Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/a0heAr5Tdh28am-YWZ2LDUI1i-I.roa
File: a0heAr5Tdh28am-YWZ2LDUI1i-I.roa (raw, json)
Hash identifier: 4Riercylxh3jedSptQ6f+cc+w6P5hj4cNLgG2FwgmtI=
Subject key identifier: 6B:48:5E:02:BE:53:76:1D:BC:6A:6F:98:59:9D:8B:0D:42:35:8B:E2
Certificate issuer: /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial: 01942B572547CDA739AC4C7ED54EFC66049C
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/a0heAr5Tdh28am-YWZ2LDUI1i-I.roa
Signing time: Fri 03 Jan 2025 08:45:18 +0000
ROA not before: Fri 03 Jan 2025 08:45:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 194.179.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2b:57:25:47:cd:a7:39:ac:4c:7e:d5:4e:fc:66:04:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Validity
Not Before: Jan 3 08:45:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b485e02be53761dbc6a6f98599d8b0d42358be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c9:c6:43:91:77:0e:aa:3c:c4:81:be:9d:7a:
93:41:56:fe:13:ad:37:01:be:7a:e8:13:d5:70:35:
15:6d:34:e6:f1:bd:e7:f7:bc:68:81:50:3c:9b:fa:
77:a5:53:8a:b0:c8:6d:97:82:15:26:9d:09:86:1e:
05:0f:f2:8a:f1:f2:0c:17:29:cf:02:7a:38:02:15:
f3:42:2e:54:27:a0:24:cb:d0:66:bd:4e:85:0a:ca:
cd:97:ea:2b:e0:08:d4:e0:76:a1:53:ca:35:35:90:
9f:78:2f:03:ea:4c:4c:bd:5f:46:bd:69:af:33:cf:
16:6b:d3:d5:2a:6c:e4:94:04:ab:0f:67:31:fb:a2:
45:3f:cf:82:6a:de:d6:c2:65:ec:67:be:da:00:d4:
17:fd:ac:eb:c6:c3:31:a3:99:57:4b:1d:7d:05:4d:
b7:6e:71:0c:99:71:80:20:a5:dd:8f:b3:18:c1:28:
01:13:f0:01:07:40:eb:d0:bd:08:70:09:f9:89:17:
9c:e4:b1:f1:a4:d5:d0:e2:68:3d:9a:6b:93:ed:b0:
60:9c:e0:7f:2c:49:2a:fc:ba:69:2e:b2:b6:fc:d9:
fb:33:5e:ce:33:90:64:51:52:82:a8:72:67:e3:e3:
e5:51:2d:b6:be:c9:8f:5a:da:96:dc:7d:6c:e5:53:
56:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:48:5E:02:BE:53:76:1D:BC:6A:6F:98:59:9D:8B:0D:42:35:8B:E2
X509v3 Authority Key Identifier:
keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/a0heAr5Tdh28am-YWZ2LDUI1i-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.179.224.0/19
Signature Algorithm: sha256WithRSAEncryption
07:07:c0:95:fe:1e:44:ba:67:07:95:1a:cb:2d:46:e2:6b:60:
11:c6:ad:8b:ce:7c:72:2b:05:27:06:18:86:9b:bd:45:1a:91:
08:33:8d:1e:83:7e:83:a0:ca:b4:37:7a:4c:84:e5:43:ed:10:
f1:4b:4e:e5:d9:09:10:26:dc:ca:68:28:17:b9:14:6a:5f:df:
02:5c:44:1f:90:2e:6c:ab:25:a7:0d:00:44:9e:d4:24:82:92:
da:04:70:f0:49:f1:17:3f:9e:53:60:56:66:aa:43:53:ca:20:
f8:51:22:88:e7:d1:78:41:04:8e:2b:a2:19:90:1b:82:ad:f2:
e3:aa:75:c6:80:40:54:82:a3:ad:33:72:e9:c3:b0:9d:b3:66:
dc:d3:9f:ac:75:75:0b:78:76:68:cb:ce:9d:24:79:83:e2:de:
1b:9a:88:30:1b:f5:f2:c0:8d:26:e6:26:e4:ac:46:ce:3f:1d:
86:5b:f8:07:b9:5f:25:5d:64:20:c3:b1:85:32:ae:ae:c3:e4:
55:cc:50:21:ff:d6:90:09:1c:f5:0c:31:35:7f:47:09:8e:73:
7a:5c:db:92:cc:ad:d2:de:4d:40:07:b9:ae:44:95:e2:76:cb:
87:aa:3f:38:aa:1e:77:69:d0:8a:2a:03:0e:44:f5:f0:b5:9b:
b4:8a:6f:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQrVyVHzac5rEx+1U78ZgScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NmIwMTgyMTA1YmIyN2IwYzhiY2YyODQyYmQzYzFhODUx
NjRiZDEwHhcNMjUwMTAzMDg0NTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjQ4NWUwMmJlNTM3NjFkYmM2YTZmOTg1OTlkOGIwZDQyMzU4YmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48nGQ5F3Dqo8xIG+nXqTQVb+E603
Ab566BPVcDUVbTTm8b3n97xogVA8m/p3pVOKsMhtl4IVJp0Jhh4FD/KK8fIMFynP
Ano4AhXzQi5UJ6Aky9BmvU6FCsrNl+or4AjU4HahU8o1NZCfeC8D6kxMvV9GvWmv
M88Wa9PVKmzklASrD2cx+6JFP8+Cat7WwmXsZ77aANQX/azrxsMxo5lXSx19BU23
bnEMmXGAIKXdj7MYwSgBE/ABB0Dr0L0IcAn5iRec5LHxpNXQ4mg9mmuT7bBgnOB/
LEkq/LppLrK2/Nn7M17OM5BkUVKCqHJn4+PlUS22vsmPWtqW3H1s5VNWwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGtIXgK+U3YdvGpvmFmdiw1CNYviMB8GA1UdIwQY
MBaAFFhrAYIQW7J7DIvPKEK9PBqFFkvRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0dzQmdoQmJzbnNNaTg4b1FyMDhHb1VXUzlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81MmI0ODEtZjMwMy00YTk2LTk3ZGQt
NzM3MGZkODBkZjZjLzEvYTBoZUFyNVRkaDI4YW0tWVdaMkxEVUkxaS1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81MmI0ODEtZjMwMy00YTk2LTk3ZGQtNzM3MGZkODBkZjZj
LzEvV0dzQmdoQmJzbnNNaTg4b1FyMDhHb1VXUzlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwrPgMA0G
CSqGSIb3DQEBCwUAA4IBAQAHB8CV/h5EumcHlRrLLUbia2ARxq2LznxyKwUnBhiG
m71FGpEIM40eg36DoMq0N3pMhOVD7RDxS07l2QkQJtzKaCgXuRRqX98CXEQfkC5s
qyWnDQBEntQkgpLaBHDwSfEXP55TYFZmqkNTyiD4USKI59F4QQSOK6IZkBuCrfLj
qnXGgEBUgqOtM3Lpw7Cds2bc05+sdXULeHZoy86dJHmD4t4bmogwG/XywI0m5ibk
rEbOPx2GW/gHuV8lXWQgw7GFMq6uw+RVzFAh/9aQCRz1DDE1f0cJjnN6XNuSzK3S
3k1AB7muRJXidsuHqj84qh53adCKKgMORPXwtZu0im/M
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:13 2025 by rpki-client