:c8:74:e8:ae:62:b2:98:41:56:4c:26:
19:fb:3f:f1:06:c5:0c:70:51:a1:58:cb:8f:4d:60:
6a:c4:0e:44:48:7d:65:ad:5f:dd:72:51:68:e4:80:
5b:56:d5:7d:a0:c4:2d:ca:7b:8d:b4:e1:52:16:98:
bc:9f:2a:de:67:df:22:b3:98:c9:eb:66:52:84:e1:
46:90:a4:d3:e0:75:73:78:11:92:97:ed:79:65:78:
18:bb:8c:1e:77:20:e2:1a:b5:7c:e6:eb:2e:66:5b:
0e:18:23:10:e3:db:47:37:64:cf:29:16:e0:66:93:
c9:43:b6:1b:a7:7a:38:06:68:c7:bc:c1:77:77:cd:
f8:e3:0a:71:4c:87:c4:7c:08:06:12:2b:3a:19:a1:
76:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CF:11:F6:C4:59:45:43:60:1C:0C:9C:4F:B8:8C:1A:4A:68:A9:E2
X509v3 Authority Key Identifier:
keyid:5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/3s8R9sRZRUNgHAycT7iMGkpoqeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.228.0/24
194.113.115.0/24
Signature Algorithm: sha256WithRSAEncryption
88:48:20:93:89:0a:8f:a1:85:4f:32:ae:eb:ba:2e:4b:db:86:
5d:39:10:8f:c0:f6:79:dc:24:9e:66:6c:0d:f8:1d:86:01:52:
1d:27:b4:78:ad:ad:63:97:15:c5:00:7e:1a:d5:51:f9:d2:63:
75:de:14:c7:a9:11:b7:80:7a:8b:5b:aa:93:fc:0f:34:db:f6:
9d:33:7d:ef:c0:33:80:d1:06:41:d2:26:85:22:e3:f7:08:2d:
9c:97:51:e5:56:06:f8:06:8e:81:6d:d8:e3:fe:2f:1f:7c:32:
7f:ff:52:4f:3c:c8:c6:24:17:ea:f5:9c:89:f5:c3:9e:41:ca:
18:ca:8f:ba:74:ba:46:da:bb:b8:a7:0a:d5:eb:5c:79:f3:1c:
45:9b:2d:ba:ff:3c:2a:96:37:5f:cf:b7:e8:a4:6b:ec:0a:de:
6a:63:b6:91:71:51:d3:83:de:10:68:e7:e3:8f:98:8d:2a:cd:
3a:56:55:a7:88:a7:4a:b4:ac:36:1b:4f:e0:37:10:68:17:2b:
8b:f6:30:b6:0d:af:6f:25:a2:a0:63:5c:d0:e4:9a:68:57:60:
e1:f6:70:2e:1d:f5:27:32:71:c8:0b:b5:33:6f:a9:9d:92:9e:
32:ee:e7:1a:3b:ef:15:6f:39:0a:ba:c6:68:d9:46:27:d6:26:
80:e3:ff:70
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQnSGFG95SoZ2plVyDndGSqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMmYyMWU1YTRmYmUwMTUyMDVmNmNlZjg4YWZhZTE5Y2Qw
NmE2MTIwHhcNMjUwMTAyMTM1MDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWNmMTFmNmM0NTk0NTQzNjAxYzBjOWM0ZmI4OGMxYTRhNjhhOWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPupVIUBERgb+eIkhC0CH6ByWpAS
VipVllsxNrBCStnxknEfuZMy/C77PeIW7Q9VlXFlXYcyCBuV1Egr88s6kuNVMT5f
vI+IVLLL/MZqXvkQePC8kVlVNlRJySpXlgPGwBb4Jf7zx1T65II7yHTormKymEFW
TCYZ+z/xBsUMcFGhWMuPTWBqxA5ESH1lrV/dclFo5IBbVtV9oMQtynuNtOFSFpi8
nyreZ98is5jJ62ZShOFGkKTT4HVzeBGSl+15ZXgYu4wedyDiGrV85usuZlsOGCMQ
49tHN2TPKRbgZpPJQ7Ybp3o4BmjHvMF3d8344wpxTIfEfAgGEis6GaF26QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN7PEfbEWUVDYBwMnE+4jBpKaKniMB8GA1UdIwQY
MBaAFF0vIeWk++AVIF9s74ivrhnNBqYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFM4aDVhVDc0QlVnWDJ6dmlLLXVHYzBHcGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80OWUzNmMtNzRiNi00NTQ3LTg4YWIt
MjE0YTc2MjEwZmQ2LzEvM3M4UjlzUlpSVU5nSEF5Y1Q3aU1Ha3BvcWVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80OWUzNmMtNzRiNi00NTQ3LTg4YWItMjE0YTc2MjEwZmQ2
LzEvWFM4aDVhVDc0QlVnWDJ6dmlLLXVHYzBHcGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwR3kAwQA
wnFzMA0GCSqGSIb3DQEBCwUAA4IBAQCISCCTiQqPoYVPMq7rui5L24ZdORCPwPZ5
3CSeZmwN+B2GAVIdJ7R4ra1jlxXFAH4a1VH50mN13hTHqRG3gHqLW6qT/A802/ad
M33vwDOA0QZB0iaFIuP3CC2cl1HlVgb4Bo6Bbdjj/i8ffDJ//1JPPMjGJBfq9ZyJ
9cOeQcoYyo+6dLpG2ru4pwrV61x58xxFmy26/zwqljdfz7fopGvsCt5qY7aRcVHT
g94QaOfjj5iNKs06VlWniKdKtKw2G0/gNxBoFyuL9jC2Da9vJaKgY1zQ5JpoV2Dh
9nAuHfUnMnHIC7Uzb6mdkp4y7ucaO+8VbzkKusZo2UYn1iaA4/9w
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:10:07 2025 by rpki-client