Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/BlZTyn453CV0yZnKwe_T35RBLj8.roa
File: BlZTyn453CV0yZnKwe_T35RBLj8.roa (raw, json)
Hash identifier: PAa8WNraC9MFUR+BnYs7v6ED2lFQD5yfvCpmA0N6q0g=
Subject key identifier: 06:56:53:CA:7E:39:DC:25:74:C9:99:CA:C1:EF:D3:DF:94:41:2E:3F
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019426D9599D8AA381514385544F07A74986
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/BlZTyn453CV0yZnKwe_T35RBLj8.roa
Signing time: Thu 02 Jan 2025 11:49:25 +0000
ROA not before: Thu 02 Jan 2025 11:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 94.247.139.0/24 maxlen: 24
188.244.123.0/24 maxlen: 24
193.9.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:59:9d:8a:a3:81:51:43:85:54:4f:07:a7:49:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jan 2 11:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=065653ca7e39dc2574c999cac1efd3df94412e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:76:12:dd:21:a4:64:be:bb:fb:95:9a:72:51:
d2:93:5f:2b:40:db:d1:71:90:7b:00:62:2c:5f:f5:
a0:ed:c5:fb:15:92:13:9a:cb:0f:89:a4:57:bd:ed:
31:f2:62:f5:e7:21:92:b6:80:1d:91:ec:8d:bb:8c:
0c:91:aa:13:7d:46:a8:fa:79:39:cf:09:16:84:56:
5d:90:b1:ce:db:90:a4:64:eb:da:fb:1f:fe:30:61:
27:7b:62:2f:84:30:7b:c9:a8:f2:64:0e:e7:70:34:
c9:3f:b8:7e:90:b1:02:da:d1:2f:5c:13:fa:6a:f1:
6a:f2:83:d7:ec:e2:96:ee:da:6b:59:02:7c:68:00:
9d:41:af:98:58:7b:4b:a9:6a:70:5b:ff:34:9f:b3:
d0:ac:29:0a:98:38:64:86:69:b6:f2:0e:74:1b:12:
df:7c:62:19:79:f8:4d:fa:65:f6:d8:31:a5:b2:f0:
92:f5:83:74:78:c9:70:29:b7:04:bf:75:c8:de:2b:
9a:52:8f:3a:52:3b:38:54:75:18:3d:ec:c4:03:32:
fa:06:95:ce:cc:16:b2:5e:c1:6b:16:ee:75:47:2e:
37:2f:df:44:e5:1d:28:95:7c:e5:4b:01:af:e2:fc:
1d:f8:f0:f5:24:11:5f:a9:c8:f8:81:df:d9:58:33:
be:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:56:53:CA:7E:39:DC:25:74:C9:99:CA:C1:EF:D3:DF:94:41:2E:3F
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/BlZTyn453CV0yZnKwe_T35RBLj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.139.0/24
188.244.123.0/24
193.9.124.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:36:b1:55:bf:c3:af:55:71:76:9b:7e:20:2c:f2:da:9a:59:
2a:80:95:3d:9c:ec:f3:41:a9:59:7a:a9:34:ac:ce:40:8d:b4:
f4:fe:ca:ca:10:0a:12:4f:22:9d:ad:77:6a:4e:de:4b:4a:f7:
0b:08:9c:4b:cd:88:e9:63:de:78:bd:cd:1c:bf:cc:f6:5e:fc:
64:42:3f:25:2f:ac:8f:16:a9:a2:30:a0:ff:66:fe:a6:5c:07:
f8:24:39:92:c5:8f:6d:49:5b:26:70:fb:c2:9c:db:9a:82:ac:
b6:55:ea:8d:b0:fc:5e:f1:12:a3:af:f0:ef:9f:a8:dd:37:ba:
af:39:4b:c0:e8:7f:9e:7d:4b:a0:32:12:c6:12:db:00:77:65:
4d:73:7b:4c:87:f0:15:65:97:32:c0:69:84:99:ab:3a:6b:1a:
15:9c:e5:8e:7c:70:a2:bd:9a:90:6c:98:70:00:c2:12:72:35:
c6:59:d3:ac:98:63:b3:99:c8:ff:15:c2:87:98:d4:e6:cf:8a:
2a:ff:fa:a3:77:d9:03:db:65:05:45:37:92:ad:45:0a:af:d6:
17:00:e7:e3:37:06:2d:46:e4:d0:56:ba:f2:21:28:62:0d:41:
fa:47:77:a6:3a:5c:3b:65:43:ee:40:90:f6:11:9e:ca:5f:09:
c6:cf:35:05
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQm2VmdiqOBUUOFVE8Hp0mGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky
MGMzZDkwHhcNMjUwMTAyMTE0OTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjU2NTNjYTdlMzlkYzI1NzRjOTk5Y2FjMWVmZDNkZjk0NDEyZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXYS3SGkZL67+5WaclHSk18rQNvR
cZB7AGIsX/Wg7cX7FZITmssPiaRXve0x8mL15yGStoAdkeyNu4wMkaoTfUao+nk5
zwkWhFZdkLHO25CkZOva+x/+MGEne2IvhDB7yajyZA7ncDTJP7h+kLEC2tEvXBP6
avFq8oPX7OKW7tprWQJ8aACdQa+YWHtLqWpwW/80n7PQrCkKmDhkhmm28g50GxLf
fGIZefhN+mX22DGlsvCS9YN0eMlwKbcEv3XI3iuaUo86Ujs4VHUYPezEAzL6BpXO
zBayXsFrFu51Ry43L99E5R0olXzlSwGv4vwd+PD1JBFfqcj4gd/ZWDO+DwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAZWU8p+OdwldMmZysHv09+UQS4/MB8GA1UdIwQY
MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt
NGZiNTU5YjNiOWIzLzEvQmxaVHluNDUzQ1YweVpuS3dlX1QzNVJCTGo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz
LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXveLAwQA
vPR7AwQAwQl8MA0GCSqGSIb3DQEBCwUAA4IBAQCuNrFVv8OvVXF2m34gLPLamlkq
gJU9nOzzQalZeqk0rM5AjbT0/srKEAoSTyKdrXdqTt5LSvcLCJxLzYjpY954vc0c
v8z2XvxkQj8lL6yPFqmiMKD/Zv6mXAf4JDmSxY9tSVsmcPvCnNuagqy2VeqNsPxe
8RKjr/Dvn6jdN7qvOUvA6H+efUugMhLGEtsAd2VNc3tMh/AVZZcywGmEmas6axoV
nOWOfHCivZqQbJhwAMIScjXGWdOsmGOzmcj/FcKHmNTmz4oq//qjd9kD22UFRTeS
rUUKr9YXAOfjNwYtRuTQVrryIShiDUH6R3emOlw7ZUPuQJD2EZ7KXwnGzzUF
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:40 2025 by rpki-client