Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/6jJiKZ8OqfMQQiwAGfF_REinVvg.roa
File: 6jJiKZ8OqfMQQiwAGfF_REinVvg.roa (raw, json)
Hash identifier: dMHNj/i64l7thI3ogWvnJHev0VMEJdnc6dU3VLBoezs=
Subject key identifier: EA:32:62:29:9F:0E:A9:F3:10:42:2C:00:19:F1:7F:44:48:A7:56:F8
Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial: 0194266B1781653C70EE6C329FD1C5BD7D28
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/6jJiKZ8OqfMQQiwAGfF_REinVvg.roa
Signing time: Thu 02 Jan 2025 09:49:00 +0000
ROA not before: Thu 02 Jan 2025 09:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196838
IP address blocks: 93.159.192.0/24 maxlen: 24
93.159.193.0/24 maxlen: 24
93.159.194.0/24 maxlen: 24
93.159.195.0/24 maxlen: 24
93.159.196.0/24 maxlen: 24
93.159.197.0/24 maxlen: 24
93.159.198.0/24 maxlen: 24
93.159.199.0/24 maxlen: 24
109.69.160.0/24 maxlen: 24
109.69.161.0/24 maxlen: 24
109.69.162.0/24 maxlen: 24
109.69.163.0/24 maxlen: 24
109.69.164.0/24 maxlen: 24
109.69.165.0/24 maxlen: 24
109.69.166.0/24 maxlen: 24
109.69.167.0/24 maxlen: 24
194.156.252.0/24 maxlen: 24
194.156.253.0/24 maxlen: 24
194.156.254.0/24 maxlen: 24
194.156.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:17:81:65:3c:70:ee:6c:32:9f:d1:c5:bd:7d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
Validity
Not Before: Jan 2 09:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea3262299f0ea9f310422c0019f17f4448a756f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e2:81:83:1c:23:8a:f2:7f:94:b6:c7:e4:14:
48:fc:43:15:49:31:57:3e:87:8e:03:72:90:fe:d9:
1e:ba:97:c7:b1:1b:48:5d:4e:b7:60:8e:db:5e:88:
ca:d3:58:81:04:39:71:0a:14:23:31:8c:e8:fe:d0:
aa:a7:2e:b8:84:fb:a5:0e:b6:27:4f:8a:3e:02:f1:
80:12:ff:fe:0a:7a:f0:e9:3d:f7:6a:5f:cf:6f:b4:
44:8d:a7:de:30:a5:5f:4a:77:3d:fc:10:ca:c0:a9:
42:a0:94:7b:e7:fd:20:2c:0b:54:31:f0:06:1e:16:
5d:94:f6:43:b6:c5:99:fc:c5:63:08:d5:bd:4f:d7:
0b:3f:10:70:e3:88:4f:65:b4:7f:10:e5:fe:4a:e5:
2c:f2:db:9d:79:bc:1e:1a:84:7d:10:73:37:d5:b2:
6a:88:14:20:f8:e0:e8:bb:54:3c:ba:d0:00:5f:54:
d9:10:7e:d4:c2:c9:29:5e:59:69:4b:1e:7f:37:6f:
c9:be:40:68:ba:b8:c8:23:01:6b:5e:d9:7c:06:dc:
49:ea:da:aa:80:ad:a4:ee:db:63:1c:bb:8d:67:3b:
36:21:d3:5e:ba:52:3c:a6:20:9b:ff:2b:46:f4:d6:
3c:9e:18:17:9b:45:cc:7f:6b:77:38:e8:4e:ee:ee:
86:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:32:62:29:9F:0E:A9:F3:10:42:2C:00:19:F1:7F:44:48:A7:56:F8
X509v3 Authority Key Identifier:
keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/6jJiKZ8OqfMQQiwAGfF_REinVvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.192.0/21
109.69.160.0/21
194.156.252.0/22
Signature Algorithm: sha256WithRSAEncryption
43:83:54:51:42:13:b8:af:1c:b9:af:fd:7e:dc:19:f6:b5:13:
ec:55:1c:71:7a:46:86:d4:3b:5f:d6:59:fd:01:0f:6a:6c:18:
0d:29:a3:2d:93:30:5a:f2:34:44:df:60:30:77:07:ce:3e:1b:
c1:5c:98:e2:60:03:fc:60:53:3c:81:af:94:ea:1f:30:ab:e1:
77:29:d5:cc:53:f3:57:fb:6a:e9:b2:b2:6e:85:2a:06:b2:b8:
8c:f0:be:09:94:fa:6b:01:69:5e:2e:37:cf:4f:0b:6e:c2:d7:
11:4c:d6:91:e5:ae:81:78:f6:1c:e3:5d:6a:e1:61:f1:07:95:
9f:bd:67:07:fc:ee:ba:b8:15:52:6d:4a:e2:54:6a:1f:fa:64:
45:d6:40:c5:f3:fb:86:de:79:17:50:67:ce:13:ff:7f:61:00:
13:3a:88:e0:5b:ef:3e:18:f0:08:eb:12:cd:ac:ba:82:bf:e3:
34:4f:c0:29:29:57:20:28:91:87:43:4e:05:e2:d2:d6:bc:09:
55:21:ff:16:a5:77:e7:a8:98:26:8f:0b:2b:24:2c:9b:ad:bd:
dd:7e:f6:ff:8f:f3:3b:43:13:b5:b7:25:ec:53:ca:e2:be:57:
02:1e:75:4d:e1:56:68:77:03:68:e8:5d:23:07:e1:3e:6b:47:
a6:d7:dd:ba
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQmaxeBZTxw7mwyn9HFvX0oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MTY1MzllNzQ5MzRkMjNhMDU3MmY2NjI1ZGJmZGI1NGU4
MjA4NzMwHhcNMjUwMTAyMDk0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTMyNjIyOTlmMGVhOWYzMTA0MjJjMDAxOWYxN2Y0NDQ4YTc1NmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneKBgxwjivJ/lLbH5BRI/EMVSTFX
PoeOA3KQ/tkeupfHsRtIXU63YI7bXojK01iBBDlxChQjMYzo/tCqpy64hPulDrYn
T4o+AvGAEv/+Cnrw6T33al/Pb7REjafeMKVfSnc9/BDKwKlCoJR75/0gLAtUMfAG
HhZdlPZDtsWZ/MVjCNW9T9cLPxBw44hPZbR/EOX+SuUs8tudebweGoR9EHM31bJq
iBQg+ODou1Q8utAAX1TZEH7UwskpXllpSx5/N2/JvkBourjIIwFrXtl8BtxJ6tqq
gK2k7ttjHLuNZzs2IdNeulI8piCb/ytG9NY8nhgXm0XMf2t3OOhO7u6G9QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOoyYimfDqnzEEIsABnxf0RIp1b4MB8GA1UdIwQY
MBaAFPQWU550k00joFcvZiXb/bVOgghzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81M2U0OTYtMDA5Ny00NjJhLWE5ODkt
ZDY3YTYxZDU0MTZkLzEvNmpKaUtaOE9xZk1RUWl3QUdmRl9SRWluVnZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy81M2U0OTYtMDA5Ny00NjJhLWE5ODktZDY3YTYxZDU0MTZk
LzEvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDXZ/AAwQD
bUWgAwQCwpz8MA0GCSqGSIb3DQEBCwUAA4IBAQBDg1RRQhO4rxy5r/1+3Bn2tRPs
VRxxekaG1Dtf1ln9AQ9qbBgNKaMtkzBa8jRE32AwdwfOPhvBXJjiYAP8YFM8ga+U
6h8wq+F3KdXMU/NX+2rpsrJuhSoGsriM8L4JlPprAWleLjfPTwtuwtcRTNaR5a6B
ePYc411q4WHxB5WfvWcH/O66uBVSbUriVGof+mRF1kDF8/uG3nkXUGfOE/9/YQAT
OojgW+8+GPAI6xLNrLqCv+M0T8ApKVcgKJGHQ04F4tLWvAlVIf8WpXfnqJgmjwsr
JCybrb3dfvb/j/M7QxO1tyXsU8rivlcCHnVN4VZodwNo6F0jB+E+a0em1926
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:13:43 2025 by rpki-client