Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/cPSt1cBK1yUkGNEnPd-jB0H0f98.roa
File: cPSt1cBK1yUkGNEnPd-jB0H0f98.roa (raw, json)
Hash identifier: 6XTiW18fxhFDL+0aNweHaTDamcOXmMJdNCPIYbjuHV8=
Subject key identifier: 70:F4:AD:D5:C0:4A:D7:25:24:18:D1:27:3D:DF:A3:07:41:F4:7F:DF
Certificate issuer: /CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Certificate serial: 0194228E39936694F08B5F2D0AE478274D5F
Authority key identifier: F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/cPSt1cBK1yUkGNEnPd-jB0H0f98.roa
Signing time: Wed 01 Jan 2025 15:48:53 +0000
ROA not before: Wed 01 Jan 2025 15:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21437
IP address blocks: 193.104.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:39:93:66:94:f0:8b:5f:2d:0a:e4:78:27:4d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Validity
Not Before: Jan 1 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70f4add5c04ad7252418d1273ddfa30741f47fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:43:ad:d0:cc:29:f4:d3:aa:e2:03:31:c0:
8f:b7:a9:03:fc:5e:e8:eb:db:19:e8:21:0b:13:22:
01:fe:08:19:0b:17:ae:54:c5:b6:f7:99:9a:c0:74:
f4:54:7d:53:e2:ce:9f:11:2a:2f:45:db:be:5e:3c:
c6:32:8a:7b:58:8c:11:09:42:c9:ce:c8:aa:8a:c9:
53:35:1f:d1:4f:c7:b8:83:42:f1:33:01:14:a0:e7:
cd:f1:7d:50:0c:c4:b5:aa:d0:e9:9d:9d:0e:b2:6f:
3d:3b:47:0d:8a:3d:0c:00:e0:79:21:45:97:ab:b5:
a8:62:e1:a1:94:67:3f:b6:fc:b5:95:dd:17:d4:0a:
37:c0:7c:24:6f:e5:9d:75:7d:33:c0:4e:1b:bd:df:
f0:f9:00:92:14:c1:a1:5e:9a:78:4a:4e:c2:69:b2:
e1:5b:a0:44:5d:52:a8:88:55:7b:d0:67:22:58:30:
a7:6a:36:c8:3f:32:81:0f:cb:c7:39:61:fa:21:1b:
92:c5:94:71:3b:3d:07:57:62:62:57:c2:24:f6:64:
bb:b4:c1:8f:63:e8:e4:c9:19:3a:11:dc:dc:33:7e:
69:68:d1:bd:70:63:2e:d2:1d:1d:b2:ed:eb:0c:78:
bf:e5:ee:1d:d3:b0:10:7f:0f:49:8b:eb:52:02:b6:
fb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F4:AD:D5:C0:4A:D7:25:24:18:D1:27:3D:DF:A3:07:41:F4:7F:DF
X509v3 Authority Key Identifier:
keyid:F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/cPSt1cBK1yUkGNEnPd-jB0H0f98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.133.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:f9:a5:3f:ae:f9:8c:63:3f:8f:57:ec:c9:79:27:5f:21:08:
f8:42:7e:9d:95:02:1b:d8:7b:e4:74:bd:86:d8:76:1a:ea:ea:
02:ce:c4:95:94:f4:03:c0:07:1f:87:d5:e0:1c:52:2a:70:76:
3b:b0:ce:f1:d5:5c:40:48:63:c9:3c:38:e2:b8:85:96:24:eb:
8b:51:1c:4f:5a:3c:e9:73:d0:c3:b0:be:c8:8e:03:31:db:bd:
2d:f7:31:85:d9:27:2a:7b:c5:43:8a:3a:94:08:f1:f0:49:5a:
2a:8e:f5:7b:90:f7:93:fc:23:34:bf:81:11:99:15:83:a2:0f:
b6:31:21:aa:72:86:31:41:7f:13:94:4a:61:6e:b9:5e:a2:0b:
3f:66:19:f6:99:43:94:f8:de:5a:e2:1a:d3:10:3f:9a:eb:f1:
0a:99:3e:f0:8f:97:93:d6:78:3b:9c:74:e5:3f:6c:ba:96:e2:
a6:43:77:28:d5:7c:09:f0:a1:75:de:e7:ef:0c:a1:89:3e:51:
4a:98:77:4a:53:04:a4:0e:18:22:99:34:b9:94:15:e4:bf:fd:
62:b4:95:b9:a3:f7:6a:d9:b2:4e:b3:75:5e:e9:84:92:2e:36:
ef:34:b0:66:67:0e:55:7c:0c:45:4f:ed:8d:a8:9a:64:13:a8:
b7:dd:51:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijjmTZpTwi18tCuR4J01fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYmE5MGM3MWViNGNiMDE2OWM5NDg0M2U1YzcyZmQ3Nzc1
MDE5MDYwHhcNMjUwMTAxMTU0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGY0YWRkNWMwNGFkNzI1MjQxOGQxMjczZGRmYTMwNzQxZjQ3ZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPFDrdDMKfTTquIDMcCPt6kD/F7o
69sZ6CELEyIB/ggZCxeuVMW295mawHT0VH1T4s6fESovRdu+XjzGMop7WIwRCULJ
zsiqislTNR/RT8e4g0LxMwEUoOfN8X1QDMS1qtDpnZ0Osm89O0cNij0MAOB5IUWX
q7WoYuGhlGc/tvy1ld0X1Ao3wHwkb+WddX0zwE4bvd/w+QCSFMGhXpp4Sk7CabLh
W6BEXVKoiFV70GciWDCnajbIPzKBD8vHOWH6IRuSxZRxOz0HV2JiV8Ik9mS7tMGP
Y+jkyRk6EdzcM35paNG9cGMu0h0dsu3rDHi/5e4d07AQfw9Ji+tSArb7kQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHD0rdXAStclJBjRJz3fowdB9H/fMB8GA1UdIwQY
MBaAFPO6kMcetMsBaclIQ+XHL9d3UBkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdxUXh4NjB5d0ZweVVoRDVjY3YxM2RRR1FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hYmNjMDctOWE2MC00OWY2LWExZWYt
OGQ1MjkwMmFjODMwLzEvY1BTdDFjQksxeVVrR05FblBkLWpCMEgwZjk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hYmNjMDctOWE2MC00OWY2LWExZWYtOGQ1MjkwMmFjODMw
LzEvODdxUXh4NjB5d0ZweVVoRDVjY3YxM2RRR1FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWiFMA0G
CSqGSIb3DQEBCwUAA4IBAQBe+aU/rvmMYz+PV+zJeSdfIQj4Qn6dlQIb2HvkdL2G
2HYa6uoCzsSVlPQDwAcfh9XgHFIqcHY7sM7x1VxASGPJPDjiuIWWJOuLURxPWjzp
c9DDsL7IjgMx270t9zGF2Scqe8VDijqUCPHwSVoqjvV7kPeT/CM0v4ERmRWDog+2
MSGqcoYxQX8TlEphbrleogs/Zhn2mUOU+N5a4hrTED+a6/EKmT7wj5eT1ng7nHTl
P2y6luKmQ3co1XwJ8KF13ufvDKGJPlFKmHdKUwSkDhgimTS5lBXkv/1itJW5o/dq
2bJOs3Ve6YSSLjbvNLBmZw5VfAxFT+2NqJpkE6i33VFq
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net