Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/ish4NG6w0suFxadmLrSJLkxjTIQ.roa
File: ish4NG6w0suFxadmLrSJLkxjTIQ.roa (raw, json)
Hash identifier: SxPMOYIhwaAgOQuSwCZyhiBxyzhniVTSwZchO8Jy+js=
Subject key identifier: 8A:C8:78:34:6E:B0:D2:CB:85:C5:A7:66:2E:B4:89:2E:4C:63:4C:84
Certificate issuer: /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial: 0195F123CC929D579548A41F2E92662179BC
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/ish4NG6w0suFxadmLrSJLkxjTIQ.roa
Signing time: Tue 01 Apr 2025 11:36:49 +0000
ROA not before: Tue 01 Apr 2025 11:36:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51088
IP address blocks: 193.5.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:23:cc:92:9d:57:95:48:a4:1f:2e:92:66:21:79:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Validity
Not Before: Apr 1 11:36:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ac878346eb0d2cb85c5a7662eb4892e4c634c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:f3:75:bd:a1:22:7e:af:5a:5c:cb:10:aa:
23:2d:e2:1b:65:c8:e3:16:23:9f:9f:a5:11:64:c5:
35:a8:57:29:7f:0f:a4:03:02:7c:44:83:75:b4:d8:
57:ed:3c:53:30:54:6b:c7:e8:71:3f:cc:12:58:b2:
bf:6f:e2:dd:f7:2e:84:85:a6:d1:be:30:91:93:e3:
90:c2:0d:c4:54:0f:f4:02:2e:48:e1:67:ae:f6:47:
f1:f7:71:9a:22:a7:d7:a9:7a:da:8d:e0:93:d5:27:
f2:5e:65:c5:be:0e:f4:34:5f:25:a7:31:db:e5:d0:
e5:0c:10:d8:0e:5b:19:e4:fc:bd:9a:90:c3:34:cb:
3a:4f:f8:cf:3a:9a:09:c6:6b:96:74:3f:50:97:f0:
b3:ca:e9:82:44:6e:4e:51:86:a5:66:4c:17:6f:42:
ce:ac:45:bb:41:44:06:5d:44:85:da:23:11:0c:33:
93:4a:36:96:45:7e:60:78:9a:d8:f2:9a:49:c7:bc:
7d:8d:64:01:de:82:f9:2e:d3:6d:78:ff:b1:a8:ac:
be:56:93:7e:f7:9b:e2:10:04:f4:9d:7a:f1:e0:ba:
de:64:74:ab:19:4d:5f:ef:fe:53:57:1e:73:a4:09:
eb:8f:bb:b9:19:f9:a4:99:7e:ab:3d:64:10:0f:8e:
88:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C8:78:34:6E:B0:D2:CB:85:C5:A7:66:2E:B4:89:2E:4C:63:4C:84
X509v3 Authority Key Identifier:
keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/ish4NG6w0suFxadmLrSJLkxjTIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.148.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:ba:6b:12:6c:6d:22:27:e8:82:17:1f:32:9c:70:0d:28:7f:
37:69:86:69:0c:03:28:41:58:20:a2:20:cf:e6:4e:a5:a9:1c:
50:97:eb:92:9e:c0:4b:d2:3d:0b:dd:44:8e:a1:8b:a0:d8:15:
9c:1f:8c:83:19:76:5c:c1:d9:8c:85:20:e5:70:ec:ea:e8:4d:
6d:89:b0:c0:16:3b:8a:b4:e6:70:2c:94:60:5b:ff:e9:c3:21:
65:a5:4a:07:21:88:a7:0d:8a:01:cf:3f:c6:79:e2:0f:4a:e5:
1c:3f:d1:13:1a:3c:10:ff:ad:95:60:b3:7a:74:ed:f7:bc:4d:
7e:21:df:66:18:0a:cd:9f:77:64:3c:31:17:da:0c:71:ec:61:
48:c2:56:2c:22:e4:77:cd:b6:23:d9:fe:00:8c:b5:6a:4e:73:
89:05:49:e8:1d:95:e2:a7:8f:87:ca:bd:64:f3:87:0c:79:07:
cf:24:96:47:7b:de:89:6a:15:94:8f:b5:7b:aa:d7:0a:1d:c0:
72:22:e5:05:29:11:40:ce:ff:d5:54:96:7f:a0:52:e6:2f:51:
9a:6c:3e:2d:26:dc:21:ed:52:8e:bf:21:65:f2:c0:82:bf:ca:
ff:f2:f6:f8:eb:b0:3b:7c:ea:f8:d2:ce:9e:d8:d4:39:4c:76:
bd:91:8d:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXxI8ySnVeVSKQfLpJmIXm8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllODFkZGFhZDg4ZjcwNzE2MTJkN2MzYjc2MThlMjRkMWE1
MjMzYmIwHhcNMjUwNDAxMTEzNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWM4NzgzNDZlYjBkMmNiODVjNWE3NjYyZWI0ODkyZTRjNjM0Yzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUvzdb2hIn6vWlzLEKojLeIbZcjj
FiOfn6URZMU1qFcpfw+kAwJ8RIN1tNhX7TxTMFRrx+hxP8wSWLK/b+Ld9y6EhabR
vjCRk+OQwg3EVA/0Ai5I4Weu9kfx93GaIqfXqXrajeCT1SfyXmXFvg70NF8lpzHb
5dDlDBDYDlsZ5Py9mpDDNMs6T/jPOpoJxmuWdD9Ql/CzyumCRG5OUYalZkwXb0LO
rEW7QUQGXUSF2iMRDDOTSjaWRX5geJrY8ppJx7x9jWQB3oL5LtNteP+xqKy+VpN+
95viEAT0nXrx4LreZHSrGU1f7/5TVx5zpAnrj7u5GfmkmX6rPWQQD46I5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIrIeDRusNLLhcWnZi60iS5MY0yEMB8GA1UdIwQY
MBaAFJ6B3arYj3BxYS18O3YY4k0aUjO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm9IZHF0aVBjSEZoTFh3N2RoamlUUnBTTTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lMjJkYzItZjQwNi00MGM5LWJhNWYt
YmY2OWIxMmE2NzQ0LzEvaXNoNE5HNncwc3VGeGFkbUxyU0pMa3hqVElRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lMjJkYzItZjQwNi00MGM5LWJhNWYtYmY2OWIxMmE2NzQ0
LzEvbm9IZHF0aVBjSEZoTFh3N2RoamlUUnBTTTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQWUMA0G
CSqGSIb3DQEBCwUAA4IBAQC9umsSbG0iJ+iCFx8ynHANKH83aYZpDAMoQVggoiDP
5k6lqRxQl+uSnsBL0j0L3USOoYug2BWcH4yDGXZcwdmMhSDlcOzq6E1tibDAFjuK
tOZwLJRgW//pwyFlpUoHIYinDYoBzz/GeeIPSuUcP9ETGjwQ/62VYLN6dO33vE1+
Id9mGArNn3dkPDEX2gxx7GFIwlYsIuR3zbYj2f4AjLVqTnOJBUnoHZXip4+Hyr1k
84cMeQfPJJZHe96JahWUj7V7qtcKHcByIuUFKRFAzv/VVJZ/oFLmL1GabD4tJtwh
7VKOvyFl8sCCv8r/8vb467A7fOr40s6e2NQ5THa9kY2i
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:30 2025 by rpki-client on console.sobornost.net