Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/CAv9rzPv7Heix16M5AOoPXOPd4Q.roa
File: CAv9rzPv7Heix16M5AOoPXOPd4Q.roa (raw, json)
Hash identifier: LMRzKo9NjTluip/QqjWWZG7E9ryz+Y9CDOMAPiGo6ag=
Subject key identifier: 08:0B:FD:AF:33:EF:EC:77:A2:C7:5E:8C:E4:03:A8:3D:73:8F:77:84
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 0195149CEA036BE4A92175B0310F565A4D7A
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/CAv9rzPv7Heix16M5AOoPXOPd4Q.roa
Signing time: Mon 17 Feb 2025 15:53:02 +0000
ROA not before: Mon 17 Feb 2025 15:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13903
IP address blocks: 193.29.148.0/23 maxlen: 23
193.29.148.0/24 maxlen: 24
193.29.149.0/24 maxlen: 24
193.29.158.0/23 maxlen: 23
193.29.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:9c:ea:03:6b:e4:a9:21:75:b0:31:0f:56:5a:4d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Feb 17 15:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=080bfdaf33efec77a2c75e8ce403a83d738f7784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:45:01:29:e5:e0:aa:7a:f4:d2:60:be:27:
20:f3:7a:8c:b2:45:69:71:5c:6d:a7:a7:35:5e:5d:
2b:8a:62:56:1f:8b:80:33:ac:a6:97:f3:f0:c8:da:
6e:8f:48:71:07:b8:f0:a0:85:2b:6c:06:e1:40:6a:
44:4e:aa:e0:8f:cf:13:da:58:29:8f:7c:3f:e8:bd:
37:96:67:e6:3e:af:16:36:25:cf:f6:bb:04:49:f8:
0e:47:c3:00:4d:a7:37:4f:71:ca:a1:33:cb:0e:a5:
3e:8b:66:9b:33:32:39:d6:1b:41:b4:09:66:9f:53:
96:51:4f:e6:9d:61:67:37:f2:a1:fd:19:e0:e3:de:
b8:14:a1:ae:9e:80:95:80:d4:ab:eb:49:31:a0:db:
c1:b7:66:01:73:27:57:0d:0b:ab:3d:d3:1f:09:49:
c0:e8:be:b7:21:cb:6e:e5:4d:19:3d:a4:4e:f7:05:
3d:a3:ff:15:87:29:86:8a:38:20:8a:22:05:59:31:
86:90:ea:b6:01:bd:2c:e9:70:d0:7f:84:59:25:fb:
46:a8:9a:bc:7d:e7:68:a6:e3:18:a0:ce:ce:02:26:
11:89:c5:e5:b0:c0:21:50:52:f9:a2:7d:77:28:ee:
81:51:0a:55:f6:49:f1:be:b4:01:58:8a:0f:4e:a8:
80:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0B:FD:AF:33:EF:EC:77:A2:C7:5E:8C:E4:03:A8:3D:73:8F:77:84
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/CAv9rzPv7Heix16M5AOoPXOPd4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.148.0/23
193.29.158.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:b3:fc:7e:01:74:00:57:34:2c:57:80:75:4f:6b:a7:cc:34:
fd:c8:3c:21:5a:b4:d4:1a:9d:17:8a:37:cd:56:0a:5e:09:81:
20:07:9c:85:59:15:bc:f1:fc:fd:99:7d:25:f7:76:39:68:d1:
1d:b7:f5:3a:49:7b:38:fe:1c:83:b2:d8:22:b1:14:0c:16:3c:
f4:3b:4a:67:15:c9:74:9c:6a:13:5b:5f:14:18:1f:71:d1:d7:
63:c0:1e:27:48:48:52:f8:d6:a8:5c:08:a7:dc:57:e5:34:a8:
86:de:16:59:79:87:4e:79:27:93:7f:e7:09:de:d8:0d:0f:fb:
60:45:a2:45:d2:dc:72:cb:fb:ae:47:f2:a2:ca:ef:23:69:21:
52:cd:a0:08:0f:aa:ca:96:2a:2c:01:ce:05:92:e7:96:36:33:
a3:fa:34:df:f0:61:f3:aa:b7:c9:38:a8:8a:38:ed:1d:93:1d:
35:97:a8:b0:6f:51:0e:68:ad:ef:86:50:5d:16:f2:a8:18:f4:
ee:8c:fb:85:96:e6:87:04:15:5d:95:d9:e7:da:8d:40:df:52:
18:2f:fc:99:2a:dd:6e:cd:36:5d:43:a9:8b:b2:fd:0c:cf:b9:
20:7e:da:f0:bf:67:cd:7f:b4:95:6c:c3:54:0e:b1:a6:02:6c:
15:22:09:7b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZUUnOoDa+SpIXWwMQ9WWk16MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYjk2Y2U1OWM1OTU1NzUzMGYwZWFhNDRjNjY0NTAzZDlj
NDAxZWQwHhcNMjUwMjE3MTU1MzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODBiZmRhZjMzZWZlYzc3YTJjNzVlOGNlNDAzYTgzZDczOGY3Nzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJNFASnl4Kp69NJgvicg83qMskVp
cVxtp6c1Xl0rimJWH4uAM6yml/PwyNpuj0hxB7jwoIUrbAbhQGpETqrgj88T2lgp
j3w/6L03lmfmPq8WNiXP9rsESfgOR8MATac3T3HKoTPLDqU+i2abMzI51htBtAlm
n1OWUU/mnWFnN/Kh/Rng4964FKGunoCVgNSr60kxoNvBt2YBcydXDQurPdMfCUnA
6L63Ictu5U0ZPaRO9wU9o/8VhymGijggiiIFWTGGkOq2Ab0s6XDQf4RZJftGqJq8
fedopuMYoM7OAiYRicXlsMAhUFL5on13KO6BUQpV9knxvrQBWIoPTqiAGwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAgL/a8z7+x3osdejOQDqD1zj3eEMB8GA1UdIwQY
MBaAFJy5bOWcWVV1MPDqpExmRQPZxAHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ZGQ3YjEtZTMzNy00MDRkLWI3NjQt
ZGRiMGIxNDhlNDZiLzEvQ0F2OXJ6UHY3SGVpeDE2TTVBT29QWE9QZDRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81ZGQ3YjEtZTMzNy00MDRkLWI3NjQtZGRiMGIxNDhlNDZi
LzEvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwR2UAwQB
wR2eMA0GCSqGSIb3DQEBCwUAA4IBAQAss/x+AXQAVzQsV4B1T2unzDT9yDwhWrTU
Gp0XijfNVgpeCYEgB5yFWRW88fz9mX0l93Y5aNEdt/U6SXs4/hyDstgisRQMFjz0
O0pnFcl0nGoTW18UGB9x0ddjwB4nSEhS+NaoXAin3FflNKiG3hZZeYdOeSeTf+cJ
3tgND/tgRaJF0txyy/uuR/Kiyu8jaSFSzaAID6rKliosAc4FkueWNjOj+jTf8GHz
qrfJOKiKOO0dkx01l6iwb1EOaK3vhlBdFvKoGPTujPuFluaHBBVdldnn2o1A31IY
L/yZKt1uzTZdQ6mLsv0Mz7kgftrwv2fNf7SVbMNUDrGmAmwVIgl7
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:08 2025 by rpki-client on console.sobornost.net