Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/b4tFKCMFhyngaw1LlIGrAjikYiE.roa
File: b4tFKCMFhyngaw1LlIGrAjikYiE.roa (raw, json)
Hash identifier: zlYQxGhdtm2zm501rwjVL8YUyfYWJBRUvSyMolHaDtI=
Subject key identifier: 6F:8B:45:28:23:05:87:29:E0:6B:0D:4B:94:81:AB:02:38:A4:62:21
Certificate issuer: /CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Certificate serial: 0194228E066ADB104F6330B9E2F314EEA9E7
Authority key identifier: DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/b4tFKCMFhyngaw1LlIGrAjikYiE.roa
Signing time: Wed 01 Jan 2025 15:48:40 +0000
ROA not before: Wed 01 Jan 2025 15:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214262
IP address blocks: 2001:67c:f08::/48 maxlen: 48
2001:67c:f0c::/48 maxlen: 48
2001:67c:f10::/48 maxlen: 48
2001:67c:2c28::/48 maxlen: 48
2001:67c:2fc8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:06:6a:db:10:4f:63:30:b9:e2:f3:14:ee:a9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Validity
Not Before: Jan 1 15:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f8b452823058729e06b0d4b9481ab0238a46221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d9:72:35:e4:a8:6e:d6:06:93:68:bd:4d:01:
f3:da:98:73:f8:b1:7a:05:4e:40:e2:3d:bf:be:0f:
63:c6:c6:3c:b6:09:7b:bb:84:08:82:bd:9b:4c:01:
0a:58:38:1d:a5:f4:70:95:83:a9:9b:1c:94:60:05:
66:97:82:e3:9f:7d:21:ef:15:b6:d8:14:a4:8e:47:
aa:e8:cd:6d:be:fe:b0:43:2b:bc:c7:5a:51:6a:31:
76:c6:02:1b:51:71:95:1f:0b:8d:b4:19:42:1b:ef:
47:2e:88:97:40:5c:58:02:3f:48:3f:6d:56:2c:c4:
4e:b2:0e:05:3c:87:ab:20:8b:7f:70:5e:d8:d6:85:
57:99:fa:06:df:25:f5:3a:61:d1:c0:9a:17:d6:22:
12:95:bb:ff:73:98:51:02:29:04:6d:64:4d:82:e9:
21:e2:a6:3c:6b:6e:a0:c1:32:4f:9b:c9:6b:22:79:
94:69:b1:91:74:03:94:51:c0:c8:3c:0d:99:03:f7:
98:f1:ff:74:55:f5:21:8c:c1:9a:7f:c5:4e:94:1c:
85:01:7a:3e:89:a5:fc:37:33:ba:64:e3:44:b8:f0:
59:91:fa:74:c5:9c:8a:c3:b6:db:11:b5:db:3c:7f:
50:67:81:b1:77:c4:fb:c7:cb:cd:5c:25:fa:4d:58:
a7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8B:45:28:23:05:87:29:E0:6B:0D:4B:94:81:AB:02:38:A4:62:21
X509v3 Authority Key Identifier:
keyid:DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/b4tFKCMFhyngaw1LlIGrAjikYiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:f08::/48
2001:67c:f0c::/48
2001:67c:f10::/48
2001:67c:2c28::/48
2001:67c:2fc8::/48
Signature Algorithm: sha256WithRSAEncryption
a2:95:0e:ac:07:8e:4c:64:aa:e6:08:05:f4:68:71:5e:06:69:
61:c2:ff:ea:a1:0b:f5:20:6e:84:cf:8b:7e:33:01:b5:8d:da:
7e:ad:eb:c0:b1:ce:6f:ae:bc:eb:3d:91:bd:84:90:94:ed:1b:
ee:1b:2c:06:ca:1f:79:1c:bd:bc:24:08:88:45:78:b0:64:9d:
2f:1d:14:56:1a:cb:fb:03:fd:29:93:f7:b4:61:a8:41:c3:09:
e9:7d:8c:54:af:70:6f:54:21:4d:18:23:09:b6:c0:68:77:e9:
9f:14:18:e4:31:9e:cd:40:70:b8:e5:b4:09:a7:cb:f5:47:a9:
7f:4b:f2:03:2b:e0:53:47:4a:63:1e:76:db:e4:0f:be:0f:7c:
06:64:96:68:81:ae:e7:71:cf:7d:c6:2e:c3:50:c5:2d:d6:4f:
06:6b:a8:58:95:4b:d2:da:3e:5c:c4:a8:50:d7:2f:13:24:61:
63:9e:db:d3:76:dd:27:11:cf:21:8d:e4:69:52:a3:0d:e9:6b:
d6:e0:b8:97:92:18:54:b6:7a:90:b2:94:77:a8:31:8b:2b:68:
f2:d1:88:96:8a:38:5a:46:40:bd:de:fe:0f:7f:fe:10:53:b9:
4f:87:70:c3:a1:f3:56:a7:a0:5e:37:db:fa:64:35:1f:b3:f3:
94:0a:9e:76
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZQijgZq2xBPYzC54vMU7qnnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMWIyYjBlMWNlNzgzZWI3YTJlMzkzZmZkZDEyOGM2YTlj
MDIyMzkwHhcNMjUwMTAxMTU0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjhiNDUyODIzMDU4NzI5ZTA2YjBkNGI5NDgxYWIwMjM4YTQ2MjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9lyNeSobtYGk2i9TQHz2phz+LF6
BU5A4j2/vg9jxsY8tgl7u4QIgr2bTAEKWDgdpfRwlYOpmxyUYAVml4Ljn30h7xW2
2BSkjkeq6M1tvv6wQyu8x1pRajF2xgIbUXGVHwuNtBlCG+9HLoiXQFxYAj9IP21W
LMROsg4FPIerIIt/cF7Y1oVXmfoG3yX1OmHRwJoX1iISlbv/c5hRAikEbWRNgukh
4qY8a26gwTJPm8lrInmUabGRdAOUUcDIPA2ZA/eY8f90VfUhjMGaf8VOlByFAXo+
iaX8NzO6ZONEuPBZkfp0xZyKw7bbEbXbPH9QZ4Gxd8T7x8vNXCX6TVinSQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFG+LRSgjBYcp4GsNS5SBqwI4pGIhMB8GA1UdIwQY
MBaAFNwbKw4c54Prei45P/3RKMapwCI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JzckRoem5nLXQ2TGprX19kRW94cW5BSWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8wMjFmODMtYjM3Yy00Zjg0LTljOWUt
YWRmZTdlNzNkZmVlLzEvYjR0RktDTUZoeW5nYXcxTGxJR3JBamlrWWlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8wMjFmODMtYjM3Yy00Zjg0LTljOWUtYWRmZTdlNzNkZmVl
LzEvM0JzckRoem5nLXQ2TGprX19kRW94cW5BSWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcAIAEGfA8I
AwcAIAEGfA8MAwcAIAEGfA8QAwcAIAEGfCwoAwcAIAEGfC/IMA0GCSqGSIb3DQEB
CwUAA4IBAQCilQ6sB45MZKrmCAX0aHFeBmlhwv/qoQv1IG6Ez4t+MwG1jdp+revA
sc5vrrzrPZG9hJCU7RvuGywGyh95HL28JAiIRXiwZJ0vHRRWGsv7A/0pk/e0YahB
wwnpfYxUr3BvVCFNGCMJtsBod+mfFBjkMZ7NQHC45bQJp8v1R6l/S/IDK+BTR0pj
Hnbb5A++D3wGZJZoga7ncc99xi7DUMUt1k8Ga6hYlUvS2j5cxKhQ1y8TJGFjntvT
dt0nEc8hjeRpUqMN6WvW4LiXkhhUtnqQspR3qDGLK2jy0YiWijhaRkC93v4Pf/4Q
U7lPh3DDofNWp6BeN9v6ZDUfs/OUCp52
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:24 2025 by rpki-client