Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/s0YPJhQDyx1gM7lAAhTzR3KFSUc.roa
File: s0YPJhQDyx1gM7lAAhTzR3KFSUc.roa (raw, json)
Hash identifier: 34z7aO9lF4JD5wJn8fdcblqhd3SI98WWnHOKkWURLjk=
Subject key identifier: B3:46:0F:26:14:03:CB:1D:60:33:B9:40:02:14:F3:47:72:85:49:47
Certificate issuer: /CN=f21d5f37506de4905e173c0f581150817250efe1
Certificate serial: F68742
Authority key identifier: F2:1D:5F:37:50:6D:E4:90:5E:17:3C:0F:58:11:50:81:72:50:EF:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/s0YPJhQDyx1gM7lAAhTzR3KFSUc.roa
Signing time: Sat 01 Jan 2022 04:52:30 +0000
ROA not before: Sat 01 Jan 2022 04:52:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.69.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16156482 (0xf68742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21d5f37506de4905e173c0f581150817250efe1
Validity
Not Before: Jan 1 04:52:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3460f261403cb1d6033b9400214f34772854947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:18:37:4e:ea:c9:22:53:9e:61:5e:5a:00:
48:dd:00:51:46:b6:fd:fa:81:81:8a:fd:63:cb:7a:
0b:3e:b6:6a:b6:ba:d3:e2:aa:8d:e6:07:04:3d:ff:
c0:67:6a:39:1d:04:18:18:69:88:bb:3f:94:05:67:
b5:0f:d9:8b:fa:97:1a:95:15:cc:67:5b:7f:60:d7:
bf:46:27:6e:ab:55:fe:95:75:e2:6f:8a:ae:cb:1a:
d1:8e:7e:e1:08:d0:5e:c5:f2:6e:b6:4f:82:55:04:
31:77:19:64:35:9b:42:9e:95:54:0f:3c:5d:3e:59:
34:a0:f7:bf:c6:28:28:aa:94:5c:da:8f:9d:e0:ad:
f7:fb:b6:cb:74:cc:61:fa:be:55:61:5f:38:8f:43:
2c:7c:30:4a:f9:04:e9:00:c6:0f:c5:6e:d0:e6:1a:
42:aa:80:2c:08:48:ab:6e:ee:c2:15:1c:56:fb:a2:
95:7f:80:4d:4e:20:82:27:1b:3d:f9:76:4c:1a:d2:
36:09:88:ff:d4:95:09:24:2d:32:26:c9:b4:0d:97:
73:13:7a:08:b4:95:cd:62:15:7c:16:60:5b:90:05:
64:7c:6c:96:6d:9c:68:38:a4:92:e7:33:b8:23:b2:
2d:00:e7:78:a0:4e:5c:2c:40:f3:80:70:01:bb:28:
a0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:46:0F:26:14:03:CB:1D:60:33:B9:40:02:14:F3:47:72:85:49:47
X509v3 Authority Key Identifier:
keyid:F2:1D:5F:37:50:6D:E4:90:5E:17:3C:0F:58:11:50:81:72:50:EF:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/s0YPJhQDyx1gM7lAAhTzR3KFSUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.160.0/24
Signature Algorithm: sha256WithRSAEncryption
48:b4:04:56:38:76:f3:2b:d0:d9:a4:19:07:34:4f:55:a8:f1:
65:8f:bc:fe:5c:fd:ce:60:5d:5e:8d:51:de:6b:8a:da:83:cb:
54:fe:73:60:d8:4e:63:f6:ff:ac:12:c2:32:0f:93:b3:f2:cb:
6f:fc:31:61:81:58:d8:8f:70:44:9d:39:2b:e4:61:1a:85:b6:
ac:43:79:6c:bf:63:7f:81:a3:35:be:26:c1:dd:70:c8:a0:18:
1e:f8:3f:47:9d:cb:dc:db:aa:5b:fa:ad:8e:e8:d8:d6:58:a1:
d3:e5:e4:f2:6f:e3:7b:13:4b:1a:2f:b2:44:65:64:2e:04:a9:
e4:81:89:db:6e:a7:2a:f2:0a:3b:e8:4e:17:c2:eb:59:3d:db:
81:67:62:8e:f9:14:3e:e7:f8:30:53:6f:79:ba:0b:bf:4d:ae:
f5:55:07:e3:4a:e5:e5:b2:b2:30:23:75:9a:cb:f6:44:d8:42:
25:88:6f:da:7a:0f:26:fc:b9:ad:66:42:c8:dc:87:75:af:26:
c5:b5:89:fd:1f:85:7f:dc:dc:95:fa:bf:68:3d:a6:7c:a6:29:
36:29:05:99:d5:51:27:f3:97:7a:cc:1a:97:19:8f:c6:3b:3d:
75:e4:ee:b6:c8:62:97:b6:d4:a9:20:47:47:53:c0:60:e0:05:
bd:c6:f6:ac
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAPaHQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MjFkNWYzNzUwNmRlNDkwNWUxNzNjMGY1ODExNTA4MTcyNTBlZmUxMB4XDTIyMDEw
MTA0NTIzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjM0NjBmMjYxNDAz
Y2IxZDYwMzNiOTQwMDIxNGYzNDc3Mjg1NDk0NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKuEGDdO6skiU55hXloASN0AUUa2/fqBgYr9Y8t6Cz62ara6
0+KqjeYHBD3/wGdqOR0EGBhpiLs/lAVntQ/Zi/qXGpUVzGdbf2DXv0YnbqtV/pV1
4m+Krssa0Y5+4QjQXsXybrZPglUEMXcZZDWbQp6VVA88XT5ZNKD3v8YoKKqUXNqP
neCt9/u2y3TMYfq+VWFfOI9DLHwwSvkE6QDGD8Vu0OYaQqqALAhIq27uwhUcVvui
lX+ATU4ggicbPfl2TBrSNgmI/9SVCSQtMibJtA2XcxN6CLSVzWIVfBZgW5AFZHxs
lm2caDikkuczuCOyLQDneKBOXCxA84BwAbsooFsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSzRg8mFAPLHWAzuUACFPNHcoVJRzAfBgNVHSMEGDAWgBTyHV83UG3kkF4X
PA9YEVCBclDv4TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhoMWZOMUJ0NUpCZUZ6d1BXQkZRZ1hKUTctRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvNmM0ZDIyLThlZDctNDg0NC1hMjk4LTIxMjU5ZGZiNmFjMC8x
L3MwWVBKaFFEeXgxZ003bEFBaFR6UjNLRlNVYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
NmM0ZDIyLThlZDctNDg0NC1hMjk4LTIxMjU5ZGZiNmFjMC8xLzhoMWZOMUJ0NUpC
ZUZ6d1BXQkZRZ1hKUTctRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMJFoDANBgkqhkiG9w0BAQsFAAOC
AQEASLQEVjh28yvQ2aQZBzRPVajxZY+8/lz9zmBdXo1R3muK2oPLVP5zYNhOY/b/
rBLCMg+Ts/LLb/wxYYFY2I9wRJ05K+RhGoW2rEN5bL9jf4GjNb4mwd1wyKAYHvg/
R53L3NuqW/qtjujY1lih0+Xk8m/jexNLGi+yRGVkLgSp5IGJ226nKvIKO+hOF8Lr
WT3bgWdijvkUPuf4MFNveboLv02u9VUH40rl5bKyMCN1msv2RNhCJYhv2noPJvy5
rWZCyNyHda8mxbWJ/R+Ff9zclfq/aD2mfKYpNikFmdVRJ/OXeswalxmPxjs9deTu
tshil7bUqSBHR1PAYOAFvcb2rA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:46 2025 by rpki-client