Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/B84STFeKoQGNNPVu7qjqse7G6tE.roa
File: B84STFeKoQGNNPVu7qjqse7G6tE.roa (raw, json)
Hash identifier: MtuuUttjdEHBfw9pQ6wLwNYRQchbll7oYwTHz6pA12k=
Subject key identifier: 07:CE:12:4C:57:8A:A1:01:8D:34:F5:6E:EE:A8:EA:B1:EE:C6:EA:D1
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0194F7C705CFA5DB17BD09E5C8EDF3E077EB
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/B84STFeKoQGNNPVu7qjqse7G6tE.roa
Signing time: Wed 12 Feb 2025 01:30:02 +0000
ROA not before: Wed 12 Feb 2025 01:30:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 194.246.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f7:c7:05:cf:a5:db:17:bd:09:e5:c8:ed:f3:e0:77:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Feb 12 01:30:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07ce124c578aa1018d34f56eeea8eab1eec6ead1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:9a:42:e4:cc:6c:14:3f:da:65:42:44:be:
a3:6d:e8:4d:7a:41:e6:03:78:64:48:2b:b1:77:fa:
20:a1:7a:4c:3a:9b:1a:7b:a6:ea:3d:45:7f:9d:9d:
14:7f:c6:93:31:84:19:b0:e8:e2:08:36:d4:75:7d:
ad:5a:0f:a3:68:15:77:e9:1b:5b:0f:89:77:4e:94:
76:03:cb:e3:a0:2a:e3:7c:3e:42:5e:20:82:54:7b:
cc:76:36:b2:1d:4f:20:b5:1d:f6:9e:8a:ba:8d:e5:
9b:47:4c:73:f9:30:0b:56:43:1c:2b:a6:d8:d8:25:
7c:e7:ef:83:e5:a7:79:a0:69:59:26:ff:9e:9b:1a:
f0:d5:3f:9b:ca:7e:04:98:97:96:c2:31:db:bf:35:
27:76:59:bc:a0:32:8c:a1:fa:fa:0a:ab:72:5c:65:
a6:64:cd:ee:ec:79:f7:5a:4c:79:64:a2:f8:98:cf:
3f:5a:55:89:d1:9e:cb:65:ae:4e:a5:a5:24:b3:78:
6b:b8:9a:91:59:a0:94:a7:88:90:13:50:bc:ee:6c:
d1:fb:e4:42:05:cb:38:f9:8f:0c:b3:ff:6f:ba:0a:
2e:74:b4:cf:2e:c0:22:d5:b4:7c:f3:4f:ee:0a:0b:
8f:5f:8f:61:82:69:e9:1a:56:23:58:3f:ee:4b:02:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CE:12:4C:57:8A:A1:01:8D:34:F5:6E:EE:A8:EA:B1:EE:C6:EA:D1
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/B84STFeKoQGNNPVu7qjqse7G6tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.36.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f7:ba:64:1b:86:a1:b3:77:ba:a2:03:bb:45:3d:77:45:fa:
aa:fa:c5:9d:47:41:2a:d8:b7:d3:96:c8:3e:8a:1f:91:79:06:
8a:de:39:0c:3a:2d:91:97:40:7f:41:cb:21:d1:e8:fb:ec:d6:
8d:c1:dc:7d:c6:08:df:f0:a7:0b:c2:3a:4a:3e:0a:3d:90:fe:
89:59:e4:bc:71:07:b1:52:bb:30:19:75:5b:d7:26:5b:bd:d9:
a1:80:6a:c4:d8:15:31:9a:65:62:ed:65:64:a3:fd:4c:6c:b6:
5d:d5:7a:d6:59:e9:e6:20:05:32:5b:d9:81:22:b0:75:d5:54:
61:2c:a6:59:15:48:21:6f:70:82:1f:6a:32:d9:4a:39:a9:f3:
b6:90:1a:f9:86:1b:fc:2a:97:ea:c3:9c:11:82:31:f4:29:96:
95:1a:d6:91:4b:d0:43:e6:7b:7c:75:63:73:1a:72:b4:fb:60:
30:88:63:80:88:3b:5d:79:e5:22:b6:ef:8b:e8:53:96:9b:e4:
94:a1:3c:c3:ec:1c:2a:f9:2f:bb:5c:df:d1:07:41:bb:a1:8d:
89:23:ea:a4:c1:7a:d7:62:e4:63:98:75:1c:56:4d:f0:14:db:
2a:f3:99:1a:40:0d:88:96:99:f8:01:27:a0:a6:4c:37:6b:20:
a5:a4:4c:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZT3xwXPpdsXvQnlyO3z4HfrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl
ZWFjNDQwHhcNMjUwMjEyMDEzMDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2NlMTI0YzU3OGFhMTAxOGQzNGY1NmVlZWE4ZWFiMWVlYzZlYWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL2aQuTMbBQ/2mVCRL6jbehNekHm
A3hkSCuxd/ogoXpMOpsae6bqPUV/nZ0Uf8aTMYQZsOjiCDbUdX2tWg+jaBV36Rtb
D4l3TpR2A8vjoCrjfD5CXiCCVHvMdjayHU8gtR32noq6jeWbR0xz+TALVkMcK6bY
2CV85++D5ad5oGlZJv+emxrw1T+byn4EmJeWwjHbvzUndlm8oDKMofr6CqtyXGWm
ZM3u7Hn3Wkx5ZKL4mM8/WlWJ0Z7LZa5OpaUks3hruJqRWaCUp4iQE1C87mzR++RC
Bcs4+Y8Ms/9vugoudLTPLsAi1bR880/uCguPX49hgmnpGlYjWD/uSwK0kQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAfOEkxXiqEBjTT1bu6o6rHuxurRMB8GA1UdIwQY
MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt
OGVmZjNmZDNjNDhhLzEvQjg0U1RGZUtvUUdOTlBWdTdxanFzZTdHNnRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh
LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwvYkMA0G
CSqGSIb3DQEBCwUAA4IBAQCG97pkG4ahs3e6ogO7RT13Rfqq+sWdR0Eq2LfTlsg+
ih+ReQaK3jkMOi2Rl0B/Qcsh0ej77NaNwdx9xgjf8KcLwjpKPgo9kP6JWeS8cQex
UrswGXVb1yZbvdmhgGrE2BUxmmVi7WVko/1MbLZd1XrWWenmIAUyW9mBIrB11VRh
LKZZFUghb3CCH2oy2Uo5qfO2kBr5hhv8Kpfqw5wRgjH0KZaVGtaRS9BD5nt8dWNz
GnK0+2AwiGOAiDtdeeUitu+L6FOWm+SUoTzD7Bwq+S+7XN/RB0G7oY2JI+qkwXrX
YuRjmHUcVk3wFNsq85kaQA2Ilpn4ASegpkw3ayClpExB
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:13 2025 by rpki-client