Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/pikr-Z1yZ7UUvvrmXqwotfJAjto.roa
File: pikr-Z1yZ7UUvvrmXqwotfJAjto.roa (raw, json)
Hash identifier: 68icAI19296YoC6/CDoRbYMVtIlmqXzI+o0fkE9+Wfc=
Subject key identifier: A6:29:2B:F9:9D:72:67:B5:14:BE:FA:E6:5E:AC:28:B5:F2:40:8E:DA
Certificate issuer: /CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Certificate serial: 019425222EA30A9D1AD99469232A212844DF
Authority key identifier: 6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/pikr-Z1yZ7UUvvrmXqwotfJAjto.roa
Signing time: Thu 02 Jan 2025 03:49:44 +0000
ROA not before: Thu 02 Jan 2025 03:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8412
IP address blocks: 195.20.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2e:a3:0a:9d:1a:d9:94:69:23:2a:21:28:44:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Validity
Not Before: Jan 2 03:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6292bf99d7267b514befae65eac28b5f2408eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:eb:af:b9:d8:c4:a3:79:94:0f:a8:6b:50:f0:
3a:53:84:e3:b1:55:1e:56:9e:fc:b3:b3:a9:ef:11:
9d:c7:36:ce:26:1f:81:3a:71:54:b9:1f:65:65:d4:
05:87:fb:6a:6b:2b:10:f7:4f:0a:30:50:bb:4c:64:
8e:56:fd:c4:b3:31:e6:68:fe:aa:09:66:11:bb:d1:
85:2f:fd:25:77:51:4d:f0:0a:53:72:15:11:6d:ca:
8f:2c:90:46:a1:89:ad:63:6d:67:d8:5f:dd:20:3c:
36:dd:af:01:58:8f:40:c3:6e:19:19:c0:b7:4c:48:
d4:dc:25:a5:11:e4:71:52:58:fe:70:a5:c8:b3:0b:
92:95:3b:c4:1b:c4:b3:e2:45:1d:ad:77:8d:c5:3d:
43:c5:ae:fa:b1:ff:a5:64:48:39:51:6e:9d:78:7e:
5a:2f:98:5e:5a:98:9b:4f:eb:e9:00:2e:79:b3:f3:
96:9e:f4:c3:51:8d:f5:25:c7:8b:88:17:a8:5a:ce:
9f:e1:68:e9:44:14:9a:59:c5:53:31:83:88:d1:b1:
16:91:1a:e0:7a:50:14:9d:a4:02:17:92:cb:4a:82:
2e:e5:a5:db:e6:73:55:82:04:17:63:57:99:cb:6a:
d9:f3:0d:a1:01:80:2e:b4:f9:b7:d9:5b:6b:d0:7a:
a5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:29:2B:F9:9D:72:67:B5:14:BE:FA:E6:5E:AC:28:B5:F2:40:8E:DA
X509v3 Authority Key Identifier:
keyid:6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/pikr-Z1yZ7UUvvrmXqwotfJAjto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.132.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:85:74:2d:43:34:02:0d:31:b1:15:ea:ff:d2:22:93:65:bc:
e7:f7:b4:78:61:58:8b:f6:5a:31:82:88:d4:fa:ec:21:3f:2d:
fa:d8:e9:65:9c:76:25:55:67:44:0c:7b:a7:17:57:33:19:58:
af:61:11:8d:a3:01:b4:38:52:d8:1c:97:cc:7a:95:a6:3e:7b:
3a:c1:63:5f:ba:1e:e7:f9:65:c0:65:6e:64:5b:db:1c:d0:2d:
76:a0:26:2d:a4:09:cf:59:82:66:bd:f7:cc:b4:fb:b4:70:70:
28:2f:20:dc:5a:bd:f6:93:5d:6c:92:2c:61:0c:0a:7e:ed:3c:
0f:b3:3b:1b:d4:e6:cf:c0:a1:b6:8b:62:52:25:ac:e0:5a:5d:
0d:88:04:e5:44:bc:78:b2:79:8e:57:15:a0:94:4e:87:56:f4:
2a:b9:31:f2:03:58:7e:11:3b:d2:30:a7:f7:0e:c7:a7:af:33:
c4:95:69:2d:54:c9:3d:e8:e7:a4:6d:64:85:92:ce:32:b3:48:
16:5c:3e:5d:a4:3d:67:5b:ec:ce:9c:4e:c7:f3:dc:44:1c:22:
a5:08:7a:98:4f:67:f0:13:62:37:0c:88:60:a2:77:b1:df:0f:
ef:bf:a0:9a:9c:0a:65:4a:4b:e8:ab:d6:41:b8:98:77:b3:7f:
2e:5f:dc:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIi6jCp0a2ZRpIyohKETfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGU3ZWFmZTJmZmFhOTBjYWU5NDc2ODAzMDM0ZGI2ZGE3
YzEyMTkwHhcNMjUwMTAyMDM0OTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjI5MmJmOTlkNzI2N2I1MTRiZWZhZTY1ZWFjMjhiNWYyNDA4ZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOuvudjEo3mUD6hrUPA6U4TjsVUe
Vp78s7Op7xGdxzbOJh+BOnFUuR9lZdQFh/tqaysQ908KMFC7TGSOVv3EszHmaP6q
CWYRu9GFL/0ld1FN8ApTchURbcqPLJBGoYmtY21n2F/dIDw23a8BWI9Aw24ZGcC3
TEjU3CWlEeRxUlj+cKXIswuSlTvEG8Sz4kUdrXeNxT1Dxa76sf+lZEg5UW6deH5a
L5heWpibT+vpAC55s/OWnvTDUY31JceLiBeoWs6f4WjpRBSaWcVTMYOI0bEWkRrg
elAUnaQCF5LLSoIu5aXb5nNVggQXY1eZy2rZ8w2hAYAutPm32Vtr0HqlhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKYpK/mdcme1FL765l6sKLXyQI7aMB8GA1UdIwQY
MBaAFGxOfq/i/6qQyulHaAMDTbbafBIZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkU1LXItTF9xcERLNlVkb0F3Tk50dHA4RWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8zZGVhZTQtNzIwZC00ZWFlLWIzZDkt
YjIxZGQzZjY4YWJhLzEvcGlrci1aMXlaN1VVdnZybVhxd290ZkpBanRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8zZGVhZTQtNzIwZC00ZWFlLWIzZDktYjIxZGQzZjY4YWJh
LzEvYkU1LXItTF9xcERLNlVkb0F3Tk50dHA4RWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxSEMA0G
CSqGSIb3DQEBCwUAA4IBAQDIhXQtQzQCDTGxFer/0iKTZbzn97R4YViL9loxgojU
+uwhPy362OllnHYlVWdEDHunF1czGVivYRGNowG0OFLYHJfMepWmPns6wWNfuh7n
+WXAZW5kW9sc0C12oCYtpAnPWYJmvffMtPu0cHAoLyDcWr32k11skixhDAp+7TwP
szsb1ObPwKG2i2JSJazgWl0NiATlRLx4snmOVxWglE6HVvQquTHyA1h+ETvSMKf3
DsenrzPElWktVMk96OekbWSFks4ys0gWXD5dpD1nW+zOnE7H89xEHCKlCHqYT2fw
E2I3DIhgonex3w/vv6CanAplSkvoq9ZBuJh3s38uX9wd
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:07 2025 by rpki-client