Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/4wMTuy8fboUuLv8KlxTIZakr534.roa
File: 4wMTuy8fboUuLv8KlxTIZakr534.roa (raw, json)
Hash identifier: pBH22tRi52c9WZSzBb0rlZeUN0npss3P8rc3Yf/hlCU=
Subject key identifier: E3:03:13:BB:2F:1F:6E:85:2E:2E:FF:0A:97:14:C8:65:A9:2B:E7:7E
Certificate issuer: /CN=73d0a3ab299a6598d32bc75450021888795b3d2b
Certificate serial: 01942444E0731D988AF632176F23E7A27170
Authority key identifier: 73:D0:A3:AB:29:9A:65:98:D3:2B:C7:54:50:02:18:88:79:5B:3D:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9CjqymaZZjTK8dUUAIYiHlbPSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/4wMTuy8fboUuLv8KlxTIZakr534.roa
Signing time: Wed 01 Jan 2025 23:48:01 +0000
ROA not before: Wed 01 Jan 2025 23:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49468
IP address blocks: 193.33.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e0:73:1d:98:8a:f6:32:17:6f:23:e7:a2:71:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d0a3ab299a6598d32bc75450021888795b3d2b
Validity
Not Before: Jan 1 23:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e30313bb2f1f6e852e2eff0a9714c865a92be77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:de:b9:23:08:30:df:c4:30:1d:29:f7:29:16:
94:72:c4:39:c7:ba:01:95:22:79:cf:03:6f:79:b0:
67:07:28:7a:20:69:72:bf:ff:92:12:0e:22:b6:ea:
0c:6f:5a:24:44:84:ba:16:36:c2:7d:d8:a5:7c:fd:
29:ae:e5:33:6a:32:c3:51:22:14:eb:06:f3:3a:37:
88:b7:0f:29:e9:84:f7:eb:ef:e1:ab:50:34:80:ac:
02:a6:90:8f:fd:92:f7:5f:dc:db:21:83:2f:1e:ce:
16:64:e4:4f:b1:fd:74:ab:95:19:de:ce:cb:c2:60:
e2:31:4a:cb:41:be:51:47:01:36:bf:0a:b4:d8:2b:
04:0c:ca:86:c7:18:21:4f:3f:89:83:4c:1c:4f:31:
dd:c0:f9:80:0d:95:d6:c2:5b:6f:44:78:ac:95:2c:
4b:66:c6:ae:8d:00:1f:c3:fd:d1:52:02:45:c5:9f:
2b:6e:0e:f7:22:18:fc:c0:77:14:d4:ac:62:73:d8:
97:3d:99:15:4f:9c:54:e7:b5:a4:ed:f8:c2:14:0e:
1c:ec:98:20:31:15:2b:82:77:0e:d0:44:c3:65:e9:
7e:e2:0d:cc:b9:21:ed:ea:97:c0:f0:d6:72:45:c3:
9f:da:ea:d3:35:bb:d2:24:7e:e1:5e:cf:5c:2f:a5:
5b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:03:13:BB:2F:1F:6E:85:2E:2E:FF:0A:97:14:C8:65:A9:2B:E7:7E
X509v3 Authority Key Identifier:
keyid:73:D0:A3:AB:29:9A:65:98:D3:2B:C7:54:50:02:18:88:79:5B:3D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9CjqymaZZjTK8dUUAIYiHlbPSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/4wMTuy8fboUuLv8KlxTIZakr534.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.157.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:7e:32:70:61:af:1a:9e:76:00:12:00:4e:7d:e6:28:1d:86:
f5:64:4f:2f:14:3e:3b:4f:2e:9e:8f:e6:f8:eb:fd:2c:b3:96:
d0:7b:01:70:07:0d:50:79:b2:b5:c9:02:6d:cd:20:f7:27:9c:
bf:aa:1b:db:e3:7f:b2:46:ef:a2:9a:e8:aa:e5:2b:bf:6f:8c:
55:9c:be:6f:27:70:e1:c5:8d:99:3c:8b:39:c2:00:45:67:1f:
40:a2:f7:f2:0d:d0:a6:eb:51:0a:ba:9a:35:36:26:43:5f:bf:
f8:9e:1e:51:05:28:00:0a:a0:a0:26:dd:b1:f4:74:16:93:0f:
f4:33:6f:71:98:9b:41:f3:06:41:69:31:67:60:b4:c0:94:3d:
2a:86:94:90:21:6e:df:67:ac:41:db:c1:2e:f9:76:4c:58:c0:
77:4b:1f:a9:78:f9:97:1f:41:98:64:6f:39:4c:1a:f3:18:a1:
c9:c8:2b:cb:06:37:ad:8e:23:39:e1:37:8a:7c:77:a8:86:b9:
0f:be:34:20:0d:3b:63:29:bc:0f:ef:e2:6a:96:0d:6c:ba:48:
59:c4:82:d9:48:8a:c6:c5:87:b3:46:96:c4:53:d1:28:dd:a3:
d7:0f:4b:b6:de:72:e1:38:10:a6:6b:d8:87:2a:20:cc:f8:24:
de:ac:79:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkROBzHZiK9jIXbyPnonFwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZDBhM2FiMjk5YTY1OThkMzJiYzc1NDUwMDIxODg4Nzk1
YjNkMmIwHhcNMjUwMTAxMjM0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzAzMTNiYjJmMWY2ZTg1MmUyZWZmMGE5NzE0Yzg2NWE5MmJlNzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2965Iwgw38QwHSn3KRaUcsQ5x7oB
lSJ5zwNvebBnByh6IGlyv/+SEg4ituoMb1okRIS6FjbCfdilfP0pruUzajLDUSIU
6wbzOjeItw8p6YT36+/hq1A0gKwCppCP/ZL3X9zbIYMvHs4WZORPsf10q5UZ3s7L
wmDiMUrLQb5RRwE2vwq02CsEDMqGxxghTz+Jg0wcTzHdwPmADZXWwltvRHislSxL
ZsaujQAfw/3RUgJFxZ8rbg73Ihj8wHcU1Kxic9iXPZkVT5xU57Wk7fjCFA4c7Jgg
MRUrgncO0ETDZel+4g3MuSHt6pfA8NZyRcOf2urTNbvSJH7hXs9cL6VbmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOMDE7svH26FLi7/CpcUyGWpK+d+MB8GA1UdIwQY
MBaAFHPQo6spmmWY0yvHVFACGIh5Wz0rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzlDanF5bWFaWmpUSzhkVVVBSVlpSGxiUFNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yYmU3YmItYWI5OC00ZWQzLWI1ZWUt
MTBjZjY1OTQ4YTU2LzEvNHdNVHV5OGZib1V1THY4S2x4VElaYWtyNTM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8yYmU3YmItYWI5OC00ZWQzLWI1ZWUtMTBjZjY1OTQ4YTU2
LzEvYzlDanF5bWFaWmpUSzhkVVVBSVlpSGxiUFNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSGdMA0G
CSqGSIb3DQEBCwUAA4IBAQDPfjJwYa8annYAEgBOfeYoHYb1ZE8vFD47Ty6ej+b4
6/0ss5bQewFwBw1QebK1yQJtzSD3J5y/qhvb43+yRu+imuiq5Su/b4xVnL5vJ3Dh
xY2ZPIs5wgBFZx9AovfyDdCm61EKupo1NiZDX7/4nh5RBSgACqCgJt2x9HQWkw/0
M29xmJtB8wZBaTFnYLTAlD0qhpSQIW7fZ6xB28Eu+XZMWMB3Sx+pePmXH0GYZG85
TBrzGKHJyCvLBjetjiM54TeKfHeohrkPvjQgDTtjKbwP7+Jqlg1sukhZxILZSIrG
xYezRpbEU9Eo3aPXD0u23nLhOBCma9iHKiDM+CTerHkt
-----END CERTIFICATE-----
Generated at Thu Jan 23 15:58:09 2025 by rpki-client on console.sobornost.net