Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/a3C3D0YT0LCxzYk_gP-uTZA6fnI.roa
File: a3C3D0YT0LCxzYk_gP-uTZA6fnI.roa (raw, json)
Hash identifier: baiAvJGpUsAZJ7npsCUrORP22mHXOv/h6ETJi81b0fM=
Subject key identifier: 6B:70:B7:0F:46:13:D0:B0:B1:CD:89:3F:80:FF:AE:4D:90:3A:7E:72
Certificate issuer: /CN=b8793a83b062c4de969042f09c1728066636fdc3
Certificate serial: 019423696E2CA9A0421775F24FF4AE25D107
Authority key identifier: B8:79:3A:83:B0:62:C4:DE:96:90:42:F0:9C:17:28:06:66:36:FD:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHk6g7BixN6WkELwnBcoBmY2_cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/a3C3D0YT0LCxzYk_gP-uTZA6fnI.roa
Signing time: Wed 01 Jan 2025 19:48:19 +0000
ROA not before: Wed 01 Jan 2025 19:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205481
IP address blocks: 194.60.81.0/24 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:6e:2c:a9:a0:42:17:75:f2:4f:f4:ae:25:d1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8793a83b062c4de969042f09c1728066636fdc3
Validity
Not Before: Jan 1 19:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b70b70f4613d0b0b1cd893f80ffae4d903a7e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:b0:50:99:17:c8:3c:ab:f8:27:8a:e8:f3:
c4:b7:b7:f8:84:9a:bc:44:b6:dd:52:8f:e6:b9:2a:
b5:a8:4d:c2:e8:28:79:38:6b:6b:83:ce:04:9d:ec:
80:35:1e:0d:d3:8b:04:37:4b:b1:30:bf:60:57:af:
b1:50:ad:2c:cb:4c:14:7a:e5:db:9c:bd:80:a5:a4:
71:be:66:d2:15:ea:f7:1b:77:d4:17:30:94:5c:57:
5f:56:8f:56:24:7c:67:c4:56:6e:bd:09:28:a9:22:
e0:b6:04:f0:ca:f5:f9:ed:35:da:8a:89:c5:6f:e9:
05:5a:23:35:3d:a7:88:79:f4:af:17:9a:85:1b:f4:
0c:a0:9e:98:39:83:f0:db:54:e3:69:8c:c5:63:6e:
f4:02:d9:01:28:6d:82:97:01:2b:05:a5:60:9a:73:
ee:f5:b7:a0:09:00:9a:e6:54:ed:a7:36:fc:01:2d:
8b:93:b0:e7:9a:74:d5:93:10:b4:b9:a5:fb:71:b5:
23:8d:0b:25:cd:04:2c:00:67:7b:05:a8:26:1b:99:
42:82:b6:cd:3f:b9:33:6f:b8:a4:64:db:2f:98:54:
7f:d6:33:04:70:3a:44:cf:19:d4:41:fc:67:9f:9c:
26:1c:ed:2d:80:23:69:1f:5c:bd:3b:1f:6a:ce:b3:
86:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:70:B7:0F:46:13:D0:B0:B1:CD:89:3F:80:FF:AE:4D:90:3A:7E:72
X509v3 Authority Key Identifier:
keyid:B8:79:3A:83:B0:62:C4:DE:96:90:42:F0:9C:17:28:06:66:36:FD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHk6g7BixN6WkELwnBcoBmY2_cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/a3C3D0YT0LCxzYk_gP-uTZA6fnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.81.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:73:46:ba:46:7e:71:c1:3f:e2:43:7c:15:79:43:69:44:71:
93:78:0e:8f:2f:21:aa:72:a6:80:25:3e:e6:18:ad:34:d1:e9:
f3:27:27:50:c9:be:bb:63:21:48:82:5c:f5:87:8a:ca:1c:cc:
28:66:23:f1:13:41:64:ac:22:02:54:63:d5:62:be:e1:ce:cb:
28:dc:ea:95:c5:ad:1b:4e:c5:51:e9:bf:21:3a:ad:47:41:99:
ff:c6:e1:3c:89:08:82:da:72:43:50:b2:af:d7:a9:b3:a9:c4:
b0:aa:c5:cb:3e:f9:07:eb:a2:2a:f3:17:16:15:1e:1e:61:34:
be:2a:f0:bb:11:ae:41:19:85:0a:66:a0:f0:8f:b1:5a:50:7e:
c1:2d:4b:6c:c1:e7:50:21:f2:ca:c2:50:07:3b:e3:f6:8e:b4:
9d:86:94:42:86:a1:b7:ed:23:6d:df:ee:13:8e:6a:c7:e8:37:
4b:d5:53:0b:d8:a9:31:3e:74:aa:15:f2:0e:71:b8:52:75:5d:
d4:9f:51:47:a4:1b:4b:dc:22:24:8b:6c:af:90:f3:14:ca:8a:
1a:bd:f1:78:cc:9d:16:91:3f:82:97:e6:3a:d8:c9:f3:33:3b:
dc:1c:45:56:d7:49:5e:1d:b0:00:8a:49:00:99:a5:af:31:3f:
31:96:aa:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaW4sqaBCF3XyT/SuJdEHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NzkzYTgzYjA2MmM0ZGU5NjkwNDJmMDljMTcyODA2NjYz
NmZkYzMwHhcNMjUwMTAxMTk0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjcwYjcwZjQ2MTNkMGIwYjFjZDg5M2Y4MGZmYWU0ZDkwM2E3ZTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp6wUJkXyDyr+CeK6PPEt7f4hJq8
RLbdUo/muSq1qE3C6Ch5OGtrg84EneyANR4N04sEN0uxML9gV6+xUK0sy0wUeuXb
nL2ApaRxvmbSFer3G3fUFzCUXFdfVo9WJHxnxFZuvQkoqSLgtgTwyvX57TXaionF
b+kFWiM1PaeIefSvF5qFG/QMoJ6YOYPw21TjaYzFY270AtkBKG2ClwErBaVgmnPu
9begCQCa5lTtpzb8AS2Lk7DnmnTVkxC0uaX7cbUjjQslzQQsAGd7BagmG5lCgrbN
P7kzb7ikZNsvmFR/1jMEcDpEzxnUQfxnn5wmHO0tgCNpH1y9Ox9qzrOGqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGtwtw9GE9Cwsc2JP4D/rk2QOn5yMB8GA1UdIwQY
MBaAFLh5OoOwYsTelpBC8JwXKAZmNv3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUhrNmc3Qml4TjZXa0VMd25CY29CbVkyX2NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83OWM3NDEtNmZlYS00ZDNjLWE4NDAt
NTYyM2YwYzU2NGJmLzEvYTNDM0QwWVQwTEN4ellrX2dQLXVUWkE2Zm5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy83OWM3NDEtNmZlYS00ZDNjLWE4NDAtNTYyM2YwYzU2NGJm
LzEvdUhrNmc3Qml4TjZXa0VMd25CY29CbVkyX2NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjxRMA0G
CSqGSIb3DQEBCwUAA4IBAQB/c0a6Rn5xwT/iQ3wVeUNpRHGTeA6PLyGqcqaAJT7m
GK000enzJydQyb67YyFIglz1h4rKHMwoZiPxE0FkrCICVGPVYr7hzsso3OqVxa0b
TsVR6b8hOq1HQZn/xuE8iQiC2nJDULKv16mzqcSwqsXLPvkH66Iq8xcWFR4eYTS+
KvC7Ea5BGYUKZqDwj7FaUH7BLUtswedQIfLKwlAHO+P2jrSdhpRChqG37SNt3+4T
jmrH6DdL1VML2KkxPnSqFfIOcbhSdV3Un1FHpBtL3CIki2yvkPMUyooavfF4zJ0W
kT+Cl+Y62MnzMzvcHEVW10leHbAAikkAmaWvMT8xlqr8
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:00:20 2025 by rpki-client