Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/_qzv0Dh2xEy9ZuzGpQ3k-hlux2A.roa
File: _qzv0Dh2xEy9ZuzGpQ3k-hlux2A.roa (raw, json)
Hash identifier: b9D9j34bnNP+dbzCYrw3bzH+UNVKXeP8YIrlGzrGPLw=
Subject key identifier: FE:AC:EF:D0:38:76:C4:4C:BD:66:EC:C6:A5:0D:E4:FA:19:6E:C7:60
Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial: 01941FFA7CB3089ACA1F11A3797CCD842DEF
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/_qzv0Dh2xEy9ZuzGpQ3k-hlux2A.roa
Signing time: Wed 01 Jan 2025 03:48:17 +0000
ROA not before: Wed 01 Jan 2025 03:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15943
IP address blocks: 193.141.96.0/23 maxlen: 24
194.39.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7c:b3:08:9a:ca:1f:11:a3:79:7c:cd:84:2d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Validity
Not Before: Jan 1 03:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=feacefd03876c44cbd66ecc6a50de4fa196ec760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0f:f8:0f:f2:f0:84:eb:da:16:b1:bd:6d:56:
d7:fb:52:83:1e:cf:04:19:fb:32:8d:a3:d0:16:6a:
98:c2:39:db:cf:d1:9e:13:4c:a7:55:57:23:bb:64:
d0:8d:d8:e7:17:96:5c:b3:8a:be:02:0c:52:74:26:
fe:ea:34:c4:b5:72:d2:b1:59:f6:b7:54:e1:ad:19:
bb:ef:52:3d:25:ea:6f:ea:50:f6:41:b2:97:a4:ae:
91:e0:1c:2a:d0:2a:0b:61:c0:ad:75:4a:79:a9:30:
2e:3c:54:39:37:15:65:92:9a:d2:7b:31:ae:7a:36:
99:fa:5c:e5:c2:e3:77:44:3b:13:ae:f6:88:40:0b:
1a:dd:30:8a:7b:22:0a:91:53:a5:e5:3a:41:be:a6:
be:25:1c:f4:e5:61:99:f5:4c:48:93:6c:ce:98:96:
7b:da:1d:b9:86:69:e5:a6:87:bf:4f:ae:88:29:f2:
9e:8a:bc:4b:03:d8:4f:1d:0c:6c:7f:37:2f:82:80:
1a:03:d4:eb:ea:fe:35:93:67:12:22:4b:de:df:1d:
99:34:ad:72:48:1a:5b:ff:8b:f0:92:a7:8d:54:ca:
ff:81:22:54:1e:3a:95:8c:00:d9:74:51:23:91:bd:
86:70:a7:48:66:72:6d:23:3a:b5:3e:55:47:d5:3c:
d7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AC:EF:D0:38:76:C4:4C:BD:66:EC:C6:A5:0D:E4:FA:19:6E:C7:60
X509v3 Authority Key Identifier:
keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/_qzv0Dh2xEy9ZuzGpQ3k-hlux2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.96.0/23
194.39.214.0/24
Signature Algorithm: sha256WithRSAEncryption
61:a7:15:c0:46:c1:79:18:8b:a2:80:71:ac:18:fa:4d:44:62:
aa:3e:78:f9:f4:8c:e9:63:84:8b:6f:b4:cb:b6:24:2a:0f:37:
b6:0d:7d:20:1b:05:1f:45:8b:96:f4:6a:86:c1:b6:05:fb:76:
da:de:04:3c:ad:f9:20:48:e8:1d:92:6d:45:9e:72:8c:26:22:
03:a8:d7:48:30:3f:c2:6d:d3:ef:56:66:c9:f6:7d:93:29:75:
26:47:25:39:21:f0:c4:6f:1a:31:91:c6:7e:4a:6c:03:58:cd:
08:5e:fb:88:75:f5:42:68:c5:78:a5:ed:51:a4:ee:2d:89:7f:
7e:38:23:c9:d0:34:e4:79:56:5f:1d:dd:13:05:9b:92:e3:c2:
49:28:b0:bf:26:aa:b3:92:be:df:bb:6c:5a:ea:3e:ea:48:d0:
c6:6d:61:02:dd:8a:58:43:94:6f:83:b2:59:14:7a:02:4f:3f:
7c:14:09:dd:86:b4:33:3b:fa:e5:22:5c:68:03:60:0b:ac:d5:
05:09:58:3b:52:ba:67:12:1e:c6:65:11:d2:cc:26:e7:03:df:
3c:e1:7a:52:00:d5:e0:68:b6:ea:b1:39:03:17:a2:d1:6f:77:
aa:d5:88:25:02:ab:7d:6f:07:25:6a:49:44:2e:8b:76:b9:ac:
da:8e:67:62
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQf+nyzCJrKHxGjeXzNhC3vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMzg0NzY2NzUxMGY0ZjJlNTliYjFiMzk0YWUyN2U4ZGFk
MGRjOTcwHhcNMjUwMTAxMDM0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWFjZWZkMDM4NzZjNDRjYmQ2NmVjYzZhNTBkZTRmYTE5NmVjNzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4A/4D/LwhOvaFrG9bVbX+1KDHs8E
GfsyjaPQFmqYwjnbz9GeE0ynVVcju2TQjdjnF5Zcs4q+AgxSdCb+6jTEtXLSsVn2
t1ThrRm771I9Jepv6lD2QbKXpK6R4Bwq0CoLYcCtdUp5qTAuPFQ5NxVlkprSezGu
ejaZ+lzlwuN3RDsTrvaIQAsa3TCKeyIKkVOl5TpBvqa+JRz05WGZ9UxIk2zOmJZ7
2h25hmnlpoe/T66IKfKeirxLA9hPHQxsfzcvgoAaA9Tr6v41k2cSIkve3x2ZNK1y
SBpb/4vwkqeNVMr/gSJUHjqVjADZdFEjkb2GcKdIZnJtIzq1PlVH1TzX9wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP6s79A4dsRMvWbsxqUN5PoZbsdgMB8GA1UdIwQY
MBaAFM44R2Z1EPTy5Zuxs5SuJ+ja0NyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNGYyYTgtZDNiNy00NDNkLWFjM2It
NGJhNDQzNzdiZDg2LzEvX3F6djBEaDJ4RXk5WnV6R3BRM2staGx1eDJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xNGYyYTgtZDNiNy00NDNkLWFjM2ItNGJhNDQzNzdiZDg2
LzEvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwY1gAwQA
wifWMA0GCSqGSIb3DQEBCwUAA4IBAQBhpxXARsF5GIuigHGsGPpNRGKqPnj59Izp
Y4SLb7TLtiQqDze2DX0gGwUfRYuW9GqGwbYF+3ba3gQ8rfkgSOgdkm1FnnKMJiID
qNdIMD/CbdPvVmbJ9n2TKXUmRyU5IfDEbxoxkcZ+SmwDWM0IXvuIdfVCaMV4pe1R
pO4tiX9+OCPJ0DTkeVZfHd0TBZuS48JJKLC/Jqqzkr7fu2xa6j7qSNDGbWEC3YpY
Q5Rvg7JZFHoCTz98FAndhrQzO/rlIlxoA2ALrNUFCVg7UrpnEh7GZRHSzCbnA988
4XpSANXgaLbqsTkDF6LRb3eq1YglAqt9bwclaklELot2uazajmdi
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:09:45 2025 by rpki-client