Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/PH1KPTvJYv47OjAjiI-5OkL1pNU.roa
File: PH1KPTvJYv47OjAjiI-5OkL1pNU.roa (raw, json)
Hash identifier: 2IzqWVU8JQGawrqtS4bnXQhHUBo8/qehpa6NqKn8fqM=
Subject key identifier: 3C:7D:4A:3D:3B:C9:62:FE:3B:3A:30:23:88:8F:B9:3A:42:F5:A4:D5
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 01942143F921366D5FC414ABBFF6BCBFE6A7
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/PH1KPTvJYv47OjAjiI-5OkL1pNU.roa
Signing time: Wed 01 Jan 2025 09:48:10 +0000
ROA not before: Wed 01 Jan 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51566
IP address blocks: 193.189.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f9:21:36:6d:5f:c4:14:ab:bf:f6:bc:bf:e6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Jan 1 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c7d4a3d3bc962fe3b3a3023888fb93a42f5a4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5b:53:23:09:69:ed:f8:bd:d5:f0:de:e6:0d:
ee:c3:66:b8:4c:75:29:77:b3:4a:c0:f9:f1:67:6d:
de:cf:eb:b2:c8:5c:68:d3:f0:27:4f:95:04:ab:d4:
76:f4:35:07:6f:2e:96:7c:17:33:4e:51:d6:a6:ff:
8c:2a:34:5a:66:90:65:41:4d:48:e8:d4:55:17:29:
90:bb:a7:aa:ff:e5:85:63:69:01:02:25:53:61:74:
ca:bc:7f:00:78:19:8f:5d:fd:6d:5f:92:77:23:80:
3e:02:d4:1e:d3:c7:28:4d:c0:fd:51:db:45:f5:23:
16:74:89:66:c3:1b:52:ad:c5:aa:dd:d4:12:c0:bf:
d0:df:e3:89:bd:70:cc:6a:40:3c:77:14:95:32:8c:
dc:20:ed:82:d0:bd:7d:e2:03:2f:9e:0a:dd:51:11:
69:88:02:ab:16:23:cb:4e:0e:29:6f:14:ef:1e:1f:
11:98:09:75:b9:92:02:6c:db:4e:53:d8:f9:99:1c:
5f:66:00:f9:a4:ec:10:a3:76:e2:5f:b7:17:09:76:
9b:7b:8b:60:b8:4a:dc:8f:b5:10:37:d9:e3:9d:ce:
1f:e7:6e:7d:94:b7:98:ca:77:ea:37:7e:a9:42:a4:
94:2a:f0:98:e0:90:4f:1f:95:ae:67:db:c8:9e:a1:
c5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7D:4A:3D:3B:C9:62:FE:3B:3A:30:23:88:8F:B9:3A:42:F5:A4:D5
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/PH1KPTvJYv47OjAjiI-5OkL1pNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.142.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:0a:47:12:20:bd:dc:da:e1:e9:8a:74:8b:62:31:c9:c2:f1:
0c:37:3c:78:8f:00:6f:37:c1:9e:c0:b4:c5:67:ea:1b:02:fe:
cf:34:36:d0:4b:d3:4e:5b:0c:ed:dd:78:2e:1e:07:30:13:01:
28:c6:a8:89:9f:ae:d0:7e:72:d8:a6:76:8f:3c:dd:b1:cf:33:
39:de:4e:64:f7:f4:e1:13:20:56:aa:46:ce:a9:b0:85:a4:69:
b9:aa:1f:f8:0f:6c:95:4c:c3:db:49:d7:8b:2f:f8:33:e6:0d:
d3:9f:64:87:5e:77:57:74:33:59:32:4d:24:51:54:dd:30:ee:
2e:6d:cc:59:43:c6:31:0c:3d:98:4a:d5:f7:bd:06:a3:af:f1:
45:25:ce:b9:29:dd:19:45:46:4c:70:91:f5:ab:43:4e:c1:38:
c4:bf:37:da:0c:3d:28:95:7f:20:14:90:57:50:33:c3:4e:76:
cf:3e:00:78:08:29:a9:46:ea:22:12:be:26:ad:66:5e:ee:ee:
23:5d:81:f7:2d:31:97:53:17:fb:e1:59:2f:2a:ed:86:0f:c1:
56:17:18:4a:2c:f1:6e:f3:d8:6e:aa:e4:b0:c9:c4:1a:04:78:
5f:64:8d:f6:58:83:40:86:d5:eb:30:1c:3b:a8:c6:93:4c:a3:
9f:01:c6:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ/khNm1fxBSrv/a8v+anMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNTM5MTE3MDVhZTg2MGMyOTllNmExYTQxMmU1MGVkYTFj
ODIyOGUwHhcNMjUwMTAxMDk0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzdkNGEzZDNiYzk2MmZlM2IzYTMwMjM4ODhmYjkzYTQyZjVhNGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ltTIwlp7fi91fDe5g3uw2a4THUp
d7NKwPnxZ23ez+uyyFxo0/AnT5UEq9R29DUHby6WfBczTlHWpv+MKjRaZpBlQU1I
6NRVFymQu6eq/+WFY2kBAiVTYXTKvH8AeBmPXf1tX5J3I4A+AtQe08coTcD9UdtF
9SMWdIlmwxtSrcWq3dQSwL/Q3+OJvXDMakA8dxSVMozcIO2C0L194gMvngrdURFp
iAKrFiPLTg4pbxTvHh8RmAl1uZICbNtOU9j5mRxfZgD5pOwQo3biX7cXCXabe4tg
uErcj7UQN9njnc4f5259lLeYynfqN36pQqSUKvCY4JBPH5WuZ9vInqHFUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDx9Sj07yWL+OzowI4iPuTpC9aTVMB8GA1UdIwQY
MBaAFBxTkRcFroYMKZ5qGkEuUO2hyCKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEZPUkZ3V3VoZ3dwbm1vYVFTNVE3YUhJSW80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hZDZlZjUtMzIxNi00NmNiLTk2NWUt
M2U3ZjgzMDhjYzU1LzEvUEgxS1BUdkpZdjQ3T2pBamlJLTVPa0wxcE5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hZDZlZjUtMzIxNi00NmNiLTk2NWUtM2U3ZjgzMDhjYzU1
LzEvSEZPUkZ3V3VoZ3dwbm1vYVFTNVE3YUhJSW80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwb2OMA0G
CSqGSIb3DQEBCwUAA4IBAQDKCkcSIL3c2uHpinSLYjHJwvEMNzx4jwBvN8GewLTF
Z+obAv7PNDbQS9NOWwzt3XguHgcwEwEoxqiJn67QfnLYpnaPPN2xzzM53k5k9/Th
EyBWqkbOqbCFpGm5qh/4D2yVTMPbSdeLL/gz5g3Tn2SHXndXdDNZMk0kUVTdMO4u
bcxZQ8YxDD2YStX3vQajr/FFJc65Kd0ZRUZMcJH1q0NOwTjEvzfaDD0olX8gFJBX
UDPDTnbPPgB4CCmpRuoiEr4mrWZe7u4jXYH3LTGXUxf74VkvKu2GD8FWFxhKLPFu
89huquSwycQaBHhfZI32WINAhtXrMBw7qMaTTKOfAcZ2
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:35 2025 by rpki-client