Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/tVPF_FMNIzvy1aLQDH9JsXjnUzc.roa
File: tVPF_FMNIzvy1aLQDH9JsXjnUzc.roa (raw, json)
Hash identifier: NZpf0UeNwGFLjgoytkNM8IGey5uL4sin2yYuLpIaeRY=
Subject key identifier: B5:53:C5:FC:53:0D:23:3B:F2:D5:A2:D0:0C:7F:49:B1:78:E7:53:37
Certificate issuer: /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Certificate serial: 0194252192030C19AFE303117D566E82EAB6
Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/tVPF_FMNIzvy1aLQDH9JsXjnUzc.roa
Signing time: Thu 02 Jan 2025 03:49:04 +0000
ROA not before: Thu 02 Jan 2025 03:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199773
IP address blocks: 193.142.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:92:03:0c:19:af:e3:03:11:7d:56:6e:82:ea:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Validity
Not Before: Jan 2 03:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b553c5fc530d233bf2d5a2d00c7f49b178e75337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:cb:fc:4d:87:8d:c7:93:4a:e2:83:d9:c0:
a6:77:7e:17:c7:1a:df:97:fb:e3:fd:ee:29:57:33:
a2:b7:42:fc:24:e7:b9:46:c3:d0:16:2b:62:1b:45:
d7:02:bd:71:3c:7c:e9:03:bd:e0:95:2c:d1:08:ac:
6c:e2:2d:cb:1c:61:43:82:f9:68:8b:34:00:14:4b:
80:80:5a:02:b7:95:70:2d:ab:4d:92:ee:e2:56:d6:
54:b8:71:d9:c1:d5:2d:65:f9:07:ca:01:41:cf:71:
ef:18:7b:71:1c:2d:dc:59:a7:36:45:77:61:6a:ce:
92:29:e1:b4:92:07:9f:d8:b0:63:c1:ff:8c:3c:d2:
7f:91:51:69:71:0e:b2:b6:cf:de:1e:d3:48:96:3a:
71:ec:90:cc:ad:c1:17:8f:77:c3:90:b9:67:92:91:
e3:f0:9a:cd:1c:3f:b0:69:ba:89:01:19:ce:03:20:
39:2b:25:cf:10:d6:2c:86:a6:26:68:9b:3f:20:b3:
91:35:45:d3:c7:72:f6:55:e1:63:e6:f4:cc:80:c7:
3e:7f:18:3f:ef:ce:01:f7:ff:0e:0f:d8:61:47:f9:
4c:4f:80:65:f6:95:46:fb:56:9b:bc:69:22:7f:5a:
4d:26:96:db:e4:b5:4d:56:23:3c:fa:0d:db:2c:e4:
de:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:53:C5:FC:53:0D:23:3B:F2:D5:A2:D0:0C:7F:49:B1:78:E7:53:37
X509v3 Authority Key Identifier:
keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/tVPF_FMNIzvy1aLQDH9JsXjnUzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.211.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:29:af:41:7a:8b:01:aa:a9:e4:8a:06:3c:9b:74:de:f4:16:
37:ae:30:a4:de:d1:f9:69:6a:9d:5b:a6:ab:31:af:ab:9d:7c:
4e:45:83:17:dc:fe:45:67:29:62:bd:06:89:8b:29:c5:08:af:
94:16:98:c0:48:bd:d2:63:c8:8f:68:e4:8c:d3:26:dc:41:3f:
b1:27:e5:a0:bb:05:82:03:95:a1:d5:e9:d2:8b:29:59:f8:9e:
78:d0:81:c6:34:c5:0f:9e:be:0b:c6:0a:34:b7:20:d6:2c:64:
e3:50:40:6c:3b:c9:29:18:6a:4f:98:51:fc:b9:4f:6a:d5:84:
5e:c4:43:c8:33:65:21:2b:fb:f8:19:9b:07:e0:52:7c:e4:88:
2c:ad:33:37:f8:75:1f:88:c3:6c:a1:84:85:37:69:03:34:51:
b5:52:e1:19:27:ba:93:4d:0b:aa:2e:6c:89:82:66:0f:eb:92:
58:6a:92:26:1f:03:99:77:09:16:63:5b:c9:d7:c9:0f:a6:4d:
d5:20:0c:07:33:3a:78:52:ee:8c:23:d4:2a:13:49:69:d5:5b:
6b:a6:c1:dc:7e:1e:99:59:ff:2a:43:be:0d:a4:e7:75:57:b2:
67:75:e2:43:37:d9:25:aa:c8:d9:ff:23:7d:65:be:e9:da:07:
f1:7f:55:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIZIDDBmv4wMRfVZuguq2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MDI5MGY1ZjMxZjIzOGRmM2U4ZjNiZGZjYzA1NzUxY2My
ZjE5MmMwHhcNMjUwMTAyMDM0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTUzYzVmYzUzMGQyMzNiZjJkNWEyZDAwYzdmNDliMTc4ZTc1MzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy7L/E2HjceTSuKD2cCmd34Xxxrf
l/vj/e4pVzOit0L8JOe5RsPQFitiG0XXAr1xPHzpA73glSzRCKxs4i3LHGFDgvlo
izQAFEuAgFoCt5VwLatNku7iVtZUuHHZwdUtZfkHygFBz3HvGHtxHC3cWac2RXdh
as6SKeG0kgef2LBjwf+MPNJ/kVFpcQ6yts/eHtNIljpx7JDMrcEXj3fDkLlnkpHj
8JrNHD+wabqJARnOAyA5KyXPENYshqYmaJs/ILORNUXTx3L2VeFj5vTMgMc+fxg/
784B9/8OD9hhR/lMT4Bl9pVG+1abvGkif1pNJpbb5LVNViM8+g3bLOTehwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLVTxfxTDSM78tWi0Ax/SbF451M3MB8GA1UdIwQY
MBaAFCcCkPXzHyON8+jzvfzAV1HMLxksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSndLUTlmTWZJNDN6NlBPOV9NQlhVY3d2R1N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hNTkzMGEtNzIzMy00ZWU5LTk5MDAt
YjE0Y2M5MWM3NzZjLzEvdFZQRl9GTU5JenZ5MWFMUURIOUpzWGpuVXpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9hNTkzMGEtNzIzMy00ZWU5LTk5MDAtYjE0Y2M5MWM3NzZj
LzEvSndLUTlmTWZJNDN6NlBPOV9NQlhVY3d2R1N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY7TMA0G
CSqGSIb3DQEBCwUAA4IBAQCzKa9BeosBqqnkigY8m3Te9BY3rjCk3tH5aWqdW6ar
Ma+rnXxORYMX3P5FZylivQaJiynFCK+UFpjASL3SY8iPaOSM0ybcQT+xJ+WguwWC
A5Wh1enSiylZ+J540IHGNMUPnr4Lxgo0tyDWLGTjUEBsO8kpGGpPmFH8uU9q1YRe
xEPIM2UhK/v4GZsH4FJ85IgsrTM3+HUfiMNsoYSFN2kDNFG1UuEZJ7qTTQuqLmyJ
gmYP65JYapImHwOZdwkWY1vJ18kPpk3VIAwHMzp4Uu6MI9QqE0lp1VtrpsHcfh6Z
Wf8qQ74NpOd1V7JndeJDN9klqsjZ/yN9Zb7p2gfxf1UE
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:14:11 2025 by rpki-client