Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/WiIPyXHByzAssjj4VKSqXNq3hNo.roa
File: WiIPyXHByzAssjj4VKSqXNq3hNo.roa (raw, json)
Hash identifier: zCz09ISW2vqCRWl6+kt0e/gaUd26cQmDKkxwLzxkeJQ=
Subject key identifier: 5A:22:0F:C9:71:C1:CB:30:2C:B2:38:F8:54:A4:AA:5C:DA:B7:84:DA
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 01942521701C281D486C2D099934FCF97D55
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/WiIPyXHByzAssjj4VKSqXNq3hNo.roa
Signing time: Thu 02 Jan 2025 03:48:55 +0000
ROA not before: Thu 02 Jan 2025 03:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8423
IP address blocks: 193.200.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:70:1c:28:1d:48:6c:2d:09:99:34:fc:f9:7d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a220fc971c1cb302cb238f854a4aa5cdab784da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d9:97:e2:44:7f:78:0f:09:b3:de:c1:8d:89:
32:57:44:63:7f:2e:e6:e8:19:68:26:48:8c:ad:d4:
8f:70:1a:ba:d1:12:01:d2:be:53:69:a7:32:84:3d:
8c:5b:4e:29:0b:c6:86:d8:11:a3:e6:70:b5:00:b7:
da:2b:0a:04:cf:ce:2f:a0:60:40:e2:7c:6a:71:51:
f7:51:ad:82:6b:2b:cb:ee:2b:7c:41:4c:12:dc:92:
24:31:d0:04:3e:45:ef:76:ef:9f:df:49:b9:54:c8:
01:42:70:cb:f5:26:2c:76:e1:2b:c0:16:04:6c:f8:
8f:31:14:d1:7f:40:b6:4d:ef:37:07:74:45:cc:ea:
89:62:b2:c8:54:83:7c:03:c5:86:a3:1a:93:49:d3:
d1:f9:e1:05:02:9e:b5:4d:7c:1e:b3:9a:4c:a1:1d:
0c:09:3f:53:67:b8:ca:4e:95:94:00:39:aa:70:24:
93:24:4c:23:94:27:27:81:fa:c8:53:20:9b:c7:de:
d6:01:3e:67:77:a3:b6:a2:d3:e0:43:76:d5:7f:a9:
f0:c4:58:9a:52:60:62:da:38:a5:e1:a2:7e:31:90:
62:7f:85:cf:48:6f:ea:ef:b2:79:c7:63:21:0f:7d:
36:1b:05:8e:80:40:60:2c:21:8c:ad:f7:d5:8e:78:
c1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:22:0F:C9:71:C1:CB:30:2C:B2:38:F8:54:A4:AA:5C:DA:B7:84:DA
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/WiIPyXHByzAssjj4VKSqXNq3hNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.141.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:bc:27:61:41:42:0f:7b:f9:31:ad:a1:59:1e:eb:48:a0:d9:
e5:12:2b:cb:65:bd:cc:92:bf:20:18:e6:ef:ba:49:91:12:f5:
09:36:7c:de:19:a4:8d:46:09:09:69:0a:a9:a0:7a:64:c1:b4:
f7:c2:85:8e:51:f2:5d:0e:80:b7:6f:cd:c8:85:64:f8:db:d6:
22:43:9e:fc:4c:de:c8:fe:4a:93:81:7b:77:4b:7e:85:b9:e6:
f2:50:d5:7b:1c:89:76:09:59:bb:e1:51:8c:d8:1c:34:a0:85:
e9:70:cf:68:07:53:11:25:6c:e6:fb:ba:e8:c9:73:8e:82:14:
26:ad:84:79:e2:36:1c:fb:bf:4c:71:8a:92:e3:bd:de:c8:20:
a6:b3:82:35:71:92:9a:fd:03:10:ba:65:9b:f5:a0:d9:9d:da:
d2:99:46:b5:ae:70:1f:90:cb:c7:7b:38:72:41:68:1b:02:c1:
6f:9c:29:11:ca:ba:31:5c:de:d1:e7:b0:40:fb:b8:90:c7:c7:
0d:f5:63:b7:af:ea:58:f3:df:9c:a4:c3:75:94:28:bb:a6:19:
da:08:16:cb:f1:00:95:8c:e4:2a:9b:8b:fa:2a:ba:45:40:cd:
fa:74:f0:17:5b:a5:7e:13:06:74:f5:af:9e:9c:69:bd:de:15:
6a:94:9f:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIXAcKB1IbC0JmTT8+X1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYmQ2OGUzNzBlN2VjMjViZWM4ZTAxNDk3YjIxMzhkOTVk
YzZlYmMwHhcNMjUwMTAyMDM0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTIyMGZjOTcxYzFjYjMwMmNiMjM4Zjg1NGE0YWE1Y2RhYjc4NGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotmX4kR/eA8Js97BjYkyV0Rjfy7m
6BloJkiMrdSPcBq60RIB0r5TaacyhD2MW04pC8aG2BGj5nC1ALfaKwoEz84voGBA
4nxqcVH3Ua2CayvL7it8QUwS3JIkMdAEPkXvdu+f30m5VMgBQnDL9SYsduErwBYE
bPiPMRTRf0C2Te83B3RFzOqJYrLIVIN8A8WGoxqTSdPR+eEFAp61TXwes5pMoR0M
CT9TZ7jKTpWUADmqcCSTJEwjlCcngfrIUyCbx97WAT5nd6O2otPgQ3bVf6nwxFia
UmBi2jil4aJ+MZBif4XPSG/q77J5x2MhD302GwWOgEBgLCGMrffVjnjBBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFoiD8lxwcswLLI4+FSkqlzat4TaMB8GA1UdIwQY
MBaAFLC9aONw5+wlvsjgFJeyE42V3G68MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0wxbzQzRG43Q1cteU9BVWw3SVRqWlhjYnJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9mNGNhMWMtMzVkZC00Y2IxLTg0ZmEt
ODExNWNhZmQzOGNlLzEvV2lJUHlYSEJ5ekFzc2pqNFZLU3FYTnEzaE5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9mNGNhMWMtMzVkZC00Y2IxLTg0ZmEtODExNWNhZmQzOGNl
LzEvc0wxbzQzRG43Q1cteU9BVWw3SVRqWlhjYnJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwciNMA0G
CSqGSIb3DQEBCwUAA4IBAQBPvCdhQUIPe/kxraFZHutIoNnlEivLZb3Mkr8gGObv
ukmREvUJNnzeGaSNRgkJaQqpoHpkwbT3woWOUfJdDoC3b83IhWT429YiQ578TN7I
/kqTgXt3S36FuebyUNV7HIl2CVm74VGM2Bw0oIXpcM9oB1MRJWzm+7royXOOghQm
rYR54jYc+79McYqS473eyCCms4I1cZKa/QMQumWb9aDZndrSmUa1rnAfkMvHezhy
QWgbAsFvnCkRyroxXN7R57BA+7iQx8cN9WO3r+pY89+cpMN1lCi7phnaCBbL8QCV
jOQqm4v6KrpFQM36dPAXW6V+EwZ09a+enGm93hVqlJ/J
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:01:04 2025 by rpki-client