Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bh8BH9TK7SkNV_ppFtI3myLKKIk.roa
File: bh8BH9TK7SkNV_ppFtI3myLKKIk.roa (raw, json)
Hash identifier: 9VksXA2IlR3ZvumY+j3qrN3qsNNFecNKO/knYzMpomw=
Subject key identifier: 6E:1F:01:1F:D4:CA:ED:29:0D:57:FA:69:16:D2:37:9B:22:CA:28:89
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019420683C56CF1128E4B14F02328E384AAE
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bh8BH9TK7SkNV_ppFtI3myLKKIk.roa
Signing time: Wed 01 Jan 2025 05:48:09 +0000
ROA not before: Wed 01 Jan 2025 05:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35112
IP address blocks: 193.233.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3c:56:cf:11:28:e4:b1:4f:02:32:8e:38:4a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e1f011fd4caed290d57fa6916d2379b22ca2889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:86:fe:76:0b:dd:96:2e:bf:bc:5b:ea:84:08:
95:93:09:d6:0b:20:4d:9e:88:9c:b4:72:dc:52:35:
db:31:41:8e:3c:ef:22:e1:81:a9:52:f9:17:bb:ab:
89:c7:e2:25:83:4d:a4:97:1e:10:0e:21:d3:1b:e7:
d8:f3:04:f0:c8:3e:19:89:aa:d5:7d:46:1b:f0:47:
4e:ad:3b:56:7b:10:20:ae:02:93:67:80:63:ab:1d:
2a:06:a3:c3:dc:14:cb:fd:27:d8:7c:eb:6e:50:30:
67:9e:7f:cc:39:3d:54:4e:af:a3:71:b0:ba:62:2f:
35:4c:5a:91:ec:a3:42:d0:09:36:ed:77:5e:7f:3c:
dd:ed:8e:02:da:09:70:ec:84:1c:04:ca:fc:01:82:
ec:21:a5:55:fe:30:82:49:ca:b9:14:a0:ff:8e:92:
af:b4:9e:a8:5d:14:88:b5:58:2d:2d:c0:4c:80:fa:
df:06:45:0e:5a:c6:99:56:0c:c1:47:b9:c4:1f:2f:
09:e3:69:3a:66:10:e0:c7:ef:2b:21:48:14:8f:f7:
c9:e3:8a:d1:be:4f:04:d4:e3:9a:8d:20:90:06:9c:
52:6b:82:5c:5e:fe:6d:82:34:0c:e9:1b:6a:18:e7:
da:80:ad:cb:7f:24:b2:60:77:b1:37:e6:ba:b7:19:
94:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1F:01:1F:D4:CA:ED:29:0D:57:FA:69:16:D2:37:9B:22:CA:28:89
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bh8BH9TK7SkNV_ppFtI3myLKKIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.19.0/24
Signature Algorithm: sha256WithRSAEncryption
54:54:07:a9:2b:8b:2a:73:79:e1:d2:fb:29:ab:52:c3:18:d2:
2a:45:6a:93:f6:5c:22:4b:23:34:97:4a:ff:27:c5:5f:57:cf:
c5:62:06:b2:2b:52:c9:57:8e:f9:20:c0:90:6c:fd:03:34:2d:
f4:4b:21:d6:1b:12:b7:18:37:a4:61:f5:6b:fb:83:49:f5:cd:
c6:4d:29:84:28:9f:e9:28:da:78:cf:9c:b3:24:a6:55:aa:61:
13:84:01:80:18:28:81:67:e6:cd:e0:66:bf:d8:45:cc:13:d4:
94:fd:67:df:b9:f1:86:97:aa:70:5a:57:8d:c8:d8:c1:f8:16:
f7:69:28:d0:6b:b4:20:b3:01:89:47:2a:ef:e0:34:74:a8:ae:
44:2b:27:7a:f9:d4:97:96:30:28:91:57:e1:2a:ec:ef:4a:ba:
90:1c:49:5b:91:b4:06:38:5d:30:4e:16:38:bf:74:92:73:b6:
ba:5f:a9:5b:ae:59:11:e5:d1:6b:cb:74:a6:38:9d:89:d4:8a:
7d:51:c6:e7:ba:26:87:70:94:fc:f8:e2:6f:87:b9:31:75:55:
3d:90:f5:86:8b:01:c4:6e:43:5e:43:8c:9e:b8:2f:ba:bd:0f:
f3:3e:6f:70:f3:33:81:b7:c4:ef:45:2a:3d:96:22:a3:54:b6:
1e:d4:47:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaDxWzxEo5LFPAjKOOEquMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjUwMTAxMDU0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTFmMDExZmQ0Y2FlZDI5MGQ1N2ZhNjkxNmQyMzc5YjIyY2EyODg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzob+dgvdli6/vFvqhAiVkwnWCyBN
noictHLcUjXbMUGOPO8i4YGpUvkXu6uJx+Ilg02klx4QDiHTG+fY8wTwyD4ZiarV
fUYb8EdOrTtWexAgrgKTZ4Bjqx0qBqPD3BTL/SfYfOtuUDBnnn/MOT1UTq+jcbC6
Yi81TFqR7KNC0Ak27Xdefzzd7Y4C2glw7IQcBMr8AYLsIaVV/jCCScq5FKD/jpKv
tJ6oXRSItVgtLcBMgPrfBkUOWsaZVgzBR7nEHy8J42k6ZhDgx+8rIUgUj/fJ44rR
vk8E1OOajSCQBpxSa4JcXv5tgjQM6RtqGOfagK3LfySyYHexN+a6txmU6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG4fAR/Uyu0pDVf6aRbSN5siyiiJMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvYmg4Qkg5VEs3U2tOVl9wcEZ0STNteUxLS0lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwekTMA0G
CSqGSIb3DQEBCwUAA4IBAQBUVAepK4sqc3nh0vspq1LDGNIqRWqT9lwiSyM0l0r/
J8VfV8/FYgayK1LJV475IMCQbP0DNC30SyHWGxK3GDekYfVr+4NJ9c3GTSmEKJ/p
KNp4z5yzJKZVqmEThAGAGCiBZ+bN4Ga/2EXME9SU/WffufGGl6pwWleNyNjB+Bb3
aSjQa7QgswGJRyrv4DR0qK5EKyd6+dSXljAokVfhKuzvSrqQHElbkbQGOF0wThY4
v3SSc7a6X6lbrlkR5dFry3SmOJ2J1Ip9UcbnuiaHcJT8+OJvh7kxdVU9kPWGiwHE
bkNeQ4yeuC+6vQ/zPm9w8zOBt8TvRSo9liKjVLYe1EeB
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:12 2025 by rpki-client