Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/atEGz3SAlAIyD94NlqzdTA3N-H4.roa
File: atEGz3SAlAIyD94NlqzdTA3N-H4.roa (raw, json)
Hash identifier: fPEtIgkODWSm/XE4jYAgFUcRjyAjJ1Pm8+bd8Is7hIA=
Subject key identifier: 6A:D1:06:CF:74:80:94:02:32:0F:DE:0D:96:AC:DD:4C:0D:CD:F8:7E
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D5B1855133EB57346E5FBCD2A15AEA
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/atEGz3SAlAIyD94NlqzdTA3N-H4.roa
Signing time: Wed 01 Jan 2025 07:47:42 +0000
ROA not before: Wed 01 Jan 2025 07:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39931
IP address blocks: 83.206.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b1:85:51:33:eb:57:34:6e:5f:bc:d2:a1:5a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ad106cf74809402320fde0d96acdd4c0dcdf87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:b8:83:ae:d3:25:28:c6:70:44:63:a0:a1:
29:e0:c5:4e:35:a9:d8:fc:01:78:47:c7:59:ac:fe:
4c:40:af:48:ce:94:0d:e9:e0:e9:c8:c7:af:36:04:
6f:a7:79:dd:a4:c7:49:0c:da:09:90:cf:09:ed:94:
e8:f0:1a:cf:ab:f3:a3:ea:01:b2:f0:2f:c1:e2:c5:
3c:4f:b7:d2:da:2f:86:db:62:fd:cb:70:65:4c:15:
36:7c:55:82:a6:a5:71:07:3a:93:11:67:4d:8d:55:
7e:f3:5e:64:90:ee:7f:c9:98:24:0b:e9:11:04:bf:
c2:f5:3a:6d:c1:ad:1d:17:c8:18:3d:a2:77:0a:d0:
8b:87:cc:d6:04:6a:0b:64:d2:ff:86:65:b8:78:1c:
24:30:47:23:16:19:8c:45:ed:a4:b2:8e:23:25:54:
b2:db:dc:26:71:ab:c4:1f:65:f6:fe:0a:96:98:18:
79:67:92:04:f4:8a:a7:f9:29:b2:b5:80:09:ae:76:
7c:e1:47:e9:cd:18:06:aa:e2:1c:c2:48:be:42:91:
8c:38:4d:73:a5:13:cc:16:12:4a:e2:b4:d7:30:84:
f4:9c:38:02:67:a9:46:a0:77:60:26:03:26:57:53:
b3:f1:dd:ef:d4:cd:69:a9:dc:aa:c9:a9:e0:cc:5f:
f3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D1:06:CF:74:80:94:02:32:0F:DE:0D:96:AC:DD:4C:0D:CD:F8:7E
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/atEGz3SAlAIyD94NlqzdTA3N-H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.206.188.0/24
Signature Algorithm: sha256WithRSAEncryption
71:d3:af:0a:60:ff:bd:f2:e6:08:af:2e:d9:59:0b:c5:f6:5f:
c2:28:49:f6:96:b7:35:6e:ba:48:99:7e:48:bc:ce:00:b9:7b:
1c:fc:93:2d:30:24:07:13:4e:b0:9a:ad:14:8b:7a:48:e9:1c:
18:22:96:e9:21:80:2d:c2:fa:1e:c2:9a:37:c0:dd:59:03:1f:
e7:77:ff:26:79:10:27:cd:e0:01:ae:6d:0c:b3:66:8f:d9:64:
d1:bd:c0:0c:7d:29:8c:fe:f3:d2:b9:e5:72:a2:60:9d:03:92:
1a:2a:5c:27:b6:58:87:ca:be:83:00:e7:0f:88:e8:6f:8a:f5:
2e:aa:b1:2b:1c:a3:5d:61:67:71:5a:db:6b:64:0c:d1:a4:26:
a4:f0:53:53:ce:a2:00:d5:d2:98:a3:bd:9b:0e:29:a6:37:1c:
aa:6b:bd:2f:c6:c1:b3:2b:ab:51:f3:b7:0d:a5:f9:be:85:01:
d0:b1:51:70:85:71:38:e3:3e:db:e4:d7:7f:e5:21:75:6a:6a:
67:62:c1:1b:db:1a:90:70:24:9d:6b:14:5a:95:a7:71:0f:c6:
52:e9:9d:4f:8e:ca:e6:d1:87:56:ef:7d:8d:42:14:ff:e5:7c:
75:da:b1:26:fa:9f:e2:02:67:59:da:d3:7d:ad:26:38:0c:ba:
c3:2c:65:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1bGFUTPrVzRuX7zSoVrqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjUwMTAxMDc0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWQxMDZjZjc0ODA5NDAyMzIwZmRlMGQ5NmFjZGQ0YzBkY2RmODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0W4g67TJSjGcERjoKEp4MVONanY
/AF4R8dZrP5MQK9IzpQN6eDpyMevNgRvp3ndpMdJDNoJkM8J7ZTo8BrPq/Oj6gGy
8C/B4sU8T7fS2i+G22L9y3BlTBU2fFWCpqVxBzqTEWdNjVV+815kkO5/yZgkC+kR
BL/C9Tptwa0dF8gYPaJ3CtCLh8zWBGoLZNL/hmW4eBwkMEcjFhmMRe2kso4jJVSy
29wmcavEH2X2/gqWmBh5Z5IE9Iqn+SmytYAJrnZ84UfpzRgGquIcwki+QpGMOE1z
pRPMFhJK4rTXMIT0nDgCZ6lGoHdgJgMmV1Oz8d3v1M1pqdyqyangzF/znwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGrRBs90gJQCMg/eDZas3UwNzfh+MB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvYXRFR3ozU0FsQUl5RDk0TmxxemRUQTNOLUg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU868MA0G
CSqGSIb3DQEBCwUAA4IBAQBx068KYP+98uYIry7ZWQvF9l/CKEn2lrc1brpImX5I
vM4AuXsc/JMtMCQHE06wmq0Ui3pI6RwYIpbpIYAtwvoewpo3wN1ZAx/nd/8meRAn
zeABrm0Ms2aP2WTRvcAMfSmM/vPSueVyomCdA5IaKlwntliHyr6DAOcPiOhvivUu
qrErHKNdYWdxWttrZAzRpCak8FNTzqIA1dKYo72bDimmNxyqa70vxsGzK6tR87cN
pfm+hQHQsVFwhXE44z7b5Nd/5SF1ampnYsEb2xqQcCSdaxRaladxD8ZS6Z1Pjsrm
0YdW732NQhT/5Xx12rEm+p/iAmdZ2tN9rSY4DLrDLGV9
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:20:55 2025 by rpki-client