Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/718007-9703-4fab-94d7-d53838bcb505/1/vE3_iSX82QINDDNxMtpOmAUBIcQ.roa
File: vE3_iSX82QINDDNxMtpOmAUBIcQ.roa (raw, json)
Hash identifier: Hd57yohtfErfRgiX+3LPCLyaT3fpPLIE6N31atWuR8s=
Subject key identifier: BC:4D:FF:89:25:FC:D9:02:0D:0C:33:71:32:DA:4E:98:05:01:21:C4
Certificate issuer: /CN=ee1a6207fe9db0d0f7e9d161aba4e5dde2549a2e
Certificate serial: 018573BA99AC6B968AE77AC8EDF1BBCBF925
Authority key identifier: EE:1A:62:07:FE:9D:B0:D0:F7:E9:D1:61:AB:A4:E5:DD:E2:54:9A:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hpiB_6dsND36dFhq6Tl3eJUmi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/718007-9703-4fab-94d7-d53838bcb505/1/vE3_iSX82QINDDNxMtpOmAUBIcQ.roa
Signing time: Mon 02 Jan 2023 18:24:46 +0000
ROA not before: Mon 02 Jan 2023 18:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 188.95.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:ba:99:ac:6b:96:8a:e7:7a:c8:ed:f1:bb:cb:f9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1a6207fe9db0d0f7e9d161aba4e5dde2549a2e
Validity
Not Before: Jan 2 18:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc4dff8925fcd9020d0c337132da4e98050121c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4e:ae:07:26:79:de:f8:e5:5a:ad:44:5b:4b:
5f:47:f8:2d:66:9e:45:08:9f:cb:fd:05:99:c6:a7:
b1:0e:03:c5:10:a2:3a:99:8b:f9:2b:eb:85:f0:3d:
e1:c4:e1:71:1a:50:cf:bc:7f:ec:0b:a9:ee:6b:6a:
be:49:29:01:93:b6:d5:d1:c6:cb:a5:df:44:eb:44:
e5:09:72:29:ba:a3:82:1f:cc:09:d0:ab:9e:ef:62:
4d:83:eb:e0:19:d6:0b:65:fb:41:7a:f4:43:82:dd:
b5:96:4a:76:99:5f:75:b3:19:fe:1e:f2:7f:91:18:
54:df:97:36:d1:8f:d6:65:8b:0d:6b:d8:66:35:a6:
10:7e:55:22:21:4a:11:7e:08:e8:8f:6b:70:f9:07:
42:14:98:95:d5:7f:71:71:57:8b:65:e0:e3:e7:54:
20:8f:23:a8:ca:3e:e9:65:98:12:33:28:62:1f:f6:
99:bd:4e:54:92:a7:b3:76:9f:cc:6f:17:1c:76:0d:
92:f3:45:8e:36:ff:89:a4:72:ee:8f:ed:d4:40:3c:
a4:cf:0d:9c:ed:fb:d7:db:0f:1e:bb:5b:66:7a:0f:
40:7a:c3:ad:eb:10:e1:c6:2b:cc:69:a5:ba:db:10:
50:38:81:37:51:a8:34:6b:b2:fe:f4:53:72:0e:a9:
7a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4D:FF:89:25:FC:D9:02:0D:0C:33:71:32:DA:4E:98:05:01:21:C4
X509v3 Authority Key Identifier:
keyid:EE:1A:62:07:FE:9D:B0:D0:F7:E9:D1:61:AB:A4:E5:DD:E2:54:9A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hpiB_6dsND36dFhq6Tl3eJUmi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/718007-9703-4fab-94d7-d53838bcb505/1/vE3_iSX82QINDDNxMtpOmAUBIcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/718007-9703-4fab-94d7-d53838bcb505/1/7hpiB_6dsND36dFhq6Tl3eJUmi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.69.0/24
Signature Algorithm: sha256WithRSAEncryption
87:59:1c:5b:9b:91:f8:0c:d2:ee:a0:22:a5:89:a6:8d:d5:56:
73:47:c6:0a:48:07:00:f7:2c:a0:48:6b:59:d8:a3:50:8b:91:
07:14:9d:ba:fc:13:47:0b:38:fa:db:65:0f:78:98:4a:01:5b:
07:dc:84:1d:27:99:c4:8e:4e:a8:7f:3e:ae:9d:fd:e6:fa:8c:
5f:92:21:89:18:79:ad:b5:da:30:98:dd:9e:94:06:e1:b9:44:
1a:10:eb:6d:6b:c2:c5:31:85:e3:77:e6:63:c7:b4:d1:7b:48:
fc:1c:06:13:80:e0:5e:36:05:6c:42:40:55:c4:07:79:4c:7a:
62:4f:f0:d3:d1:cd:63:9e:ae:cc:dc:31:5c:a5:ae:c7:05:70:
cb:92:e1:b7:61:72:bb:a8:c7:db:a1:ef:e0:fd:16:44:13:91:
d9:e3:e5:29:d4:81:e9:03:18:f3:71:41:fa:47:27:c6:f7:c0:
d7:4a:dd:1c:cc:f7:32:3a:07:07:95:64:eb:58:8b:0a:ad:35:
e5:80:4d:f4:bb:de:66:ea:ee:cb:cd:ce:8c:8a:74:03:d7:12:
16:71:ef:c8:30:0a:0d:92:53:d2:bd:e9:9f:35:56:66:f0:a1:
a5:71:87:a9:10:3f:21:9e:2e:3a:1a:6b:fb:26:89:bf:94:cc:
59:68:b9:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzupmsa5aK53rI7fG7y/klMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWE2MjA3ZmU5ZGIwZDBmN2U5ZDE2MWFiYTRlNWRkZTI1
NDlhMmUwHhcNMjMwMTAyMTgyNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzRkZmY4OTI1ZmNkOTAyMGQwYzMzNzEzMmRhNGU5ODA1MDEyMWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk6uByZ53vjlWq1EW0tfR/gtZp5F
CJ/L/QWZxqexDgPFEKI6mYv5K+uF8D3hxOFxGlDPvH/sC6nua2q+SSkBk7bV0cbL
pd9E60TlCXIpuqOCH8wJ0Kue72JNg+vgGdYLZftBevRDgt21lkp2mV91sxn+HvJ/
kRhU35c20Y/WZYsNa9hmNaYQflUiIUoRfgjoj2tw+QdCFJiV1X9xcVeLZeDj51Qg
jyOoyj7pZZgSMyhiH/aZvU5Ukqezdp/Mbxccdg2S80WONv+JpHLuj+3UQDykzw2c
7fvX2w8eu1tmeg9AesOt6xDhxivMaaW62xBQOIE3Uag0a7L+9FNyDql67QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLxN/4kl/NkCDQwzcTLaTpgFASHEMB8GA1UdIwQY
MBaAFO4aYgf+nbDQ9+nRYauk5d3iVJouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2hwaUJfNmRzTkQzNmRGaHE2VGwzZUpVbWk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83MTgwMDctOTcwMy00ZmFiLTk0ZDct
ZDUzODM4YmNiNTA1LzEvdkUzX2lTWDgyUUlOREROeE10cE9tQVVCSWNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS83MTgwMDctOTcwMy00ZmFiLTk0ZDctZDUzODM4YmNiNTA1
LzEvN2hwaUJfNmRzTkQzNmRGaHE2VGwzZUpVbWk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvF9FMA0G
CSqGSIb3DQEBCwUAA4IBAQCHWRxbm5H4DNLuoCKliaaN1VZzR8YKSAcA9yygSGtZ
2KNQi5EHFJ26/BNHCzj622UPeJhKAVsH3IQdJ5nEjk6ofz6unf3m+oxfkiGJGHmt
tdowmN2elAbhuUQaEOtta8LFMYXjd+Zjx7TRe0j8HAYTgOBeNgVsQkBVxAd5THpi
T/DT0c1jnq7M3DFcpa7HBXDLkuG3YXK7qMfboe/g/RZEE5HZ4+Up1IHpAxjzcUH6
RyfG98DXSt0czPcyOgcHlWTrWIsKrTXlgE30u95m6u7Lzc6MinQD1xIWce/IMAoN
klPSvemfNVZm8KGlcYepED8hni46Gmv7Jom/lMxZaLkB
-----END CERTIFICATE-----
Generated at Mon May 12 15:27:57 2025 by rpki-client