Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/bxyY92T1b4aJfspeGWuPWUl-Kkw.roa
File: bxyY92T1b4aJfspeGWuPWUl-Kkw.roa (raw, json)
Hash identifier: nKzuSfhFZMZ8pqYL4zAcXBecFHY0kOuZwNpuiZWVnMg=
Subject key identifier: 6F:1C:98:F7:64:F5:6F:86:89:7E:CA:5E:19:6B:8F:59:49:7E:2A:4C
Certificate issuer: /CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Certificate serial: 0194228E359F702C39B0A60E998BCD3671E2
Authority key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/bxyY92T1b4aJfspeGWuPWUl-Kkw.roa
Signing time: Wed 01 Jan 2025 15:48:52 +0000
ROA not before: Wed 01 Jan 2025 15:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2852
IP address blocks: 193.84.192.0/19 maxlen: 24
193.84.192.0/20 maxlen: 24
193.84.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:35:9f:70:2c:39:b0:a6:0e:99:8b:cd:36:71:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Validity
Not Before: Jan 1 15:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f1c98f764f56f86897eca5e196b8f59497e2a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:af:c7:11:d0:57:45:be:11:2d:31:c4:1e:
78:5c:52:2d:bd:92:21:dc:7a:95:7d:5e:90:be:0e:
9b:bc:84:3e:38:fe:62:7b:71:e9:88:7c:17:88:54:
86:04:c8:51:47:fe:2e:a3:77:a7:ec:be:dd:d3:1b:
f1:25:36:1d:e7:42:b8:08:87:1e:ae:f0:30:ee:6b:
32:a0:75:4f:83:55:bb:02:49:fc:14:80:dc:89:42:
29:e4:91:da:c3:60:ce:eb:96:f1:20:09:21:0e:ec:
75:bc:79:b0:f3:67:d8:5a:ed:08:21:37:bd:f2:12:
a8:82:5d:a7:cc:3c:50:b6:39:ef:ac:9b:6a:38:c2:
e1:62:e3:5d:f9:03:18:79:60:e9:93:2a:dd:a7:3b:
ae:a1:cc:94:36:16:9f:91:50:8b:d5:37:87:44:43:
55:f9:a6:21:6d:7b:e4:7b:fc:0e:35:95:aa:75:f3:
35:7b:ef:6c:e4:8f:b2:26:c0:2e:02:86:39:74:53:
94:93:b6:f7:6d:90:ad:0a:1b:32:03:68:7b:9c:fc:
db:09:b9:91:a7:08:79:04:58:ad:36:fb:06:f9:52:
8c:9e:d9:fa:a4:73:ea:97:95:df:cf:ce:1e:71:77:
98:23:48:68:95:80:52:79:70:79:62:cc:2a:73:ff:
44:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1C:98:F7:64:F5:6F:86:89:7E:CA:5E:19:6B:8F:59:49:7E:2A:4C
X509v3 Authority Key Identifier:
keyid:00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/bxyY92T1b4aJfspeGWuPWUl-Kkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.192.0/19
Signature Algorithm: sha256WithRSAEncryption
ac:04:4e:b0:b6:db:57:11:ad:0f:fe:df:5c:b2:28:02:3c:72:
fd:7a:5d:6b:5b:c6:4f:43:01:20:23:0d:ad:b7:7e:3b:1a:f6:
c5:5f:7f:2f:41:bc:b6:0d:32:77:4d:1c:d5:84:6d:ec:93:6c:
99:87:e7:ac:ff:51:03:4a:a3:c9:15:6c:9c:3b:7f:df:ae:60:
1a:c5:80:69:0f:43:b8:17:5b:80:19:2c:b1:ce:9c:04:15:86:
0b:30:9a:f0:0f:18:a2:30:06:40:db:a6:68:3f:bd:08:37:0e:
3a:b9:4d:b0:61:c1:ef:42:bf:1c:ae:a0:ba:11:bc:e2:2d:1e:
7d:4f:70:7e:0a:dd:7e:ec:7f:d7:d1:f0:f1:05:49:ee:48:10:
e4:64:d7:20:4d:8b:3c:f9:d8:50:46:1a:08:1b:64:61:fd:93:
17:6e:d9:54:09:ed:7f:c4:ad:26:40:80:c0:db:07:b7:a5:c9:
dd:f9:b7:67:ae:10:67:6d:8b:34:6b:01:f6:48:a2:80:0b:13:
12:21:a4:b1:f1:5e:23:13:fb:19:ac:f6:5b:e7:a1:e0:9c:a7:
fd:f8:e6:8c:5c:f7:4a:01:11:6d:d2:17:ce:df:54:95:8d:1a:
ce:00:b3:49:e8:7f:b3:d8:22:7f:5c:9a:b2:49:53:cd:17:0f:
eb:ea:c2:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijjWfcCw5sKYOmYvNNnHiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwM2EwZDE0YjAzZWEzNDJlZGUzYjJmNDlhZDhjYWEyYmY3
NGUxNzAwHhcNMjUwMTAxMTU0ODUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjFjOThmNzY0ZjU2Zjg2ODk3ZWNhNWUxOTZiOGY1OTQ5N2UyYTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq2vxxHQV0W+ES0xxB54XFItvZIh
3HqVfV6Qvg6bvIQ+OP5ie3HpiHwXiFSGBMhRR/4uo3en7L7d0xvxJTYd50K4CIce
rvAw7msyoHVPg1W7Akn8FIDciUIp5JHaw2DO65bxIAkhDux1vHmw82fYWu0IITe9
8hKogl2nzDxQtjnvrJtqOMLhYuNd+QMYeWDpkyrdpzuuocyUNhafkVCL1TeHRENV
+aYhbXvke/wONZWqdfM1e+9s5I+yJsAuAoY5dFOUk7b3bZCtChsyA2h7nPzbCbmR
pwh5BFitNvsG+VKMntn6pHPql5Xfz84ecXeYI0holYBSeXB5Yswqc/9EawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG8cmPdk9W+GiX7KXhlrj1lJfipMMB8GA1UdIwQY
MBaAFAA6DRSwPqNC7eOy9JrYyqK/dOFwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGIt
MmZkZDFmZDk5NjU3LzEvYnh5WTkyVDFiNGFKZnNwZUdXdVBXVWwtS2t3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGItMmZkZDFmZDk5NjU3
LzEvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwVTAMA0G
CSqGSIb3DQEBCwUAA4IBAQCsBE6wtttXEa0P/t9csigCPHL9el1rW8ZPQwEgIw2t
t347GvbFX38vQby2DTJ3TRzVhG3sk2yZh+es/1EDSqPJFWycO3/frmAaxYBpD0O4
F1uAGSyxzpwEFYYLMJrwDxiiMAZA26ZoP70INw46uU2wYcHvQr8crqC6EbziLR59
T3B+Ct1+7H/X0fDxBUnuSBDkZNcgTYs8+dhQRhoIG2Rh/ZMXbtlUCe1/xK0mQIDA
2we3pcnd+bdnrhBnbYs0awH2SKKACxMSIaSx8V4jE/sZrPZb56HgnKf9+OaMXPdK
ARFt0hfO31SVjRrOALNJ6H+z2CJ/XJqySVPNFw/r6sKC
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net