Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/iPyzUjXLdhjyPYSky8-XKuicj6M.roa
File: iPyzUjXLdhjyPYSky8-XKuicj6M.roa (raw, json)
Hash identifier: usBsuZkuYwZ4TBLN0wXeFzSNgg4GTHw54aIJrIsxL1c=
Subject key identifier: 88:FC:B3:52:35:CB:76:18:F2:3D:84:A4:CB:CF:97:2A:E8:9C:8F:A3
Certificate issuer: /CN=ebd6fc5158ee3ec21a421d718234c8d8a3361fa6
Certificate serial: 0184E7D2776F6E8B1241F589CCF9AD43F177
Authority key identifier: EB:D6:FC:51:58:EE:3E:C2:1A:42:1D:71:82:34:C8:D8:A3:36:1F:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69b8UVjuPsIaQh1xgjTI2KM2H6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/iPyzUjXLdhjyPYSky8-XKuicj6M.roa
Signing time: Tue 06 Dec 2022 14:24:00 +0000
ROA not before: Tue 06 Dec 2022 14:24:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25393
IP address blocks: 193.178.144.0/22 maxlen: 22
193.178.144.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e7:d2:77:6f:6e:8b:12:41:f5:89:cc:f9:ad:43:f1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebd6fc5158ee3ec21a421d718234c8d8a3361fa6
Validity
Not Before: Dec 6 14:24:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88fcb35235cb7618f23d84a4cbcf972ae89c8fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:62:91:92:11:9f:4c:af:2e:f1:5e:56:a8:6d:
43:7e:ec:d6:50:fe:7d:03:c6:5b:36:35:4e:50:dd:
c0:90:95:59:e3:84:5f:b8:a8:b9:fd:c8:1d:7e:ff:
8b:be:4a:3a:ff:98:dd:91:24:41:33:5a:da:db:b8:
f3:64:ba:97:0d:54:a0:7b:eb:cc:b9:a8:02:02:1f:
3e:e8:3b:1a:7e:d4:cd:ba:e8:e6:95:11:4a:e0:3f:
1f:2f:b1:ab:1a:b9:3f:60:b0:a7:2d:77:6c:f1:77:
5c:c1:c0:ae:e5:be:3e:e4:95:6c:52:c6:b2:c8:7d:
4d:ec:93:7d:ed:de:3f:41:bd:df:f2:28:35:4d:6f:
82:d8:fc:3b:a2:05:a4:db:9a:a5:86:0d:04:d0:0c:
26:24:9c:88:c1:ae:c2:85:c5:3a:68:8a:f9:dd:d5:
11:0f:2f:c4:70:44:f4:ee:09:d4:4e:15:7a:1e:f9:
4f:3c:4c:f0:8a:61:58:21:58:d0:2f:0b:e1:c4:84:
fa:c9:39:61:95:7a:86:d3:f5:8d:9c:56:f2:83:e3:
30:8d:f8:31:58:3c:c9:cb:54:95:e9:6e:fd:7c:89:
36:28:9d:1c:53:67:37:48:9a:9d:ea:dd:03:62:08:
58:d1:91:7b:da:07:9a:fa:31:bd:f5:e4:21:f7:88:
b6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FC:B3:52:35:CB:76:18:F2:3D:84:A4:CB:CF:97:2A:E8:9C:8F:A3
X509v3 Authority Key Identifier:
keyid:EB:D6:FC:51:58:EE:3E:C2:1A:42:1D:71:82:34:C8:D8:A3:36:1F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69b8UVjuPsIaQh1xgjTI2KM2H6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/iPyzUjXLdhjyPYSky8-XKuicj6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c521b-ded9-4046-bb80-7899624a4f58/1/69b8UVjuPsIaQh1xgjTI2KM2H6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.144.0/22
Signature Algorithm: sha256WithRSAEncryption
37:0c:5a:b4:02:78:ec:63:ec:b0:7d:2a:fe:80:2e:e5:c7:aa:
15:31:f8:f1:0c:bc:22:52:28:d7:77:14:4b:c7:b1:af:38:8a:
cd:f4:c0:25:d9:73:5b:1a:2b:03:c8:81:97:61:e7:23:9c:ff:
e7:84:3e:61:a9:fc:b1:c6:0c:cf:11:97:99:09:87:d6:b5:77:
53:b6:05:43:41:05:f1:9d:ec:1f:c4:c8:4c:85:a8:5c:9d:19:
2f:39:34:59:9d:01:8b:ad:31:f1:eb:0e:e0:ed:35:ea:d1:30:
86:ff:37:0f:e1:af:85:67:d9:12:4f:81:7d:62:26:ca:0f:5d:
e8:36:88:1a:88:d7:b1:a9:52:9b:00:31:17:91:1f:16:c3:d7:
18:61:71:29:cc:8c:8a:a2:bb:44:5b:3b:fe:8b:dd:66:8f:06:
69:25:77:85:57:56:23:f8:43:fe:5c:44:05:db:5d:e6:46:e3:
eb:fa:21:db:12:85:44:d2:00:24:96:03:3f:4c:b1:82:b8:b4:
40:d2:aa:35:e9:4a:ef:40:ff:38:0f:dc:f9:49:a8:56:0c:c4:
1a:20:c7:b5:c3:23:cf:8b:b3:ac:07:2c:e6:c9:dc:1f:ab:17:
68:de:68:31:ff:86:3b:9e:06:53:12:80:6f:56:5c:42:52:14:
33:b7:44:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYTn0ndvbosSQfWJzPmtQ/F3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZDZmYzUxNThlZTNlYzIxYTQyMWQ3MTgyMzRjOGQ4YTMz
NjFmYTYwHhcNMjIxMjA2MTQyNDAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGZjYjM1MjM1Y2I3NjE4ZjIzZDg0YTRjYmNmOTcyYWU4OWM4ZmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWKRkhGfTK8u8V5WqG1DfuzWUP59
A8ZbNjVOUN3AkJVZ44RfuKi5/cgdfv+Lvko6/5jdkSRBM1ra27jzZLqXDVSge+vM
uagCAh8+6DsaftTNuujmlRFK4D8fL7GrGrk/YLCnLXds8XdcwcCu5b4+5JVsUsay
yH1N7JN97d4/Qb3f8ig1TW+C2Pw7ogWk25qlhg0E0AwmJJyIwa7ChcU6aIr53dUR
Dy/EcET07gnUThV6HvlPPEzwimFYIVjQLwvhxIT6yTlhlXqG0/WNnFbyg+Mwjfgx
WDzJy1SV6W79fIk2KJ0cU2c3SJqd6t0DYghY0ZF72gea+jG99eQh94i2WwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIj8s1I1y3YY8j2EpMvPlyronI+jMB8GA1UdIwQY
MBaAFOvW/FFY7j7CGkIdcYI0yNijNh+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjliOFVWanVQc0lhUWgxeGdqVEkyS00ySDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zYzUyMWItZGVkOS00MDQ2LWJiODAt
Nzg5OTYyNGE0ZjU4LzEvaVB5elVqWExkaGp5UFlTa3k4LVhLdWljajZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zYzUyMWItZGVkOS00MDQ2LWJiODAtNzg5OTYyNGE0ZjU4
LzEvNjliOFVWanVQc0lhUWgxeGdqVEkyS00ySDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwbKQMA0G
CSqGSIb3DQEBCwUAA4IBAQA3DFq0AnjsY+ywfSr+gC7lx6oVMfjxDLwiUijXdxRL
x7GvOIrN9MAl2XNbGisDyIGXYecjnP/nhD5hqfyxxgzPEZeZCYfWtXdTtgVDQQXx
newfxMhMhahcnRkvOTRZnQGLrTHx6w7g7TXq0TCG/zcP4a+FZ9kST4F9YibKD13o
NogaiNexqVKbADEXkR8Ww9cYYXEpzIyKortEWzv+i91mjwZpJXeFV1Yj+EP+XEQF
213mRuPr+iHbEoVE0gAklgM/TLGCuLRA0qo16UrvQP84D9z5SahWDMQaIMe1wyPP
i7OsByzmydwfqxdo3mgx/4Y7ngZTEoBvVlxCUhQzt0TW
-----END CERTIFICATE-----
Generated at Thu May 1 11:23:16 2025 by rpki-client