Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/99DwEc2cf1yw3BHq7gNvWmU1120.roa
File: 99DwEc2cf1yw3BHq7gNvWmU1120.roa (raw, json)
Hash identifier: Dadg7l/x1rSMBK84ymjnVLizuSJKclnzqxNz+AXzqUg=
Subject key identifier: F7:D0:F0:11:CD:9C:7F:5C:B0:DC:11:EA:EE:03:6F:5A:65:35:D7:6D
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184864C17E7D3D8DD50851C407F3856C025
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/99DwEc2cf1yw3BHq7gNvWmU1120.roa
Signing time: Thu 17 Nov 2022 15:54:04 +0000
ROA not before: Thu 17 Nov 2022 15:54:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 53667
IP address blocks: 193.25.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:4c:17:e7:d3:d8:dd:50:85:1c:40:7f:38:56:c0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 17 15:54:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7d0f011cd9c7f5cb0dc11eaee036f5a6535d76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:21:5a:0b:cd:e8:21:91:93:e1:b6:db:25:10:
35:6f:5e:0d:19:36:69:84:f4:29:07:9a:7e:c3:28:
d4:9b:e0:b8:e6:73:4b:13:96:dd:3f:9c:48:37:bd:
2a:ee:9b:5f:59:73:6f:30:82:a0:70:5a:a5:b9:aa:
4a:1c:0e:03:e0:58:0b:36:7e:73:37:3e:e1:54:a2:
64:27:01:20:d4:ed:91:fd:66:0a:64:03:80:64:45:
99:7e:2a:72:51:d2:79:9f:4f:72:a9:c1:48:b1:f5:
01:c4:14:4d:66:79:02:26:81:07:a1:4b:73:c7:de:
2b:6e:07:ab:d9:f3:61:a8:84:09:c5:eb:06:13:b9:
0c:a7:2b:12:7a:a6:40:0d:46:72:62:b2:9a:23:31:
e4:bb:46:8d:38:f7:a8:7d:05:c2:66:e0:df:01:f8:
72:1e:9d:39:13:38:3d:ef:35:a0:f7:68:46:f6:34:
4e:04:da:4b:a3:c1:90:ed:1e:23:75:48:66:49:93:
2b:39:07:68:c5:9a:19:a0:84:a2:d9:e3:0c:3d:25:
4e:f4:67:4c:9c:03:ac:53:52:35:45:9c:af:fc:c9:
74:b9:56:df:0d:f9:03:14:1c:08:4b:36:7b:6f:f5:
d9:ec:c1:89:61:25:03:55:c4:06:39:c4:9d:ba:48:
7a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D0:F0:11:CD:9C:7F:5C:B0:DC:11:EA:EE:03:6F:5A:65:35:D7:6D
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/99DwEc2cf1yw3BHq7gNvWmU1120.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.207.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d8:98:29:3e:fc:59:04:e5:00:2d:cb:5a:65:b8:ee:06:16:
61:0a:26:65:3e:db:78:dc:87:b7:67:60:7b:17:b2:1e:18:cd:
9c:54:df:e8:9e:c8:3d:b4:1e:71:e6:0d:f7:ce:d2:1f:7e:ae:
8b:5f:73:d3:7d:73:66:f9:e7:e9:23:41:23:36:25:ce:88:36:
7d:4e:3a:8d:8e:6b:14:cb:31:87:32:03:0b:12:21:a2:2b:00:
01:aa:6f:2d:f3:db:ba:5f:fd:cd:88:35:5a:13:05:36:b2:bd:
49:f8:e4:18:f4:d5:30:46:25:22:58:b0:23:12:d8:4e:d3:79:
39:60:3c:1b:db:b7:c4:76:d9:32:63:a2:d0:8c:81:74:01:9e:
4f:6e:93:1d:52:58:eb:95:9f:fb:59:61:3e:6a:48:b6:20:0d:
5c:98:c6:c2:ad:90:18:02:e5:bb:44:5b:9d:9e:c7:ac:3b:e7:
eb:40:b0:89:d4:84:c5:fe:eb:a7:e6:0d:9f:96:20:94:8e:80:
cf:a3:c6:c4:3a:d4:89:df:02:67:f6:b4:af:3e:27:95:f5:d6:
8b:62:88:01:06:5f:7b:56:87:ea:94:ee:24:c4:da:40:e4:4b:
5a:4b:1b:cc:56:88:af:7c:5a:8c:85:5f:16:0e:8a:df:c4:0b:
af:3f:03:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSGTBfn09jdUIUcQH84VsAlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIxMTE3MTU1NDA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2QwZjAxMWNkOWM3ZjVjYjBkYzExZWFlZTAzNmY1YTY1MzVkNzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliFaC83oIZGT4bbbJRA1b14NGTZp
hPQpB5p+wyjUm+C45nNLE5bdP5xIN70q7ptfWXNvMIKgcFqluapKHA4D4FgLNn5z
Nz7hVKJkJwEg1O2R/WYKZAOAZEWZfipyUdJ5n09yqcFIsfUBxBRNZnkCJoEHoUtz
x94rbger2fNhqIQJxesGE7kMpysSeqZADUZyYrKaIzHku0aNOPeofQXCZuDfAfhy
Hp05Ezg97zWg92hG9jROBNpLo8GQ7R4jdUhmSZMrOQdoxZoZoISi2eMMPSVO9GdM
nAOsU1I1RZyv/Ml0uVbfDfkDFBwISzZ7b/XZ7MGJYSUDVcQGOcSdukh6AQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPfQ8BHNnH9csNwR6u4Db1plNddtMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvOTlEd0VjMmNmMXl3M0JIcTdnTnZXbVUxMTIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRnPMA0G
CSqGSIb3DQEBCwUAA4IBAQBz2JgpPvxZBOUALctaZbjuBhZhCiZlPtt43Ie3Z2B7
F7IeGM2cVN/onsg9tB5x5g33ztIffq6LX3PTfXNm+efpI0EjNiXOiDZ9TjqNjmsU
yzGHMgMLEiGiKwABqm8t89u6X/3NiDVaEwU2sr1J+OQY9NUwRiUiWLAjEthO03k5
YDwb27fEdtkyY6LQjIF0AZ5PbpMdUljrlZ/7WWE+aki2IA1cmMbCrZAYAuW7RFud
nsesO+frQLCJ1ITF/uun5g2fliCUjoDPo8bEOtSJ3wJn9rSvPieV9daLYogBBl97
VofqlO4kxNpA5EtaSxvMVoivfFqMhV8WDorfxAuvPwN6
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:25:38 2025 by rpki-client