Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/B6snV1O7L6xN7jjaiNZWbxtP82Q.roa
File: B6snV1O7L6xN7jjaiNZWbxtP82Q.roa (raw, json)
Hash identifier: Z+4+/9OXk8fDzA3Dm2Dl/g02UpTK3tqTpOQvWThJM1E=
Subject key identifier: 07:AB:27:57:53:BB:2F:AC:4D:EE:38:DA:88:D6:56:6F:1B:4F:F3:64
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0194FF4A8A40A008025F81A78C6560FC43B1
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/B6snV1O7L6xN7jjaiNZWbxtP82Q.roa
Signing time: Thu 13 Feb 2025 12:31:02 +0000
ROA not before: Thu 13 Feb 2025 12:31:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214943
IP address blocks: 94.154.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ff:4a:8a:40:a0:08:02:5f:81:a7:8c:65:60:fc:43:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Feb 13 12:31:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07ab275753bb2fac4dee38da88d6566f1b4ff364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:fb:56:8d:f3:69:bf:0c:33:2f:4b:de:4d:
17:13:1f:ae:1f:99:6c:89:1d:eb:9e:f3:51:87:24:
1d:c5:81:c9:e1:f9:00:3a:9a:da:fa:88:96:a0:92:
3c:22:9d:e2:8d:40:8d:25:97:81:98:cd:74:f2:d0:
90:d1:23:5e:f5:97:28:ac:fd:d6:38:c1:26:99:87:
4b:94:37:4d:2c:15:a7:f2:a4:31:20:f9:4d:80:7d:
81:8b:a4:22:ff:b4:16:ab:f4:a8:26:9c:1e:3f:2a:
2d:80:60:88:42:46:52:1f:7a:f7:5e:4f:0d:82:0b:
5d:eb:05:6a:8d:9e:3e:19:c5:21:52:aa:4f:2d:9d:
75:01:b6:95:09:dc:b4:58:24:ba:ca:2a:cb:c6:c8:
06:0f:a1:af:29:28:44:e3:e0:5f:34:68:1b:74:62:
d0:83:71:c5:64:a9:1e:8a:a6:cf:50:39:ca:26:4d:
25:96:58:c5:38:8a:fc:69:62:00:ce:34:19:f3:eb:
65:f9:81:78:ea:f6:bf:c8:d2:de:a8:2e:4f:4b:90:
bb:cc:ea:38:c2:aa:71:53:f6:03:26:db:91:ab:47:
ba:4f:d3:f7:16:9b:a3:8b:59:a6:4c:24:6c:d4:9c:
4e:da:ce:ab:02:7b:53:67:f7:e7:0c:b4:bf:fb:b6:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AB:27:57:53:BB:2F:AC:4D:EE:38:DA:88:D6:56:6F:1B:4F:F3:64
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/B6snV1O7L6xN7jjaiNZWbxtP82Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.35.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:4f:9f:b3:4e:81:95:5f:54:08:68:f6:5a:de:ef:cb:a4:6c:
a3:32:8e:33:f3:08:87:94:8d:79:b9:92:2c:33:ff:d1:72:77:
ad:01:ac:ed:d3:df:c4:9c:50:49:c9:5d:93:b6:38:c7:97:f2:
c9:30:d0:0d:a0:49:61:df:d0:f3:8b:9f:4a:37:a5:87:7d:0a:
11:21:5e:55:b7:5e:8b:3b:24:27:d7:4d:0d:29:f1:62:6a:2e:
e6:00:6f:57:85:70:eb:99:af:ae:65:f9:af:1c:5e:43:dd:e8:
ca:e7:ee:ec:2d:ee:f0:45:9f:05:81:42:b0:14:23:ad:39:5a:
47:1e:29:fb:ac:ea:c7:60:41:d1:94:37:96:62:21:41:ed:ed:
e2:15:2a:b7:00:d6:42:a0:f4:c9:74:5a:a9:66:60:f6:10:d2:
50:ac:5b:b8:83:36:42:cc:3a:a2:9b:07:35:3c:fe:05:4a:55:
6f:0a:99:95:40:f2:70:88:82:73:cb:50:d9:30:d0:4f:42:08:
f1:2f:3f:9c:06:9b:4e:d3:e4:a1:9f:08:e0:c1:bc:e7:87:d9:
79:77:56:c2:23:95:d1:a2:76:6a:83:d1:af:2f:3c:a8:36:33:
ef:57:ab:6c:75:5f:2f:1a:21:4b:f0:54:85:1d:d6:ce:e4:17:
6c:db:9a:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZT/SopAoAgCX4GnjGVg/EOxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjUwMjEzMTIzMTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2FiMjc1NzUzYmIyZmFjNGRlZTM4ZGE4OGQ2NTY2ZjFiNGZmMzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8n7Vo3zab8MMy9L3k0XEx+uH5ls
iR3rnvNRhyQdxYHJ4fkAOpra+oiWoJI8Ip3ijUCNJZeBmM108tCQ0SNe9ZcorP3W
OMEmmYdLlDdNLBWn8qQxIPlNgH2Bi6Qi/7QWq/SoJpwePyotgGCIQkZSH3r3Xk8N
ggtd6wVqjZ4+GcUhUqpPLZ11AbaVCdy0WCS6yirLxsgGD6GvKShE4+BfNGgbdGLQ
g3HFZKkeiqbPUDnKJk0llljFOIr8aWIAzjQZ8+tl+YF46va/yNLeqC5PS5C7zOo4
wqpxU/YDJtuRq0e6T9P3Fpuji1mmTCRs1JxO2s6rAntTZ/fnDLS/+7YCJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAerJ1dTuy+sTe442ojWVm8bT/NkMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvQjZzblYxTzdMNnhON2pqYWlOWldieHRQODJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpojMA0G
CSqGSIb3DQEBCwUAA4IBAQCbT5+zToGVX1QIaPZa3u/LpGyjMo4z8wiHlI15uZIs
M//RcnetAazt09/EnFBJyV2TtjjHl/LJMNANoElh39Dzi59KN6WHfQoRIV5Vt16L
OyQn100NKfFiai7mAG9XhXDrma+uZfmvHF5D3ejK5+7sLe7wRZ8FgUKwFCOtOVpH
Hin7rOrHYEHRlDeWYiFB7e3iFSq3ANZCoPTJdFqpZmD2ENJQrFu4gzZCzDqimwc1
PP4FSlVvCpmVQPJwiIJzy1DZMNBPQgjxLz+cBptO0+Shnwjgwbznh9l5d1bCI5XR
onZqg9GvLzyoNjPvV6tsdV8vGiFL8FSFHdbO5Bds25pn
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:13:19 2025 by rpki-client