Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/55zACBEV4ZrkKgA_PfqKETWoChA.roa
File: 55zACBEV4ZrkKgA_PfqKETWoChA.roa (raw, json)
Hash identifier: B0R4BgAeGvCI3HMcrqcW5pltBvObBUfBObcQdCL+Wog=
Subject key identifier: E7:9C:C0:08:11:15:E1:9A:E4:2A:00:3F:3D:FA:8A:11:35:A8:0A:10
Certificate issuer: /CN=f37063a85445019ab845a5b7e54395cdd39927f6
Certificate serial: 019423D73FCB3345BF36725A057C86D10770
Authority key identifier: F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/55zACBEV4ZrkKgA_PfqKETWoChA.roa
Signing time: Wed 01 Jan 2025 21:48:16 +0000
ROA not before: Wed 01 Jan 2025 21:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212476
IP address blocks: 193.3.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:3f:cb:33:45:bf:36:72:5a:05:7c:86:d1:07:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f37063a85445019ab845a5b7e54395cdd39927f6
Validity
Not Before: Jan 1 21:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e79cc0081115e19ae42a003f3dfa8a1135a80a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1c:b1:4f:41:97:e6:30:7a:57:e7:f1:03:84:
12:68:8d:8b:4b:ec:0a:56:e3:f7:90:63:1e:f5:d8:
62:9a:a7:40:a1:4d:42:64:02:3d:56:e6:01:3a:69:
0a:9a:5e:f9:16:b4:ef:66:4a:2d:40:0f:6c:e7:af:
96:30:8c:1c:f7:28:35:55:8b:0e:49:8c:3d:59:33:
2e:30:3b:2b:32:50:b1:4a:85:7e:61:0d:6d:81:84:
ee:5b:cd:21:a0:d9:4a:5a:56:8f:05:72:fd:e5:fc:
51:0e:30:7c:07:17:28:a6:02:6a:ca:f7:78:14:c9:
68:a8:1a:35:c7:e5:53:d5:37:29:8f:17:58:3d:8f:
fe:83:ee:c9:31:0d:b2:97:6a:74:c1:43:fd:7a:ae:
b1:1b:06:05:be:12:4f:ce:77:06:58:41:7f:90:99:
93:3f:77:c1:dd:aa:83:fb:d1:20:f9:6b:ec:4f:c5:
91:15:44:b2:68:28:8c:d5:7c:79:e7:c8:69:2d:18:
06:0e:4c:cb:3e:4d:c0:38:23:e9:0a:d2:82:2e:13:
35:73:cd:45:86:c3:70:b7:4f:9e:5b:4a:06:8d:30:
e2:b9:ee:ca:60:37:1c:18:21:2a:95:aa:36:72:43:
5e:69:3e:b4:cb:40:d0:05:e9:1a:07:5b:29:b5:8e:
d9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9C:C0:08:11:15:E1:9A:E4:2A:00:3F:3D:FA:8A:11:35:A8:0A:10
X509v3 Authority Key Identifier:
keyid:F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/55zACBEV4ZrkKgA_PfqKETWoChA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.31.0/24
Signature Algorithm: sha256WithRSAEncryption
39:bf:a6:98:fe:de:91:c6:50:7a:db:ef:e4:bc:1d:4d:4f:7d:
d8:1e:1f:d6:65:bd:9c:df:11:7d:dc:df:aa:f3:ac:62:ec:71:
58:58:ee:23:59:a3:c3:3e:ba:9e:51:6a:8e:31:26:2b:e9:4d:
ce:e1:a2:bb:ac:2e:5e:b6:27:9c:c4:25:4d:17:02:74:a2:3c:
80:01:f9:87:23:0b:fe:23:00:ab:d1:97:29:73:32:a9:eb:be:
a8:d2:11:69:52:c1:2f:33:4a:e4:3f:d0:85:3a:31:d3:09:c6:
e9:0b:2b:ec:66:4f:fe:15:ac:e9:34:73:f8:5d:d1:3e:15:da:
55:24:3b:4b:22:65:5f:6f:45:2a:ab:97:e1:df:1a:65:b1:8d:
bc:f6:73:52:69:ae:8e:9d:d4:1b:ca:14:c9:1f:aa:db:58:e0:
91:55:7c:ec:6f:93:6d:0f:a7:54:bd:77:22:8e:ae:b2:48:2e:
b3:a7:6a:0b:83:19:a8:9e:7f:44:c9:35:b2:26:06:25:2b:c5:
39:1a:2f:d4:c0:3c:34:40:8d:a9:d2:69:61:fe:3d:ac:b1:5d:
e5:a8:64:90:a8:c7:5c:49:9e:cd:7f:47:5e:c5:24:df:9b:57:
05:b2:c0:8a:4b:fb:4e:e2:fe:8b:49:3a:71:82:bc:02:60:cd:
55:13:39:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1z/LM0W/NnJaBXyG0QdwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNzA2M2E4NTQ0NTAxOWFiODQ1YTViN2U1NDM5NWNkZDM5
OTI3ZjYwHhcNMjUwMTAxMjE0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzljYzAwODExMTVlMTlhZTQyYTAwM2YzZGZhOGExMTM1YTgwYTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hyxT0GX5jB6V+fxA4QSaI2LS+wK
VuP3kGMe9dhimqdAoU1CZAI9VuYBOmkKml75FrTvZkotQA9s56+WMIwc9yg1VYsO
SYw9WTMuMDsrMlCxSoV+YQ1tgYTuW80hoNlKWlaPBXL95fxRDjB8BxcopgJqyvd4
FMloqBo1x+VT1TcpjxdYPY/+g+7JMQ2yl2p0wUP9eq6xGwYFvhJPzncGWEF/kJmT
P3fB3aqD+9Eg+WvsT8WRFUSyaCiM1Xx558hpLRgGDkzLPk3AOCPpCtKCLhM1c81F
hsNwt0+eW0oGjTDiue7KYDccGCEqlao2ckNeaT60y0DQBekaB1sptY7ZlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOecwAgRFeGa5CoAPz36ihE1qAoQMB8GA1UdIwQY
MBaAFPNwY6hURQGauEWlt+VDlc3TmSf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODNCanFGUkZBWnE0UmFXMzVVT1Z6ZE9aSl9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yMjBjZTQtMTFhMy00ZDkyLWE0ODgt
YzM5NDdlNzZiZTc1LzEvNTV6QUNCRVY0WnJrS2dBX1BmcUtFVFdvQ2hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8yMjBjZTQtMTFhMy00ZDkyLWE0ODgtYzM5NDdlNzZiZTc1
LzEvODNCanFGUkZBWnE0UmFXMzVVT1Z6ZE9aSl9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQMfMA0G
CSqGSIb3DQEBCwUAA4IBAQA5v6aY/t6RxlB62+/kvB1NT33YHh/WZb2c3xF93N+q
86xi7HFYWO4jWaPDPrqeUWqOMSYr6U3O4aK7rC5etiecxCVNFwJ0ojyAAfmHIwv+
IwCr0ZcpczKp676o0hFpUsEvM0rkP9CFOjHTCcbpCyvsZk/+FazpNHP4XdE+FdpV
JDtLImVfb0Uqq5fh3xplsY289nNSaa6OndQbyhTJH6rbWOCRVXzsb5NtD6dUvXci
jq6ySC6zp2oLgxmonn9EyTWyJgYlK8U5Gi/UwDw0QI2p0mlh/j2ssV3lqGSQqMdc
SZ7Nf0dexSTfm1cFssCKS/tO4v6LSTpxgrwCYM1VEznU
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:19 2025 by rpki-client on console.sobornost.net