Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/b5z69PgTMFHsjCbVLU-F7Thyysg.roa
File: b5z69PgTMFHsjCbVLU-F7Thyysg.roa (raw, json)
Hash identifier: /LNSM46j+j4zj3+kVvOJcG4rOdNqDbFjdWs9b8DDn4g=
Subject key identifier: 6F:9C:FA:F4:F8:13:30:51:EC:8C:26:D5:2D:4F:85:ED:38:72:CA:C8
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 0195AEFC5FF9AD359CE80EFCD6ECFAE745EF
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/b5z69PgTMFHsjCbVLU-F7Thyysg.roa
Signing time: Wed 19 Mar 2025 15:18:49 +0000
ROA not before: Wed 19 Mar 2025 15:18:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6097
IP address blocks: 93.119.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ae:fc:5f:f9:ad:35:9c:e8:0e:fc:d6:ec:fa:e7:45:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Mar 19 15:18:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f9cfaf4f8133051ec8c26d52d4f85ed3872cac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:43:7b:13:c8:61:4d:44:4f:42:60:2c:40:bb:
8e:19:89:c1:bd:d9:d0:1d:1e:e6:04:96:2d:7f:a6:
90:76:0c:2f:16:a2:cd:85:29:fa:b5:84:db:c1:54:
ba:ac:fb:2a:04:ce:b3:8f:35:4b:0e:be:e7:d1:26:
33:be:d4:20:04:d6:85:88:11:70:cb:1c:85:84:d2:
b7:a7:54:dd:57:1c:6a:c1:34:d8:dd:98:8f:7c:cb:
2b:01:4e:51:db:46:45:66:70:25:eb:47:45:dd:65:
10:38:ce:02:dd:d4:5a:5f:a8:64:53:8c:71:31:c7:
f1:e3:a7:ba:9a:86:2d:cf:57:d4:ce:50:ea:61:fb:
97:2c:f7:a0:59:7a:dc:9e:6c:89:bf:b0:4f:9e:b7:
61:ce:bd:7b:a2:a5:7c:62:d0:55:82:a0:f7:26:fd:
3b:ad:e5:25:f0:e6:e7:6d:6b:4c:51:5c:1f:49:b5:
f4:94:ac:79:9d:9f:4e:38:95:83:5b:f9:9b:5f:47:
c0:18:2c:a5:43:a4:be:44:8e:f6:79:c9:9b:38:36:
05:c1:39:ba:c0:0c:96:48:3f:46:f9:3d:b6:e0:75:
73:7d:bd:00:99:b7:bc:b5:a7:9e:0d:3c:4b:69:5c:
5d:84:53:86:c6:a2:c8:76:6f:db:dc:ca:2e:6e:b1:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9C:FA:F4:F8:13:30:51:EC:8C:26:D5:2D:4F:85:ED:38:72:CA:C8
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/b5z69PgTMFHsjCbVLU-F7Thyysg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.144.0/24
Signature Algorithm: sha256WithRSAEncryption
77:28:9d:7b:e9:37:c7:fb:00:d7:04:d1:8f:99:74:fb:9f:95:
ce:b2:69:80:95:55:31:7f:82:1e:15:ea:a5:8d:17:bf:00:c0:
1c:6e:28:8e:69:f6:2a:b7:b1:85:09:65:5c:30:79:e7:8f:5c:
de:5e:f9:d8:5c:2f:65:da:9e:65:2a:1f:ca:26:96:3e:9e:b5:
74:c5:fc:9b:75:02:df:14:0a:89:51:cf:71:eb:d3:c5:d4:66:
34:1d:df:66:d4:db:92:f6:8a:2c:b3:f6:bc:d1:6a:b9:93:79:
f4:d0:04:a7:ef:90:a5:a1:3f:36:3c:50:42:91:0a:6d:6a:d3:
c1:9b:15:43:dd:6a:cd:18:69:87:5b:3f:22:94:da:51:ca:75:
db:51:97:14:a3:91:3c:9f:4e:4e:2d:7f:71:c6:91:6a:47:5b:
c5:7a:f5:ab:80:7c:59:52:fb:44:10:a7:86:21:44:c4:d6:3f:
33:a1:a0:3a:da:df:2b:b8:2f:4c:ca:63:02:75:60:d0:14:92:
f1:eb:05:28:f0:47:39:20:06:63:1c:cc:34:d4:6e:99:c5:d6:
75:cb:f7:de:2b:f6:cc:d9:92:1c:3a:ae:17:82:88:fb:f9:da:
f2:82:f3:bc:ee:66:7a:ae:12:62:8e:da:16:84:e4:b9:46:0c:
b7:c8:ff:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWu/F/5rTWc6A781uz650XvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjUwMzE5MTUxODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjljZmFmNGY4MTMzMDUxZWM4YzI2ZDUyZDRmODVlZDM4NzJjYWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0N7E8hhTURPQmAsQLuOGYnBvdnQ
HR7mBJYtf6aQdgwvFqLNhSn6tYTbwVS6rPsqBM6zjzVLDr7n0SYzvtQgBNaFiBFw
yxyFhNK3p1TdVxxqwTTY3ZiPfMsrAU5R20ZFZnAl60dF3WUQOM4C3dRaX6hkU4xx
Mcfx46e6moYtz1fUzlDqYfuXLPegWXrcnmyJv7BPnrdhzr17oqV8YtBVgqD3Jv07
reUl8ObnbWtMUVwfSbX0lKx5nZ9OOJWDW/mbX0fAGCylQ6S+RI72ecmbODYFwTm6
wAyWSD9G+T224HVzfb0Ambe8taeeDTxLaVxdhFOGxqLIdm/b3MoubrHyaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG+c+vT4EzBR7Iwm1S1Phe04csrIMB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvYjV6NjlQZ1RNRkhzakNiVkxVLUY3VGh5eXNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXeQMA0G
CSqGSIb3DQEBCwUAA4IBAQB3KJ176TfH+wDXBNGPmXT7n5XOsmmAlVUxf4IeFeql
jRe/AMAcbiiOafYqt7GFCWVcMHnnj1zeXvnYXC9l2p5lKh/KJpY+nrV0xfybdQLf
FAqJUc9x69PF1GY0Hd9m1NuS9ooss/a80Wq5k3n00ASn75CloT82PFBCkQptatPB
mxVD3WrNGGmHWz8ilNpRynXbUZcUo5E8n05OLX9xxpFqR1vFevWrgHxZUvtEEKeG
IUTE1j8zoaA62t8ruC9MymMCdWDQFJLx6wUo8Ec5IAZjHMw01G6ZxdZ1y/feK/bM
2ZIcOq4Xgoj7+drygvO87mZ6rhJijtoWhOS5Rgy3yP+k
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:23:22 2025 by rpki-client