Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/6XrFWNa1C0R0sDYBaWkEAGDO1jA.roa
File: 6XrFWNa1C0R0sDYBaWkEAGDO1jA.roa (raw, json)
Hash identifier: x/McLjYuN68G+ok93frZNMwAwTarNWM5GuHdXugF2/o=
Subject key identifier: E9:7A:C5:58:D6:B5:0B:44:74:B0:36:01:69:69:04:00:60:CE:D6:30
Certificate issuer: /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Certificate serial: 0195ED9EEADC5DB24B9D00CD8FB750EDE824
Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/6XrFWNa1C0R0sDYBaWkEAGDO1jA.roa
Signing time: Mon 31 Mar 2025 19:12:49 +0000
ROA not before: Mon 31 Mar 2025 19:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3170
IP address blocks: 193.192.50.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ed:9e:ea:dc:5d:b2:4b:9d:00:cd:8f:b7:50:ed:e8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Validity
Not Before: Mar 31 19:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e97ac558d6b50b4474b036016969040060ced630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2b:9f:89:38:55:44:0c:0b:0f:a1:6f:e1:b3:
25:dc:03:14:e8:ba:77:90:5e:2e:59:f1:c1:6d:61:
5c:72:94:aa:2f:c0:7a:25:87:b9:0a:56:6a:e5:90:
7e:8d:88:a9:18:84:46:1c:70:54:39:9b:c4:71:01:
29:c6:bb:c8:c4:f3:7f:c3:b2:8a:8b:8c:20:4b:8c:
db:59:e1:09:aa:3b:38:90:69:e6:34:75:13:40:77:
08:b3:80:3c:90:38:b8:4f:75:15:16:8a:80:e3:4b:
25:13:19:e4:0d:ad:f9:e4:66:8e:d5:83:23:04:5a:
1f:1e:46:ff:8c:b9:dd:a7:10:6d:19:a7:7c:02:d3:
a0:b8:6f:98:10:7f:34:80:03:b7:6c:51:87:54:a5:
2f:01:b2:27:6f:9d:26:a8:ce:8f:e1:78:33:75:42:
14:26:5f:db:f4:62:4d:4a:0e:b5:b5:be:65:e1:b7:
95:58:6c:f8:77:c6:ed:e5:a0:bc:f0:b9:a4:b1:45:
9e:e2:c7:f3:a4:a9:0f:bf:3a:a4:4e:eb:a0:e7:07:
2d:ca:7c:4b:f3:47:05:38:33:72:db:f0:f6:76:4f:
f2:5e:62:8c:45:84:4b:36:0e:ff:24:39:8b:2a:f2:
94:ef:dc:31:21:31:cd:b8:1d:8f:26:69:d7:17:25:
42:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7A:C5:58:D6:B5:0B:44:74:B0:36:01:69:69:04:00:60:CE:D6:30
X509v3 Authority Key Identifier:
keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/6XrFWNa1C0R0sDYBaWkEAGDO1jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.50.0/23
Signature Algorithm: sha256WithRSAEncryption
08:53:a3:f3:3b:8e:4d:c2:74:ab:6c:90:8e:0d:a0:d0:88:70:
4e:57:dc:b0:c0:b7:23:12:96:1c:8a:06:23:46:e5:65:62:19:
e6:e1:d1:f5:a3:4a:02:a7:83:b6:ed:d4:40:57:60:6d:20:18:
52:7d:14:33:0b:d2:e6:c5:0e:5e:00:03:b3:1d:45:b8:a1:7e:
6d:27:43:91:ef:74:76:6d:28:bf:4c:37:55:2d:e9:b9:38:3c:
87:c6:71:f9:8e:20:5a:01:f2:03:d1:21:b7:7e:9a:83:ba:6f:
c9:8f:42:35:3a:c3:09:c5:21:c4:42:e5:4f:9d:f0:07:c7:e0:
2d:f1:b5:1c:2b:28:e5:47:83:d4:83:34:10:f5:94:23:c6:9a:
cf:31:a7:55:63:26:e2:a5:cc:36:e2:47:2b:47:0c:b1:21:40:
22:8f:80:d5:96:e3:6a:37:41:6e:20:55:09:3f:32:cf:3a:11:
65:85:52:2b:b9:b3:90:aa:32:6c:00:f2:a3:70:3b:7c:74:55:
1d:19:9a:1a:63:ab:1e:51:78:23:43:e7:1f:65:5f:c5:1b:ea:
97:56:76:c7:bd:5d:2b:e0:ac:c5:74:5c:8f:98:24:35:d0:ce:
f8:96:9e:7d:be:f4:b1:3e:fb:01:54:53:6e:41:4b:59:6e:37:
85:8a:5f:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXtnurcXbJLnQDNj7dQ7egkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNDY2OTIxNmEyMDc4Y2IwMjQyMzFmNDYzMmVhYjRkYTdl
ZTRiYzEwHhcNMjUwMzMxMTkxMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTdhYzU1OGQ2YjUwYjQ0NzRiMDM2MDE2OTY5MDQwMDYwY2VkNjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSufiThVRAwLD6Fv4bMl3AMU6Lp3
kF4uWfHBbWFccpSqL8B6JYe5ClZq5ZB+jYipGIRGHHBUOZvEcQEpxrvIxPN/w7KK
i4wgS4zbWeEJqjs4kGnmNHUTQHcIs4A8kDi4T3UVFoqA40slExnkDa355GaO1YMj
BFofHkb/jLndpxBtGad8AtOguG+YEH80gAO3bFGHVKUvAbInb50mqM6P4XgzdUIU
Jl/b9GJNSg61tb5l4beVWGz4d8bt5aC88LmksUWe4sfzpKkPvzqkTuug5wctynxL
80cFODNy2/D2dk/yXmKMRYRLNg7/JDmLKvKU79wxITHNuB2PJmnXFyVCdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOl6xVjWtQtEdLA2AWlpBABgztYwMB8GA1UdIwQY
MBaAFI9GaSFqIHjLAkIx9GMuq02n7kvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kYTQ4ZTItZmY2My00YmNkLTgyYTIt
ZDdiOGViNDYwOGUyLzEvNlhyRldOYTFDMFIwc0RZQmFXa0VBR0RPMWpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9kYTQ4ZTItZmY2My00YmNkLTgyYTItZDdiOGViNDYwOGUy
LzEvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwcAyMA0G
CSqGSIb3DQEBCwUAA4IBAQAIU6PzO45NwnSrbJCODaDQiHBOV9ywwLcjEpYcigYj
RuVlYhnm4dH1o0oCp4O27dRAV2BtIBhSfRQzC9LmxQ5eAAOzHUW4oX5tJ0OR73R2
bSi/TDdVLem5ODyHxnH5jiBaAfID0SG3fpqDum/Jj0I1OsMJxSHEQuVPnfAHx+At
8bUcKyjlR4PUgzQQ9ZQjxprPMadVYybipcw24kcrRwyxIUAij4DVluNqN0FuIFUJ
PzLPOhFlhVIrubOQqjJsAPKjcDt8dFUdGZoaY6seUXgjQ+cfZV/FG+qXVnbHvV0r
4KzFdFyPmCQ10M74lp59vvSxPvsBVFNuQUtZbjeFil92
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:55 2025 by rpki-client on console.sobornost.net