Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/bELo5qIIpuod7qBLIUKqwA9Ds9w.roa
File: bELo5qIIpuod7qBLIUKqwA9Ds9w.roa (raw, json)
Hash identifier: WzrJgL+uq92c99WVaAJUBgvncMaquptkbbkZrtxJTI8=
Subject key identifier: 6C:42:E8:E6:A2:08:A6:EA:1D:EE:A0:4B:21:42:AA:C0:0F:43:B3:DC
Certificate issuer: /CN=b209721f4548c26cf362e944a81b1acee7b24b53
Certificate serial: 019422FC274E9E1E5E45086DAC40A906E199
Authority key identifier: B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/bELo5qIIpuod7qBLIUKqwA9Ds9w.roa
Signing time: Wed 01 Jan 2025 17:48:58 +0000
ROA not before: Wed 01 Jan 2025 17:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 192.115.0.0/21 maxlen: 24
192.115.4.0/24 maxlen: 24
192.115.7.0/24 maxlen: 24
192.115.208.0/24 maxlen: 24
192.115.210.0/23 maxlen: 23
2a01:4280:2::/48 maxlen: 64
2a01:4280:7::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:27:4e:9e:1e:5e:45:08:6d:ac:40:a9:06:e1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209721f4548c26cf362e944a81b1acee7b24b53
Validity
Not Before: Jan 1 17:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c42e8e6a208a6ea1deea04b2142aac00f43b3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:69:98:d6:38:bb:70:34:92:04:3f:47:e4:c6:
72:52:0d:0f:41:f8:c4:d7:8f:fc:c7:7a:a4:e2:fb:
ea:1b:63:92:a8:24:60:78:57:8c:29:2d:38:7c:b1:
40:6b:ff:f1:93:70:d0:89:0d:98:6f:64:ae:0c:77:
8f:f8:c1:43:b9:4f:f1:38:7c:b2:fb:43:b3:be:33:
b7:55:67:c9:b2:3d:01:e4:a3:6c:2a:5b:fe:81:05:
57:e7:80:0b:19:1d:05:b3:70:08:aa:3f:d3:2d:70:
48:56:c5:bd:6e:4c:09:0b:10:c5:1f:6c:20:36:33:
a0:c8:e9:5a:1e:f1:1d:9f:9c:bf:3a:58:a3:0e:f0:
21:97:a3:78:01:80:0c:4e:37:ae:0e:40:5a:ef:5c:
44:82:7d:29:4e:5f:43:38:26:65:8c:34:7b:31:e7:
e0:05:85:f6:cf:9b:9b:e8:32:5c:d3:ea:06:b4:df:
22:e9:5d:b1:c6:95:ab:19:59:4c:97:e0:39:9c:80:
24:48:26:bb:c3:3a:31:46:b7:ff:8d:62:ca:53:f1:
1e:e7:fd:92:c2:0f:1c:d2:b1:e1:44:a2:12:85:cd:
d6:60:1d:9f:48:54:99:3e:b8:67:06:c2:72:77:cc:
a6:93:31:3d:67:1e:be:0c:e4:66:67:f8:d7:44:3a:
0a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:42:E8:E6:A2:08:A6:EA:1D:EE:A0:4B:21:42:AA:C0:0F:43:B3:DC
X509v3 Authority Key Identifier:
keyid:B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/bELo5qIIpuod7qBLIUKqwA9Ds9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.115.0.0/21
192.115.208.0/24
192.115.210.0/23
IPv6:
2a01:4280:2::/48
2a01:4280:7::/48
Signature Algorithm: sha256WithRSAEncryption
6e:be:78:fc:a4:b9:fa:f6:0e:59:b9:c5:aa:bb:e0:76:1e:b9:
c0:ba:fd:d0:0a:c4:d5:00:97:24:fb:ea:6d:b5:20:be:14:9d:
98:7b:75:0e:d1:40:d3:ea:ad:15:1a:4e:20:56:fc:cb:32:54:
15:65:0b:d4:af:5f:cc:2f:d8:28:78:88:69:f2:2e:99:5a:f8:
b0:e7:7e:ff:e3:ec:0f:67:1d:54:b6:9d:f0:7d:93:6c:30:c9:
c3:0c:7c:b5:08:a8:f9:d7:fd:6f:87:75:25:83:52:62:5c:53:
96:47:85:72:f5:02:58:83:9d:15:07:21:18:24:81:f6:22:f7:
eb:f1:f1:b4:09:de:0b:f1:3c:6d:bf:7e:f8:20:38:7d:6a:dd:
47:bc:ac:5e:92:a0:ae:b8:97:03:a7:d1:a7:60:18:e1:9a:56:
e8:dd:7a:b8:1d:c6:b4:98:e1:68:75:8c:ae:18:cd:13:16:34:
df:27:1a:c3:c2:c1:27:b6:f8:f1:93:81:03:ba:6c:04:71:da:
94:12:43:47:f4:ee:16:11:87:d1:bc:2f:59:67:da:1f:50:5f:
21:90:49:47:e0:3d:30:20:18:68:58:7c:76:8d:97:fe:40:ca:
80:66:25:16:74:45:02:02:66:47:5e:a4:1c:01:16:ac:86:cf:
e3:25:17:78
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZQi/CdOnh5eRQhtrECpBuGZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMDk3MjFmNDU0OGMyNmNmMzYyZTk0NGE4MWIxYWNlZTdi
MjRiNTMwHhcNMjUwMTAxMTc0ODU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzQyZThlNmEyMDhhNmVhMWRlZWEwNGIyMTQyYWFjMDBmNDNiM2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmmY1ji7cDSSBD9H5MZyUg0PQfjE
14/8x3qk4vvqG2OSqCRgeFeMKS04fLFAa//xk3DQiQ2Yb2SuDHeP+MFDuU/xOHyy
+0OzvjO3VWfJsj0B5KNsKlv+gQVX54ALGR0Fs3AIqj/TLXBIVsW9bkwJCxDFH2wg
NjOgyOlaHvEdn5y/OlijDvAhl6N4AYAMTjeuDkBa71xEgn0pTl9DOCZljDR7Mefg
BYX2z5ub6DJc0+oGtN8i6V2xxpWrGVlMl+A5nIAkSCa7wzoxRrf/jWLKU/Ee5/2S
wg8c0rHhRKIShc3WYB2fSFSZPrhnBsJyd8ymkzE9Zx6+DORmZ/jXRDoK7wIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFGxC6OaiCKbqHe6gSyFCqsAPQ7PcMB8GA1UdIwQY
MBaAFLIJch9FSMJs82LpRKgbGs7nsktTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2dseUgwVkl3bXp6WXVsRXFCc2F6dWV5UzFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9hNjc0MzItYzA2Ny00Y2RiLWI1YWQt
ZGJhNWMxODM0NjAxLzEvYkVMbzVxSUlwdW9kN3FCTElVS3F3QTlEczl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9hNjc0MzItYzA2Ny00Y2RiLWI1YWQtZGJhNWMxODM0NjAx
LzEvc2dseUgwVkl3bXp6WXVsRXFCc2F6dWV5UzFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQDwHMAAwQA
wHPQAwQBwHPSMBgEAgACMBIDBwAqAUKAAAIDBwAqAUKAAAcwDQYJKoZIhvcNAQEL
BQADggEBAG6+ePykufr2Dlm5xaq74HYeucC6/dAKxNUAlyT76m21IL4UnZh7dQ7R
QNPqrRUaTiBW/MsyVBVlC9SvX8wv2Ch4iGnyLpla+LDnfv/j7A9nHVS2nfB9k2ww
ycMMfLUIqPnX/W+HdSWDUmJcU5ZHhXL1AliDnRUHIRgkgfYi9+vx8bQJ3gvxPG2/
fvggOH1q3Ue8rF6SoK64lwOn0adgGOGaVujdergdxrSY4Wh1jK4YzRMWNN8nGsPC
wSe2+PGTgQO6bARx2pQSQ0f07hYRh9G8L1ln2h9QXyGQSUfgPTAgGGhYfHaNl/5A
yoBmJRZ0RQICZkdepBwBFqyGz+MlF3g=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:19 2025 by rpki-client