Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2Cd3rlRZH1pOUkBJq8oI9GJ8bpI.roa
File: 2Cd3rlRZH1pOUkBJq8oI9GJ8bpI.roa (raw, json)
Hash identifier: wtrKT6bdQnkZDsyMIXJIxeUQE7X4X/mzYGEqPJ6tPSo=
Subject key identifier: D8:27:77:AE:54:59:1F:5A:4E:52:40:49:AB:CA:08:F4:62:7C:6E:92
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194A3BBAF97DD24562202925F01EC5A9FAF
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2Cd3rlRZH1pOUkBJq8oI9GJ8bpI.roa
Signing time: Sun 26 Jan 2025 17:49:33 +0000
ROA not before: Sun 26 Jan 2025 17:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 193.8.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a3:bb:af:97:dd:24:56:22:02:92:5f:01:ec:5a:9f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 26 17:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d82777ae54591f5a4e524049abca08f4627c6e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:c6:0f:ef:a9:89:5b:26:ec:10:d2:c7:ba:
ce:e2:7d:7d:0d:b8:13:ed:f9:79:31:1c:3a:eb:42:
24:9a:5d:91:08:ff:05:30:9c:75:8d:e8:1d:6b:ac:
58:4e:11:0a:6b:24:83:db:a2:95:d7:f5:f3:32:6e:
af:90:69:dd:be:4a:5d:1f:db:4f:f9:06:d0:27:d8:
36:3d:4a:86:53:d3:8d:26:01:2f:b1:fe:9f:b8:27:
b4:0f:af:a1:3a:8e:16:ab:95:bc:4e:a8:ec:0f:a7:
70:a1:9c:b0:60:b3:95:2b:3f:d3:55:b7:c0:35:ff:
56:0d:d9:81:85:1a:04:c9:d0:f8:d0:49:c8:1f:c8:
7d:76:a5:bd:4c:0e:1c:bc:7c:d3:6f:54:58:00:47:
a9:f2:51:a3:d1:42:1d:cb:41:56:70:b7:6e:d7:f4:
31:68:7d:31:b3:ec:d5:b1:28:85:a8:6f:2c:9b:83:
9e:41:b3:fc:9d:dc:31:14:ea:c1:36:f6:cd:8b:cd:
34:a6:7a:bd:3c:15:eb:f2:89:f4:32:99:6c:16:0a:
3b:14:cf:cc:4e:cd:d0:d7:9b:0d:75:f8:44:74:a5:
d2:4f:f0:2e:6c:31:af:f0:75:5a:81:7a:d5:78:1e:
51:5e:40:a4:f1:c0:5d:24:32:54:38:f4:92:5f:bc:
cc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:27:77:AE:54:59:1F:5A:4E:52:40:49:AB:CA:08:F4:62:7C:6E:92
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2Cd3rlRZH1pOUkBJq8oI9GJ8bpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.114.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:8a:8a:f5:99:aa:e1:19:6a:09:7a:d4:34:8c:c8:0c:2e:24:
2b:c8:5f:ed:84:e4:81:1b:e6:5e:39:ea:4a:1e:85:f7:7a:23:
1c:3e:4a:00:cc:cd:ad:92:87:04:74:93:32:6b:3e:1a:26:95:
90:3e:1d:dd:f3:e9:10:47:b9:fd:77:f9:08:f6:c4:e8:37:a0:
16:69:de:5f:92:3d:ed:29:cf:03:e3:ad:ef:49:37:9a:17:c0:
f7:61:61:0f:5c:5c:68:01:5b:25:4d:49:38:e8:07:26:00:3b:
a0:21:a6:9c:4e:ed:24:9e:72:3e:bb:2b:0c:98:a7:c4:22:46:
6d:87:52:1c:8d:d6:a7:fb:d4:21:0e:c3:7d:05:22:77:20:b7:
58:94:b7:5f:38:76:cc:4a:e9:4b:47:c1:78:29:33:d4:9b:5a:
58:f4:12:29:e0:20:b6:ee:50:27:a0:94:ad:66:ba:f5:14:ff:
dd:e1:fc:22:e6:82:ad:fb:a8:37:fd:75:3c:02:df:96:45:c5:
c4:95:dc:2d:c7:0f:08:f9:94:17:10:d9:38:c2:fe:bd:81:55:
f1:3f:1c:fa:70:6e:f5:2f:ae:f4:36:45:f4:3d:52:c3:2d:77:
fa:69:4d:c8:de:b1:77:cc:a8:4a:10:99:8b:49:75:32:38:2a:
a4:23:3d:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSju6+X3SRWIgKSXwHsWp+vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwMTI2MTc0OTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODI3NzdhZTU0NTkxZjVhNGU1MjQwNDlhYmNhMDhmNDYyN2M2ZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6LGD++piVsm7BDSx7rO4n19DbgT
7fl5MRw660Ikml2RCP8FMJx1jegda6xYThEKaySD26KV1/XzMm6vkGndvkpdH9tP
+QbQJ9g2PUqGU9ONJgEvsf6fuCe0D6+hOo4Wq5W8TqjsD6dwoZywYLOVKz/TVbfA
Nf9WDdmBhRoEydD40EnIH8h9dqW9TA4cvHzTb1RYAEep8lGj0UIdy0FWcLdu1/Qx
aH0xs+zVsSiFqG8sm4OeQbP8ndwxFOrBNvbNi800pnq9PBXr8on0MplsFgo7FM/M
Ts3Q15sNdfhEdKXST/AubDGv8HVagXrVeB5RXkCk8cBdJDJUOPSSX7zMeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNgnd65UWR9aTlJASavKCPRifG6SMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvMkNkM3JsUlpIMXBPVWtCSnE4b0k5R0o4YnBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQhyMA0G
CSqGSIb3DQEBCwUAA4IBAQCmior1marhGWoJetQ0jMgMLiQryF/thOSBG+ZeOepK
HoX3eiMcPkoAzM2tkocEdJMyaz4aJpWQPh3d8+kQR7n9d/kI9sToN6AWad5fkj3t
Kc8D463vSTeaF8D3YWEPXFxoAVslTUk46AcmADugIaacTu0knnI+uysMmKfEIkZt
h1Icjdan+9QhDsN9BSJ3ILdYlLdfOHbMSulLR8F4KTPUm1pY9BIp4CC27lAnoJSt
Zrr1FP/d4fwi5oKt+6g3/XU8At+WRcXEldwtxw8I+ZQXENk4wv69gVXxPxz6cG71
L670NkX0PVLDLXf6aU3I3rF3zKhKEJmLSXUyOCqkIz0d
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:37 2025 by rpki-client