Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/1asdNtObnnXmKrLK3XCtGiGYlMc.roa
File: 1asdNtObnnXmKrLK3XCtGiGYlMc.roa (raw, json)
Hash identifier: 5i4KQCBHhyzn3roOQCktbPCcfOhJhx8zB0vwxPlOCAA=
Subject key identifier: D5:AB:1D:36:D3:9B:9E:75:E6:2A:B2:CA:DD:70:AD:1A:21:98:94:C7
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 01949F811EB1A7E7AC738DD503E48242F212
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/1asdNtObnnXmKrLK3XCtGiGYlMc.roa
Signing time: Sat 25 Jan 2025 22:07:06 +0000
ROA not before: Sat 25 Jan 2025 22:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200404
IP address blocks: 194.37.92.0/24 maxlen: 24
194.37.93.0/24 maxlen: 24
194.37.94.0/24 maxlen: 24
194.37.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9f:81:1e:b1:a7:e7:ac:73:8d:d5:03:e4:82:42:f2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Jan 25 22:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5ab1d36d39b9e75e62ab2cadd70ad1a219894c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:61:99:ce:c6:2e:c4:70:9c:2e:9d:16:79:9f:
e7:2d:d8:52:5c:5f:cd:63:a2:93:d6:6b:a6:3b:3d:
0c:6a:87:e1:4d:d4:f1:1a:25:e0:20:60:86:2b:4b:
54:d3:ff:ca:27:e0:6a:fa:63:24:a9:ec:e2:6a:be:
83:4c:32:66:d4:97:d6:fa:18:73:a3:1c:6b:b1:4c:
e8:ba:3d:b6:e5:31:ea:09:83:68:dc:d3:1d:1b:96:
99:f7:6b:88:00:6f:09:38:22:fb:78:b9:b2:55:7a:
d0:91:3f:bb:2e:3d:c1:16:64:51:84:45:7e:5b:86:
61:88:f0:e2:c7:e0:92:6d:00:7d:fe:63:2d:2b:6f:
77:3b:aa:9b:af:e1:d7:79:3c:0f:18:27:32:1b:6c:
32:1f:5b:3d:85:8e:73:31:41:37:04:e8:3f:61:f4:
f2:a9:50:b3:35:0f:c4:9c:43:fe:78:8b:49:6b:6d:
a5:f3:ee:8e:59:fe:96:dc:26:b5:bb:52:b2:4f:ca:
21:30:ef:d8:c0:41:f7:e7:f3:54:2d:3f:2e:1c:0a:
3d:0d:26:d5:39:49:0b:dc:74:8d:10:6a:30:22:fd:
40:70:73:61:ff:df:f3:a3:3d:ff:8c:bc:3c:05:22:
5b:78:db:e6:4b:e6:e6:0b:86:09:04:48:05:fe:0d:
b7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AB:1D:36:D3:9B:9E:75:E6:2A:B2:CA:DD:70:AD:1A:21:98:94:C7
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/1asdNtObnnXmKrLK3XCtGiGYlMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.92.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:27:60:90:0e:e9:92:b6:24:38:21:b2:04:0a:54:87:6d:56:
4b:b7:5e:e1:cb:ac:6f:71:99:a2:b7:9f:6e:db:a8:18:36:3e:
b8:9e:e9:a4:3f:6a:06:ed:ab:d8:cd:37:5f:0f:77:52:d5:9f:
28:02:58:ca:53:29:38:23:1d:6d:31:ca:39:f0:00:de:56:94:
e0:48:c5:d3:9e:6d:23:20:4f:12:cd:d7:91:0b:85:fd:11:ee:
a2:08:30:f6:06:44:98:22:3c:14:b0:98:c3:22:98:5d:e5:06:
fc:16:bc:7e:de:93:38:71:39:4a:af:0e:28:5c:a5:4b:43:57:
95:30:e6:4d:1a:5a:b6:5c:d8:fa:63:86:62:0b:a8:63:b4:7c:
f6:1a:c4:53:35:ad:78:6f:90:49:f9:66:e6:1d:05:35:03:4d:
47:08:0a:dc:8f:8f:5b:50:de:7d:dd:2d:b8:53:20:ce:e9:c7:
3e:87:a3:35:48:66:49:32:a6:ed:9b:5e:83:79:7f:57:f8:83:
4b:22:e2:2d:cb:b7:b6:52:f9:32:df:44:a2:58:c7:b2:bf:8f:
45:58:a4:bc:7f:24:81:01:9f:ed:0a:f6:3b:98:29:3a:1f:f1:
71:e3:85:e9:a2:e3:82:cf:5a:c2:37:c4:02:32:03:a3:bc:d6:
78:07:a6:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSfgR6xp+esc43VA+SCQvISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTQyZmJhMGMxN2I0MzkxZTMyOTZjNDM0YjVmZmYyM2E4
MjliNmUwHhcNMjUwMTI1MjIwNzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWFiMWQzNmQzOWI5ZTc1ZTYyYWIyY2FkZDcwYWQxYTIxOTg5NGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GGZzsYuxHCcLp0WeZ/nLdhSXF/N
Y6KT1mumOz0MaofhTdTxGiXgIGCGK0tU0//KJ+Bq+mMkqeziar6DTDJm1JfW+hhz
oxxrsUzouj225THqCYNo3NMdG5aZ92uIAG8JOCL7eLmyVXrQkT+7Lj3BFmRRhEV+
W4ZhiPDix+CSbQB9/mMtK293O6qbr+HXeTwPGCcyG2wyH1s9hY5zMUE3BOg/YfTy
qVCzNQ/EnEP+eItJa22l8+6OWf6W3Ca1u1KyT8ohMO/YwEH35/NULT8uHAo9DSbV
OUkL3HSNEGowIv1AcHNh/9/zoz3/jLw8BSJbeNvmS+bmC4YJBEgF/g23yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNWrHTbTm5515iqyyt1wrRohmJTHMB8GA1UdIwQY
MBaAFFBUL7oMF7Q5HjKWxDS1//I6gptuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZRdnVnd1h0RGtlTXBiRU5MWF84anFDbTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jYjJiZGQtMzI5MS00MGFmLThhODgt
NWU5Nzg3YjZhZWFhLzEvMWFzZE50T2JublhtS3JMSzNYQ3RHaUdZbE1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jYjJiZGQtMzI5MS00MGFmLThhODgtNWU5Nzg3YjZhZWFh
LzEvVUZRdnVnd1h0RGtlTXBiRU5MWF84anFDbTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwiVcMA0G
CSqGSIb3DQEBCwUAA4IBAQCMJ2CQDumStiQ4IbIEClSHbVZLt17hy6xvcZmit59u
26gYNj64numkP2oG7avYzTdfD3dS1Z8oAljKUyk4Ix1tMco58ADeVpTgSMXTnm0j
IE8SzdeRC4X9Ee6iCDD2BkSYIjwUsJjDIphd5Qb8Frx+3pM4cTlKrw4oXKVLQ1eV
MOZNGlq2XNj6Y4ZiC6hjtHz2GsRTNa14b5BJ+WbmHQU1A01HCArcj49bUN593S24
UyDO6cc+h6M1SGZJMqbtm16DeX9X+INLIuIty7e2Uvky30SiWMeyv49FWKS8fySB
AZ/tCvY7mCk6H/Fx44XpouOCz1rCN8QCMgOjvNZ4B6ZY
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:54:34 2025 by rpki-client on console.sobornost.net