Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/sKu2pVAowfRapjAvDbfeQYpFH-o.roa
File: sKu2pVAowfRapjAvDbfeQYpFH-o.roa (raw, json)
Hash identifier: ffVqH4wXrp/8ctoHhZircQRSWaC8p7ZijF4GS8Le9xs=
Subject key identifier: B0:AB:B6:A5:50:28:C1:F4:5A:A6:30:2F:0D:B7:DE:41:8A:45:1F:EA
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 0193CFC34B395BC5590547F7573200CF889E
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/sKu2pVAowfRapjAvDbfeQYpFH-o.roa
Signing time: Mon 16 Dec 2024 13:58:22 +0000
ROA not before: Mon 16 Dec 2024 13:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200019
IP address blocks: 146.19.213.0/24 maxlen: 24
194.110.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:c3:4b:39:5b:c5:59:05:47:f7:57:32:00:cf:88:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Dec 16 13:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0abb6a55028c1f45aa6302f0db7de418a451fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8b:21:6c:8c:27:8f:b9:b3:de:1b:05:fe:cc:
c5:a1:90:c6:9c:a8:a1:8a:6b:c5:72:13:37:7f:63:
83:a4:02:6d:7d:d3:4c:74:82:9e:a6:16:2d:be:c7:
06:59:94:b8:06:9f:ec:19:aa:67:ed:54:77:04:c7:
69:50:9a:02:2d:2f:3f:a2:c0:d5:00:4a:f7:9b:24:
c1:5e:05:5a:d7:3b:48:5a:09:52:be:a5:13:2d:fc:
bd:dd:c7:cb:59:5d:fe:2f:94:54:ca:9d:33:55:88:
88:69:56:bc:2e:1e:86:b6:a1:f7:e5:7d:17:e1:e0:
f0:74:a6:a8:9f:4f:63:72:c1:cb:ec:ca:80:c2:70:
36:93:fa:8d:3f:3c:9e:90:52:4b:c2:1a:60:f6:9f:
78:e7:49:4b:a6:fd:18:56:ca:6d:30:de:4a:f3:be:
a5:4d:d5:a2:4e:01:70:b7:8c:82:c4:f6:6b:d4:5b:
76:73:be:01:7f:58:8e:70:6b:47:a4:de:1a:58:11:
d2:8a:ab:d9:f0:5c:6b:56:a1:b3:07:c2:ab:9f:2f:
9e:4e:6b:2e:60:6a:45:41:09:98:80:0e:6b:5c:24:
a4:29:98:18:da:65:30:37:83:e1:39:b1:7c:1e:6d:
97:e7:88:ea:cc:b4:00:e2:ee:1d:48:fe:10:5f:6c:
cb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AB:B6:A5:50:28:C1:F4:5A:A6:30:2F:0D:B7:DE:41:8A:45:1F:EA
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/sKu2pVAowfRapjAvDbfeQYpFH-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.213.0/24
194.110.247.0/24
Signature Algorithm: sha256WithRSAEncryption
48:e2:be:dd:ab:f1:69:10:53:38:d2:e1:96:35:f1:a8:17:f5:
a7:33:74:ac:22:38:e2:4c:ef:5c:69:8c:88:fe:4f:9c:54:67:
cc:58:da:69:6a:be:d3:15:10:d9:ef:b8:57:1f:0c:42:d7:c6:
94:8e:73:2d:df:c0:85:0f:68:29:41:ae:32:a7:5e:af:ba:80:
51:d8:4b:1c:dd:28:ca:0a:d7:4e:02:da:dc:ef:c5:3e:bd:57:
bf:f8:33:62:92:b5:e9:21:f5:ed:63:62:30:3e:02:0e:32:16:
34:31:79:4a:77:c8:fe:f2:4c:15:b6:ee:ea:7e:d5:17:0a:ea:
82:6b:f8:88:71:55:6a:e8:2a:ec:24:33:d1:d2:1e:62:67:d1:
f2:0f:db:c5:56:6e:00:b1:49:da:25:28:3b:ea:e7:9b:39:6e:
08:12:fc:64:60:00:1a:69:dc:27:e4:f3:f8:14:f0:93:fe:8b:
9a:1d:d9:8d:8a:5a:3f:d6:4a:c9:35:a3:13:70:8f:c3:61:8b:
1d:b1:00:2d:f0:4f:8a:38:fe:62:2a:8a:3f:33:16:d5:f0:64:
8a:7d:a3:3d:7e:83:e2:0d:b5:df:f2:3c:c0:98:54:2f:33:dc:
6c:c2:ff:8b:1e:93:90:51:20:e9:03:30:48:2f:e7:35:a1:a5:
d4:58:1a:eb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZPPw0s5W8VZBUf3VzIAz4ieMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3
MjRmNzUwHhcNMjQxMjE2MTM1ODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGFiYjZhNTUwMjhjMWY0NWFhNjMwMmYwZGI3ZGU0MThhNDUxZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4shbIwnj7mz3hsF/szFoZDGnKih
imvFchM3f2ODpAJtfdNMdIKephYtvscGWZS4Bp/sGapn7VR3BMdpUJoCLS8/osDV
AEr3myTBXgVa1ztIWglSvqUTLfy93cfLWV3+L5RUyp0zVYiIaVa8Lh6GtqH35X0X
4eDwdKaon09jcsHL7MqAwnA2k/qNPzyekFJLwhpg9p9450lLpv0YVsptMN5K876l
TdWiTgFwt4yCxPZr1Ft2c74Bf1iOcGtHpN4aWBHSiqvZ8FxrVqGzB8Krny+eTmsu
YGpFQQmYgA5rXCSkKZgY2mUwN4PhObF8Hm2X54jqzLQA4u4dSP4QX2zLpQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLCrtqVQKMH0WqYwLw233kGKRR/qMB8GA1UdIwQY
MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt
MzZkZTY1NzIzMmJlLzEvc0t1MnBWQW93ZlJhcGpBdkRiZmVRWXBGSC1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl
LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkhPVAwQA
wm73MA0GCSqGSIb3DQEBCwUAA4IBAQBI4r7dq/FpEFM40uGWNfGoF/WnM3SsIjji
TO9caYyI/k+cVGfMWNppar7TFRDZ77hXHwxC18aUjnMt38CFD2gpQa4yp16vuoBR
2Esc3SjKCtdOAtrc78U+vVe/+DNikrXpIfXtY2IwPgIOMhY0MXlKd8j+8kwVtu7q
ftUXCuqCa/iIcVVq6CrsJDPR0h5iZ9HyD9vFVm4AsUnaJSg76uebOW4IEvxkYAAa
adwn5PP4FPCT/ouaHdmNilo/1krJNaMTcI/DYYsdsQAt8E+KOP5iKoo/MxbV8GSK
faM9foPiDbXf8jzAmFQvM9xswv+LHpOQUSDpAzBIL+c1oaXUWBrr
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:42:56 2025 by rpki-client