
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/Ciu6VIqlt_xKrbAE5HXa7sI9yIo.roa
File: Ciu6VIqlt_xKrbAE5HXa7sI9yIo.roa (raw, json)
Hash identifier: GBLv2kj+5/bD+8oVDkrec3Xg5+JexPkwOskhgAEq7iw=
Subject key identifier: 0A:2B:BA:54:8A:A5:B7:FC:4A:AD:B0:04:E4:75:DA:EE:C2:3D:C8:8A
Certificate issuer: /CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Certificate serial: 01942520ACBA2F6E1122AE0CE6A13E4449EC
Authority key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/Ciu6VIqlt_xKrbAE5HXa7sI9yIo.roa
Signing time: Thu 02 Jan 2025 03:48:05 +0000
ROA not before: Thu 02 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62371
IP address blocks: 176.119.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:ac:ba:2f:6e:11:22:ae:0c:e6:a1:3e:44:49:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Validity
Not Before: Jan 2 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a2bba548aa5b7fc4aadb004e475daeec23dc88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:5d:ed:b7:68:39:11:e1:20:f0:70:44:8f:
9b:1e:8d:d0:a7:16:3a:8f:06:3e:7c:e4:dc:63:17:
58:ec:6f:a2:9c:0a:65:11:da:67:a4:42:86:4a:41:
24:1a:74:54:84:a2:a5:92:7a:71:77:23:b4:2c:3f:
69:26:33:cd:b3:60:8f:4e:c6:bf:66:d7:79:c3:6c:
b2:cf:86:75:2e:e2:62:ae:31:ea:2a:9b:e0:a3:3f:
05:4b:34:85:7d:7e:bc:cf:16:7f:c9:c4:2a:5f:a0:
5e:dc:47:04:e7:6c:e4:d5:f7:46:af:c9:d9:46:70:
b7:c6:e8:6d:e2:96:bf:a8:bf:53:b8:81:ed:7a:39:
76:b9:55:68:c6:f4:ef:5f:05:52:da:84:27:5f:e8:
25:3f:85:eb:41:a0:65:d0:a9:29:17:8d:d8:a0:f9:
3d:27:34:7c:d4:3c:3f:15:72:27:77:96:82:5e:92:
10:25:3f:65:35:c4:77:09:46:c2:1d:6e:e7:94:9a:
d2:3a:91:15:0c:93:f1:78:de:5f:39:f9:88:e6:c9:
d6:b2:81:6d:de:31:50:5d:d4:50:e5:50:9c:34:76:
09:e8:c1:49:2c:92:38:cd:9e:bd:88:54:f0:2f:0b:
42:bb:a2:f4:4f:8f:5f:e0:82:2b:d8:51:cb:b1:23:
65:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2B:BA:54:8A:A5:B7:FC:4A:AD:B0:04:E4:75:DA:EE:C2:3D:C8:8A
X509v3 Authority Key Identifier:
keyid:BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/Ciu6VIqlt_xKrbAE5HXa7sI9yIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.200.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:b6:2f:b2:87:83:2f:ef:ee:13:76:95:0f:41:42:6a:eb:65:
17:b0:ce:ee:52:d2:b8:c5:b4:f3:94:42:c9:fe:78:1b:db:6f:
bf:6e:cb:fb:b3:f0:00:e2:13:0b:ff:43:de:cd:19:6b:70:eb:
d5:50:d4:87:d3:ca:eb:85:75:a1:f0:e2:da:c3:6d:e2:9c:a7:
1a:28:7c:e9:22:2c:60:d9:e9:bb:70:be:dd:cd:f4:66:2f:24:
b1:11:1e:fb:c3:2b:f1:38:fd:a2:11:ff:12:f5:5c:fb:65:02:
91:d8:e2:20:35:df:2c:f7:dd:d2:8c:cb:c2:8f:26:49:b2:ac:
55:48:c0:8f:75:3f:27:71:42:19:e7:5b:61:03:34:73:d4:c9:
89:50:b6:4e:99:be:76:64:7f:ac:98:54:6f:b9:38:36:c7:9c:
99:8d:32:4e:50:0a:a9:2b:16:29:71:69:41:d1:f9:07:4f:9f:
31:f4:4a:91:ae:86:d7:99:44:37:2f:3e:54:51:9d:60:a0:0b:
fa:a7:b0:6a:9b:7f:94:99:08:f6:ce:ba:ab:c0:52:a4:6b:8e:
ba:ac:87:66:66:09:59:88:be:be:59:77:6c:1a:74:71:1f:a6:
8a:d4:0e:6f:2c:df:53:66:3c:d2:3d:f8:f5:02:44:33:71:87:
32:a9:a8:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIKy6L24RIq4M5qE+REnsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTVhMDI3YjVlZTRiMGU4NTM3YThmNzE5OGNmYTllYTA5
NDVhZTcwHhcNMjUwMTAyMDM0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTJiYmE1NDhhYTViN2ZjNGFhZGIwMDRlNDc1ZGFlZWMyM2RjODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+hd7bdoORHhIPBwRI+bHo3QpxY6
jwY+fOTcYxdY7G+inAplEdpnpEKGSkEkGnRUhKKlknpxdyO0LD9pJjPNs2CPTsa/
Ztd5w2yyz4Z1LuJirjHqKpvgoz8FSzSFfX68zxZ/ycQqX6Be3EcE52zk1fdGr8nZ
RnC3xuht4pa/qL9TuIHtejl2uVVoxvTvXwVS2oQnX+glP4XrQaBl0KkpF43YoPk9
JzR81Dw/FXInd5aCXpIQJT9lNcR3CUbCHW7nlJrSOpEVDJPxeN5fOfmI5snWsoFt
3jFQXdRQ5VCcNHYJ6MFJLJI4zZ69iFTwLwtCu6L0T49f4IIr2FHLsSNl2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAorulSKpbf8Sq2wBOR12u7CPciKMB8GA1UdIwQY
MBaAFLwVoCe17ksOhTeo9xmM+p6glFrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yN2NkNzEtOWRmNS00ZjVhLWE3MDEt
NmRmZTIzOWFlNTQxLzEvQ2l1NlZJcWx0X3hLcmJBRTVIWGE3c0k5eUlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yN2NkNzEtOWRmNS00ZjVhLWE3MDEtNmRmZTIzOWFlNTQx
LzEvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHfIMA0G
CSqGSIb3DQEBCwUAA4IBAQCyti+yh4Mv7+4TdpUPQUJq62UXsM7uUtK4xbTzlELJ
/ngb22+/bsv7s/AA4hML/0PezRlrcOvVUNSH08rrhXWh8OLaw23inKcaKHzpIixg
2em7cL7dzfRmLySxER77wyvxOP2iEf8S9Vz7ZQKR2OIgNd8s993SjMvCjyZJsqxV
SMCPdT8ncUIZ51thAzRz1MmJULZOmb52ZH+smFRvuTg2x5yZjTJOUAqpKxYpcWlB
0fkHT58x9EqRrobXmUQ3Lz5UUZ1goAv6p7Bqm3+UmQj2zrqrwFKka466rIdmZglZ
iL6+WXdsGnRxH6aK1A5vLN9TZjzSPfj1AkQzcYcyqahr
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:30 2025 by rpki-client