Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/BwUz6y6JLy2G0vxMaMaVRFgljhQ.roa
File: BwUz6y6JLy2G0vxMaMaVRFgljhQ.roa (raw, json)
Hash identifier: ERjwI5kcWVMw94DDt4+fBKpeHnbJjsNPe+papzMI7Bk=
Subject key identifier: 07:05:33:EB:2E:89:2F:2D:86:D2:FC:4C:68:C6:95:44:58:25:8E:14
Certificate issuer: /CN=eead7e8a2349f402a87bfb32ab6e9946f8c4c3f0
Certificate serial: 018CC6B9022900A03FF91A82853A1AB496B6
Authority key identifier: EE:AD:7E:8A:23:49:F4:02:A8:7B:FB:32:AB:6E:99:46:F8:C4:C3:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q1-iiNJ9AKoe_syq26ZRvjEw_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/BwUz6y6JLy2G0vxMaMaVRFgljhQ.roa
Signing time: Mon 01 Jan 2024 20:31:02 +0000
ROA not before: Mon 01 Jan 2024 20:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213183
IP address blocks: 194.147.93.0/24 maxlen: 24
194.147.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:02:29:00:a0:3f:f9:1a:82:85:3a:1a:b4:96:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eead7e8a2349f402a87bfb32ab6e9946f8c4c3f0
Validity
Not Before: Jan 1 20:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=070533eb2e892f2d86d2fc4c68c6954458258e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:49:7b:4c:ea:80:47:33:78:1e:b6:ac:76:19:
47:7e:8f:5e:8f:d0:19:20:29:89:0b:a0:4d:89:03:
41:a9:35:38:5f:ff:8e:ec:3a:91:84:66:b2:45:8b:
c4:38:73:94:56:f3:fc:98:86:e8:52:98:76:8e:1e:
ca:72:81:08:17:46:63:fe:ee:b1:4d:d5:e8:06:c5:
2c:61:d7:91:07:95:57:a2:66:54:4e:47:d4:cd:a2:
dd:bf:4a:3a:c2:59:a3:7f:55:ef:c2:0b:7d:0f:9d:
d3:b2:93:d7:59:b9:ce:2f:0b:88:55:e4:0f:9e:ed:
a3:28:e7:00:af:6b:dc:37:7d:dd:e2:c4:ef:9d:11:
e0:a8:9e:1c:aa:bd:0d:90:28:71:f1:8e:29:32:4e:
8b:58:83:b9:fb:c6:06:7b:59:c8:74:c4:e3:22:01:
4e:50:e7:da:98:e8:23:9d:4b:68:15:c5:32:39:db:
fa:53:da:1d:4e:a8:90:3b:83:89:2b:71:18:a5:d1:
55:1b:dc:8a:38:e1:5c:46:1d:b5:31:b6:4b:6f:f5:
48:5c:f2:b6:5b:60:04:b4:3e:43:1b:6e:7f:f9:bb:
75:7b:d2:45:42:ad:db:64:7a:01:2a:ac:d8:ec:cc:
9f:9a:56:f3:5e:23:f1:24:e6:29:aa:54:52:82:1a:
ab:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:05:33:EB:2E:89:2F:2D:86:D2:FC:4C:68:C6:95:44:58:25:8E:14
X509v3 Authority Key Identifier:
keyid:EE:AD:7E:8A:23:49:F4:02:A8:7B:FB:32:AB:6E:99:46:F8:C4:C3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q1-iiNJ9AKoe_syq26ZRvjEw_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/BwUz6y6JLy2G0vxMaMaVRFgljhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/7q1-iiNJ9AKoe_syq26ZRvjEw_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.93.0-194.147.94.255
Signature Algorithm: sha256WithRSAEncryption
7f:b7:69:ce:c4:72:f4:84:ae:8d:21:c1:39:0d:d9:16:7f:00:
d1:54:6c:14:a8:00:6e:93:1b:bb:01:5a:06:7d:89:41:46:eb:
64:f4:28:1a:18:44:cd:67:36:b1:30:2c:b5:ac:fa:92:c8:4f:
c6:bd:16:d5:40:04:00:a9:43:df:a6:11:87:19:b3:f8:4a:d7:
5d:a0:63:65:c7:8b:c4:fc:7c:01:d1:11:e4:32:9a:07:6d:d7:
fc:dd:79:ea:f1:73:dd:52:f6:a7:68:a9:d4:4a:87:50:51:59:
7c:3e:46:43:16:6e:5a:8f:3f:09:43:1e:c9:f8:c7:40:bb:fe:
19:b2:44:54:cf:44:ab:dc:13:aa:71:f4:cb:bf:97:70:cd:69:
29:86:18:47:aa:36:9a:bc:f6:b9:2b:95:b7:c2:26:95:25:d5:
e5:c4:f3:4a:5a:01:74:29:8d:5c:7b:d5:9a:73:18:ad:24:8b:
44:60:b2:19:4b:36:61:a1:1b:4a:ae:b1:92:37:66:0b:8e:00:
46:2c:19:34:cb:33:21:a0:ff:06:be:1f:95:34:f1:69:a7:d8:
5d:c1:53:86:01:ef:c5:cd:e1:c9:53:ff:be:66:da:b2:28:72:
38:c8:63:68:69:d2:ed:ce:72:80:0f:7c:1f:e0:11:73:66:f0:
6a:b1:4f:18
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzGuQIpAKA/+RqChToatJa2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYWQ3ZThhMjM0OWY0MDJhODdiZmIzMmFiNmU5OTQ2Zjhj
NGMzZjAwHhcNMjQwMTAxMjAzMTAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzA1MzNlYjJlODkyZjJkODZkMmZjNGM2OGM2OTU0NDU4MjU4ZTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUl7TOqARzN4HrasdhlHfo9ej9AZ
ICmJC6BNiQNBqTU4X/+O7DqRhGayRYvEOHOUVvP8mIboUph2jh7KcoEIF0Zj/u6x
TdXoBsUsYdeRB5VXomZUTkfUzaLdv0o6wlmjf1Xvwgt9D53TspPXWbnOLwuIVeQP
nu2jKOcAr2vcN33d4sTvnRHgqJ4cqr0NkChx8Y4pMk6LWIO5+8YGe1nIdMTjIgFO
UOfamOgjnUtoFcUyOdv6U9odTqiQO4OJK3EYpdFVG9yKOOFcRh21MbZLb/VIXPK2
W2AEtD5DG25/+bt1e9JFQq3bZHoBKqzY7MyfmlbzXiPxJOYpqlRSghqrmQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAcFM+suiS8thtL8TGjGlURYJY4UMB8GA1UdIwQY
MBaAFO6tfoojSfQCqHv7MqtumUb4xMPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3ExLWlpTko5QUtvZV9zeXEyNlpSdmpFd19BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MTEzYzctZmMzYi00N2MwLWJjYTYt
ZmUzOWEyNTUzYTVlLzEvQndVejZ5NkpMeTJHMHZ4TWFNYVZSRmdsamhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85MTEzYzctZmMzYi00N2MwLWJjYTYtZmUzOWEyNTUzYTVl
LzEvN3ExLWlpTko5QUtvZV9zeXEyNlpSdmpFd19BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADCk10D
BADCk14wDQYJKoZIhvcNAQELBQADggEBAH+3ac7EcvSEro0hwTkN2RZ/ANFUbBSo
AG6TG7sBWgZ9iUFG62T0KBoYRM1nNrEwLLWs+pLIT8a9FtVABACpQ9+mEYcZs/hK
112gY2XHi8T8fAHREeQymgdt1/zdeerxc91S9qdoqdRKh1BRWXw+RkMWblqPPwlD
Hsn4x0C7/hmyRFTPRKvcE6px9Mu/l3DNaSmGGEeqNpq89rkrlbfCJpUl1eXE80pa
AXQpjVx71ZpzGK0ki0RgshlLNmGhG0qusZI3ZguOAEYsGTTLMyGg/wa+H5U08Wmn
2F3BU4YB78XN4clT/75m2rIocjjIY2hp0u3OcoAPfB/gEXNm8GqxTxg=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:57 2025 by rpki-client