Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/7qi71OAs6leux75HGJJKxd48zLc.roa
File: 7qi71OAs6leux75HGJJKxd48zLc.roa (raw, json)
Hash identifier: z9Iokxbw9AVC6K3SxkWdhXBi3p5Bja4hYfL/NkWRSQw=
Subject key identifier: EE:A8:BB:D4:E0:2C:EA:57:AE:C7:BE:47:18:92:4A:C5:DE:3C:CC:B7
Certificate issuer: /CN=99252ff7f4dcf62234d22f86a1135b344923daab
Certificate serial: 019423D704ED1DD34FE3CAF67EAB26095BE2
Authority key identifier: 99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/7qi71OAs6leux75HGJJKxd48zLc.roa
Signing time: Wed 01 Jan 2025 21:48:01 +0000
ROA not before: Wed 01 Jan 2025 21:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209538
IP address blocks: 193.107.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:04:ed:1d:d3:4f:e3:ca:f6:7e:ab:26:09:5b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99252ff7f4dcf62234d22f86a1135b344923daab
Validity
Not Before: Jan 1 21:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eea8bbd4e02cea57aec7be4718924ac5de3cccb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:dc:41:75:cc:33:6b:42:cb:72:d2:40:ea:
98:f5:7c:7e:ad:ba:06:7c:40:17:17:90:58:af:f1:
53:05:17:9f:64:8c:bf:1c:0e:2c:2c:2a:74:85:60:
07:fc:65:e5:2d:25:24:f8:40:7d:2b:39:bc:bc:d9:
93:43:f1:bc:c0:b1:53:23:78:00:45:48:ca:fa:a4:
d9:47:c0:2b:e0:ac:f3:90:f3:87:1c:3e:61:18:29:
49:06:2c:32:dc:a2:fb:d9:65:f7:87:84:c2:08:32:
86:c7:a9:03:7b:07:57:85:0f:4e:5a:c2:4b:4b:76:
35:0b:15:68:c3:3a:04:18:95:71:64:d8:99:88:ae:
35:ed:06:8d:ca:b8:96:6e:14:76:66:ae:94:f1:25:
d5:1e:b0:f6:d2:06:64:d6:0b:87:87:58:76:88:ec:
31:a9:c4:ef:f9:2a:d9:a3:93:6d:81:14:27:df:e3:
42:28:35:50:6a:da:ee:81:39:48:cb:b8:7b:c3:1d:
c6:2f:6c:e3:16:1c:c8:eb:d1:36:20:1b:72:5b:7b:
03:b9:a7:ba:77:48:62:80:48:83:0d:5f:75:9e:d7:
6a:81:f3:8f:a4:69:b8:89:5a:56:5d:f8:0b:e0:5c:
22:62:bf:90:ab:32:cd:38:d9:ed:07:22:6f:1c:b5:
3e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A8:BB:D4:E0:2C:EA:57:AE:C7:BE:47:18:92:4A:C5:DE:3C:CC:B7
X509v3 Authority Key Identifier:
keyid:99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/7qi71OAs6leux75HGJJKxd48zLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.49.0/24
Signature Algorithm: sha256WithRSAEncryption
59:48:5a:05:85:d7:4f:ac:e8:14:f0:8f:08:3c:4c:21:9f:97:
c5:10:f6:54:4c:31:b8:92:f3:72:55:4d:92:f5:66:1f:46:b5:
a2:b7:a7:02:e3:cb:3a:2c:6f:b3:d5:08:56:3d:c7:4d:f8:0c:
bd:09:2b:84:20:96:5e:71:1d:6c:00:d5:32:76:5b:bf:5b:04:
07:9e:be:07:b8:f2:2a:f9:b8:54:92:0e:d7:f5:6c:79:4c:5c:
37:cf:c9:46:17:20:6b:b8:86:ff:7b:42:61:a7:3f:98:80:90:
4e:01:2e:f6:8f:fd:f6:54:7b:e3:ab:ec:7b:fd:1a:42:0b:7c:
69:be:00:4a:81:94:3e:42:2c:90:81:a6:47:8e:1e:a9:de:dc:
7c:58:02:fa:d3:61:28:34:ef:5b:6a:8b:02:dc:9c:8d:1d:2d:
53:54:1e:06:81:27:fd:26:58:b0:ff:63:27:b3:94:08:5d:fd:
0a:8b:77:4a:4e:f0:4a:a9:74:4a:36:ed:54:f6:5f:08:5d:f0:
79:b9:2f:fb:40:f6:1e:0b:89:60:30:7f:f2:65:0f:54:42:1c:
b0:04:65:cb:d6:2d:6d:3b:7b:cf:03:b6:43:a5:e4:a6:7c:aa:
e9:03:39:7d:56:94:af:45:3d:a8:58:f2:9b:d7:d9:4c:da:48:
c7:cc:46:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1wTtHdNP48r2fqsmCVviMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MjUyZmY3ZjRkY2Y2MjIzNGQyMmY4NmExMTM1YjM0NDky
M2RhYWIwHhcNMjUwMTAxMjE0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWE4YmJkNGUwMmNlYTU3YWVjN2JlNDcxODkyNGFjNWRlM2NjY2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LvcQXXMM2tCy3LSQOqY9Xx+rboG
fEAXF5BYr/FTBRefZIy/HA4sLCp0hWAH/GXlLSUk+EB9Kzm8vNmTQ/G8wLFTI3gA
RUjK+qTZR8Ar4KzzkPOHHD5hGClJBiwy3KL72WX3h4TCCDKGx6kDewdXhQ9OWsJL
S3Y1CxVowzoEGJVxZNiZiK417QaNyriWbhR2Zq6U8SXVHrD20gZk1guHh1h2iOwx
qcTv+SrZo5NtgRQn3+NCKDVQatrugTlIy7h7wx3GL2zjFhzI69E2IBtyW3sDuae6
d0higEiDDV91ntdqgfOPpGm4iVpWXfgL4FwiYr+QqzLNONntByJvHLU+OwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO6ou9TgLOpXrse+RxiSSsXePMy3MB8GA1UdIwQY
MBaAFJklL/f03PYiNNIvhqETWzRJI9qrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVNVdjlfVGM5aUkwMGktR29STmJORWtqMnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jOTIwZGEtMWRmOC00OTI3LTg4MzEt
YWIwNjY0ZTYzZmI2LzEvN3FpNzFPQXM2bGV1eDc1SEdKSkt4ZDQ4ekxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9jOTIwZGEtMWRmOC00OTI3LTg4MzEtYWIwNjY0ZTYzZmI2
LzEvbVNVdjlfVGM5aUkwMGktR29STmJORWtqMnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWsxMA0G
CSqGSIb3DQEBCwUAA4IBAQBZSFoFhddPrOgU8I8IPEwhn5fFEPZUTDG4kvNyVU2S
9WYfRrWit6cC48s6LG+z1QhWPcdN+Ay9CSuEIJZecR1sANUydlu/WwQHnr4HuPIq
+bhUkg7X9Wx5TFw3z8lGFyBruIb/e0Jhpz+YgJBOAS72j/32VHvjq+x7/RpCC3xp
vgBKgZQ+QiyQgaZHjh6p3tx8WAL602EoNO9baosC3JyNHS1TVB4GgSf9Jliw/2Mn
s5QIXf0Ki3dKTvBKqXRKNu1U9l8IXfB5uS/7QPYeC4lgMH/yZQ9UQhywBGXL1i1t
O3vPA7ZDpeSmfKrpAzl9VpSvRT2oWPKb19lM2kjHzEad
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:52 2025 by rpki-client