Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/BcW2rFnWR1y6DqDDa-jr6sVv9bE.roa
File: BcW2rFnWR1y6DqDDa-jr6sVv9bE.roa (raw, json)
Hash identifier: WqhAg+XuLq7zx5pi+qy9jWaAPYMFvScFGHfnIixAqW8=
Subject key identifier: 05:C5:B6:AC:59:D6:47:5C:BA:0E:A0:C3:6B:E8:EB:EA:C5:6F:F5:B1
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B10D439826D1D4FCD60C0763DA8A1
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/BcW2rFnWR1y6DqDDa-jr6sVv9bE.roa
Signing time: Sun 01 Jan 2023 13:35:08 +0000
ROA not before: Sun 01 Jan 2023 13:35:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203104
IP address blocks: 194.209.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:10:d4:39:82:6d:1d:4f:cd:60:c0:76:3d:a8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05c5b6ac59d6475cba0ea0c36be8ebeac56ff5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:b9:97:e8:89:ed:05:02:31:72:34:0c:a6:
6d:b6:0c:07:cd:8b:fe:db:24:52:2a:16:f1:dd:12:
07:c7:ac:1a:64:27:a8:c2:07:2b:eb:3d:b7:ee:7f:
18:ad:58:84:37:10:24:09:43:5f:10:d9:6c:82:fe:
84:44:4d:0d:19:4e:90:d4:27:19:48:20:47:7d:7c:
45:29:e4:d4:6a:3f:7e:01:bf:f4:68:80:cc:81:4b:
a8:d9:c5:a8:17:5d:34:8d:e0:fa:9c:7f:d2:65:77:
c4:09:e3:02:7d:6d:4c:aa:37:1a:f6:b3:f4:e4:e9:
6c:e1:7c:8b:2f:df:1d:79:b7:5b:36:55:d5:70:2d:
c6:77:23:92:2d:3e:f5:6f:e0:22:ae:fb:6f:58:cf:
a1:e4:e0:c2:68:42:f2:a3:a4:0a:fc:b1:40:05:ae:
5f:ff:03:95:aa:81:d1:e1:fb:8d:f8:9b:31:62:8b:
a9:13:d4:ae:d5:a6:82:3d:9b:2c:a5:ae:8f:0e:49:
fa:59:a7:2c:d6:7e:1e:8b:70:35:3f:35:13:ac:6e:
1d:8e:79:4b:ea:f5:c6:6e:ef:ba:6d:a3:4a:35:dc:
4c:5a:9c:26:45:b3:de:ae:2a:bb:57:c4:60:29:d9:
af:81:5a:4f:a5:0a:38:1b:4d:3c:44:65:fa:17:bc:
67:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C5:B6:AC:59:D6:47:5C:BA:0E:A0:C3:6B:E8:EB:EA:C5:6F:F5:B1
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/BcW2rFnWR1y6DqDDa-jr6sVv9bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.145.0/24
Signature Algorithm: sha256WithRSAEncryption
12:f5:db:80:e8:fb:d1:83:20:1b:c3:e6:f2:8e:b6:16:cf:0c:
13:fe:2f:bf:14:1c:51:94:1b:05:58:80:91:79:93:74:a7:86:
c1:b6:78:fd:61:e8:f8:07:49:42:ae:2a:64:05:1d:4e:bc:4a:
2e:49:d8:d9:f3:52:6e:2c:32:f3:44:53:a8:51:42:32:af:ae:
0b:f8:13:00:88:0f:99:2f:d0:ef:d3:9d:12:3e:a1:41:cd:b9:
45:04:2f:86:6b:76:1a:83:86:27:f8:2b:40:b5:c7:89:71:a8:
50:0c:44:92:33:54:2a:b6:97:15:9b:5e:9c:b0:0c:74:6b:01:
ce:f0:75:23:aa:48:1f:1d:90:16:63:9f:f6:7d:da:e8:be:19:
fd:a4:64:f1:9d:9a:7d:a9:30:28:0d:7a:9e:59:77:c3:bc:9a:
fc:61:36:27:fb:4f:c6:9f:2a:46:3d:55:6b:a6:77:28:4d:30:
c8:af:fa:fb:5d:dd:d0:4f:d1:3c:c8:6d:3e:1b:ff:6b:66:b3:
4e:d8:a6:d3:8d:77:eb:de:93:de:e3:8d:be:11:80:ad:7c:f2:
e3:3b:2d:6e:7b:7d:dd:79:cc:17:e9:f0:f2:a9:b6:00:52:0a:
1e:d3:fb:4a:b5:a5:d6:ea:71:68:2c:f9:eb:cb:6b:4a:9a:e7:
bd:9c:1a:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtixDUOYJtHU/NYMB2PaihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjMwMTAxMTMzNTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWM1YjZhYzU5ZDY0NzVjYmEwZWEwYzM2YmU4ZWJlYWM1NmZmNWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT+5l+iJ7QUCMXI0DKZttgwHzYv+
2yRSKhbx3RIHx6waZCeowgcr6z237n8YrViENxAkCUNfENlsgv6ERE0NGU6Q1CcZ
SCBHfXxFKeTUaj9+Ab/0aIDMgUuo2cWoF100jeD6nH/SZXfECeMCfW1Mqjca9rP0
5Ols4XyLL98debdbNlXVcC3GdyOSLT71b+AirvtvWM+h5ODCaELyo6QK/LFABa5f
/wOVqoHR4fuN+JsxYoupE9Su1aaCPZsspa6PDkn6Wacs1n4ei3A1PzUTrG4djnlL
6vXGbu+6baNKNdxMWpwmRbPeriq7V8RgKdmvgVpPpQo4G008RGX6F7xnIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAXFtqxZ1kdcug6gw2vo6+rFb/WxMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvQmNXMnJGbldSMXk2RHFERGEtanI2c1Z2OWJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtGRMA0G
CSqGSIb3DQEBCwUAA4IBAQAS9duA6PvRgyAbw+byjrYWzwwT/i+/FBxRlBsFWICR
eZN0p4bBtnj9Yej4B0lCripkBR1OvEouSdjZ81JuLDLzRFOoUUIyr64L+BMAiA+Z
L9Dv050SPqFBzblFBC+Ga3Yag4Yn+CtAtceJcahQDESSM1QqtpcVm16csAx0awHO
8HUjqkgfHZAWY5/2fdrovhn9pGTxnZp9qTAoDXqeWXfDvJr8YTYn+0/GnypGPVVr
pncoTTDIr/r7Xd3QT9E8yG0+G/9rZrNO2KbTjXfr3pPe442+EYCtfPLjOy1ue33d
ecwX6fDyqbYAUgoe0/tKtaXW6nFoLPnry2tKmue9nBpk
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:39 2025 by rpki-client