Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/Lj8ZQG5prjnQTAKbKF-gLGS0tUk.roa
File: Lj8ZQG5prjnQTAKbKF-gLGS0tUk.roa (raw, json)
Hash identifier: wVKStyJBivT9nJImaGil3qt9ysG3+7PJS2LVMDfgE2I=
Subject key identifier: 2E:3F:19:40:6E:69:AE:39:D0:4C:02:9B:28:5F:A0:2C:64:B4:B5:49
Certificate issuer: /CN=8f6b25b17c4d04e0b0492340e7ac24cc84d2a347
Certificate serial: 01941FFA2AB2D8760FAFC173F0EB925E9ADC
Authority key identifier: 8F:6B:25:B1:7C:4D:04:E0:B0:49:23:40:E7:AC:24:CC:84:D2:A3:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2slsXxNBOCwSSNA56wkzITSo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/Lj8ZQG5prjnQTAKbKF-gLGS0tUk.roa
Signing time: Wed 01 Jan 2025 03:47:56 +0000
ROA not before: Wed 01 Jan 2025 03:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 193.33.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2a:b2:d8:76:0f:af:c1:73:f0:eb:92:5e:9a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6b25b17c4d04e0b0492340e7ac24cc84d2a347
Validity
Not Before: Jan 1 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e3f19406e69ae39d04c029b285fa02c64b4b549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:aa:8d:22:c3:10:ce:ba:bf:d0:80:f8:db:
ac:1a:27:1b:c4:3b:1b:cf:74:c8:7e:d8:9f:4d:ff:
e3:79:62:dc:2c:4a:3a:2d:9c:5e:9b:fc:9a:62:cb:
dc:9c:0d:09:c8:8a:cd:bb:2b:3b:97:64:45:5f:64:
8a:4e:c0:28:88:e9:73:fd:62:b2:e9:a9:3d:6e:8b:
10:7b:a5:06:bc:92:ba:ff:85:35:84:cb:56:a6:c8:
62:2b:4f:b9:49:f5:23:dd:92:93:7a:76:af:06:43:
c7:8c:11:c4:f5:61:1e:18:9c:ee:cd:d6:f0:62:4e:
18:d8:5d:1a:1f:1d:1f:3d:fa:15:55:a5:96:ec:b0:
c8:42:de:18:6b:13:46:75:3a:c2:b0:9f:28:e5:02:
80:fc:6f:f7:67:6e:5b:5c:bb:44:64:d6:f2:7e:76:
69:d5:69:95:f3:a4:66:1e:3c:ac:09:7a:1f:9f:c8:
fa:79:8e:89:17:de:21:fb:9f:7a:d3:53:30:19:d4:
80:f3:f9:2d:12:88:9a:6c:4a:fb:f0:c4:3e:9a:55:
9c:8f:1b:cd:ea:cd:80:9f:18:ff:0d:97:7d:ea:91:
c0:d7:4e:dd:16:f1:7b:a6:d6:19:1c:dc:25:ba:05:
cd:75:39:89:28:cb:fd:68:a0:ca:ca:94:f8:fb:17:
ec:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3F:19:40:6E:69:AE:39:D0:4C:02:9B:28:5F:A0:2C:64:B4:B5:49
X509v3 Authority Key Identifier:
keyid:8F:6B:25:B1:7C:4D:04:E0:B0:49:23:40:E7:AC:24:CC:84:D2:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2slsXxNBOCwSSNA56wkzITSo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/Lj8ZQG5prjnQTAKbKF-gLGS0tUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.245.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:16:15:3f:9c:27:8d:7a:08:c6:46:0f:20:3a:60:62:1a:9c:
3d:55:9b:f0:83:b0:3f:8b:30:b1:6b:94:ce:3c:4b:2f:ba:7b:
5b:ef:60:fc:5e:61:cb:85:f7:77:84:f4:95:14:b0:db:c7:a4:
dd:af:5a:65:1f:9b:e0:10:23:38:e5:c9:09:ea:a4:dd:0f:66:
d0:81:3c:c0:da:6c:62:bd:19:86:86:10:79:2b:20:8c:2d:00:
48:1e:55:5a:56:52:7b:3d:5c:ff:cf:da:9c:35:4a:39:96:a6:
ec:db:7b:a4:24:fe:3b:5f:27:24:18:f1:67:da:22:21:2e:7a:
06:53:3f:7d:68:1c:74:21:3a:c8:8b:88:00:9a:3d:88:e7:b0:
2e:78:ee:17:06:d3:1f:34:91:b6:5b:15:ee:7c:84:86:09:e2:
8e:ef:5a:d6:22:df:9d:75:ee:ad:44:54:82:08:d6:5e:ad:02:
bd:03:d6:7d:d9:d7:ec:4e:27:0a:d6:7b:13:9f:65:7c:bb:8c:
a3:fd:c0:96:db:a2:4f:42:27:8c:e9:eb:e1:92:0c:7b:f6:a7:
31:a9:b0:53:13:ee:5f:f5:00:d6:99:f7:16:0c:2d:b4:56:80:
d8:a0:0a:ad:2b:e1:57:30:e9:7f:b9:1c:a4:97:35:f3:a3:f9:
0e:ff:4a:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+iqy2HYPr8Fz8OuSXprcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNmIyNWIxN2M0ZDA0ZTBiMDQ5MjM0MGU3YWMyNGNjODRk
MmEzNDcwHhcNMjUwMTAxMDM0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTNmMTk0MDZlNjlhZTM5ZDA0YzAyOWIyODVmYTAyYzY0YjRiNTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoGqjSLDEM66v9CA+NusGicbxDsb
z3TIftifTf/jeWLcLEo6LZxem/yaYsvcnA0JyIrNuys7l2RFX2SKTsAoiOlz/WKy
6ak9bosQe6UGvJK6/4U1hMtWpshiK0+5SfUj3ZKTenavBkPHjBHE9WEeGJzuzdbw
Yk4Y2F0aHx0fPfoVVaWW7LDIQt4YaxNGdTrCsJ8o5QKA/G/3Z25bXLtEZNbyfnZp
1WmV86RmHjysCXofn8j6eY6JF94h+59601MwGdSA8/ktEoiabEr78MQ+mlWcjxvN
6s2Anxj/DZd96pHA107dFvF7ptYZHNwlugXNdTmJKMv9aKDKypT4+xfsZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC4/GUBuaa450EwCmyhfoCxktLVJMB8GA1UdIwQY
MBaAFI9rJbF8TQTgsEkjQOesJMyE0qNHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajJzbHNYeE5CT0N3U1NOQTU2d2t6SVRTbzBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85NTMwMGEtN2QxNi00ZDBhLTg2OGMt
MzgzODNmODJiY2Y5LzEvTGo4WlFHNXByam5RVEFLYktGLWdMR1MwdFVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS85NTMwMGEtN2QxNi00ZDBhLTg2OGMtMzgzODNmODJiY2Y5
LzEvajJzbHNYeE5CT0N3U1NOQTU2d2t6SVRTbzBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSH1MA0G
CSqGSIb3DQEBCwUAA4IBAQBsFhU/nCeNegjGRg8gOmBiGpw9VZvwg7A/izCxa5TO
PEsvuntb72D8XmHLhfd3hPSVFLDbx6Tdr1plH5vgECM45ckJ6qTdD2bQgTzA2mxi
vRmGhhB5KyCMLQBIHlVaVlJ7PVz/z9qcNUo5lqbs23ukJP47XyckGPFn2iIhLnoG
Uz99aBx0ITrIi4gAmj2I57AueO4XBtMfNJG2WxXufISGCeKO71rWIt+dde6tRFSC
CNZerQK9A9Z92dfsTicK1nsTn2V8u4yj/cCW26JPQieM6evhkgx79qcxqbBTE+5f
9QDWmfcWDC20VoDYoAqtK+FXMOl/uRyklzXzo/kO/0qh
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:16:45 2025 by rpki-client