Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bmSsChQ_uSfpackXOAYafu-z5Fo.roa
File: bmSsChQ_uSfpackXOAYafu-z5Fo.roa (raw, json)
Hash identifier: uprpuovuYrWDW4OaKvbEYi0c7oMEH3+iYWDHio/5TEA=
Subject key identifier: 6E:64:AC:0A:14:3F:B9:27:E9:69:C9:17:38:06:1A:7E:EF:B3:E4:5A
Certificate issuer: /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial: 0194206841AEF11E61CFBB377B30B5269125
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bmSsChQ_uSfpackXOAYafu-z5Fo.roa
Signing time: Wed 01 Jan 2025 05:48:11 +0000
ROA not before: Wed 01 Jan 2025 05:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210017
IP address blocks: 193.58.112.0/22 maxlen: 24
2a0d:e640::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:41:ae:f1:1e:61:cf:bb:37:7b:30:b5:26:91:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Validity
Not Before: Jan 1 05:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e64ac0a143fb927e969c91738061a7eefb3e45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:83:67:65:2d:68:b9:4e:88:78:ba:a9:fa:0e:
7d:2b:a2:9b:6b:92:ff:bf:66:da:cd:48:5b:3e:49:
46:20:13:bc:94:aa:e6:2a:ba:95:5a:27:a4:56:dc:
2d:14:20:75:6b:89:aa:28:62:97:57:e2:35:e2:4e:
0e:ff:36:3a:db:af:9e:b6:a1:27:16:d4:df:50:af:
26:40:44:a2:85:d7:10:34:fa:7e:e4:c5:05:ef:1b:
f9:82:a8:14:7f:ac:b9:75:d8:d2:ae:ef:96:54:0e:
34:28:a0:41:dd:03:a1:23:9e:7a:b1:28:7d:6b:3b:
43:74:b5:bf:35:84:3c:f2:f5:18:0b:20:d2:d3:c3:
9a:ee:d5:8f:b8:5d:c2:6c:10:40:68:f6:a1:41:b8:
83:1b:ec:14:42:61:03:bb:09:77:2d:f4:f2:58:3c:
5c:e0:0c:16:5b:fb:eb:6d:23:cf:fa:03:73:f7:db:
89:cc:57:15:ac:6b:7d:6c:2b:5c:2a:92:29:6e:59:
d9:1b:0a:c8:f7:32:c1:7c:2f:a4:7f:42:83:66:63:
b7:55:95:d7:ab:cd:cd:8d:23:46:9d:45:5d:c1:13:
c2:10:d6:8a:78:93:1e:34:85:c0:9a:c7:f2:47:25:
8f:08:09:ce:b8:41:bc:97:db:05:a1:17:fa:60:0b:
b1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:64:AC:0A:14:3F:B9:27:E9:69:C9:17:38:06:1A:7E:EF:B3:E4:5A
X509v3 Authority Key Identifier:
keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bmSsChQ_uSfpackXOAYafu-z5Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.112.0/22
IPv6:
2a0d:e640::/29
Signature Algorithm: sha256WithRSAEncryption
77:6c:55:b2:b2:67:f3:fd:45:0d:07:55:da:be:fc:1a:99:52:
b1:df:05:58:8b:02:45:52:04:97:5d:b1:dc:d7:d4:6f:13:f7:
df:18:9d:46:1c:fe:07:0e:25:e2:80:f0:62:a6:31:ce:98:10:
53:ce:56:49:9c:52:a6:d5:f8:9b:69:18:f5:db:be:f0:d9:1e:
7e:65:5b:ef:a3:ca:66:09:3f:09:d9:e8:8b:97:46:ec:09:c5:
0b:31:de:bc:12:30:87:55:18:49:a0:6c:25:cb:17:e9:b3:6e:
89:af:77:ec:4e:cd:98:b8:3e:98:be:76:a3:51:4e:7b:40:9a:
3d:2b:1d:6c:54:91:cd:54:e3:77:c4:61:7a:13:10:e6:b4:27:
dd:48:91:af:ae:dd:e4:c8:2d:f4:71:80:a0:03:39:92:7f:9e:
93:25:0e:4f:1d:8a:dd:c0:ba:0e:28:88:e4:df:62:1e:fe:73:
c8:fe:89:57:7e:03:07:e4:00:c1:61:e0:de:42:5f:21:c5:20:
7d:60:58:8c:86:81:79:ae:09:31:c9:45:eb:e8:96:f0:4b:32:
1c:a7:c9:0f:78:88:25:95:9d:75:44:9f:a9:4b:cc:e4:8b:1a:
b8:a9:75:58:ff:dc:7d:8d:46:b9:d0:77:f0:50:9c:fe:1d:7a:
07:f5:f5:51
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQgaEGu8R5hz7s3ezC1JpElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZjliMjRmMmMwODQ3ZDA0MWMxZTY2YTEyZjAxZWFiYTQ3
OGI0ZmMwHhcNMjUwMTAxMDU0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTY0YWMwYTE0M2ZiOTI3ZTk2OWM5MTczODA2MWE3ZWVmYjNlNDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoNnZS1ouU6IeLqp+g59K6Kba5L/
v2bazUhbPklGIBO8lKrmKrqVWiekVtwtFCB1a4mqKGKXV+I14k4O/zY626+etqEn
FtTfUK8mQESihdcQNPp+5MUF7xv5gqgUf6y5ddjSru+WVA40KKBB3QOhI556sSh9
aztDdLW/NYQ88vUYCyDS08Oa7tWPuF3CbBBAaPahQbiDG+wUQmEDuwl3LfTyWDxc
4AwWW/vrbSPP+gNz99uJzFcVrGt9bCtcKpIpblnZGwrI9zLBfC+kf0KDZmO3VZXX
q83NjSNGnUVdwRPCENaKeJMeNIXAmsfyRyWPCAnOuEG8l9sFoRf6YAuxuQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFG5krAoUP7kn6WnJFzgGGn7vs+RaMB8GA1UdIwQY
MBaAFGz5sk8sCEfQQcHmahLwHqukeLT8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlBteVR5d0lSOUJCd2VacUV2QWVxNlI0dFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iNDU3NjUtMmMzMy00YTQ5LTkxZWIt
OTQ2ODkyZjg4YmViLzEvYm1Tc0NoUV91U2ZwYWNrWE9BWWFmdS16NUZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9iNDU3NjUtMmMzMy00YTQ5LTkxZWItOTQ2ODkyZjg4YmVi
LzEvYlBteVR5d0lSOUJCd2VacUV2QWVxNlI0dFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwTpwMA0E
AgACMAcDBQMqDeZAMA0GCSqGSIb3DQEBCwUAA4IBAQB3bFWysmfz/UUNB1Xavvwa
mVKx3wVYiwJFUgSXXbHc19RvE/ffGJ1GHP4HDiXigPBipjHOmBBTzlZJnFKm1fib
aRj1277w2R5+ZVvvo8pmCT8J2eiLl0bsCcULMd68EjCHVRhJoGwlyxfps26Jr3fs
Ts2YuD6YvnajUU57QJo9Kx1sVJHNVON3xGF6ExDmtCfdSJGvrt3kyC30cYCgAzmS
f56TJQ5PHYrdwLoOKIjk32Ie/nPI/olXfgMH5ADBYeDeQl8hxSB9YFiMhoF5rgkx
yUXr6JbwSzIcp8kPeIgllZ11RJ+pS8zkixq4qXVY/9x9jUa50HfwUJz+HXoH9fVR
-----END CERTIFICATE-----
Generated at Thu Apr 10 00:50:31 2025 by rpki-client