Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/a3Raz4sYpthd0b0z1nauqGI-QAU.roa
File: a3Raz4sYpthd0b0z1nauqGI-QAU.roa (raw, json)
Hash identifier: bCYGsHcqtfzk8H2DWcwiRc3Inxet/HCCvOX7WIU6Gv0=
Subject key identifier: 6B:74:5A:CF:8B:18:A6:D8:5D:D1:BD:33:D6:76:AE:A8:62:3E:40:05
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 018F0FAF297A2C246DDD794B90DC7474B660
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/a3Raz4sYpthd0b0z1nauqGI-QAU.roa
Signing time: Wed 24 Apr 2024 10:38:08 +0000
ROA not before: Wed 24 Apr 2024 10:38:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 194.59.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0f:af:29:7a:2c:24:6d:dd:79:4b:90:dc:74:74:b6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Apr 24 10:38:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b745acf8b18a6d85dd1bd33d676aea8623e4005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:a8:8b:96:a6:bd:69:c4:57:e8:d0:42:51:
30:c1:b8:77:71:fd:43:47:f3:50:38:9a:79:23:18:
30:02:62:fe:0b:c0:b5:d0:e9:af:f1:32:c3:f7:6d:
8d:bb:dc:50:08:2b:85:2e:ad:90:79:2f:d1:c2:be:
01:80:42:65:ec:a1:c2:f8:b2:87:05:ee:fa:0b:36:
fe:e6:61:4e:d6:e3:8f:89:8e:eb:25:4c:e7:c8:e4:
2f:42:1e:e5:62:0d:67:95:01:ad:35:eb:eb:6b:43:
e2:c3:d8:d2:9d:96:fe:89:9a:28:30:f5:7a:8c:ca:
b2:12:83:c3:44:7d:f6:fe:78:d2:a3:92:28:7e:f8:
d8:b7:50:2b:28:c6:53:b6:f4:27:87:84:35:32:65:
c6:4b:d6:0a:e5:e6:a2:43:79:f9:17:9b:59:ad:ba:
4c:7b:cf:8b:24:ba:0f:28:7a:6d:e9:f8:9f:dc:a4:
0b:e1:fd:1a:10:38:31:bf:f3:33:95:04:2f:1a:b4:
b1:6a:2e:f0:0e:5d:6b:e1:61:dc:b4:f4:6c:89:b8:
87:e0:94:7d:ff:9d:c5:da:6c:8a:ef:c6:9f:4a:2c:
06:db:ea:19:f3:ef:6e:48:f1:2a:60:d7:85:e6:52:
24:8a:76:2d:5a:23:5d:f1:4b:b5:43:b3:37:1d:50:
3d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:74:5A:CF:8B:18:A6:D8:5D:D1:BD:33:D6:76:AE:A8:62:3E:40:05
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/a3Raz4sYpthd0b0z1nauqGI-QAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.7.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e7:4c:7e:b1:53:7e:72:1f:2d:f6:87:4f:be:3d:04:f2:8b:
96:b4:1e:9b:0c:a2:00:a9:1e:1d:44:45:b8:98:f6:9a:68:1e:
1d:8e:e9:8c:80:13:74:10:46:5a:5b:02:5f:4f:97:f5:ca:63:
e9:e6:28:fe:f9:17:25:42:d6:62:54:24:99:5b:28:87:6b:a2:
4f:3e:67:f4:a3:48:31:83:0b:99:fd:93:af:71:1b:ee:d4:66:
dc:c3:1a:cd:ad:e7:20:76:b0:1b:1d:39:cb:dd:d8:ac:6c:e5:
5e:fd:26:40:10:22:60:0b:33:38:e5:3f:d3:f4:d1:43:3c:9a:
d5:62:5d:04:a6:b2:9b:21:f3:0b:7e:93:da:9c:81:81:ea:3c:
10:fa:1b:4a:22:c7:8c:f5:fc:5d:59:db:e3:cc:0e:c5:76:26:
ca:3a:13:61:f8:6d:4a:ae:16:96:7b:f4:80:63:12:f7:51:d2:
12:f4:b5:dc:d0:9f:c2:68:7a:82:46:bb:95:20:27:03:e2:1a:
3d:8b:c8:78:01:1f:dc:c1:b4:18:9e:ef:27:b2:91:9e:0e:4c:
28:1d:19:aa:5a:56:de:80:1c:14:9e:06:0f:8b:4f:f4:f6:4c:
82:1e:7d:1d:69:d6:dd:ca:e9:31:6e:6c:34:76:75:4d:3c:9c:
98:e7:d2:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY8Pryl6LCRt3XlLkNx0dLZgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3
YTI2NmEwHhcNMjQwNDI0MTAzODA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yjc0NWFjZjhiMThhNmQ4NWRkMWJkMzNkNjc2YWVhODYyM2U0MDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW6oi5amvWnEV+jQQlEwwbh3cf1D
R/NQOJp5IxgwAmL+C8C10Omv8TLD922Nu9xQCCuFLq2QeS/Rwr4BgEJl7KHC+LKH
Be76Czb+5mFO1uOPiY7rJUznyOQvQh7lYg1nlQGtNevra0Piw9jSnZb+iZooMPV6
jMqyEoPDRH32/njSo5IofvjYt1ArKMZTtvQnh4Q1MmXGS9YK5eaiQ3n5F5tZrbpM
e8+LJLoPKHpt6fif3KQL4f0aEDgxv/MzlQQvGrSxai7wDl1r4WHctPRsibiH4JR9
/53F2myK78afSiwG2+oZ8+9uSPEqYNeF5lIkinYtWiNd8Uu1Q7M3HVA9AQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGt0Ws+LGKbYXdG9M9Z2rqhiPkAFMB8GA1UdIwQY
MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt
YWRhNWMyMGUzZjdiLzEvYTNSYXo0c1lwdGhkMGIwejFuYXVxR0ktUUFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi
LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjsHMA0G
CSqGSIb3DQEBCwUAA4IBAQBS50x+sVN+ch8t9odPvj0E8ouWtB6bDKIAqR4dREW4
mPaaaB4djumMgBN0EEZaWwJfT5f1ymPp5ij++RclQtZiVCSZWyiHa6JPPmf0o0gx
gwuZ/ZOvcRvu1GbcwxrNrecgdrAbHTnL3disbOVe/SZAECJgCzM45T/T9NFDPJrV
Yl0EprKbIfMLfpPanIGB6jwQ+htKIseM9fxdWdvjzA7FdibKOhNh+G1KrhaWe/SA
YxL3UdIS9LXc0J/CaHqCRruVICcD4ho9i8h4AR/cwbQYnu8nspGeDkwoHRmqWlbe
gBwUngYPi0/09kyCHn0dadbdyukxbmw0dnVNPJyY59KD
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:02 2025 by rpki-client