Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/6xMWEeYr9awMZ7yx3GEOzN5dhPY.roa
File: 6xMWEeYr9awMZ7yx3GEOzN5dhPY.roa (raw, json)
Hash identifier: i3EKCietWlgVwKiSYdpzAk0qUO8A42y+4Xa5mI7nNOE=
Subject key identifier: EB:13:16:11:E6:2B:F5:AC:0C:67:BC:B1:DC:61:0E:CC:DE:5D:84:F6
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0194258F15FCA2169DBD7126D9095C23D17D
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/6xMWEeYr9awMZ7yx3GEOzN5dhPY.roa
Signing time: Thu 02 Jan 2025 05:48:41 +0000
ROA not before: Thu 02 Jan 2025 05:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216366
IP address blocks: 194.113.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:15:fc:a2:16:9d:bd:71:26:d9:09:5c:23:d1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 2 05:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb131611e62bf5ac0c67bcb1dc610eccde5d84f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:76:c8:72:70:73:76:2f:e9:62:40:42:f7:9f:
da:9a:e8:ee:f0:d7:c1:38:59:26:5f:23:28:74:9d:
ab:a7:04:79:ed:d4:4c:5d:2b:17:4c:34:be:0d:e0:
c8:27:0b:a3:74:24:27:f0:2d:0e:ff:27:0d:f9:cb:
30:b5:89:71:99:f9:79:ce:c9:b5:38:81:84:a3:60:
67:a1:98:8c:a6:91:d4:c2:72:29:ee:01:60:66:86:
60:63:b1:91:09:cb:93:b2:b1:03:8d:11:af:77:ae:
2e:26:03:d9:21:3f:3e:08:fd:97:bb:3d:cf:c3:fd:
35:5d:7a:97:09:fc:64:fd:80:bd:2e:83:c9:d1:ad:
79:ec:a9:08:59:15:c0:2c:12:80:96:2b:d4:16:34:
90:09:3d:b5:45:0e:0a:a9:e3:c0:97:80:7a:46:35:
12:5c:9f:de:63:e4:28:90:62:ed:ba:d4:a4:a4:c0:
ad:1c:34:d1:6f:27:1c:ad:33:4d:28:37:28:4b:06:
da:d9:9a:e9:8e:f0:13:82:be:c0:4d:ac:48:87:4a:
0f:4a:fa:bb:30:b4:f3:35:e6:2f:f4:52:b0:e9:ab:
c4:9d:8e:bf:d6:6c:a5:ee:a7:53:a0:ce:d9:20:b5:
25:ab:01:95:d4:be:6f:a3:03:2e:62:d6:b4:67:06:
96:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:13:16:11:E6:2B:F5:AC:0C:67:BC:B1:DC:61:0E:CC:DE:5D:84:F6
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/6xMWEeYr9awMZ7yx3GEOzN5dhPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.151.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:77:0a:47:91:a3:8d:62:06:4f:e3:3f:e6:0e:3f:33:8a:5c:
7b:f6:31:2e:7a:23:31:69:97:b8:33:3d:0f:5b:7f:90:0d:fb:
4e:53:52:3c:77:d5:44:7b:df:9e:04:a0:92:a5:a7:a8:36:e7:
f3:b2:11:66:37:a3:db:86:0a:8d:05:ab:b3:7c:fd:4f:55:da:
d8:da:20:1a:39:2f:e2:48:e2:77:05:0d:f9:34:c9:85:bd:63:
05:15:1c:bf:bd:c4:89:13:d9:3a:e1:f4:cd:94:e6:c9:9d:c1:
e1:9b:5a:d5:17:37:d7:e1:f7:6f:bf:67:30:c4:fb:7b:7b:d2:
b5:08:16:96:be:66:e2:2c:ad:7c:f6:95:11:9e:4d:9e:fd:bb:
b9:04:8b:39:e3:53:55:fb:e3:50:e7:a2:65:9e:1c:8f:cf:0a:
fb:a8:e7:1a:c9:4f:e1:be:73:d7:91:b1:4b:ce:65:6e:27:1e:
83:02:7f:85:40:f7:3f:44:80:4a:99:44:77:b9:02:74:9f:92:
ec:3f:0e:25:41:41:60:95:2f:00:d8:5b:f0:72:64:20:d3:d0:
e8:2a:9f:fb:48:a2:ff:ef:d4:85:75:91:07:9e:2a:c3:c6:a1:
f8:dc:2f:62:13:44:11:6e:94:92:b7:1c:34:ee:2b:98:b9:ad:
47:46:e7:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljxX8ohadvXEm2QlcI9F9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTM5NDFjMjdjZmU1YzIzNGM0YmYyMjFlY2IyYTU3OWIy
ZGVhYWIwHhcNMjUwMTAyMDU0ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjEzMTYxMWU2MmJmNWFjMGM2N2JjYjFkYzYxMGVjY2RlNWQ4NGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3bIcnBzdi/pYkBC95/amuju8NfB
OFkmXyModJ2rpwR57dRMXSsXTDS+DeDIJwujdCQn8C0O/ycN+cswtYlxmfl5zsm1
OIGEo2BnoZiMppHUwnIp7gFgZoZgY7GRCcuTsrEDjRGvd64uJgPZIT8+CP2Xuz3P
w/01XXqXCfxk/YC9LoPJ0a157KkIWRXALBKAlivUFjSQCT21RQ4KqePAl4B6RjUS
XJ/eY+QokGLtutSkpMCtHDTRbyccrTNNKDcoSwba2ZrpjvATgr7ATaxIh0oPSvq7
MLTzNeYv9FKw6avEnY6/1myl7qdToM7ZILUlqwGV1L5vowMuYta0ZwaWyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOsTFhHmK/WsDGe8sdxhDszeXYT2MB8GA1UdIwQY
MBaAFF2jlBwnz+XCNMS/Ih7LKlebLeqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEt
ZjExYTM5ZjI2YzNiLzEvNnhNV0VlWXI5YXdNWjd5eDNHRU96TjVkaFBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEtZjExYTM5ZjI2YzNi
LzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnGXMA0G
CSqGSIb3DQEBCwUAA4IBAQCkdwpHkaONYgZP4z/mDj8zilx79jEueiMxaZe4Mz0P
W3+QDftOU1I8d9VEe9+eBKCSpaeoNufzshFmN6PbhgqNBauzfP1PVdrY2iAaOS/i
SOJ3BQ35NMmFvWMFFRy/vcSJE9k64fTNlObJncHhm1rVFzfX4fdvv2cwxPt7e9K1
CBaWvmbiLK189pURnk2e/bu5BIs541NV++NQ56JlnhyPzwr7qOcayU/hvnPXkbFL
zmVuJx6DAn+FQPc/RIBKmUR3uQJ0n5LsPw4lQUFglS8A2FvwcmQg09DoKp/7SKL/
79SFdZEHnirDxqH43C9iE0QRbpSStxw07iuYua1HRuc7
-----END CERTIFICATE-----
Generated at Thu Apr 10 05:04:55 2025 by rpki-client