Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/2_BfjZ49b7NxyoyMbwJsDbrCID4.roa
File: 2_BfjZ49b7NxyoyMbwJsDbrCID4.roa (raw, json)
Hash identifier: 7yu1uLP4fcOIl0Ce6BTIqFRDWeFH3FZkgo+/RXQ91Qc=
Subject key identifier: DB:F0:5F:8D:9E:3D:6F:B3:71:CA:8C:8C:6F:02:6C:0D:BA:C2:20:3E
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0193F404F5007859D206E76B072294DCB5E5
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/2_BfjZ49b7NxyoyMbwJsDbrCID4.roa
Signing time: Mon 23 Dec 2024 14:56:25 +0000
ROA not before: Mon 23 Dec 2024 14:56:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57695
IP address blocks: 194.114.138.0/23 maxlen: 23
194.114.138.0/24 maxlen: 24
194.114.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:04:f5:00:78:59:d2:06:e7:6b:07:22:94:dc:b5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Dec 23 14:56:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbf05f8d9e3d6fb371ca8c8c6f026c0dbac2203e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:55:d2:01:d9:91:92:6e:8c:25:7f:1e:00:f1:
8b:c7:d3:7b:27:55:de:a0:5b:ce:6c:d1:76:fb:4c:
11:a5:21:a4:f1:58:9c:6b:d0:db:09:c9:5a:ae:5a:
5e:b8:ad:c2:a9:be:aa:a7:ed:af:9e:3f:14:f6:bb:
f3:08:d3:29:c3:d3:f9:b2:02:b8:36:98:60:2a:6a:
81:e3:45:5d:32:7c:bc:50:ea:7e:8d:2f:10:1c:21:
cd:70:c2:cb:fa:c7:71:ea:55:9d:7b:5a:42:fd:47:
ae:81:ec:9a:96:0c:25:05:c9:89:d0:d4:42:b7:01:
4f:dd:c9:12:64:3c:1b:5b:be:73:01:8d:86:d3:89:
ad:2b:03:17:5d:75:18:aa:cb:b5:02:1b:ef:71:1c:
f1:18:f0:c4:91:78:03:7f:15:21:ff:b4:1b:ee:aa:
36:5b:8d:55:3f:1b:67:88:8d:d9:6d:df:87:63:94:
de:9c:8c:25:b2:6f:b5:3a:0b:dd:9c:30:85:8a:87:
c0:48:51:64:82:1e:01:e1:ea:21:0f:9a:0f:35:c9:
13:39:13:11:82:c5:1a:6b:9e:1c:e0:58:69:ea:3f:
b9:4b:2a:e7:80:9a:a4:2c:e8:af:93:ac:cb:8c:7d:
9c:15:a3:c4:d6:21:6a:55:da:37:24:54:6f:9a:cd:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F0:5F:8D:9E:3D:6F:B3:71:CA:8C:8C:6F:02:6C:0D:BA:C2:20:3E
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/2_BfjZ49b7NxyoyMbwJsDbrCID4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.114.138.0/23
Signature Algorithm: sha256WithRSAEncryption
87:c5:29:08:40:52:ed:5a:2b:a4:1b:8e:15:c1:a5:5b:c8:1d:
da:1a:c4:d3:ac:89:89:03:3e:5f:da:2f:ff:5e:7f:ac:15:7a:
a5:db:ab:6d:70:0f:7b:93:cf:dd:34:ee:54:76:ef:13:58:af:
64:1a:a4:38:58:11:55:26:48:4b:e4:d4:92:5f:d8:e1:8c:79:
47:2a:a6:f1:cf:44:f5:92:22:30:bd:8f:5c:f8:7b:c7:fe:4b:
47:65:ea:33:b0:0b:3d:8a:8f:3b:04:85:16:0b:66:c9:e1:64:
5c:ce:fb:48:b5:f4:63:48:2e:41:71:89:4a:96:df:93:42:e6:
e4:7f:ec:c3:72:23:4a:63:49:66:56:78:c6:33:2d:24:4e:4f:
c6:ed:6b:e3:31:08:62:1d:5e:c9:04:c1:d2:2d:9e:59:09:8e:
11:e1:ea:7e:81:25:8a:be:0c:25:b1:07:42:7f:e8:54:a3:78:
b8:2d:08:af:b5:19:0c:8d:55:e9:59:d0:b3:dc:b5:ed:9b:57:
ff:c2:31:6b:de:28:e4:e7:6c:1a:d9:d0:d9:19:7b:d0:24:72:
3f:54:6d:70:97:8b:7e:83:a6:48:d8:9b:6a:d3:33:27:76:a5:
62:1f:b8:10:83:27:b5:d3:8c:b4:a5:dd:d5:39:e7:ef:b8:89:
6b:2a:3c:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZP0BPUAeFnSBudrByKU3LXlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjQxMjIzMTQ1NjI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmYwNWY4ZDllM2Q2ZmIzNzFjYThjOGM2ZjAyNmMwZGJhYzIyMDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1XSAdmRkm6MJX8eAPGLx9N7J1Xe
oFvObNF2+0wRpSGk8Vica9DbCclarlpeuK3Cqb6qp+2vnj8U9rvzCNMpw9P5sgK4
NphgKmqB40VdMny8UOp+jS8QHCHNcMLL+sdx6lWde1pC/UeugeyalgwlBcmJ0NRC
twFP3ckSZDwbW75zAY2G04mtKwMXXXUYqsu1AhvvcRzxGPDEkXgDfxUh/7Qb7qo2
W41VPxtniI3Zbd+HY5TenIwlsm+1OgvdnDCFiofASFFkgh4B4eohD5oPNckTORMR
gsUaa54c4Fhp6j+5SyrngJqkLOivk6zLjH2cFaPE1iFqVdo3JFRvms3lFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNvwX42ePW+zccqMjG8CbA26wiA+MB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvMl9CZmpaNDliN054eW95TWJ3SnNEYnJDSUQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwnKKMA0G
CSqGSIb3DQEBCwUAA4IBAQCHxSkIQFLtWiukG44VwaVbyB3aGsTTrImJAz5f2i//
Xn+sFXql26ttcA97k8/dNO5Udu8TWK9kGqQ4WBFVJkhL5NSSX9jhjHlHKqbxz0T1
kiIwvY9c+HvH/ktHZeozsAs9io87BIUWC2bJ4WRczvtItfRjSC5BcYlKlt+TQubk
f+zDciNKY0lmVnjGMy0kTk/G7WvjMQhiHV7JBMHSLZ5ZCY4R4ep+gSWKvgwlsQdC
f+hUo3i4LQivtRkMjVXpWdCz3LXtm1f/wjFr3ijk52wa2dDZGXvQJHI/VG1wl4t+
g6ZI2Jtq0zMndqViH7gQgye104y0pd3VOefvuIlrKjz5
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:20 2025 by rpki-client