Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/j4cd6L8tYRDjLejdv94aClKAGXU.roa
File: j4cd6L8tYRDjLejdv94aClKAGXU.roa (raw, json)
Hash identifier: WlNinENED4PfFKrXHfbYinzDLlIPfYjUPCjvbvhk+i8=
Subject key identifier: 8F:87:1D:E8:BF:2D:61:10:E3:2D:E8:DD:BF:DE:1A:0A:52:80:19:75
Certificate issuer: /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial: 01941FFAB68DB972B43133C51C0D9D3A6FDE
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/j4cd6L8tYRDjLejdv94aClKAGXU.roa
Signing time: Wed 01 Jan 2025 03:48:31 +0000
ROA not before: Wed 01 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212352
IP address blocks: 193.243.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b6:8d:b9:72:b4:31:33:c5:1c:0d:9d:3a:6f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f871de8bf2d6110e32de8ddbfde1a0a52801975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:b0:a8:ae:63:71:0b:29:76:00:7b:5e:4a:
00:ad:49:8b:78:45:3a:4b:a5:6d:7d:05:54:04:a3:
41:50:4f:b4:75:20:01:1e:c8:bf:2c:e2:51:bd:01:
a4:11:5e:96:ed:b6:43:c6:47:b4:40:94:98:39:fc:
81:3b:d5:0a:ff:eb:5f:fc:83:04:e3:8e:61:a5:1f:
bd:21:8e:c0:d8:f7:f5:19:1e:66:63:3a:29:e3:04:
52:a3:b6:30:31:db:14:b6:50:83:f1:19:a5:6a:97:
80:2d:7e:39:70:c3:86:68:84:6e:31:6d:24:00:40:
e6:9b:90:f4:67:c2:72:5f:b3:14:7b:2d:b4:96:30:
92:ad:1b:14:d1:5e:80:45:0f:4f:e3:47:a9:ee:46:
85:20:9e:15:a3:a2:44:90:20:19:43:fe:f5:1b:45:
33:df:74:58:76:ee:03:56:ee:15:19:a6:e8:5b:83:
80:13:0e:52:a0:59:fd:38:62:ef:1a:5f:18:9b:2e:
1b:36:5d:a6:9f:99:50:97:a8:f2:f4:14:6f:6b:cb:
03:2a:47:4f:e7:3f:2f:e6:f5:c8:24:cc:6a:1b:b7:
d1:06:cf:ce:48:de:a8:80:b0:f0:e5:71:6c:ad:a9:
e2:cf:b6:c9:44:30:c3:54:a6:43:fd:c2:9f:c4:3f:
f2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:87:1D:E8:BF:2D:61:10:E3:2D:E8:DD:BF:DE:1A:0A:52:80:19:75
X509v3 Authority Key Identifier:
keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/j4cd6L8tYRDjLejdv94aClKAGXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.166.0/24
Signature Algorithm: sha256WithRSAEncryption
30:cf:61:b3:4b:da:76:70:6c:4e:1e:03:02:2c:de:ea:a6:37:
7e:8d:b3:20:bb:28:15:86:71:dc:48:18:28:38:4c:df:11:78:
bb:c3:0d:a5:1b:e5:b6:77:7c:ff:45:58:6a:6c:19:38:7f:e8:
b2:12:15:c0:a1:a2:29:50:09:d4:41:75:ff:a9:d6:ca:29:35:
28:ee:1f:11:3a:5f:da:f9:e3:3d:64:56:d5:28:4f:d4:c9:74:
41:8a:3b:28:66:6d:9c:69:bc:79:3c:fd:c5:a9:d5:ac:03:cf:
55:98:cf:74:43:3f:76:2c:ff:71:1d:5d:87:3f:5b:92:d5:2e:
d4:1e:24:1b:f2:26:eb:2b:d1:99:89:fd:76:d9:e4:cf:8d:0f:
55:ab:19:33:99:c7:12:12:04:07:70:3d:2f:63:7a:b2:80:e1:
8c:43:8b:8e:89:a2:f6:7c:09:84:41:42:67:1d:46:0f:30:4e:
88:8e:9a:71:79:27:ec:41:6d:e8:3c:ea:d7:0a:c1:85:74:98:
d6:66:53:90:89:85:65:32:b4:57:b6:f8:54:c4:f8:15:3c:ce:
18:c3:19:b6:bc:59:ff:8a:a2:6a:b1:66:f4:b3:d1:ea:3a:fa:
48:d1:15:f7:98:4e:e7:5a:65:b8:93:0a:5a:ab:62:ba:cf:1f:
85:a8:41:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+raNuXK0MTPFHA2dOm/eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNzNkOTQ1M2ZiZWRmYjgwYzQ1NDNiYjUyOWZjMzMwYzFm
OGMxY2UwHhcNMjUwMTAxMDM0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Zjg3MWRlOGJmMmQ2MTEwZTMyZGU4ZGRiZmRlMWEwYTUyODAxOTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVCwqK5jcQspdgB7XkoArUmLeEU6
S6VtfQVUBKNBUE+0dSABHsi/LOJRvQGkEV6W7bZDxke0QJSYOfyBO9UK/+tf/IME
445hpR+9IY7A2Pf1GR5mYzop4wRSo7YwMdsUtlCD8RmlapeALX45cMOGaIRuMW0k
AEDmm5D0Z8JyX7MUey20ljCSrRsU0V6ARQ9P40ep7kaFIJ4Vo6JEkCAZQ/71G0Uz
33RYdu4DVu4VGaboW4OAEw5SoFn9OGLvGl8Ymy4bNl2mn5lQl6jy9BRva8sDKkdP
5z8v5vXIJMxqG7fRBs/OSN6ogLDw5XFsraniz7bJRDDDVKZD/cKfxD/yOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI+HHei/LWEQ4y3o3b/eGgpSgBl1MB8GA1UdIwQY
MBaAFJxz2UU/vt+4DEVDu1KfwzDB+MHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9iMzUzNzktMjEyMi00MTkxLTg4MjEt
YzQ3ZTE4ZGYwMzcxLzEvajRjZDZMOHRZUkRqTGVqZHY5NGFDbEtBR1hVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9iMzUzNzktMjEyMi00MTkxLTg4MjEtYzQ3ZTE4ZGYwMzcx
LzEvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfOmMA0G
CSqGSIb3DQEBCwUAA4IBAQAwz2GzS9p2cGxOHgMCLN7qpjd+jbMguygVhnHcSBgo
OEzfEXi7ww2lG+W2d3z/RVhqbBk4f+iyEhXAoaIpUAnUQXX/qdbKKTUo7h8ROl/a
+eM9ZFbVKE/UyXRBijsoZm2cabx5PP3FqdWsA89VmM90Qz92LP9xHV2HP1uS1S7U
HiQb8ibrK9GZif122eTPjQ9VqxkzmccSEgQHcD0vY3qygOGMQ4uOiaL2fAmEQUJn
HUYPME6IjppxeSfsQW3oPOrXCsGFdJjWZlOQiYVlMrRXtvhUxPgVPM4Ywxm2vFn/
iqJqsWb0s9HqOvpI0RX3mE7nWmW4kwpaq2K6zx+FqEFi
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:30 2025 by rpki-client