Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/akkUXfA8yjmbAbge7T9s-UuKdck.roa
File: akkUXfA8yjmbAbge7T9s-UuKdck.roa (raw, json)
Hash identifier: bTuwJwUzkex/N9xt02kabUmVlqjLA6HLXLMaFWG1Vj4=
Subject key identifier: 6A:49:14:5D:F0:3C:CA:39:9B:01:B8:1E:ED:3F:6C:F9:4B:8A:75:C9
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01942746EDFD7D0A61E45CE02BFA7E0FF3E2
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/akkUXfA8yjmbAbge7T9s-UuKdck.roa
Signing time: Thu 02 Jan 2025 13:49:07 +0000
ROA not before: Thu 02 Jan 2025 13:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 194.163.69.0/24 maxlen: 24
194.195.101.0/24 maxlen: 24
195.252.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:ed:fd:7d:0a:61:e4:5c:e0:2b:fa:7e:0f:f3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 13:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a49145df03cca399b01b81eed3f6cf94b8a75c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:35:f5:4e:7b:ea:bb:1c:07:e6:e5:03:e9:4f:
87:f1:d7:3d:1e:4a:c4:6d:48:db:aa:18:18:9b:f3:
8e:5a:7c:1a:a9:81:7d:28:6a:d1:ff:7b:9b:dd:5f:
1e:ec:44:7f:4d:9c:f8:83:01:74:31:c3:d7:c4:ed:
4b:d3:c1:ec:5e:8c:91:75:4a:d9:15:dc:ea:cc:71:
f5:19:87:55:f6:d9:07:a1:ca:30:43:18:c9:cf:7d:
1d:da:19:63:1b:0b:e3:55:b1:c9:bb:41:e1:ff:49:
5d:e9:f3:5e:82:47:95:c2:09:60:f8:c1:9f:73:e3:
cc:42:da:68:df:96:63:48:cc:c6:e9:51:42:34:5f:
02:ad:37:fb:04:72:70:23:7e:6c:52:34:1c:a9:e4:
aa:67:cc:77:df:50:ca:3e:80:de:67:84:6b:42:c6:
f5:8b:4f:ad:73:47:5a:22:8f:5f:9b:11:b3:02:84:
11:7c:1d:b3:b2:3f:32:30:6a:f1:f1:26:fa:ea:ee:
6e:96:7f:41:d3:ad:7f:ae:68:81:48:eb:92:90:84:
08:e2:b6:89:5e:6c:c6:8c:1f:ec:2f:f2:28:db:ce:
b4:ed:04:04:aa:8a:cb:18:07:f7:46:59:03:bd:76:
ea:d0:a0:46:07:66:46:53:94:37:ab:2b:50:3c:c5:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:49:14:5D:F0:3C:CA:39:9B:01:B8:1E:ED:3F:6C:F9:4B:8A:75:C9
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/akkUXfA8yjmbAbge7T9s-UuKdck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.69.0/24
194.195.101.0/24
195.252.172.0/24
Signature Algorithm: sha256WithRSAEncryption
50:0d:cb:81:51:70:e9:91:f4:97:46:57:be:bd:e2:21:d6:d3:
58:45:67:ac:1a:3a:09:f8:9e:d8:42:64:ac:99:b4:c9:16:eb:
b5:b4:a7:f4:18:11:88:93:ba:0e:25:f0:92:b4:61:52:a4:bc:
3b:38:1c:9b:62:16:6a:f0:9d:b8:cd:80:7b:93:28:0a:16:70:
b2:d7:ce:ef:79:af:8c:7c:74:41:40:49:14:df:f8:35:20:7c:
7a:82:5c:69:60:9f:75:f5:52:e2:02:dc:85:d9:58:61:45:03:
99:bf:e5:88:cc:50:d2:21:c4:70:e7:2b:fd:7d:57:2b:06:b8:
d9:99:20:ca:9e:ba:e7:d9:90:6f:10:df:bd:a1:54:55:a9:da:
82:65:e3:d8:14:d3:a3:70:69:96:97:b1:71:32:e9:21:89:33:
75:09:0d:c1:8b:dd:61:b5:69:01:14:65:6b:28:5b:b5:a0:f0:
48:75:34:9c:ac:5f:9b:5f:a1:d0:f4:fa:22:ae:27:13:73:a7:
32:b5:eb:f5:39:a2:1b:ae:2a:e1:c7:f2:ac:d4:8c:30:db:29:
6d:3a:3d:14:b7:dd:90:94:0c:42:97:fc:4d:8a:6f:1e:9d:63:
c6:4a:7f:92:02:9c:6c:7a:21:49:c4:62:66:dd:bc:4d:cb:63:
3b:b7:34:9f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQnRu39fQph5FzgK/p+D/PiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjUwMTAyMTM0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTQ5MTQ1ZGYwM2NjYTM5OWIwMWI4MWVlZDNmNmNmOTRiOGE3NWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DX1TnvquxwH5uUD6U+H8dc9HkrE
bUjbqhgYm/OOWnwaqYF9KGrR/3ub3V8e7ER/TZz4gwF0McPXxO1L08HsXoyRdUrZ
FdzqzHH1GYdV9tkHocowQxjJz30d2hljGwvjVbHJu0Hh/0ld6fNegkeVwglg+MGf
c+PMQtpo35ZjSMzG6VFCNF8CrTf7BHJwI35sUjQcqeSqZ8x331DKPoDeZ4RrQsb1
i0+tc0daIo9fmxGzAoQRfB2zsj8yMGrx8Sb66u5uln9B061/rmiBSOuSkIQI4raJ
XmzGjB/sL/Io28607QQEqorLGAf3RlkDvXbq0KBGB2ZGU5Q3qytQPMV6bQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGpJFF3wPMo5mwG4Hu0/bPlLinXJMB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvYWtrVVhmQTh5am1iQWJnZTdUOXMtVXVLZGNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwqNFAwQA
wsNlAwQAw/ysMA0GCSqGSIb3DQEBCwUAA4IBAQBQDcuBUXDpkfSXRle+veIh1tNY
RWesGjoJ+J7YQmSsmbTJFuu1tKf0GBGIk7oOJfCStGFSpLw7OBybYhZq8J24zYB7
kygKFnCy187vea+MfHRBQEkU3/g1IHx6glxpYJ919VLiAtyF2VhhRQOZv+WIzFDS
IcRw5yv9fVcrBrjZmSDKnrrn2ZBvEN+9oVRVqdqCZePYFNOjcGmWl7FxMukhiTN1
CQ3Bi91htWkBFGVrKFu1oPBIdTScrF+bX6HQ9PoiricTc6cytev1OaIbrirhx/Ks
1Iww2yltOj0Ut92QlAxCl/xNim8enWPGSn+SApxseiFJxGJm3bxNy2M7tzSf
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:14 2025 by rpki-client