Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/FHdXx9mFGE91HKwW6NlniVutY68.roa
File: FHdXx9mFGE91HKwW6NlniVutY68.roa (raw, json)
Hash identifier: bCfamFt9mTX4NzIQ8vZRhb/+uNTjpTqVv/iTNAFMwHg=
Subject key identifier: 14:77:57:C7:D9:85:18:4F:75:1C:AC:16:E8:D9:67:89:5B:AD:63:AF
Certificate issuer: /CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Certificate serial: 019421B17D87E00F1FF52BF10CCA516D3805
Authority key identifier: 8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/FHdXx9mFGE91HKwW6NlniVutY68.roa
Signing time: Wed 01 Jan 2025 11:47:47 +0000
ROA not before: Wed 01 Jan 2025 11:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43701
IP address blocks: 193.23.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:7d:87:e0:0f:1f:f5:2b:f1:0c:ca:51:6d:38:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Validity
Not Before: Jan 1 11:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=147757c7d985184f751cac16e8d967895bad63af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:45:d0:1d:ce:98:1c:24:c3:0f:e6:3a:d7:0e:
d4:fc:72:b5:a8:d1:67:52:e9:ce:fe:06:e5:84:c9:
a4:ad:15:d4:98:f4:2b:79:4f:b3:f9:63:bc:ee:29:
7f:ca:72:b8:da:99:f1:42:1c:9f:51:4e:60:0b:91:
d6:bb:7c:84:83:38:25:ca:62:b5:ba:0d:da:5b:b6:
14:3c:2d:53:b2:6f:29:b6:49:a6:26:b5:0c:d0:b8:
82:6c:8d:18:3e:fe:35:42:25:de:0f:2c:9f:67:04:
94:a6:26:f2:b1:dc:69:3b:89:9a:7a:9f:66:f1:f3:
b5:cc:38:67:7d:13:1c:f7:e5:66:a5:95:1d:f8:3e:
47:8f:73:7b:92:06:00:a9:ff:eb:c0:fa:8b:64:d8:
c0:64:b0:a4:0b:b6:f6:93:8b:94:75:48:68:79:34:
26:bf:a4:e3:1f:5f:79:e7:80:71:74:a9:26:36:c6:
1f:c2:a8:c4:18:5b:b0:67:50:44:9f:65:11:37:b0:
3a:6c:94:09:f5:e5:a7:ca:e8:e2:72:f8:da:dd:3f:
80:fd:d8:60:e7:1f:4e:45:4b:e9:6b:22:5d:21:4d:
dc:60:14:78:dd:22:47:5b:61:6d:01:a6:01:be:11:
52:6a:a4:55:05:59:18:27:d8:e2:10:7e:e9:fb:ca:
4c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:77:57:C7:D9:85:18:4F:75:1C:AC:16:E8:D9:67:89:5B:AD:63:AF
X509v3 Authority Key Identifier:
keyid:8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/FHdXx9mFGE91HKwW6NlniVutY68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.230.0/24
Signature Algorithm: sha256WithRSAEncryption
42:2c:db:24:fc:c1:fc:29:6a:42:1d:5e:8a:8b:55:65:04:be:
6a:8c:a0:24:fb:94:b6:95:55:04:86:4c:cd:be:65:9a:4e:bd:
50:96:33:b8:3b:0a:ae:71:90:00:16:74:cb:4f:fc:37:85:1e:
d2:b7:fe:c7:fe:63:91:d2:95:9e:83:2d:e2:28:5a:1e:9e:f2:
9b:a3:77:68:37:ba:59:d9:57:1c:eb:ac:3c:d9:e7:3d:b8:69:
1a:19:67:e1:27:65:d5:a9:54:2a:12:3e:a9:20:86:6e:83:da:
5f:5b:6b:b1:84:02:6d:c7:c6:74:84:89:81:e0:7b:7c:74:f4:
74:67:8e:35:d1:e9:a9:e3:3b:2b:95:d1:58:29:20:34:3b:0a:
c5:22:d0:7e:30:8e:a2:4a:93:4f:a2:ca:e7:2d:42:bd:c2:e6:
d1:49:68:ea:a1:0e:89:39:90:0a:b8:87:84:94:99:31:0b:f6:
cb:f3:91:51:da:71:72:f0:84:51:35:24:d3:6b:07:76:e2:71:
59:ae:98:4a:36:c6:a1:e3:e7:33:0f:f5:a3:05:4e:6e:5b:1c:
1a:5f:ee:25:5d:69:3b:36:31:82:c2:2c:2d:73:4d:74:ed:8f:
c7:e1:9d:88:db:f0:e1:c4:d3:9e:a4:9b:e3:14:8b:6b:5c:ff:
b4:97:69:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsX2H4A8f9SvxDMpRbTgFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNTc2YTg2YWUzYTM1MzJlMTA5YzVjZGY3MjlhZDQ3OGMx
YzY5N2YwHhcNMjUwMTAxMTE0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDc3NTdjN2Q5ODUxODRmNzUxY2FjMTZlOGQ5Njc4OTViYWQ2M2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EXQHc6YHCTDD+Y61w7U/HK1qNFn
UunO/gblhMmkrRXUmPQreU+z+WO87il/ynK42pnxQhyfUU5gC5HWu3yEgzglymK1
ug3aW7YUPC1Tsm8ptkmmJrUM0LiCbI0YPv41QiXeDyyfZwSUpibysdxpO4maep9m
8fO1zDhnfRMc9+VmpZUd+D5Hj3N7kgYAqf/rwPqLZNjAZLCkC7b2k4uUdUhoeTQm
v6TjH19554BxdKkmNsYfwqjEGFuwZ1BEn2URN7A6bJQJ9eWnyujicvja3T+A/dhg
5x9ORUvpayJdIU3cYBR43SJHW2FtAaYBvhFSaqRVBVkYJ9jiEH7p+8pMswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBR3V8fZhRhPdRysFujZZ4lbrWOvMB8GA1UdIwQY
MBaAFI1XaoauOjUy4QnFzfcprUeMHGl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xYjg2NDgtNWU5Ni00Y2VmLTgwNTUt
NjRlNzI5ZWYzMDJkLzEvRkhkWHg5bUZHRTkxSEt3VzZObG5pVnV0WTY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8xYjg2NDgtNWU5Ni00Y2VmLTgwNTUtNjRlNzI5ZWYzMDJk
LzEvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRfmMA0G
CSqGSIb3DQEBCwUAA4IBAQBCLNsk/MH8KWpCHV6Ki1VlBL5qjKAk+5S2lVUEhkzN
vmWaTr1QljO4OwqucZAAFnTLT/w3hR7St/7H/mOR0pWegy3iKFoenvKbo3doN7pZ
2Vcc66w82ec9uGkaGWfhJ2XVqVQqEj6pIIZug9pfW2uxhAJtx8Z0hImB4Ht8dPR0
Z4410emp4zsrldFYKSA0OwrFItB+MI6iSpNPosrnLUK9wubRSWjqoQ6JOZAKuIeE
lJkxC/bL85FR2nFy8IRRNSTTawd24nFZrphKNsah4+czD/WjBU5uWxwaX+4lXWk7
NjGCwiwtc0107Y/H4Z2I2/DhxNOepJvjFItrXP+0l2kJ
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:16:31 2025 by rpki-client