Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/RezVMniZ6VTj5PKOatyWrhZvWzg.roa
File: RezVMniZ6VTj5PKOatyWrhZvWzg.roa (raw, json)
Hash identifier: EB1Itda95D4t0ygQlWYNjB6PoBgymbji6nJtOQpDkMc=
Subject key identifier: 45:EC:D5:32:78:99:E9:54:E3:E4:F2:8E:6A:DC:96:AE:16:6F:5B:38
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019424B3B66F20C080A68BA47CBE41863E95
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/RezVMniZ6VTj5PKOatyWrhZvWzg.roa
Signing time: Thu 02 Jan 2025 01:49:04 +0000
ROA not before: Thu 02 Jan 2025 01:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206446
IP address blocks: 94.131.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b6:6f:20:c0:80:a6:8b:a4:7c:be:41:86:3e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 2 01:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45ecd5327899e954e3e4f28e6adc96ae166f5b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5a:db:aa:f4:e5:b2:de:5f:81:be:a2:1d:78:
b3:ce:a8:63:67:c2:f4:56:2d:d9:50:4c:a9:ba:30:
a6:24:e9:a7:67:07:95:bf:77:75:ab:b9:79:97:db:
df:58:01:23:95:4a:13:c5:0c:47:59:6d:57:d6:66:
42:c3:cf:c5:07:71:c4:cf:82:59:1b:9d:5c:42:ec:
9a:db:62:69:35:cc:7b:6c:3e:e6:81:41:50:99:bd:
e3:9c:0b:c8:4d:1b:5a:8c:f7:e9:ec:b1:6b:28:72:
a3:da:cd:fd:7c:9f:30:ab:7e:01:cd:9c:bd:72:7e:
fd:99:4f:07:5b:c6:74:11:2a:b5:18:33:37:28:09:
65:df:d4:b7:f4:1d:f6:c1:c3:6a:17:63:db:81:f5:
54:77:0d:d8:bb:11:09:0c:d8:ab:ba:8c:aa:f4:5a:
37:0e:d9:06:28:9b:c9:5f:54:a9:ae:cc:32:9b:59:
9e:ca:f5:5f:8a:75:13:4b:21:8d:80:f3:a1:33:af:
88:96:51:ec:bb:66:3d:9e:f1:41:de:d8:47:4e:df:
24:e3:4a:74:9f:27:fb:4c:32:21:a8:50:5f:8e:2b:
4c:67:24:ef:43:30:db:27:c6:b5:75:c3:f0:dc:4b:
9e:8a:79:00:f2:b7:dd:40:7c:e1:8d:10:9b:0c:52:
bb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EC:D5:32:78:99:E9:54:E3:E4:F2:8E:6A:DC:96:AE:16:6F:5B:38
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/RezVMniZ6VTj5PKOatyWrhZvWzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.114.0/24
Signature Algorithm: sha256WithRSAEncryption
25:8a:dc:52:3c:b1:fa:38:7d:2d:77:8f:9b:4e:60:fd:e2:0d:
07:13:b1:33:11:0a:03:85:e3:67:a5:75:53:a8:27:86:cc:3e:
46:42:68:0a:e4:51:90:b7:c6:d4:bb:73:f9:cf:b9:13:15:1a:
0b:ea:77:ca:1d:57:44:3d:8f:42:20:7d:98:29:75:d1:5b:ca:
e2:ff:4e:86:93:44:1b:59:1e:63:6f:e4:b8:07:be:f9:f2:f2:
6c:dd:74:d0:c3:3e:92:9a:1a:13:a5:84:70:4e:d5:17:c7:ed:
df:95:a0:ae:17:4a:6a:99:07:00:9d:19:81:c2:b1:70:e8:45:
9d:b5:00:6a:37:f6:b5:44:a3:b2:52:88:ad:96:e3:ef:c6:37:
f1:24:d9:55:d1:a8:3b:eb:33:77:db:82:c3:d2:4b:a5:84:e4:
7d:df:77:a2:eb:13:ef:a8:33:e6:38:04:d7:1a:8c:2d:c7:90:
9f:9f:2e:4a:1f:f1:a1:8c:0f:54:4e:b0:2a:50:f8:d5:05:58:
ef:da:f9:5d:17:ed:f3:31:cb:1e:9c:c0:97:49:f2:0d:fb:2e:
29:79:86:45:d2:38:8b:58:19:be:2f:6e:f3:cc:df:56:b9:49:
6a:6e:f3:1b:be:76:48:b9:20:f8:81:53:fe:7a:19:ad:a8:17:
fe:e9:fd:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks7ZvIMCApoukfL5Bhj6VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj
NjJhMDMwHhcNMjUwMTAyMDE0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWVjZDUzMjc4OTllOTU0ZTNlNGYyOGU2YWRjOTZhZTE2NmY1YjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVrbqvTlst5fgb6iHXizzqhjZ8L0
Vi3ZUEypujCmJOmnZweVv3d1q7l5l9vfWAEjlUoTxQxHWW1X1mZCw8/FB3HEz4JZ
G51cQuya22JpNcx7bD7mgUFQmb3jnAvITRtajPfp7LFrKHKj2s39fJ8wq34BzZy9
cn79mU8HW8Z0ESq1GDM3KAll39S39B32wcNqF2PbgfVUdw3YuxEJDNiruoyq9Fo3
DtkGKJvJX1Sprswym1meyvVfinUTSyGNgPOhM6+IllHsu2Y9nvFB3thHTt8k40p0
nyf7TDIhqFBfjitMZyTvQzDbJ8a1dcPw3EueinkA8rfdQHzhjRCbDFK7kQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEXs1TJ4melU4+Tyjmrclq4Wb1s4MB8GA1UdIwQY
MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt
ZTk3MjRhN2E2YmM4LzEvUmV6Vk1uaVo2VlRqNVBLT2F0eVdyaFp2V3pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4
LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXoNyMA0G
CSqGSIb3DQEBCwUAA4IBAQAlitxSPLH6OH0td4+bTmD94g0HE7EzEQoDheNnpXVT
qCeGzD5GQmgK5FGQt8bUu3P5z7kTFRoL6nfKHVdEPY9CIH2YKXXRW8ri/06Gk0Qb
WR5jb+S4B7758vJs3XTQwz6SmhoTpYRwTtUXx+3flaCuF0pqmQcAnRmBwrFw6EWd
tQBqN/a1RKOyUoitluPvxjfxJNlV0ag76zN324LD0kulhOR933ei6xPvqDPmOATX
Gowtx5Cfny5KH/GhjA9UTrAqUPjVBVjv2vldF+3zMcsenMCXSfIN+y4peYZF0jiL
WBm+L27zzN9WuUlqbvMbvnZIuSD4gVP+ehmtqBf+6f2O
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:33 2025 by rpki-client