Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/EyG9e2Y-kxvmuOydUJDDgq2-Jvs.roa
File: EyG9e2Y-kxvmuOydUJDDgq2-Jvs.roa (raw, json)
Hash identifier: dN8Yi0kIJplgFqGhn/wQEirsJIam2YZVzXUASivGFy0=
Subject key identifier: 13:21:BD:7B:66:3E:93:1B:E6:B8:EC:9D:50:90:C3:82:AD:BE:26:FB
Certificate issuer: /CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Certificate serial: 01942220094BDA35F281BE40778508790F9E
Authority key identifier: BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/EyG9e2Y-kxvmuOydUJDDgq2-Jvs.roa
Signing time: Wed 01 Jan 2025 13:48:32 +0000
ROA not before: Wed 01 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33918
IP address blocks: 194.6.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:09:4b:da:35:f2:81:be:40:77:85:08:79:0f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Validity
Not Before: Jan 1 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1321bd7b663e931be6b8ec9d5090c382adbe26fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ac:05:5c:4e:8f:18:47:de:b6:43:d4:a5:53:
ae:ae:2e:56:fe:cf:44:46:57:1d:7e:f3:e2:59:32:
df:6a:d1:f4:43:8e:5e:96:81:43:8f:a7:79:db:44:
70:2c:c3:88:e4:9a:ec:91:1b:1b:27:a3:3f:a9:67:
a9:38:ac:f7:5f:6e:be:4c:98:28:3e:8e:bb:91:ed:
7d:9a:0a:f4:ad:9f:ac:48:f0:30:40:aa:a4:02:d5:
0c:aa:ef:21:54:39:35:46:e9:b2:5a:17:af:79:82:
04:ac:02:57:94:43:91:de:9f:25:30:41:bd:1d:d1:
cf:79:1d:10:88:76:37:dd:49:a6:6f:b3:95:1a:de:
25:04:33:c7:b3:5e:44:86:71:66:3b:f4:22:98:db:
5f:8d:0b:a7:1d:95:0b:75:eb:37:07:78:88:b9:42:
e8:f1:ff:c0:ff:7a:13:20:b7:47:75:d2:86:25:49:
35:58:c7:c2:f3:be:c2:ce:25:ed:68:f5:10:21:7d:
54:88:ca:32:1e:a9:b3:ce:b3:90:b1:3c:50:26:85:
20:85:85:2c:9b:7d:82:75:4f:81:60:98:d0:1f:ca:
0c:ea:d3:00:1a:0a:38:b7:dd:94:9a:b6:bf:03:7a:
e9:15:ed:c9:20:bb:aa:76:70:a5:a8:35:28:7b:48:
75:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:21:BD:7B:66:3E:93:1B:E6:B8:EC:9D:50:90:C3:82:AD:BE:26:FB
X509v3 Authority Key Identifier:
keyid:BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/EyG9e2Y-kxvmuOydUJDDgq2-Jvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.242.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:35:aa:06:c1:9a:17:37:64:a8:6b:28:ab:49:e6:cd:7d:b9:
51:66:00:07:da:71:b8:1c:ac:4b:bf:73:a3:da:af:c9:ac:2d:
65:d5:4e:2a:61:df:ad:5e:95:d0:e7:34:30:1e:49:35:05:b8:
83:89:9c:8f:a3:b5:bf:5a:0f:37:9a:37:91:dd:18:0b:f1:8c:
9f:11:a3:12:34:43:18:90:3f:82:3e:da:85:37:e8:04:8d:a8:
f1:9f:53:9b:64:d0:bb:14:6e:23:33:01:28:67:4f:b8:89:bb:
d5:9d:4c:db:03:21:c9:3b:64:44:80:36:3d:ad:78:3b:19:61:
69:42:04:d7:95:12:ff:81:37:fa:0d:c8:cc:a9:04:c7:c2:ab:
c7:28:4c:33:1f:ad:6c:06:d5:63:1c:f1:af:50:a7:a7:cd:ca:
0f:6a:81:8d:3c:03:e8:d4:c0:cf:7c:18:d6:02:e8:94:ee:3c:
93:09:b5:b8:be:d0:86:5a:af:91:f9:d2:53:57:a5:e7:f3:a3:
ac:dd:90:d4:f0:56:0d:05:b6:87:46:ab:3d:d4:2c:59:ed:1e:
1e:c0:0f:7d:e4:c1:60:09:15:87:b0:84:0f:67:90:ec:02:4e:
d7:14:74:b9:ae:57:f3:75:48:28:15:fd:f8:ba:f8:c3:30:9f:
57:d8:f0:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIAlL2jXygb5Ad4UIeQ+eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZTE5NjNhNDA0YTczMjQwY2FkMTE2Yjk2ODhiZjEzMTBm
MmZlNWEwHhcNMjUwMTAxMTM0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzIxYmQ3YjY2M2U5MzFiZTZiOGVjOWQ1MDkwYzM4MmFkYmUyNmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqwFXE6PGEfetkPUpVOuri5W/s9E
RlcdfvPiWTLfatH0Q45eloFDj6d520RwLMOI5JrskRsbJ6M/qWepOKz3X26+TJgo
Po67ke19mgr0rZ+sSPAwQKqkAtUMqu8hVDk1RumyWheveYIErAJXlEOR3p8lMEG9
HdHPeR0QiHY33Ummb7OVGt4lBDPHs15EhnFmO/QimNtfjQunHZULdes3B3iIuULo
8f/A/3oTILdHddKGJUk1WMfC877CziXtaPUQIX1UiMoyHqmzzrOQsTxQJoUghYUs
m32CdU+BYJjQH8oM6tMAGgo4t92Umra/A3rpFe3JILuqdnClqDUoe0h1qQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBMhvXtmPpMb5rjsnVCQw4Ktvib7MB8GA1UdIwQY
MBaAFLzhljpASnMkDK0Ra5aIvxMQ8v5aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk9HV09rQktjeVFNclJGcmxvaV9FeER5X2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iMjUyNTYtMGI5Mi00MDQ4LWFmNDct
OWM5MzMwYmQzNjdlLzEvRXlHOWUyWS1reHZtdU95ZFVKRERncTItSnZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iMjUyNTYtMGI5Mi00MDQ4LWFmNDctOWM5MzMwYmQzNjdl
LzEvdk9HV09rQktjeVFNclJGcmxvaV9FeER5X2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgbyMA0G
CSqGSIb3DQEBCwUAA4IBAQANNaoGwZoXN2SoayirSebNfblRZgAH2nG4HKxLv3Oj
2q/JrC1l1U4qYd+tXpXQ5zQwHkk1BbiDiZyPo7W/Wg83mjeR3RgL8YyfEaMSNEMY
kD+CPtqFN+gEjajxn1ObZNC7FG4jMwEoZ0+4ibvVnUzbAyHJO2REgDY9rXg7GWFp
QgTXlRL/gTf6DcjMqQTHwqvHKEwzH61sBtVjHPGvUKenzcoPaoGNPAPo1MDPfBjW
AuiU7jyTCbW4vtCGWq+R+dJTV6Xn86Os3ZDU8FYNBbaHRqs91CxZ7R4ewA995MFg
CRWHsIQPZ5DsAk7XFHS5rlfzdUgoFf34uvjDMJ9X2PDP
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:14 2025 by rpki-client