Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/G5hDxevfZCHIynIb7kl9zkkafFo.roa
File: G5hDxevfZCHIynIb7kl9zkkafFo.roa (raw, json)
Hash identifier: 8zV/uIn4iieWxxlFcNsO96ew34Z1C3Yh+YZ7EOCmJ5k=
Subject key identifier: 1B:98:43:C5:EB:DF:64:21:C8:CA:72:1B:EE:49:7D:CE:49:1A:7C:5A
Certificate issuer: /CN=6e80725060ff4b3b55acde6a397c31eea97c237c
Certificate serial: 019427B4B0F974E5BF9F68B22D9B85E08579
Authority key identifier: 6E:80:72:50:60:FF:4B:3B:55:AC:DE:6A:39:7C:31:EE:A9:7C:23:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boByUGD_SztVrN5qOXwx7ql8I3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/G5hDxevfZCHIynIb7kl9zkkafFo.roa
Signing time: Thu 02 Jan 2025 15:49:00 +0000
ROA not before: Thu 02 Jan 2025 15:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44700
IP address blocks: 195.149.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:b0:f9:74:e5:bf:9f:68:b2:2d:9b:85:e0:85:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e80725060ff4b3b55acde6a397c31eea97c237c
Validity
Not Before: Jan 2 15:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b9843c5ebdf6421c8ca721bee497dce491a7c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7e:eb:67:56:8a:f5:bf:ad:ca:07:6f:86:8e:
e1:7a:27:26:ef:c7:7a:f4:be:e7:7b:86:6b:9e:f6:
e5:a3:bd:36:1f:f5:86:57:b5:e0:c1:8c:1b:54:ac:
93:24:47:8c:be:91:48:e0:75:80:e0:36:ac:fc:67:
31:bd:7c:23:58:b8:28:a2:ea:e4:00:6e:c7:d1:d3:
7d:92:46:32:39:f1:96:89:ea:8e:03:9c:34:17:ef:
f5:6f:e3:21:38:31:22:01:0e:ec:7e:3a:cf:a2:8c:
bf:7c:af:62:eb:6d:00:96:8d:d2:3c:f3:b6:f7:12:
6f:b7:bf:81:4d:49:70:5c:ce:24:c9:6a:c0:18:33:
c4:f2:3d:ea:3c:e4:02:b7:bb:46:cb:d7:c4:71:0e:
35:a4:9d:0b:46:0d:bc:6c:98:96:35:98:f5:48:32:
16:c8:d2:27:68:9e:56:3f:cd:4c:12:74:03:44:a6:
86:61:ad:1c:1d:60:a1:58:f7:a2:2a:2f:c4:80:94:
09:b7:9c:77:a2:15:df:14:42:39:5c:d9:9e:9c:e1:
24:6b:22:2c:c9:7f:ec:52:bb:ff:23:37:72:76:52:
1e:34:05:2c:34:5f:a2:0a:44:ca:f8:04:3d:47:ab:
a9:42:c6:5d:5b:64:3b:a1:ea:e9:54:2b:23:4f:50:
4a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:98:43:C5:EB:DF:64:21:C8:CA:72:1B:EE:49:7D:CE:49:1A:7C:5A
X509v3 Authority Key Identifier:
keyid:6E:80:72:50:60:FF:4B:3B:55:AC:DE:6A:39:7C:31:EE:A9:7C:23:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boByUGD_SztVrN5qOXwx7ql8I3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/G5hDxevfZCHIynIb7kl9zkkafFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.99.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:40:8a:c4:38:21:6b:77:b3:43:66:93:61:81:ff:f1:1e:d3:
e2:ff:c7:ff:59:b1:e6:da:4e:e2:43:c6:4d:88:46:1f:72:a5:
ec:0b:5b:0a:f0:e8:1f:c6:e7:95:7a:99:75:2d:8f:21:1b:f9:
3b:73:26:80:a0:0b:97:ff:b2:46:ad:b3:f1:63:4e:ca:fe:e2:
69:a9:70:d2:7f:30:cb:14:d4:15:69:90:94:6f:7f:bc:51:9b:
e7:1b:be:ea:94:ea:29:b3:31:b5:b6:70:3f:a5:6f:b5:9c:4e:
63:2e:e1:49:64:2a:af:39:ae:d7:26:73:93:df:5f:2d:16:0e:
a1:89:31:69:bc:21:a8:61:da:38:33:98:2e:26:c3:b9:2c:1d:
4d:73:38:e9:a1:80:ae:fa:92:3d:67:03:d4:41:1b:1e:4e:c2:
2d:ce:69:93:86:93:4f:c2:85:a3:12:8b:41:48:62:3a:fc:16:
15:86:5b:7f:e9:e9:dc:73:2e:f2:ce:a4:bd:17:b0:b1:51:be:
80:47:6e:ad:ad:b7:03:dc:5f:43:4b:54:49:f8:b2:4c:d8:81:
1a:59:31:f1:74:d8:b9:2d:38:2c:b0:0e:bd:03:21:9d:be:99:
e3:43:9b:5e:c9:5f:7d:40:f4:93:04:5e:45:2f:c5:9a:97:ff:
88:75:0d:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntLD5dOW/n2iyLZuF4IV5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODA3MjUwNjBmZjRiM2I1NWFjZGU2YTM5N2MzMWVlYTk3
YzIzN2MwHhcNMjUwMTAyMTU0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjk4NDNjNWViZGY2NDIxYzhjYTcyMWJlZTQ5N2RjZTQ5MWE3YzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX7rZ1aK9b+tygdvho7heicm78d6
9L7ne4Zrnvblo702H/WGV7XgwYwbVKyTJEeMvpFI4HWA4Das/GcxvXwjWLgoourk
AG7H0dN9kkYyOfGWieqOA5w0F+/1b+MhODEiAQ7sfjrPooy/fK9i620Alo3SPPO2
9xJvt7+BTUlwXM4kyWrAGDPE8j3qPOQCt7tGy9fEcQ41pJ0LRg28bJiWNZj1SDIW
yNInaJ5WP81MEnQDRKaGYa0cHWChWPeiKi/EgJQJt5x3ohXfFEI5XNmenOEkayIs
yX/sUrv/IzdydlIeNAUsNF+iCkTK+AQ9R6upQsZdW2Q7oerpVCsjT1BKRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBuYQ8Xr32QhyMpyG+5Jfc5JGnxaMB8GA1UdIwQY
MBaAFG6AclBg/0s7Vazeajl8Me6pfCN8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9CeVVHRF9TenRWck41cU9Yd3g3cWw4STN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS83YTZiZDktNGJlOS00MDJiLTg1MzYt
NTMzMzVkYTBjZmQzLzEvRzVoRHhldmZaQ0hJeW5JYjdrbDl6a2thZkZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS83YTZiZDktNGJlOS00MDJiLTg1MzYtNTMzMzVkYTBjZmQz
LzEvYm9CeVVHRF9TenRWck41cU9Yd3g3cWw4STN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5VjMA0G
CSqGSIb3DQEBCwUAA4IBAQBqQIrEOCFrd7NDZpNhgf/xHtPi/8f/WbHm2k7iQ8ZN
iEYfcqXsC1sK8OgfxueVepl1LY8hG/k7cyaAoAuX/7JGrbPxY07K/uJpqXDSfzDL
FNQVaZCUb3+8UZvnG77qlOopszG1tnA/pW+1nE5jLuFJZCqvOa7XJnOT318tFg6h
iTFpvCGoYdo4M5guJsO5LB1NczjpoYCu+pI9ZwPUQRseTsItzmmThpNPwoWjEotB
SGI6/BYVhlt/6enccy7yzqS9F7CxUb6AR26trbcD3F9DS1RJ+LJM2IEaWTHxdNi5
LTgssA69AyGdvpnjQ5teyV99QPSTBF5FL8Wal/+IdQ0B
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:01 2025 by rpki-client