Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/bvrHXhlsyzt8Cv_FZIDRq2zZAdI.roa
File: bvrHXhlsyzt8Cv_FZIDRq2zZAdI.roa (raw, json)
Hash identifier: s4oAgcR0OZeWrAcU2t0+mG/sob09+PDbt/Ebo74XbOw=
Subject key identifier: 6E:FA:C7:5E:19:6C:CB:3B:7C:0A:FF:C5:64:80:D1:AB:6C:D9:01:D2
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019423D6D752A11175DC7C0D0E25B3F3367F
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/bvrHXhlsyzt8Cv_FZIDRq2zZAdI.roa
Signing time: Wed 01 Jan 2025 21:47:49 +0000
ROA not before: Wed 01 Jan 2025 21:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211439
IP address blocks: 81.29.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d7:52:a1:11:75:dc:7c:0d:0e:25:b3:f3:36:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 1 21:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6efac75e196ccb3b7c0affc56480d1ab6cd901d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:95:cd:96:59:5d:dd:1f:ff:6c:1a:bc:cc:
ec:d3:1d:32:53:cf:a7:a5:01:cf:93:d6:36:57:16:
35:19:7f:91:4b:49:52:70:86:e2:13:85:b2:b5:68:
54:d0:5f:19:ad:15:30:2a:24:43:89:53:ed:4b:52:
ca:4d:dc:40:77:d5:2f:1c:82:d9:d4:38:9c:a2:2b:
12:3d:4d:e1:48:df:75:d2:4f:6b:dc:c8:18:28:49:
6f:1a:1e:31:20:7e:0f:b0:68:7a:1f:99:25:08:bd:
e7:91:55:ce:58:aa:b0:b7:81:33:5d:82:cd:13:f7:
b4:51:ef:d0:5f:cc:94:cf:09:5a:39:31:4c:2a:bc:
ec:2c:7c:a5:b5:b5:cf:ed:c2:fc:00:e0:a0:dd:f5:
77:16:eb:af:ab:a7:57:f1:9e:e9:9e:2a:bc:65:fa:
56:c5:ad:ae:bc:03:c7:79:23:3c:67:30:bb:9f:0d:
6e:47:33:1b:e4:fa:73:a6:84:38:b1:8e:bd:0e:45:
f2:08:6e:03:b3:cc:ea:cf:31:41:be:9d:8a:c1:ff:
97:1e:37:91:10:ce:26:a3:39:ba:47:08:01:62:89:
2d:76:ae:85:56:84:32:b9:f0:2a:69:1c:94:f6:d1:
47:9c:9c:f3:fa:b5:be:5c:1c:a1:e3:a9:57:a7:2a:
fe:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FA:C7:5E:19:6C:CB:3B:7C:0A:FF:C5:64:80:D1:AB:6C:D9:01:D2
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/bvrHXhlsyzt8Cv_FZIDRq2zZAdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.156.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:fe:3b:98:05:16:1c:38:5f:2b:77:66:22:2e:6e:a9:50:55:
9a:e0:82:ac:fb:28:2f:bf:5f:31:ca:85:f7:73:34:9c:7e:8d:
e8:ac:ee:35:06:0a:b6:4d:0f:92:91:84:c0:62:63:f1:7c:79:
be:6f:0a:6e:ff:0f:39:b8:91:c6:dc:1c:28:20:59:6b:b4:73:
30:96:ee:0b:0d:c7:5c:91:53:39:ba:b5:0a:62:cf:a8:36:27:
91:6f:30:68:31:0b:87:a8:11:70:76:57:aa:ac:b7:00:a2:1e:
d9:15:ab:22:d9:36:ef:b1:a2:e7:2f:56:e5:0c:8a:54:a3:75:
4a:b1:2c:37:3e:6d:c0:50:99:1c:f8:99:79:68:12:33:3f:cd:
85:99:7b:97:46:6b:2b:88:d1:7d:d1:17:06:fd:f1:d2:c3:c7:
1a:31:7b:0e:ca:52:c1:63:c9:e7:14:a6:89:09:da:9a:2f:15:
b7:4c:ba:60:8c:55:09:13:5c:f6:29:31:ad:ab:6a:b6:51:3b:
37:05:f0:99:05:47:bc:99:be:20:9d:5c:ba:b4:18:05:63:a4:
2f:20:32:b7:21:80:b3:5c:91:43:14:cb:be:f0:24:17:27:ce:
4a:63:e1:b4:7b:40:38:bf:eb:bd:0a:d9:21:fc:e0:19:0d:35:
8c:95:15:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1tdSoRF13HwNDiWz8zZ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjUwMTAxMjE0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWZhYzc1ZTE5NmNjYjNiN2MwYWZmYzU2NDgwZDFhYjZjZDkwMWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR6VzZZZXd0f/2wavMzs0x0yU8+n
pQHPk9Y2VxY1GX+RS0lScIbiE4WytWhU0F8ZrRUwKiRDiVPtS1LKTdxAd9UvHILZ
1DicoisSPU3hSN910k9r3MgYKElvGh4xIH4PsGh6H5klCL3nkVXOWKqwt4EzXYLN
E/e0Ue/QX8yUzwlaOTFMKrzsLHyltbXP7cL8AOCg3fV3Fuuvq6dX8Z7pniq8ZfpW
xa2uvAPHeSM8ZzC7nw1uRzMb5PpzpoQ4sY69DkXyCG4Ds8zqzzFBvp2Kwf+XHjeR
EM4mozm6RwgBYoktdq6FVoQyufAqaRyU9tFHnJzz+rW+XByh46lXpyr+6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG76x14ZbMs7fAr/xWSA0ats2QHSMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvYnZySFhobHN5enQ4Q3ZfRlpJRFJxMnpaQWRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR2cMA0G
CSqGSIb3DQEBCwUAA4IBAQA//juYBRYcOF8rd2YiLm6pUFWa4IKs+ygvv18xyoX3
czScfo3orO41Bgq2TQ+SkYTAYmPxfHm+bwpu/w85uJHG3BwoIFlrtHMwlu4LDcdc
kVM5urUKYs+oNieRbzBoMQuHqBFwdleqrLcAoh7ZFasi2TbvsaLnL1blDIpUo3VK
sSw3Pm3AUJkc+Jl5aBIzP82FmXuXRmsriNF90RcG/fHSw8caMXsOylLBY8nnFKaJ
CdqaLxW3TLpgjFUJE1z2KTGtq2q2UTs3BfCZBUe8mb4gnVy6tBgFY6QvIDK3IYCz
XJFDFMu+8CQXJ85KY+G0e0A4v+u9Ctkh/OAZDTWMlRUD
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:31:47 2025 by rpki-client