Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/hJ_BTbBrrE1DP__8DDhe52SVKU4.roa
File: hJ_BTbBrrE1DP__8DDhe52SVKU4.roa (raw, json)
Hash identifier: vQOjBEpXapD1L5OKTFCIZsaTYTd3BkhoB3Yz7me/w6A=
Subject key identifier: 84:9F:C1:4D:B0:6B:AC:4D:43:3F:FF:FC:0C:38:5E:E7:64:95:29:4E
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019420680F20327FFF9F04C5BD8CA08B1602
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/hJ_BTbBrrE1DP__8DDhe52SVKU4.roa
Signing time: Wed 01 Jan 2025 05:47:57 +0000
ROA not before: Wed 01 Jan 2025 05:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211743
IP address blocks: 195.26.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:0f:20:32:7f:ff:9f:04:c5:bd:8c:a0:8b:16:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 05:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=849fc14db06bac4d433ffffc0c385ee76495294e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:33:52:a4:cd:fb:96:1a:83:35:75:b7:de:
16:f7:8a:d4:cb:e4:3a:7c:5e:12:82:18:d2:6e:b7:
14:34:fb:34:eb:70:ef:be:9e:de:1a:d1:eb:db:71:
d1:83:fb:33:61:91:92:a6:e8:37:c2:43:92:29:6e:
c3:66:0e:3a:bd:8b:39:12:8b:3b:6b:a7:95:8e:35:
03:ac:bd:12:59:e9:2a:a4:1f:6e:d0:e3:02:48:cc:
a6:b3:2e:36:78:67:8b:71:07:09:e6:ef:ed:48:90:
00:df:bc:0b:52:2f:74:4c:ec:50:65:34:ae:b5:39:
36:79:71:8d:27:e9:d4:f8:58:be:e1:63:85:c4:dd:
89:e6:66:48:16:9b:6e:60:60:b2:aa:10:6a:15:81:
1c:af:b3:1a:9b:d6:f6:83:99:49:d8:6c:d9:44:f1:
7c:5a:1d:a4:19:ec:81:56:39:72:39:07:3e:f2:15:
65:54:56:90:74:ff:c8:9b:bf:ee:9c:94:51:18:e7:
c7:fd:f9:36:a6:7b:d0:9e:cd:68:84:b9:70:8b:c4:
47:db:ae:b6:f0:cd:11:d1:74:4b:2e:56:1c:a2:fd:
55:ce:f2:75:a8:a5:4b:ec:dc:b1:ba:5a:55:d8:a5:
4e:d6:bc:95:a5:98:35:7a:c5:77:2e:89:e9:f8:a0:
34:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9F:C1:4D:B0:6B:AC:4D:43:3F:FF:FC:0C:38:5E:E7:64:95:29:4E
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/hJ_BTbBrrE1DP__8DDhe52SVKU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.6.0/24
Signature Algorithm: sha256WithRSAEncryption
67:a2:79:1a:d9:04:7a:2b:a2:5b:03:96:ac:db:d9:03:16:86:
33:73:de:2a:09:a2:17:bc:5b:99:6a:f3:fd:58:95:4c:0f:cb:
75:36:d7:a4:07:64:e4:1d:bd:6b:e8:c4:ea:d7:18:62:38:a4:
c7:d9:3a:3d:f1:38:70:03:d8:2f:cc:ca:d4:93:dc:e9:e3:76:
9c:e8:6a:8f:6b:5c:ec:a1:e4:56:b2:96:63:0d:9f:bf:29:e0:
af:56:00:f7:29:24:cd:ea:be:fe:18:73:56:db:0c:ed:a7:56:
a9:13:c5:a4:fc:72:05:29:3c:8a:82:b8:ab:71:23:86:0e:b9:
80:ce:24:0e:2f:ae:ac:59:6a:75:42:20:fe:f4:09:1c:58:d2:
5e:f3:17:16:19:4d:5d:43:f3:98:a8:07:4c:c4:60:e6:8f:3f:
c7:a0:61:a1:30:51:4d:78:10:3b:0c:f9:19:ab:6d:3d:02:ef:
c7:45:87:cc:fa:9f:d5:df:46:08:33:cf:0c:b6:aa:f1:8b:07:
c0:a9:ad:47:49:e5:f0:2f:fc:f8:3a:80:38:8a:4d:52:5d:60:
6f:20:50:71:05:1f:8d:cd:11:89:46:3a:b5:23:6d:3b:69:4f:
b5:fd:5e:08:99:d5:a7:9c:54:eb:e6:fd:36:73:4a:f5:f4:45:
ab:2e:8d:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaA8gMn//nwTFvYygixYCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjUwMTAxMDU0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDlmYzE0ZGIwNmJhYzRkNDMzZmZmZmMwYzM4NWVlNzY0OTUyOTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyszUqTN+5YagzV1t94W94rUy+Q6
fF4SghjSbrcUNPs063Dvvp7eGtHr23HRg/szYZGSpug3wkOSKW7DZg46vYs5Eos7
a6eVjjUDrL0SWekqpB9u0OMCSMymsy42eGeLcQcJ5u/tSJAA37wLUi90TOxQZTSu
tTk2eXGNJ+nU+Fi+4WOFxN2J5mZIFptuYGCyqhBqFYEcr7Mam9b2g5lJ2GzZRPF8
Wh2kGeyBVjlyOQc+8hVlVFaQdP/Im7/unJRRGOfH/fk2pnvQns1ohLlwi8RH2662
8M0R0XRLLlYcov1VzvJ1qKVL7NyxulpV2KVO1ryVpZg1esV3Lonp+KA0TwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFISfwU2wa6xNQz///Aw4XudklSlOMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvaEpfQlRiQnJyRTFEUF9fOEREaGU1MlNWS1U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxoGMA0G
CSqGSIb3DQEBCwUAA4IBAQBnonka2QR6K6JbA5as29kDFoYzc94qCaIXvFuZavP9
WJVMD8t1NtekB2TkHb1r6MTq1xhiOKTH2To98ThwA9gvzMrUk9zp43ac6GqPa1zs
oeRWspZjDZ+/KeCvVgD3KSTN6r7+GHNW2wztp1apE8Wk/HIFKTyKgrircSOGDrmA
ziQOL66sWWp1QiD+9AkcWNJe8xcWGU1dQ/OYqAdMxGDmjz/HoGGhMFFNeBA7DPkZ
q209Au/HRYfM+p/V30YIM88MtqrxiwfAqa1HSeXwL/z4OoA4ik1SXWBvIFBxBR+N
zRGJRjq1I207aU+1/V4ImdWnnFTr5v02c0r19EWrLo0m
-----END CERTIFICATE-----
Generated at Fri Apr 11 15:11:05 2025 by rpki-client