Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/RqmZkHbn2cmEIluG5v7rbAeqbpw.roa
File: RqmZkHbn2cmEIluG5v7rbAeqbpw.roa (raw, json)
Hash identifier: 6U78g4wrF5whyn8ct1we7vADHERR8lR6aS5sR/jCPCE=
Subject key identifier: 46:A9:99:90:76:E7:D9:C9:84:22:5B:86:E6:FE:EB:6C:07:AA:6E:9C
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 01954C02B1C62661D91B1F210CAD2917562B
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/RqmZkHbn2cmEIluG5v7rbAeqbpw.roa
Signing time: Fri 28 Feb 2025 10:03:19 +0000
ROA not before: Fri 28 Feb 2025 10:03:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 82.206.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:02:b1:c6:26:61:d9:1b:1f:21:0c:ad:29:17:56:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Feb 28 10:03:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46a9999076e7d9c984225b86e6feeb6c07aa6e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:4e:3b:59:2b:c4:2a:20:b2:d9:bf:ca:34:
fb:d3:cd:86:bb:1e:67:c3:aa:e3:9a:c7:4a:8d:d7:
72:1e:df:d8:e3:cf:a3:24:43:c9:e6:84:1b:ed:8b:
12:8d:88:c1:5a:5f:99:b6:dc:46:d8:39:99:34:6f:
f6:d9:61:1c:46:cf:2a:41:25:ea:fb:fe:3a:de:35:
d4:2b:fc:0c:21:d4:dd:89:e1:44:c1:3f:69:2c:02:
e9:40:53:9a:fe:fd:6e:11:97:94:8b:54:95:a2:89:
ac:9b:95:72:15:01:9c:e7:85:c0:53:bd:70:80:c1:
ef:82:7e:9e:f7:b4:15:c2:fd:01:a5:85:b1:da:b0:
0b:02:5e:c9:9b:6d:53:22:d5:f3:5b:ed:53:1b:58:
5a:af:01:60:5c:c4:f0:e3:71:4f:3f:69:f0:38:49:
e9:9c:2a:5e:a9:30:38:9f:d6:b2:0e:ed:55:c2:db:
37:b6:05:41:bb:f0:8f:b4:4a:10:41:7c:91:99:a2:
9b:7a:f2:46:d1:6b:94:ab:04:9d:3a:98:e1:10:f9:
b8:9e:47:7f:73:14:cb:1f:41:9f:7c:7d:e0:be:32:
1b:68:e1:bf:2e:1b:05:a2:72:cd:7f:5f:08:74:bc:
2b:d5:f2:55:ed:7c:2a:1b:20:12:19:91:b9:86:71:
a7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A9:99:90:76:E7:D9:C9:84:22:5B:86:E6:FE:EB:6C:07:AA:6E:9C
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/RqmZkHbn2cmEIluG5v7rbAeqbpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.112.0/20
Signature Algorithm: sha256WithRSAEncryption
92:2e:1a:87:8b:2c:f6:73:4b:e1:7c:e0:d4:79:aa:84:a3:e8:
dd:fd:8a:2f:95:4b:5b:88:2d:75:93:af:44:d3:b0:2b:aa:b6:
61:b3:c6:0a:e0:ee:4e:2b:76:9b:8f:b3:f2:12:7b:3a:67:82:
65:47:e5:a9:b2:46:12:44:f9:4b:3b:04:c5:80:9d:c5:24:b9:
4c:99:fd:35:ec:f7:8c:c9:16:ab:84:0f:62:60:2e:a1:91:39:
25:05:8b:44:3f:29:55:4f:f9:f9:82:a3:7a:c3:a5:cc:6c:01:
5a:7a:e7:17:fd:96:77:7c:36:69:e0:98:ab:aa:d1:4d:8b:62:
4e:d4:3d:69:b0:37:a8:69:4d:9e:e5:cc:f4:ae:74:df:b7:97:
18:21:58:78:7c:aa:65:29:ca:62:e8:50:e8:42:a7:90:ad:b4:
41:a8:b9:be:af:25:33:87:f7:13:55:31:91:be:77:65:46:a5:
40:46:16:08:16:f7:e0:df:e3:e7:16:a9:1d:9d:9c:b4:b9:1b:
ad:4e:06:87:0b:a8:c8:5e:f2:74:f0:6a:cc:92:49:fa:34:c2:
a5:95:1f:a7:e1:56:00:69:9a:11:6a:bc:5f:9e:b0:d2:c4:9c:
0e:e9:2d:d3:c0:2a:17:53:b7:81:95:d4:2c:20:19:3e:82:08:
1e:4c:d8:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVMArHGJmHZGx8hDK0pF1YrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2
ZmQ5YjUwHhcNMjUwMjI4MTAwMzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmE5OTk5MDc2ZTdkOWM5ODQyMjViODZlNmZlZWI2YzA3YWE2ZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMROO1krxCogstm/yjT7082Gux5n
w6rjmsdKjddyHt/Y48+jJEPJ5oQb7YsSjYjBWl+ZttxG2DmZNG/22WEcRs8qQSXq
+/463jXUK/wMIdTdieFEwT9pLALpQFOa/v1uEZeUi1SVoomsm5VyFQGc54XAU71w
gMHvgn6e97QVwv0BpYWx2rALAl7Jm21TItXzW+1TG1harwFgXMTw43FPP2nwOEnp
nCpeqTA4n9ayDu1Vwts3tgVBu/CPtEoQQXyRmaKbevJG0WuUqwSdOpjhEPm4nkd/
cxTLH0GffH3gvjIbaOG/LhsFonLNf18IdLwr1fJV7XwqGyASGZG5hnGn4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEapmZB259nJhCJbhub+62wHqm6cMB8GA1UdIwQY
MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt
NTk1OTE5YmUwZjUyLzEvUnFtWmtIYm4yY21FSWx1RzV2N3JiQWVxYnB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy
LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUs5wMA0G
CSqGSIb3DQEBCwUAA4IBAQCSLhqHiyz2c0vhfODUeaqEo+jd/YovlUtbiC11k69E
07ArqrZhs8YK4O5OK3abj7PyEns6Z4JlR+WpskYSRPlLOwTFgJ3FJLlMmf017PeM
yRarhA9iYC6hkTklBYtEPylVT/n5gqN6w6XMbAFaeucX/ZZ3fDZp4JirqtFNi2JO
1D1psDeoaU2e5cz0rnTft5cYIVh4fKplKcpi6FDoQqeQrbRBqLm+ryUzh/cTVTGR
vndlRqVARhYIFvfg3+PnFqkdnZy0uRutTgaHC6jIXvJ08GrMkkn6NMKllR+n4VYA
aZoRarxfnrDSxJwO6S3TwCoXU7eBldQsIBk+gggeTNi4
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:06 2025 by rpki-client