Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/bAetBQfQtIL8HDlRLQtzqRXsmJw.roa
File: bAetBQfQtIL8HDlRLQtzqRXsmJw.roa (raw, json)
Hash identifier: KlLcSQqNQG0Ri5k3fpJMz79RuQ+R0fvjpj0v09+VZkU=
Subject key identifier: 6C:07:AD:05:07:D0:B4:82:FC:1C:39:51:2D:0B:73:A9:15:EC:98:9C
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 01943FE4AE06BDD0587EF71071E376211F7F
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/bAetBQfQtIL8HDlRLQtzqRXsmJw.roa
Signing time: Tue 07 Jan 2025 08:32:18 +0000
ROA not before: Tue 07 Jan 2025 08:32:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46071
IP address blocks: 194.99.58.0/24 maxlen: 24
194.99.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3f:e4:ae:06:bd:d0:58:7e:f7:10:71:e3:76:21:1f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Jan 7 08:32:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c07ad0507d0b482fc1c39512d0b73a915ec989c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fe:8b:f6:d6:3f:c7:ee:a3:b8:28:db:94:26:
71:7a:87:ec:26:16:cf:a8:6b:57:53:b3:0a:cb:a2:
8d:0d:22:a8:b8:a8:34:86:1f:31:a5:6e:05:cf:41:
d8:7f:58:0d:6d:1e:f1:b6:4c:d4:c9:03:b5:45:42:
b5:df:f7:fe:5c:49:63:52:87:7f:be:9c:1f:d4:1b:
8f:08:9d:1b:8a:b6:e3:6b:cd:f9:50:87:a6:31:43:
95:84:f7:5a:dc:bb:72:cc:f3:88:dd:80:0a:8d:b9:
b8:75:b3:86:fa:a1:9f:8b:13:9a:04:8a:d7:99:2f:
aa:0a:e9:5f:85:bb:f2:00:34:01:0b:41:73:5a:14:
4a:6f:86:2b:01:a9:33:93:b8:f7:93:06:75:6c:6e:
2b:b3:c2:6d:f5:1f:08:1e:63:60:85:01:6b:db:02:
dc:cc:48:71:52:16:a9:e8:e8:b7:d2:08:00:6b:f7:
7a:14:8b:e4:25:63:c3:e3:f5:a3:10:50:86:b0:4c:
3b:68:4c:c7:e4:2d:06:86:79:81:01:94:55:b3:b9:
cf:91:7f:f4:73:25:92:e4:55:85:39:84:28:9a:f9:
ee:55:2e:e3:21:e2:d3:34:60:c1:9e:a9:78:5c:22:
dd:81:74:08:20:aa:a2:65:80:02:49:d2:32:99:a8:
c9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:07:AD:05:07:D0:B4:82:FC:1C:39:51:2D:0B:73:A9:15:EC:98:9C
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/bAetBQfQtIL8HDlRLQtzqRXsmJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.99.58.0/23
Signature Algorithm: sha256WithRSAEncryption
50:f1:79:55:c0:7c:9f:6d:a2:7d:78:e0:61:18:c0:ca:e7:ce:
0f:ca:82:3f:14:82:70:41:b4:b7:30:5b:c3:45:aa:8d:55:16:
a7:27:9d:dd:aa:ed:47:b1:67:d6:89:cb:de:8e:fe:91:c3:2d:
b0:b1:c0:57:f9:37:a1:c0:71:46:d9:01:98:b2:79:e5:b9:9b:
d1:bd:46:45:9b:15:ed:46:a3:ae:f1:fb:63:3b:82:ee:93:5d:
72:e9:27:9f:12:ed:0e:2a:b0:9b:bd:ca:6d:3b:01:56:8f:13:
df:16:c3:fd:27:13:5c:01:84:30:b0:34:10:58:e5:5f:98:08:
2f:ac:9c:5f:93:0a:e3:38:0e:5c:64:19:5e:d4:7f:61:58:22:
a2:b4:05:58:03:29:ff:4d:9e:a2:49:89:7e:9c:b5:05:36:45:
c8:99:03:84:8e:db:45:40:1b:a4:9d:66:7d:95:f4:a3:0c:37:
d4:c8:4f:d0:65:45:19:65:7d:c6:07:53:b6:9f:b8:03:dc:3a:
b0:77:a1:47:ea:19:86:4b:c4:1f:06:46:07:9d:e0:25:2e:cb:
5e:c2:ee:4b:1c:4b:bb:0c:4c:24:f8:7d:81:2e:7f:7c:f3:d4:
af:d2:a7:d5:ad:ae:bc:30:78:05:0c:37:1c:93:2f:03:8e:3b:
d6:64:40:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQ/5K4GvdBYfvcQceN2IR9/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDVlMzcxNzhkODUyNGM3MjY2MGExZDc5NjE2NTk5OWU1
ODY2MjIwHhcNMjUwMTA3MDgzMjE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzA3YWQwNTA3ZDBiNDgyZmMxYzM5NTEyZDBiNzNhOTE1ZWM5ODljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP6L9tY/x+6juCjblCZxeofsJhbP
qGtXU7MKy6KNDSKouKg0hh8xpW4Fz0HYf1gNbR7xtkzUyQO1RUK13/f+XEljUod/
vpwf1BuPCJ0birbja835UIemMUOVhPda3LtyzPOI3YAKjbm4dbOG+qGfixOaBIrX
mS+qCulfhbvyADQBC0FzWhRKb4YrAakzk7j3kwZ1bG4rs8Jt9R8IHmNghQFr2wLc
zEhxUhap6Oi30ggAa/d6FIvkJWPD4/WjEFCGsEw7aEzH5C0GhnmBAZRVs7nPkX/0
cyWS5FWFOYQomvnuVS7jIeLTNGDBnql4XCLdgXQIIKqiZYACSdIymajJFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGwHrQUH0LSC/Bw5US0Lc6kV7JicMB8GA1UdIwQY
MBaAFMjV43F42FJMcmYKHXlhZZmeWGYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODIt
OWUwYWVkMmZiOGVjLzEvYkFldEJRZlF0SUw4SERsUkxRdHpxUlhzbUp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9iNTRjYTMtNzNkNS00OTg0LTg3ODItOWUwYWVkMmZiOGVj
LzEveU5YamNYallVa3h5WmdvZGVXRmxtWjVZWmlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwmM6MA0G
CSqGSIb3DQEBCwUAA4IBAQBQ8XlVwHyfbaJ9eOBhGMDK584PyoI/FIJwQbS3MFvD
RaqNVRanJ53dqu1HsWfWicvejv6Rwy2wscBX+TehwHFG2QGYsnnluZvRvUZFmxXt
RqOu8ftjO4Luk11y6SefEu0OKrCbvcptOwFWjxPfFsP9JxNcAYQwsDQQWOVfmAgv
rJxfkwrjOA5cZBle1H9hWCKitAVYAyn/TZ6iSYl+nLUFNkXImQOEjttFQBuknWZ9
lfSjDDfUyE/QZUUZZX3GB1O2n7gD3Dqwd6FH6hmGS8QfBkYHneAlLstewu5LHEu7
DEwk+H2BLn9889Sv0qfVra68MHgFDDccky8DjjvWZECz
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:46:54 2025 by rpki-client