Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bZcnS9F2h2AhVtlBnt-fByiYIVY.roa
File: bZcnS9F2h2AhVtlBnt-fByiYIVY.roa (raw, json)
Hash identifier: krzOIXxoFwxvoIYco5n6+50qyJ5RkeDmU3dlzxtJGiQ=
Subject key identifier: 6D:97:27:4B:D1:76:87:60:21:56:D9:41:9E:DF:9F:07:28:98:21:56
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0195957382135CA7E48A8FBEBD5036B5DCDC
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bZcnS9F2h2AhVtlBnt-fByiYIVY.roa
Signing time: Fri 14 Mar 2025 16:18:49 +0000
ROA not before: Fri 14 Mar 2025 16:18:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50053
IP address blocks: 147.45.114.0/24 maxlen: 24
193.233.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:95:73:82:13:5c:a7:e4:8a:8f:be:bd:50:36:b5:dc:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Mar 14 16:18:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d97274bd17687602156d9419edf9f0728982156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5f:22:d1:2d:d7:a6:ba:06:05:75:bd:97:44:
b2:c8:b2:b3:88:b0:36:e5:2c:cd:d2:b5:66:76:43:
72:20:c8:0f:ae:41:d3:24:e3:e5:09:a7:81:d6:f3:
f5:73:b7:be:3c:46:d2:70:98:87:bc:f9:98:5b:c4:
eb:7b:d3:a3:37:a1:62:f7:30:f1:10:4c:13:3b:ce:
3d:de:98:9f:4d:3e:e8:c9:80:07:3a:13:e0:f7:d5:
0b:7b:10:8e:20:46:d9:b2:d4:89:e6:b9:ea:c8:3a:
53:8d:fc:11:25:2e:89:56:f2:0e:2c:4b:62:7d:dd:
ea:6b:33:fd:7e:73:70:ac:33:57:e9:4f:65:20:04:
2a:c9:5e:0e:f6:66:cc:bc:60:03:b0:dc:44:da:7b:
cc:c6:d1:25:36:63:7c:18:72:40:cc:37:c4:ea:33:
23:66:38:cf:2e:47:d8:e0:05:b9:84:41:cc:6d:69:
e6:e7:72:7c:99:c2:e2:f5:49:ec:68:24:7e:4e:04:
6b:18:9c:92:49:29:df:f2:03:df:31:32:58:20:bf:
f2:27:59:d4:9c:6c:e1:51:ba:f5:18:d7:18:a8:15:
66:ef:aa:b4:31:ad:a6:bf:a6:4f:f6:00:c0:e1:ff:
bc:4a:95:b1:f9:29:bc:b9:ce:cd:0b:c9:cd:f8:07:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:97:27:4B:D1:76:87:60:21:56:D9:41:9E:DF:9F:07:28:98:21:56
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bZcnS9F2h2AhVtlBnt-fByiYIVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.114.0/24
193.233.87.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:37:c3:bc:a8:fe:f8:8a:99:a2:a5:10:06:09:8a:46:0d:d6:
b1:ad:66:0b:f5:ef:d0:0d:85:d8:67:84:0b:00:ce:39:51:f4:
20:65:0d:9d:b6:8b:14:43:7a:7a:00:9b:85:a0:dd:74:5b:93:
8b:9e:79:04:6c:ba:b3:ff:d7:6e:93:02:5d:3e:41:cc:29:99:
21:b0:12:26:49:bc:7b:bb:e3:6a:86:18:b6:88:4b:53:de:fc:
0d:b8:2e:a8:f4:15:0f:92:59:0f:23:85:ff:77:5d:53:af:72:
7f:04:ef:9b:33:d7:cf:a1:a6:5c:b1:02:63:0c:81:76:34:d6:
cd:28:f7:08:eb:49:d8:82:aa:b2:02:dd:5c:4c:f5:96:b0:40:
b1:fe:e0:41:3d:b5:8e:28:21:b9:8f:b0:22:23:b5:1d:64:2b:
30:e5:73:bd:93:c7:31:77:78:9d:70:f2:91:9d:18:f7:c6:a8:
00:9f:8b:69:67:7f:10:bf:11:8c:24:74:ff:e2:eb:45:2e:d2:
40:bc:70:c8:93:24:22:48:be:42:c4:21:2e:93:c9:4e:c1:36:
e9:b9:3c:86:db:4a:c0:5b:bb:bc:87:a3:32:fa:01:61:1a:3c:
c6:a1:e1:fb:4d:bd:a0:3a:6b:8f:4c:5b:a9:ab:5a:0c:f2:c0:
20:e2:eb:80
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZWVc4ITXKfkio++vVA2tdzcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjUwMzE0MTYxODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDk3Mjc0YmQxNzY4NzYwMjE1NmQ5NDE5ZWRmOWYwNzI4OTgyMTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l8i0S3XproGBXW9l0SyyLKziLA2
5SzN0rVmdkNyIMgPrkHTJOPlCaeB1vP1c7e+PEbScJiHvPmYW8Tre9OjN6Fi9zDx
EEwTO8493pifTT7oyYAHOhPg99ULexCOIEbZstSJ5rnqyDpTjfwRJS6JVvIOLEti
fd3qazP9fnNwrDNX6U9lIAQqyV4O9mbMvGADsNxE2nvMxtElNmN8GHJAzDfE6jMj
ZjjPLkfY4AW5hEHMbWnm53J8mcLi9UnsaCR+TgRrGJySSSnf8gPfMTJYIL/yJ1nU
nGzhUbr1GNcYqBVm76q0Ma2mv6ZP9gDA4f+8SpWx+Sm8uc7NC8nN+AfgdwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG2XJ0vRdodgIVbZQZ7fnwcomCFWMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvYlpjblM5RjJoMkFoVnRsQm50LWZCeWlZSVZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAky1yAwQA
welXMA0GCSqGSIb3DQEBCwUAA4IBAQA/N8O8qP74ipmipRAGCYpGDdaxrWYL9e/Q
DYXYZ4QLAM45UfQgZQ2dtosUQ3p6AJuFoN10W5OLnnkEbLqz/9dukwJdPkHMKZkh
sBImSbx7u+Nqhhi2iEtT3vwNuC6o9BUPklkPI4X/d11Tr3J/BO+bM9fPoaZcsQJj
DIF2NNbNKPcI60nYgqqyAt1cTPWWsECx/uBBPbWOKCG5j7AiI7UdZCsw5XO9k8cx
d3idcPKRnRj3xqgAn4tpZ38QvxGMJHT/4utFLtJAvHDIkyQiSL5CxCEuk8lOwTbp
uTyG20rAW7u8h6My+gFhGjzGoeH7Tb2gOmuPTFupq1oM8sAg4uuA
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:30 2025 by rpki-client