Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/qkuFYPmd6yVSJeAUkr6iVxoW6uI.roa
File: qkuFYPmd6yVSJeAUkr6iVxoW6uI.roa (raw, json)
Hash identifier: 6R5f5Psj0EmX1v5BkourUurygRB3rOnwEBUagdishKo=
Subject key identifier: AA:4B:85:60:F9:9D:EB:25:52:25:E0:14:92:BE:A2:57:1A:16:EA:E2
Certificate issuer: /CN=a590ef23b456c9db20d30742932b017fc5724e56
Certificate serial: 0194221FB94E5D8A04F0448CD18D9392DDC7
Authority key identifier: A5:90:EF:23:B4:56:C9:DB:20:D3:07:42:93:2B:01:7F:C5:72:4E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/qkuFYPmd6yVSJeAUkr6iVxoW6uI.roa
Signing time: Wed 01 Jan 2025 13:48:11 +0000
ROA not before: Wed 01 Jan 2025 13:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43804
IP address blocks: 193.200.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b9:4e:5d:8a:04:f0:44:8c:d1:8d:93:92:dd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a590ef23b456c9db20d30742932b017fc5724e56
Validity
Not Before: Jan 1 13:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa4b8560f99deb255225e01492bea2571a16eae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:1f:f3:ca:aa:f2:0e:9b:d9:a4:d4:9e:cc:
19:86:cd:fc:b6:d1:18:6c:f5:93:b9:54:57:a8:04:
c7:9b:20:d2:f9:66:ef:28:bc:1a:95:e5:8e:a0:75:
2d:3f:58:a9:9e:2a:37:72:63:59:1e:77:13:a6:83:
72:b1:f4:94:a0:c8:15:75:a4:3d:14:20:81:2c:9b:
11:3c:61:44:7a:4a:4d:b0:f6:22:3c:41:af:a5:49:
17:3e:1b:81:a9:42:12:af:89:7b:71:31:20:b4:e4:
72:da:67:78:ce:4b:cb:81:7a:96:a7:3c:1c:51:45:
6e:77:02:e6:11:76:81:58:02:d2:5e:52:39:ad:06:
de:59:95:59:4e:37:23:5b:61:54:d5:eb:59:1c:ee:
5c:39:44:61:b0:9c:0c:54:e3:55:b1:e1:be:7a:cf:
da:a5:eb:0f:ae:96:69:f8:09:7a:2e:2f:aa:ac:3b:
35:59:cb:aa:2f:b8:a5:ce:bd:29:8b:26:52:8d:99:
16:ff:45:88:3f:3e:4d:8c:92:29:f9:73:4c:14:52:
dc:f6:ec:6b:99:4d:81:9f:73:b8:a5:60:91:06:51:
24:da:eb:c0:7b:6e:39:ef:5a:b7:56:02:db:67:1e:
56:b5:19:9e:ff:fc:66:6f:59:63:50:c6:bd:c7:83:
e7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4B:85:60:F9:9D:EB:25:52:25:E0:14:92:BE:A2:57:1A:16:EA:E2
X509v3 Authority Key Identifier:
keyid:A5:90:EF:23:B4:56:C9:DB:20:D3:07:42:93:2B:01:7F:C5:72:4E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/qkuFYPmd6yVSJeAUkr6iVxoW6uI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.203.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:c4:d7:37:f0:b1:05:18:65:1c:9b:9c:a5:9f:c8:7b:2b:62:
4a:6b:cb:35:70:d5:c2:c0:8a:26:01:14:53:29:dc:e3:b3:4f:
e9:38:07:72:43:0a:9c:e4:1c:ca:2c:64:17:b0:a7:74:02:81:
8c:30:c2:81:fd:86:d8:6f:6e:ba:24:02:c8:75:91:eb:76:dd:
18:54:07:22:25:d0:60:79:61:d8:8d:10:e1:2f:61:d2:95:2a:
67:d8:2f:8b:ab:ab:10:cc:60:3f:46:de:bb:6a:29:01:30:6d:
be:82:15:cd:dd:49:d7:3c:8a:1e:94:c4:df:96:8b:48:52:6d:
51:62:8e:33:a1:a4:5d:e5:eb:ab:71:37:8d:ef:57:5c:93:5e:
a4:da:45:8c:72:14:04:73:e5:65:88:a0:61:3e:ea:2a:2d:aa:
fa:d0:ea:be:db:49:a4:ee:03:6a:5b:3a:92:3e:fc:f3:16:8f:
d2:07:56:ce:ab:b5:4e:6b:7b:cc:23:b3:1a:71:0c:3c:9f:2f:
46:62:7b:6f:1d:07:6f:c7:4c:c3:90:26:6a:e6:f7:72:6a:30:
95:20:2d:77:38:9b:7c:e4:e5:54:40:f1:23:7c:26:d8:66:d9:
dc:97:18:40:e3:11:cf:6a:17:8d:51:d1:17:da:a9:b6:35:cd:
5b:a9:ed:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH7lOXYoE8ESM0Y2Tkt3HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OTBlZjIzYjQ1NmM5ZGIyMGQzMDc0MjkzMmIwMTdmYzU3
MjRlNTYwHhcNMjUwMTAxMTM0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTRiODU2MGY5OWRlYjI1NTIyNWUwMTQ5MmJlYTI1NzFhMTZlYWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB4f88qq8g6b2aTUnswZhs38ttEY
bPWTuVRXqATHmyDS+WbvKLwaleWOoHUtP1ipnio3cmNZHncTpoNysfSUoMgVdaQ9
FCCBLJsRPGFEekpNsPYiPEGvpUkXPhuBqUISr4l7cTEgtORy2md4zkvLgXqWpzwc
UUVudwLmEXaBWALSXlI5rQbeWZVZTjcjW2FU1etZHO5cOURhsJwMVONVseG+es/a
pesPrpZp+Al6Li+qrDs1WcuqL7ilzr0piyZSjZkW/0WIPz5NjJIp+XNMFFLc9uxr
mU2Bn3O4pWCRBlEk2uvAe24571q3VgLbZx5WtRme//xmb1ljUMa9x4PnYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKpLhWD5neslUiXgFJK+olcaFuriMB8GA1UdIwQY
MBaAFKWQ7yO0VsnbINMHQpMrAX/Fck5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFpEdkk3Uld5ZHNnMHdkQ2t5c0JmOFZ5VGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zMTg1YzQtZDcyNC00MzVkLTgyNzct
MTUyZDIwNGViZmEzLzEvcWt1RllQbWQ2eVZTSmVBVWtyNmlWeG9XNnVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zMTg1YzQtZDcyNC00MzVkLTgyNzctMTUyZDIwNGViZmEz
LzEvcFpEdkk3Uld5ZHNnMHdkQ2t5c0JmOFZ5VGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcjLMA0G
CSqGSIb3DQEBCwUAA4IBAQA9xNc38LEFGGUcm5yln8h7K2JKa8s1cNXCwIomARRT
Kdzjs0/pOAdyQwqc5BzKLGQXsKd0AoGMMMKB/YbYb266JALIdZHrdt0YVAciJdBg
eWHYjRDhL2HSlSpn2C+Lq6sQzGA/Rt67aikBMG2+ghXN3UnXPIoelMTflotIUm1R
Yo4zoaRd5eurcTeN71dck16k2kWMchQEc+VliKBhPuoqLar60Oq+20mk7gNqWzqS
PvzzFo/SB1bOq7VOa3vMI7MacQw8ny9GYntvHQdvx0zDkCZq5vdyajCVIC13OJt8
5OVUQPEjfCbYZtnclxhA4xHPaheNUdEX2qm2Nc1bqe31
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:56 2025 by rpki-client on console.sobornost.net