Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/voka6WVN1tlnTci6JfZZ2xxnXVo.roa
File: voka6WVN1tlnTci6JfZZ2xxnXVo.roa (raw, json)
Hash identifier: a0Bd9r0sMvT06FR0FY5TMEpD3poTyuJ09n/TRmfIiaw=
Subject key identifier: BE:89:1A:E9:65:4D:D6:D9:67:4D:C8:BA:25:F6:59:DB:1C:67:5D:5A
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B673385B65A2EC3F6D4EE078EB4E84
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/voka6WVN1tlnTci6JfZZ2xxnXVo.roa
Signing time: Thu 02 Jan 2025 15:50:55 +0000
ROA not before: Thu 02 Jan 2025 15:50:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 2.22.36.0/22 maxlen: 22
2.22.40.0/22 maxlen: 22
95.101.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:73:38:5b:65:a2:ec:3f:6d:4e:e0:78:eb:4e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:50:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be891ae9654dd6d9674dc8ba25f659db1c675d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:ed:2c:09:dd:9c:0a:99:3d:67:e4:c8:89:
d5:47:71:32:df:b9:ed:72:c7:b9:09:41:c8:fe:d6:
f7:b0:02:ff:b9:8b:65:95:23:84:03:da:52:0c:ea:
34:63:f8:c0:f5:df:a8:3d:a0:91:4b:95:35:05:fd:
8b:ca:95:f4:51:95:f7:df:e9:9e:f5:da:66:2a:f3:
5d:48:40:dd:50:7a:94:77:c9:81:7c:35:ed:e6:1c:
45:f9:06:ba:d6:99:ff:91:c8:05:d8:63:1d:57:40:
bf:0d:44:9d:c4:d2:10:13:bf:8c:76:0a:fd:42:bd:
1d:3a:e9:73:29:1a:3b:ee:bc:13:0f:d0:1d:b5:6b:
aa:ee:6a:c8:9d:2e:25:85:d0:50:58:fb:bb:db:0b:
90:7c:12:2a:d4:df:67:4a:a7:94:52:62:55:07:d8:
d0:71:5f:43:1e:22:83:31:ef:fa:da:8a:4e:75:21:
32:b6:09:1b:5b:08:4c:c9:9f:8a:33:e1:7a:47:73:
10:2f:be:f0:1e:06:b5:16:68:cf:c0:49:d3:f7:1a:
8d:cf:61:03:35:3e:d6:28:2f:e6:ae:f3:e6:10:39:
b4:01:bc:26:16:b7:77:0a:1b:75:af:c0:a1:89:39:
3d:bc:87:0a:a3:1c:d3:6a:f4:37:bd:94:3e:88:dc:
ad:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:89:1A:E9:65:4D:D6:D9:67:4D:C8:BA:25:F6:59:DB:1C:67:5D:5A
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/voka6WVN1tlnTci6JfZZ2xxnXVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.22.36.0-2.22.43.255
95.101.133.0/24
Signature Algorithm: sha256WithRSAEncryption
27:6b:28:0d:d1:ef:a3:77:ea:6b:56:3a:68:32:25:d4:11:f5:
39:43:a1:0a:e5:7b:a4:40:8a:d5:04:75:91:37:5b:a5:df:df:
d2:55:cb:ed:0a:30:ad:33:86:d2:6a:3d:f7:60:0c:fe:33:b8:
de:0d:73:17:77:ea:f2:90:21:d3:f9:77:26:d2:64:f6:f7:b1:
95:53:b9:2b:dc:6a:6f:8b:57:41:2f:ad:8c:e9:13:01:41:99:
50:9f:06:1b:30:2e:89:bd:6f:09:e4:d1:c2:71:ab:c8:a5:4f:
8a:11:65:4d:c0:7a:c9:20:00:15:5d:4f:aa:2e:ef:c1:6f:b3:
db:23:37:99:c1:25:03:c0:31:e0:e3:a6:5a:66:fd:d4:1d:6a:
9d:83:0b:a9:a8:6c:ea:3f:3c:ba:d3:a0:a9:42:b9:6e:69:e2:
50:d7:2f:ca:be:51:a0:b4:5c:9d:8f:ba:10:ae:be:bb:bf:e6:
f5:5a:45:b3:c4:fa:1a:bd:10:ce:c2:ed:5d:81:de:4c:e4:1a:
d2:a7:b7:56:84:d3:71:d8:c8:5c:e9:6d:11:53:53:d4:56:e0:
e2:4d:98:8b:53:3a:9a:7a:bf:8c:be:81:ac:6e:c5:9a:28:90:
51:d2:9b:05:92:d4:ac:5b:82:69:01:1e:69:19:97:cd:f3:92:
89:d8:fc:e5
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQntnM4W2Wi7D9tTuB4606EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjUwMTAyMTU1MDU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTg5MWFlOTY1NGRkNmQ5Njc0ZGM4YmEyNWY2NTlkYjFjNjc1ZDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW7tLAndnAqZPWfkyInVR3Ey37nt
cse5CUHI/tb3sAL/uYtllSOEA9pSDOo0Y/jA9d+oPaCRS5U1Bf2LypX0UZX33+me
9dpmKvNdSEDdUHqUd8mBfDXt5hxF+Qa61pn/kcgF2GMdV0C/DUSdxNIQE7+Mdgr9
Qr0dOulzKRo77rwTD9AdtWuq7mrInS4lhdBQWPu72wuQfBIq1N9nSqeUUmJVB9jQ
cV9DHiKDMe/62opOdSEytgkbWwhMyZ+KM+F6R3MQL77wHga1FmjPwEnT9xqNz2ED
NT7WKC/mrvPmEDm0AbwmFrd3Cht1r8ChiTk9vIcKoxzTavQ3vZQ+iNytqQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFL6JGullTdbZZ03IuiX2WdscZ11aMB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvdm9rYTZXVk4xdGxuVGNpNkpmWloyeHhuWFZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAICFiQD
BAICFigDBABfZYUwDQYJKoZIhvcNAQELBQADggEBACdrKA3R76N36mtWOmgyJdQR
9TlDoQrle6RAitUEdZE3W6Xf39JVy+0KMK0zhtJqPfdgDP4zuN4Ncxd36vKQIdP5
dybSZPb3sZVTuSvcam+LV0EvrYzpEwFBmVCfBhswLom9bwnk0cJxq8ilT4oRZU3A
eskgABVdT6ou78Fvs9sjN5nBJQPAMeDjplpm/dQdap2DC6mobOo/PLrToKlCuW5p
4lDXL8q+UaC0XJ2PuhCuvru/5vVaRbPE+hq9EM7C7V2B3kzkGtKnt1aE03HYyFzp
bRFTU9RW4OJNmItTOpp6v4y+gaxuxZookFHSmwWS1KxbgmkBHmkZl83zkonY/OU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:02:00 2025 by rpki-client