Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/k-aOZTguit0qf1NmIom-9F3EZfQ.roa
File: k-aOZTguit0qf1NmIom-9F3EZfQ.roa (raw, json)
Hash identifier: 7jwgl72JH8cRwVBNFSArgUNanq39l5O1rQerU3Nlaz4=
Subject key identifier: 93:E6:8E:65:38:2E:8A:DD:2A:7F:53:66:22:89:BE:F4:5D:C4:65:F4
Certificate issuer: /CN=208fa2b8733f5318267ad13bec0794346277cf25
Certificate serial: 0192DD535EB90867D8DF2413947472B7CD63
Authority key identifier: 20:8F:A2:B8:73:3F:53:18:26:7A:D1:3B:EC:07:94:34:62:77:CF:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-iuHM_UxgmetE77AeUNGJ3zyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/k-aOZTguit0qf1NmIom-9F3EZfQ.roa
Signing time: Wed 30 Oct 2024 12:08:01 +0000
ROA not before: Wed 30 Oct 2024 12:08:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215921
IP address blocks: 195.28.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dd:53:5e:b9:08:67:d8:df:24:13:94:74:72:b7:cd:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208fa2b8733f5318267ad13bec0794346277cf25
Validity
Not Before: Oct 30 12:08:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93e68e65382e8add2a7f53662289bef45dc465f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:83:d6:c3:67:2f:6b:0b:89:5e:70:bb:f6:
e5:5d:10:2b:74:d8:30:fd:cb:14:99:07:16:29:f3:
55:81:92:24:ab:e7:46:ac:e2:89:60:73:af:ca:0c:
b6:2c:74:ea:06:e7:6d:aa:4d:b7:8e:27:5f:37:da:
96:40:72:b7:5b:0c:77:95:19:59:02:48:22:fa:b5:
ec:d2:3c:48:58:a5:4c:30:05:f3:91:d2:43:30:0c:
ab:47:e3:59:c6:b4:2d:dc:ce:30:9e:41:d2:2b:a5:
43:ce:57:26:26:b8:55:06:50:84:13:89:32:f0:51:
6f:6c:43:2e:c3:3d:92:2d:24:44:6d:a8:29:bc:b8:
c8:a6:2a:29:b6:29:df:4f:24:82:80:54:dd:6c:09:
7c:d8:1a:d5:46:61:5b:b4:ba:4c:66:ae:93:a0:8a:
ff:c2:46:c9:5c:9a:c4:70:70:71:56:32:07:15:e1:
4f:af:46:e9:56:96:ef:84:0c:7a:49:f0:63:e4:cf:
88:80:74:1e:ac:bf:44:84:17:08:ff:ff:82:25:31:
6d:cd:35:e9:32:af:05:a1:b7:17:12:80:39:b7:12:
07:c3:d8:a1:9f:a3:8d:d6:7f:4b:ae:14:17:e3:56:
8e:c7:ed:2c:d8:b7:fe:ad:33:e5:03:9f:a0:c3:af:
1e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E6:8E:65:38:2E:8A:DD:2A:7F:53:66:22:89:BE:F4:5D:C4:65:F4
X509v3 Authority Key Identifier:
keyid:20:8F:A2:B8:73:3F:53:18:26:7A:D1:3B:EC:07:94:34:62:77:CF:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-iuHM_UxgmetE77AeUNGJ3zyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/k-aOZTguit0qf1NmIom-9F3EZfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/II-iuHM_UxgmetE77AeUNGJ3zyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.28.188.0/24
Signature Algorithm: sha256WithRSAEncryption
51:6e:58:44:61:0e:43:f3:4e:9c:92:d7:c3:a3:4e:c2:a6:1e:
cb:0c:bd:e6:85:60:c8:1d:17:ef:2a:2f:80:3c:b5:e1:2d:2b:
12:c6:cb:c0:84:31:88:47:26:9a:95:06:60:fd:6a:0b:af:3e:
f4:17:a6:9e:56:1f:40:c4:c9:e0:fa:8e:98:41:ec:7d:81:4f:
82:7d:ad:30:91:cf:cd:6f:9c:43:64:5a:9c:0d:52:fa:ac:66:
4e:b1:94:20:e2:b2:e9:f0:53:2d:0f:a8:21:c0:64:7c:b6:21:
49:f0:e7:22:68:50:a9:11:46:4d:40:35:56:b8:ca:cf:ee:ac:
cc:a2:27:9d:12:1f:ad:01:58:84:d2:c8:07:74:ad:3c:cb:d5:
41:07:e0:48:48:3f:3b:20:39:36:8a:9f:76:74:a9:27:07:3d:
e2:c5:6c:0f:48:39:80:2d:1e:54:0a:5e:4b:d6:cc:39:3c:fb:
66:d9:79:7d:61:bf:cf:25:97:5a:bb:d8:a7:72:a8:c6:36:a7:
56:02:d7:f2:cf:43:d2:1f:d2:18:56:ab:c2:d0:f9:3b:13:82:
79:63:40:75:75:47:8d:cf:f2:0c:13:a7:39:21:82:d0:fb:df:
07:2d:ba:84:3b:57:ee:4c:de:3f:9b:19:5c:37:1c:11:d1:97:
30:8a:cb:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLdU165CGfY3yQTlHRyt81jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOGZhMmI4NzMzZjUzMTgyNjdhZDEzYmVjMDc5NDM0NjI3
N2NmMjUwHhcNMjQxMDMwMTIwODAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2U2OGU2NTM4MmU4YWRkMmE3ZjUzNjYyMjg5YmVmNDVkYzQ2NWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdSD1sNnL2sLiV5wu/blXRArdNgw
/csUmQcWKfNVgZIkq+dGrOKJYHOvygy2LHTqBudtqk23jidfN9qWQHK3Wwx3lRlZ
Akgi+rXs0jxIWKVMMAXzkdJDMAyrR+NZxrQt3M4wnkHSK6VDzlcmJrhVBlCEE4ky
8FFvbEMuwz2SLSREbagpvLjIpioptinfTySCgFTdbAl82BrVRmFbtLpMZq6ToIr/
wkbJXJrEcHBxVjIHFeFPr0bpVpbvhAx6SfBj5M+IgHQerL9EhBcI//+CJTFtzTXp
Mq8FobcXEoA5txIHw9ihn6ON1n9LrhQX41aOx+0s2Lf+rTPlA5+gw68efwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJPmjmU4LordKn9TZiKJvvRdxGX0MB8GA1UdIwQY
MBaAFCCPorhzP1MYJnrRO+wHlDRid88lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUktaXVITV9VeGdtZXRFNzdBZVVOR0ozenlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84ZDFlMmItMzE5Zi00NGFjLWI5Njkt
ZTRhNTBmNzFkYTBjLzEvay1hT1pUZ3VpdDBxZjFObUlvbS05RjNFWmZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84ZDFlMmItMzE5Zi00NGFjLWI5NjktZTRhNTBmNzFkYTBj
LzEvSUktaXVITV9VeGdtZXRFNzdBZVVOR0ozenlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxy8MA0G
CSqGSIb3DQEBCwUAA4IBAQBRblhEYQ5D806cktfDo07Cph7LDL3mhWDIHRfvKi+A
PLXhLSsSxsvAhDGIRyaalQZg/WoLrz70F6aeVh9AxMng+o6YQex9gU+Cfa0wkc/N
b5xDZFqcDVL6rGZOsZQg4rLp8FMtD6ghwGR8tiFJ8OciaFCpEUZNQDVWuMrP7qzM
oiedEh+tAViE0sgHdK08y9VBB+BISD87IDk2ip92dKknBz3ixWwPSDmALR5UCl5L
1sw5PPtm2Xl9Yb/PJZdau9incqjGNqdWAtfyz0PSH9IYVqvC0Pk7E4J5Y0B1dUeN
z/IME6c5IYLQ+98HLbqEO1fuTN4/mxlcNxwR0Zcwissv
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:42:26 2025 by rpki-client