Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/rGYm_uYpmZhwpYcdJzQVjEwEpj8.roa
File: rGYm_uYpmZhwpYcdJzQVjEwEpj8.roa (raw, json)
Hash identifier: jRbiNS0Ka01gqXF1TeFMzqMm+Pa1Z/+jEZGkmARhwF0=
Subject key identifier: AC:66:26:FE:E6:29:99:98:70:A5:87:1D:27:34:15:8C:4C:04:A6:3F
Certificate issuer: /CN=2abb5cd85f525302fd04ff2b6721862b204064d4
Certificate serial: 019424B2BBE65B7B295E5F7F8910CC35B48B
Authority key identifier: 2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/rGYm_uYpmZhwpYcdJzQVjEwEpj8.roa
Signing time: Thu 02 Jan 2025 01:48:00 +0000
ROA not before: Thu 02 Jan 2025 01:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13060
IP address blocks: 194.153.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:bb:e6:5b:7b:29:5e:5f:7f:89:10:cc:35:b4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abb5cd85f525302fd04ff2b6721862b204064d4
Validity
Not Before: Jan 2 01:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac6626fee629999870a5871d2734158c4c04a63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:62:82:b8:6e:2d:18:c6:64:90:88:60:d7:d6:
02:ad:a6:7e:ad:b4:c9:d3:fd:b7:18:e5:b0:eb:95:
74:78:51:95:ff:a2:5a:83:87:1e:69:5b:40:4d:3a:
8f:fd:2d:cf:3d:e2:94:19:63:e5:5f:f5:00:92:5e:
56:75:96:b1:4b:28:bf:a8:a2:2d:88:ae:a9:34:af:
19:62:c7:fb:87:ff:9c:1a:0a:0d:bf:01:27:be:59:
2f:f8:fa:6c:5d:74:6d:21:66:74:4e:d4:5c:5b:cb:
2e:2f:16:1a:ba:95:97:c7:ed:ee:e5:ac:86:cf:60:
74:05:2a:c2:a9:c1:9d:d9:c7:3d:a0:81:03:a8:e9:
7a:5b:cd:b1:35:44:3e:05:0d:80:d4:b7:9a:58:a1:
8a:64:29:54:c3:74:e5:62:33:40:9c:be:1a:81:21:
7b:30:ec:d1:73:96:86:f5:83:77:e2:1d:65:69:01:
e9:49:28:7f:0a:36:8f:ea:a9:75:59:e7:14:15:d1:
0d:66:cb:89:35:24:86:0e:27:68:8b:8e:86:42:fb:
30:39:71:5c:4e:a5:00:f2:38:17:c2:b1:f8:c0:f7:
49:f7:c1:8a:d9:6d:e5:e0:4d:6c:db:33:e8:54:23:
e3:b5:94:0d:2e:29:2e:96:78:e5:54:4f:71:9b:1a:
b7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:66:26:FE:E6:29:99:98:70:A5:87:1D:27:34:15:8C:4C:04:A6:3F
X509v3 Authority Key Identifier:
keyid:2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/rGYm_uYpmZhwpYcdJzQVjEwEpj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.131.0/24
Signature Algorithm: sha256WithRSAEncryption
11:01:10:75:ea:aa:19:62:ff:75:a8:46:3c:f1:14:9e:61:8c:
74:a6:5c:2a:b7:0f:b0:54:f4:73:02:da:dd:64:c0:a1:fe:d1:
e6:8d:81:86:56:74:bf:2b:31:27:3b:dc:be:21:58:c3:0b:c3:
11:a4:9a:91:57:8c:36:4b:0d:ec:89:4d:7a:d2:1c:30:98:cd:
af:8e:e5:37:1b:d5:bf:83:9d:25:01:1d:21:10:d0:9c:07:d8:
04:7c:63:dc:1e:56:ca:c8:60:2f:c2:83:c0:18:d6:42:57:a8:
a7:df:0b:fa:1c:1d:18:1d:0f:cc:97:a9:ee:bd:61:82:b4:bc:
58:5d:92:a1:24:7b:35:33:f8:0d:36:07:ed:1f:c6:4f:dc:90:
24:43:2f:0b:1b:1e:9f:25:5d:bd:09:9b:fe:8d:61:45:1c:e8:
bc:5e:7d:03:83:22:4d:fe:b6:32:39:b3:9f:7e:3f:2b:ef:a9:
0a:e7:3e:59:12:ff:78:bc:f2:f9:3a:35:db:e2:3b:6f:0e:44:
d4:16:b1:3d:50:f8:b4:db:6f:0b:40:51:8d:ed:ad:8b:f1:86:
f3:8c:a1:9c:57:84:88:c5:03:13:75:40:45:f3:1c:51:54:c5:
59:3f:56:ae:ba:b1:43:2e:24:37:11:8b:08:6c:aa:8f:49:d6:
c2:1e:4b:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQksrvmW3spXl9/iRDMNbSLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYmI1Y2Q4NWY1MjUzMDJmZDA0ZmYyYjY3MjE4NjJiMjA0
MDY0ZDQwHhcNMjUwMTAyMDE0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzY2MjZmZWU2Mjk5OTk4NzBhNTg3MWQyNzM0MTU4YzRjMDRhNjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WKCuG4tGMZkkIhg19YCraZ+rbTJ
0/23GOWw65V0eFGV/6Jag4ceaVtATTqP/S3PPeKUGWPlX/UAkl5WdZaxSyi/qKIt
iK6pNK8ZYsf7h/+cGgoNvwEnvlkv+PpsXXRtIWZ0TtRcW8suLxYaupWXx+3u5ayG
z2B0BSrCqcGd2cc9oIEDqOl6W82xNUQ+BQ2A1LeaWKGKZClUw3TlYjNAnL4agSF7
MOzRc5aG9YN34h1laQHpSSh/CjaP6ql1WecUFdENZsuJNSSGDidoi46GQvswOXFc
TqUA8jgXwrH4wPdJ98GK2W3l4E1s2zPoVCPjtZQNLikulnjlVE9xmxq3qQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKxmJv7mKZmYcKWHHSc0FYxMBKY/MB8GA1UdIwQY
MBaAFCq7XNhfUlMC/QT/K2chhisgQGTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3J0YzJGOVNVd0w5QlA4clp5R0dLeUJBWk5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi82OTA0ODItOWRlYy00OWYyLWFiNTUt
NzIxZDI1MmYzNTI2LzEvckdZbV91WXBtWmh3cFljZEp6UVZqRXdFcGo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi82OTA0ODItOWRlYy00OWYyLWFiNTUtNzIxZDI1MmYzNTI2
LzEvS3J0YzJGOVNVd0w5QlA4clp5R0dLeUJBWk5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpmDMA0G
CSqGSIb3DQEBCwUAA4IBAQARARB16qoZYv91qEY88RSeYYx0plwqtw+wVPRzAtrd
ZMCh/tHmjYGGVnS/KzEnO9y+IVjDC8MRpJqRV4w2Sw3siU160hwwmM2vjuU3G9W/
g50lAR0hENCcB9gEfGPcHlbKyGAvwoPAGNZCV6in3wv6HB0YHQ/Ml6nuvWGCtLxY
XZKhJHs1M/gNNgftH8ZP3JAkQy8LGx6fJV29CZv+jWFFHOi8Xn0DgyJN/rYyObOf
fj8r76kK5z5ZEv94vPL5OjXb4jtvDkTUFrE9UPi0228LQFGN7a2L8YbzjKGcV4SI
xQMTdUBF8xxRVMVZP1auurFDLiQ3EYsIbKqPSdbCHkuU
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:55 2025 by rpki-client on console.sobornost.net