Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/c6y1fYOqEJm7Kbk2rXE-830B5z8.roa
File: c6y1fYOqEJm7Kbk2rXE-830B5z8.roa (raw, json)
Hash identifier: Q/NotjlNGpz+JxMV5ryJLIy2Eq/u+y/ESzL0APxa/Ak=
Subject key identifier: 73:AC:B5:7D:83:AA:10:99:BB:29:B9:36:AD:71:3E:F3:7D:01:E7:3F
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01957A6C6C677B32778DDC38A4CA0D2CB9D8
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/c6y1fYOqEJm7Kbk2rXE-830B5z8.roa
Signing time: Sun 09 Mar 2025 10:21:20 +0000
ROA not before: Sun 09 Mar 2025 10:21:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14315
IP address blocks: 82.115.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7a:6c:6c:67:7b:32:77:8d:dc:38:a4:ca:0d:2c:b9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Mar 9 10:21:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73acb57d83aa1099bb29b936ad713ef37d01e73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4a:83:c1:51:7c:66:a7:3a:f7:68:9e:a0:83:
fd:4e:b2:73:49:7b:d8:7b:d9:70:6e:6b:f4:b6:5a:
1e:f8:be:d6:bb:87:dd:60:64:af:6d:13:7c:67:ce:
8c:ad:f5:ff:79:ed:5c:74:56:a3:25:a4:5f:b7:70:
9c:a3:d1:83:4e:39:5a:3f:a6:35:5c:71:b2:b3:ff:
2d:5d:b9:65:12:29:ca:ce:d6:44:57:f5:95:66:47:
6c:4e:08:1e:69:1f:4c:a5:b2:7b:05:5a:50:36:96:
24:fe:65:94:0c:fb:b0:a8:d6:30:6e:00:5e:b0:59:
6c:ab:3d:c6:42:83:cd:3c:61:13:47:c4:4c:e7:46:
90:20:91:36:e9:64:a2:f7:20:0d:6f:53:bd:da:14:
40:0d:46:9a:c0:e0:18:86:3e:f6:a4:28:3e:dc:b7:
f9:6d:d5:5f:69:36:8d:f4:23:bf:ec:9f:1a:59:cc:
66:01:1c:53:3f:c4:54:de:8a:7f:ff:ad:66:e5:4c:
38:98:19:6f:da:cb:95:77:62:33:39:ad:f9:97:6f:
00:d6:20:83:7d:70:48:88:ec:82:a6:a5:d3:04:18:
13:bd:45:be:47:64:67:88:1b:ad:6b:86:6f:03:4a:
6d:35:2f:d4:ff:4e:ec:75:5b:3b:1b:a3:cf:26:96:
35:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AC:B5:7D:83:AA:10:99:BB:29:B9:36:AD:71:3E:F3:7D:01:E7:3F
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/c6y1fYOqEJm7Kbk2rXE-830B5z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.10.0/23
Signature Algorithm: sha256WithRSAEncryption
d5:b2:e5:cb:1b:12:37:d1:fd:b6:c1:b4:2d:c0:1e:9b:20:aa:
fc:76:ea:51:2f:07:27:a4:30:10:ae:d4:1e:78:be:34:36:ae:
6c:5a:43:42:06:66:f2:e3:bd:a2:f2:06:af:a6:aa:c5:8c:81:
3d:eb:4f:6d:71:f4:c8:8c:83:2e:7e:bb:25:0c:33:bc:17:ff:
46:73:f5:7a:d8:8c:9e:ac:fe:e9:52:09:42:d3:3c:0b:cf:27:
93:8f:fb:af:be:cc:87:47:37:18:28:d8:01:9d:ad:25:cc:4b:
2b:d3:c7:19:37:4a:23:2a:53:cd:74:df:68:ff:62:7c:b2:16:
32:ff:4a:0d:4d:a1:a3:f0:91:f8:52:e0:4f:c5:d3:cc:5f:4c:
fe:95:e7:6d:10:9e:5b:fd:30:15:18:04:a9:e2:10:34:60:da:
ba:78:73:be:6a:c1:1c:fb:69:d4:09:51:f1:f9:da:b9:d8:9a:
b9:fe:01:3b:5b:7f:2c:a1:e7:bf:8e:6f:2f:8e:43:91:12:3b:
63:83:56:2c:ee:b1:58:54:8a:dc:77:b5:69:6e:f3:cb:f6:27:
88:2a:6a:8f:d0:a9:1a:35:a1:ad:2b:08:9b:c8:7d:fa:07:f3:
40:cb:c0:6c:6d:81:78:83:bf:27:ba:e9:22:24:c6:3e:c7:08:
21:c9:e2:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZV6bGxnezJ3jdw4pMoNLLnYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjUwMzA5MTAyMTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2FjYjU3ZDgzYWExMDk5YmIyOWI5MzZhZDcxM2VmMzdkMDFlNzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kqDwVF8Zqc692ieoIP9TrJzSXvY
e9lwbmv0tloe+L7Wu4fdYGSvbRN8Z86MrfX/ee1cdFajJaRft3Cco9GDTjlaP6Y1
XHGys/8tXbllEinKztZEV/WVZkdsTggeaR9MpbJ7BVpQNpYk/mWUDPuwqNYwbgBe
sFlsqz3GQoPNPGETR8RM50aQIJE26WSi9yANb1O92hRADUaawOAYhj72pCg+3Lf5
bdVfaTaN9CO/7J8aWcxmARxTP8RU3op//61m5Uw4mBlv2suVd2IzOa35l28A1iCD
fXBIiOyCpqXTBBgTvUW+R2RniButa4ZvA0ptNS/U/07sdVs7G6PPJpY1mwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHOstX2DqhCZuym5Nq1xPvN9Aec/MB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvYzZ5MWZZT3FFSm03S2JrMnJYRS04MzBCNXo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUnMKMA0G
CSqGSIb3DQEBCwUAA4IBAQDVsuXLGxI30f22wbQtwB6bIKr8dupRLwcnpDAQrtQe
eL40Nq5sWkNCBmby472i8gavpqrFjIE9609tcfTIjIMufrslDDO8F/9Gc/V62Iye
rP7pUglC0zwLzyeTj/uvvsyHRzcYKNgBna0lzEsr08cZN0ojKlPNdN9o/2J8shYy
/0oNTaGj8JH4UuBPxdPMX0z+ledtEJ5b/TAVGASp4hA0YNq6eHO+asEc+2nUCVHx
+dq52Jq5/gE7W38soee/jm8vjkOREjtjg1Ys7rFYVIrcd7VpbvPL9ieIKmqP0Kka
NaGtKwibyH36B/NAy8BsbYF4g78nuukiJMY+xwghyeKa
-----END CERTIFICATE-----
Generated at Thu Apr 10 21:38:05 2025 by rpki-client