Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/_BNEuQp4R33znBKyhfxbJ1you-4.roa
File: _BNEuQp4R33znBKyhfxbJ1you-4.roa (raw, json)
Hash identifier: 7/CTsMVYKAgpbst8k5D3ZojF839MnOC9rT+hRdFwdXY=
Subject key identifier: FC:13:44:B9:0A:78:47:7D:F3:9C:12:B2:85:FC:5B:27:5C:A8:BB:EE
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 0194228D3F935F04EA8AF85AA853F3743D3A
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/_BNEuQp4R33znBKyhfxbJ1you-4.roa
Signing time: Wed 01 Jan 2025 15:47:49 +0000
ROA not before: Wed 01 Jan 2025 15:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57169
IP address blocks: 195.254.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:3f:93:5f:04:ea:8a:f8:5a:a8:53:f3:74:3d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Jan 1 15:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc1344b90a78477df39c12b285fc5b275ca8bbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:59:07:06:16:0b:aa:a7:86:86:44:cb:91:c0:
2d:a2:a5:f5:73:aa:9b:72:d3:bd:08:ef:f5:c0:00:
f3:9d:58:01:9e:77:e3:a8:56:7e:77:23:13:81:55:
71:46:50:6a:43:f2:51:d1:5f:a5:29:a9:6a:f9:62:
30:66:de:a5:dd:3f:35:50:ad:ba:e2:f0:08:54:c1:
44:78:3c:62:54:d3:e8:64:99:ad:e5:f2:ac:ba:a5:
c0:cf:20:4f:02:8d:66:99:5d:64:2c:48:c6:54:17:
11:3d:68:97:09:26:1f:10:f7:93:3c:af:ef:55:a4:
bf:31:2a:79:02:51:e4:74:68:c4:8b:6b:93:99:23:
dd:26:30:91:d5:06:59:ae:26:52:b8:b5:eb:bb:55:
cb:e5:96:c2:34:76:96:d3:ef:21:f1:9e:15:d0:b1:
8e:00:f2:75:95:46:35:39:cf:a1:a8:ef:ae:c1:c8:
c0:45:fc:1a:6f:64:80:78:10:1b:b7:0d:38:51:e1:
23:7b:8d:fb:66:31:25:08:1a:32:5d:9f:73:4b:c3:
42:0e:b2:54:1c:bb:f5:ab:e6:e9:b9:e4:06:81:ac:
64:47:1c:9b:0a:07:05:8c:a9:51:44:38:bc:8f:69:
db:3c:1c:e9:be:51:61:58:20:90:0b:e6:63:d5:c9:
a6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:13:44:B9:0A:78:47:7D:F3:9C:12:B2:85:FC:5B:27:5C:A8:BB:EE
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/_BNEuQp4R33znBKyhfxbJ1you-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.132.0/24
Signature Algorithm: sha256WithRSAEncryption
32:48:0a:b9:29:59:7c:a5:bc:f3:c8:3d:4c:56:7e:25:ff:2c:
52:fc:ff:33:a8:60:33:bc:de:28:c6:7b:0c:35:bc:3c:1f:93:
2d:89:5f:78:fb:a7:38:9d:04:55:d6:91:75:5f:20:08:b9:c4:
6d:d0:ba:2a:bc:12:9b:1f:74:94:09:c0:48:36:f0:ee:07:75:
ac:3b:88:28:cd:df:5e:55:76:af:71:57:ee:0a:9e:fe:61:02:
b8:d0:04:37:2f:b4:4b:e3:7d:7c:62:72:53:a0:09:90:ff:1e:
93:3e:56:36:e7:a6:fd:ab:e9:03:86:01:8c:e0:7d:46:5b:03:
93:aa:c9:f0:18:c4:1e:30:c0:e3:aa:ed:ae:40:8c:12:9e:bb:
44:be:2b:ff:4d:49:80:3d:8b:04:28:1f:80:e2:cd:04:5a:c3:
ae:dc:08:31:2a:d1:07:3a:49:92:ea:e6:31:40:9b:9f:2f:22:
fa:e7:00:0f:1e:21:6d:0b:99:7e:c0:47:d9:df:3e:14:75:ff:
74:e2:eb:18:ee:fe:91:3f:35:67:95:bd:f1:95:85:f5:61:d8:
d4:47:97:bf:b9:c5:89:00:74:a8:5f:35:e5:47:cf:01:ef:94:
f0:61:d2:1b:11:30:8d:74:07:25:e7:ae:69:2f:e8:d0:cc:17:
43:e3:fc:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijT+TXwTqivhaqFPzdD06MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMmM0NTg1YmQ4OGZiMjdjYWRmMjllZTViYjk1ZDY1NzVm
Y2VmODMwHhcNMjUwMTAxMTU0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzEzNDRiOTBhNzg0NzdkZjM5YzEyYjI4NWZjNWIyNzVjYThiYmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11kHBhYLqqeGhkTLkcAtoqX1c6qb
ctO9CO/1wADznVgBnnfjqFZ+dyMTgVVxRlBqQ/JR0V+lKalq+WIwZt6l3T81UK26
4vAIVMFEeDxiVNPoZJmt5fKsuqXAzyBPAo1mmV1kLEjGVBcRPWiXCSYfEPeTPK/v
VaS/MSp5AlHkdGjEi2uTmSPdJjCR1QZZriZSuLXru1XL5ZbCNHaW0+8h8Z4V0LGO
APJ1lUY1Oc+hqO+uwcjARfwab2SAeBAbtw04UeEje437ZjElCBoyXZ9zS8NCDrJU
HLv1q+bpueQGgaxkRxybCgcFjKlRRDi8j2nbPBzpvlFhWCCQC+Zj1cmmPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPwTRLkKeEd985wSsoX8WydcqLvuMB8GA1UdIwQY
MBaAFCIsRYW9iPsnyt8p7lu5XWV1/O+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUt
YzY0N2E4YzFkZGZhLzEvX0JORXVRcDRSMzN6bkJLeWhmeGJKMXlvdS00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUtYzY0N2E4YzFkZGZh
LzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/6EMA0G
CSqGSIb3DQEBCwUAA4IBAQAySAq5KVl8pbzzyD1MVn4l/yxS/P8zqGAzvN4oxnsM
Nbw8H5MtiV94+6c4nQRV1pF1XyAIucRt0LoqvBKbH3SUCcBINvDuB3WsO4gozd9e
VXavcVfuCp7+YQK40AQ3L7RL4318YnJToAmQ/x6TPlY256b9q+kDhgGM4H1GWwOT
qsnwGMQeMMDjqu2uQIwSnrtEviv/TUmAPYsEKB+A4s0EWsOu3AgxKtEHOkmS6uYx
QJufLyL65wAPHiFtC5l+wEfZ3z4Udf904usY7v6RPzVnlb3xlYX1YdjUR5e/ucWJ
AHSoXzXlR88B75TwYdIbETCNdAcl565pL+jQzBdD4/yF
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:11 2025 by rpki-client