Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/R_OlpiLM8AchN0LvgG-brNSPeok.roa
File: R_OlpiLM8AchN0LvgG-brNSPeok.roa (raw, json)
Hash identifier: Ha2jaeCRdAo3cD1S+TwOcwXV50R2/YikiY9fj+5QfSk=
Subject key identifier: 47:F3:A5:A6:22:CC:F0:07:21:37:42:EF:80:6F:9B:AC:D4:8F:7A:89
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 01942368F329A5DCECF6C05BBF20384A02E4
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/R_OlpiLM8AchN0LvgG-brNSPeok.roa
Signing time: Wed 01 Jan 2025 19:47:47 +0000
ROA not before: Wed 01 Jan 2025 19:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25227
IP address blocks: 92.63.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:f3:29:a5:dc:ec:f6:c0:5b:bf:20:38:4a:02:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jan 1 19:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47f3a5a622ccf007213742ef806f9bacd48f7a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:35:85:3c:12:85:42:f2:c6:57:8b:fa:e3:
1d:39:7a:3b:21:57:63:ad:85:61:68:41:49:bb:09:
d5:9a:15:97:63:69:ae:3e:3e:80:72:6e:aa:46:fc:
e5:a3:11:bc:18:ae:b4:72:ba:99:ef:db:86:43:d0:
35:51:db:b5:1a:02:e9:fb:09:f3:0b:a1:da:7d:36:
5f:d8:a3:f8:17:8f:c5:5d:29:6f:70:54:b3:00:aa:
ee:5c:d3:a9:82:84:6b:04:57:6e:7d:3b:90:ae:3b:
b6:09:18:80:d1:95:da:f4:f8:08:65:5f:53:ee:e4:
b9:a5:39:a0:1a:45:22:bd:5b:30:92:f4:29:57:c9:
4f:68:f6:22:18:ab:5c:fa:23:38:8c:6a:a5:e0:16:
ed:e2:d6:0d:b6:d4:1d:6e:83:85:f2:63:1f:98:a4:
c5:ce:8c:26:bf:30:33:10:cf:50:d0:84:ee:e5:a4:
37:93:9f:92:f8:02:01:6d:fc:45:18:47:89:82:c5:
3e:de:3e:a0:e0:3a:ac:bd:c9:3a:2e:74:14:8f:c6:
db:ab:c0:20:03:30:fb:d0:5d:18:88:9f:d2:ba:4f:
04:b0:b1:76:20:dd:ad:d1:23:7b:15:3f:cc:19:a0:
3e:e3:85:d5:a9:49:10:51:9a:09:df:6a:e1:99:2f:
ed:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F3:A5:A6:22:CC:F0:07:21:37:42:EF:80:6F:9B:AC:D4:8F:7A:89
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/R_OlpiLM8AchN0LvgG-brNSPeok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.201.0/24
Signature Algorithm: sha256WithRSAEncryption
73:60:01:e4:58:42:70:8a:65:7a:7e:48:c9:ab:c0:ff:9b:c7:
9f:4b:db:1b:21:f2:a4:18:25:d3:7c:0e:3a:c7:0f:69:ff:5c:
26:b6:f1:62:99:20:23:db:91:c7:8a:96:e3:d1:ea:32:8e:81:
9c:68:a7:9d:de:2e:1c:67:c0:c1:f5:0a:de:4b:5d:3a:51:63:
20:3f:5c:06:38:bb:3e:45:e9:bf:9a:b3:34:53:74:f0:6c:67:
68:8b:cf:53:3b:ef:df:c7:b2:cf:eb:8b:fb:6b:6d:71:94:32:
ba:75:ef:1f:27:d3:62:c8:a3:88:7e:9c:38:7b:c1:6b:90:a0:
9b:ad:3b:0d:c6:fc:da:a1:e0:9a:ea:e1:b3:0c:08:72:7a:65:
fe:29:2f:b9:81:a0:cb:d6:a1:4e:27:e7:63:35:a4:67:d4:f5:
1a:20:b3:21:78:1d:fd:92:94:da:c6:d1:c7:bd:e3:fc:27:c2:
9e:9b:e8:b3:92:48:d7:99:29:77:4a:75:64:4c:40:dc:42:b0:
2a:af:16:43:e4:a2:49:c3:5a:2a:eb:28:4d:2d:4c:ad:fb:93:
09:9d:f9:d4:76:07:2f:36:0a:18:4c:95:60:c5:8f:ab:95:b8:
c1:a5:72:38:14:fe:18:27:c2:90:6a:7c:de:4b:87:d5:92:50:
e7:12:25:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaPMppdzs9sBbvyA4SgLkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz
N2Y0ZWQwHhcNMjUwMTAxMTk0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2YzYTVhNjIyY2NmMDA3MjEzNzQyZWY4MDZmOWJhY2Q0OGY3YTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcc1hTwShULyxleL+uMdOXo7IVdj
rYVhaEFJuwnVmhWXY2muPj6Acm6qRvzloxG8GK60crqZ79uGQ9A1Udu1GgLp+wnz
C6HafTZf2KP4F4/FXSlvcFSzAKruXNOpgoRrBFdufTuQrju2CRiA0ZXa9PgIZV9T
7uS5pTmgGkUivVswkvQpV8lPaPYiGKtc+iM4jGql4Bbt4tYNttQdboOF8mMfmKTF
zowmvzAzEM9Q0ITu5aQ3k5+S+AIBbfxFGEeJgsU+3j6g4Dqsvck6LnQUj8bbq8Ag
AzD70F0YiJ/Suk8EsLF2IN2t0SN7FT/MGaA+44XVqUkQUZoJ32rhmS/tWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEfzpaYizPAHITdC74Bvm6zUj3qJMB8GA1UdIwQY
MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt
NTc2MGVmYmNjNjU0LzEvUl9PbHBpTE04QWNoTjBMdmdHLWJyTlNQZW9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0
LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD/JMA0G
CSqGSIb3DQEBCwUAA4IBAQBzYAHkWEJwimV6fkjJq8D/m8efS9sbIfKkGCXTfA46
xw9p/1wmtvFimSAj25HHipbj0eoyjoGcaKed3i4cZ8DB9QreS106UWMgP1wGOLs+
Rem/mrM0U3TwbGdoi89TO+/fx7LP64v7a21xlDK6de8fJ9NiyKOIfpw4e8FrkKCb
rTsNxvzaoeCa6uGzDAhyemX+KS+5gaDL1qFOJ+djNaRn1PUaILMheB39kpTaxtHH
veP8J8Kem+izkkjXmSl3SnVkTEDcQrAqrxZD5KJJw1oq6yhNLUyt+5MJnfnUdgcv
NgoYTJVgxY+rlbjBpXI4FP4YJ8KQanzeS4fVklDnEiXY
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:13:46 2025 by rpki-client