Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/bHIi5aa4opbWo1ToDFeEyyQfr5Q.roa
File: bHIi5aa4opbWo1ToDFeEyyQfr5Q.roa (raw, json)
Hash identifier: pR6PjdQEk5cPTOj+JVAI0nqseJPVsZoVlA1A6ASnFpA=
Subject key identifier: 6C:72:22:E5:A6:B8:A2:96:D6:A3:54:E8:0C:57:84:CB:24:1F:AF:94
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067DC0B90E64198933AE499AD5EE45A
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/bHIi5aa4opbWo1ToDFeEyyQfr5Q.roa
Signing time: Wed 01 Jan 2025 05:47:44 +0000
ROA not before: Wed 01 Jan 2025 05:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208980
IP address blocks: 212.243.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:dc:0b:90:e6:41:98:93:3a:e4:99:ad:5e:e4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c7222e5a6b8a296d6a354e80c5784cb241faf94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:17:42:0e:8d:d2:ae:9e:c4:81:f6:c6:a1:bb:
21:73:6f:eb:c7:16:98:a4:af:3b:0c:7a:91:a1:c2:
05:e7:22:e5:24:d9:31:1c:5f:7d:4d:be:c2:01:ff:
a2:29:f7:0e:1d:00:47:26:58:90:0d:7c:54:4e:43:
54:f8:ab:bd:9d:ad:92:c1:15:81:12:d1:f8:cb:d1:
b0:62:e1:db:b6:61:64:d2:aa:30:02:71:3f:13:b7:
6a:7e:30:fc:92:da:06:9f:54:d4:f6:ff:66:11:48:
13:12:29:12:86:2a:66:65:8a:b6:de:40:ea:05:32:
19:6f:0e:5f:f6:f3:20:00:a6:22:16:21:2c:2c:bc:
8a:bb:cf:b1:25:bf:f6:ad:f7:7f:47:e6:5f:44:87:
05:9c:31:84:2f:38:ea:26:00:86:dd:9e:ea:d8:a1:
0a:89:ed:8d:a5:da:80:98:3d:c9:91:e0:b7:70:df:
69:37:c8:1b:44:75:e8:a8:1e:6b:76:25:34:88:4d:
44:83:7f:ee:c4:fa:b4:3e:21:0f:e4:8c:a0:37:07:
69:54:10:91:f5:fb:c2:d6:ec:11:66:04:dc:3e:76:
47:6d:42:f1:c0:6e:4f:8b:cd:4f:9e:cf:84:6b:44:
78:1e:60:bd:b5:9c:26:6d:30:29:03:30:de:e9:c9:
01:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:72:22:E5:A6:B8:A2:96:D6:A3:54:E8:0C:57:84:CB:24:1F:AF:94
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/bHIi5aa4opbWo1ToDFeEyyQfr5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.126.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:dc:99:e8:05:42:98:dc:47:02:5f:30:f2:f0:c4:76:2b:f3:
a7:0e:9b:ec:fb:28:18:59:6a:7a:e4:a1:f1:bd:80:54:a3:82:
69:bc:bf:ba:53:c9:61:b9:f9:6d:14:12:c5:73:39:8d:07:91:
b3:5c:7a:fc:05:38:57:c7:86:46:a4:8d:cd:52:0e:36:0c:f5:
18:29:0d:08:10:5e:72:97:97:39:01:08:19:de:24:f1:ac:1c:
99:f6:fb:31:8a:20:df:42:6d:70:cc:ad:74:e3:d2:01:ec:64:
92:6e:70:8c:77:11:6d:25:37:d6:80:2c:a2:8d:23:95:ed:8b:
06:63:02:cc:76:83:cc:43:12:c9:1a:8d:c3:35:56:37:65:8d:
5c:37:ef:77:81:ca:9c:77:0b:99:af:fd:f9:63:a0:53:91:db:
37:d1:0f:1b:7f:eb:3a:ac:20:30:7e:c7:e8:c7:76:56:28:27:
d5:70:53:bf:79:c6:eb:43:63:87:84:f5:44:60:1e:38:3e:31:
52:7a:29:39:54:68:de:0f:4b:68:4b:07:7d:5c:55:d2:0c:2d:
56:e1:3d:a6:10:93:51:fd:2a:05:ab:d8:21:08:55:08:26:93:
26:91:65:d1:db:17:92:3e:a1:10:c6:10:61:f5:e2:b4:e1:c4:
bd:79:65:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ9wLkOZBmJM65JmtXuRaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjUwMTAxMDU0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzcyMjJlNWE2YjhhMjk2ZDZhMzU0ZTgwYzU3ODRjYjI0MWZhZjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxdCDo3Srp7EgfbGobshc2/rxxaY
pK87DHqRocIF5yLlJNkxHF99Tb7CAf+iKfcOHQBHJliQDXxUTkNU+Ku9na2SwRWB
EtH4y9GwYuHbtmFk0qowAnE/E7dqfjD8ktoGn1TU9v9mEUgTEikShipmZYq23kDq
BTIZbw5f9vMgAKYiFiEsLLyKu8+xJb/2rfd/R+ZfRIcFnDGELzjqJgCG3Z7q2KEK
ie2NpdqAmD3JkeC3cN9pN8gbRHXoqB5rdiU0iE1Eg3/uxPq0PiEP5IygNwdpVBCR
9fvC1uwRZgTcPnZHbULxwG5Pi81Pns+Ea0R4HmC9tZwmbTApAzDe6ckBEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGxyIuWmuKKW1qNU6AxXhMskH6+UMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvYkhJaTVhYTRvcGJXbzFUb0RGZUV5eVFmcjVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1PN+MA0G
CSqGSIb3DQEBCwUAA4IBAQCm3JnoBUKY3EcCXzDy8MR2K/OnDpvs+ygYWWp65KHx
vYBUo4JpvL+6U8lhufltFBLFczmNB5GzXHr8BThXx4ZGpI3NUg42DPUYKQ0IEF5y
l5c5AQgZ3iTxrByZ9vsxiiDfQm1wzK1049IB7GSSbnCMdxFtJTfWgCyijSOV7YsG
YwLMdoPMQxLJGo3DNVY3ZY1cN+93gcqcdwuZr/35Y6BTkds30Q8bf+s6rCAwfsfo
x3ZWKCfVcFO/ecbrQ2OHhPVEYB44PjFSeik5VGjeD0toSwd9XFXSDC1W4T2mEJNR
/SoFq9ghCFUIJpMmkWXR2xeSPqEQxhBh9eK04cS9eWWS
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:41:35 2025 by rpki-client