Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/B1P4OZtuFQg8-IEPdVoH6e1WhgQ.roa
File: B1P4OZtuFQg8-IEPdVoH6e1WhgQ.roa (raw, json)
Hash identifier: Zcl4P6GER5fk1G1cqjqBnH6HrFwiGlALG5kU4cDl8Ys=
Subject key identifier: 07:53:F8:39:9B:6E:15:08:3C:F8:81:0F:75:5A:07:E9:ED:56:86:04
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0193B5FEEAE76B799A0DE4647B05A68CE7B6
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/B1P4OZtuFQg8-IEPdVoH6e1WhgQ.roa
Signing time: Wed 11 Dec 2024 13:53:22 +0000
ROA not before: Wed 11 Dec 2024 13:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 128.0.119.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:fe:ea:e7:6b:79:9a:0d:e4:64:7b:05:a6:8c:e7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Dec 11 13:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0753f8399b6e15083cf8810f755a07e9ed568604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:cc:d5:f5:d7:d6:f3:86:f4:50:b3:65:e3:
11:2d:98:74:a9:7e:c6:16:5a:5e:8b:55:1b:0d:20:
81:45:fe:61:1c:67:0e:ce:d7:d7:8f:b8:9f:0b:3a:
d6:28:ce:a4:b8:1a:6a:c3:2d:eb:9a:7c:a8:24:6c:
b5:14:b6:08:b8:5a:f0:e9:e2:14:2e:48:5b:ae:61:
58:44:de:0c:5c:16:e2:b2:29:9e:fd:d0:fc:7c:5b:
65:36:07:a6:ea:d5:8c:45:15:c2:76:db:b1:f2:d4:
2f:8a:23:ff:5d:26:78:28:71:2a:92:e4:67:b9:a4:
a6:23:90:1e:6a:f5:4f:a3:01:d8:bf:b3:54:4b:85:
26:35:61:61:9e:c1:75:37:50:1f:c5:c7:8e:8f:9d:
e4:0f:ca:32:3c:69:a5:45:ac:ab:5a:14:1f:4a:2a:
10:4f:d0:a7:e7:fd:fa:1a:bc:ae:48:e2:a4:a6:1a:
ed:26:72:b0:94:1e:c1:3b:49:84:45:ad:74:48:de:
18:ef:b7:c4:df:18:b7:d4:63:3d:9e:a9:1e:6b:04:
e1:09:73:b9:c2:6f:54:eb:b4:a6:2d:38:2f:88:00:
5a:05:89:fe:6d:eb:99:ab:ce:60:6e:cd:a5:44:f6:
28:f5:30:27:cc:92:00:90:61:91:00:c7:64:35:19:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:53:F8:39:9B:6E:15:08:3C:F8:81:0F:75:5A:07:E9:ED:56:86:04
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/B1P4OZtuFQg8-IEPdVoH6e1WhgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.119.0/24
Signature Algorithm: sha256WithRSAEncryption
29:04:7f:e9:42:66:b0:3b:40:e4:e6:bf:7e:2e:6b:e1:ff:4a:
86:73:96:83:6b:0a:9c:f2:52:16:40:cf:a3:90:b8:c4:6e:3a:
12:27:49:79:38:28:82:af:f7:9a:79:b9:03:76:6e:6b:34:68:
eb:da:2f:2c:4c:a4:ac:c8:3d:51:c5:7c:43:27:2c:cd:11:60:
d5:2a:28:06:03:40:d9:bc:73:49:fe:e4:37:b5:0f:11:3c:50:
47:c8:b2:1f:4c:2d:b0:11:64:96:ab:f0:da:a2:97:82:bf:75:
bf:82:9b:be:78:78:58:a3:72:ca:25:9c:bb:95:d0:25:c4:e3:
50:38:65:4b:23:b6:7c:ee:d2:18:3e:d7:15:bf:57:13:7d:5b:
15:38:51:a6:57:5f:35:a3:63:15:18:c8:f0:69:bf:00:f8:5f:
b2:d2:53:ad:e6:76:78:fa:fe:fc:29:6b:7b:6b:52:7c:af:59:
2f:b1:72:49:b4:57:c1:ab:85:16:7b:da:b8:ac:f8:3e:e3:3a:
2c:07:e9:eb:83:18:a4:1d:53:fc:8a:29:86:a0:e7:38:95:e5:
ef:39:3b:49:2b:c4:bb:c3:ec:cd:ae:33:5d:c1:c3:e3:2b:a3:
04:e5:dc:7c:74:4b:e3:ac:25:cb:ce:b4:5c:4a:b5:8b:2b:fb:
f9:37:bb:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZO1/urna3maDeRkewWmjOe2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjQxMjExMTM1MzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzUzZjgzOTliNmUxNTA4M2NmODgxMGY3NTVhMDdlOWVkNTY4NjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL/M1fXX1vOG9FCzZeMRLZh0qX7G
Flpei1UbDSCBRf5hHGcOztfXj7ifCzrWKM6kuBpqwy3rmnyoJGy1FLYIuFrw6eIU
LkhbrmFYRN4MXBbisime/dD8fFtlNgem6tWMRRXCdtux8tQviiP/XSZ4KHEqkuRn
uaSmI5AeavVPowHYv7NUS4UmNWFhnsF1N1AfxceOj53kD8oyPGmlRayrWhQfSioQ
T9Cn5/36GryuSOKkphrtJnKwlB7BO0mERa10SN4Y77fE3xi31GM9nqkeawThCXO5
wm9U67SmLTgviABaBYn+beuZq85gbs2lRPYo9TAnzJIAkGGRAMdkNRkZ3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAdT+DmbbhUIPPiBD3VaB+ntVoYEMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvQjFQNE9adHVGUWc4LUlFUGRWb0g2ZTFXaGdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAB3MA0G
CSqGSIb3DQEBCwUAA4IBAQApBH/pQmawO0Dk5r9+Lmvh/0qGc5aDawqc8lIWQM+j
kLjEbjoSJ0l5OCiCr/eaebkDdm5rNGjr2i8sTKSsyD1RxXxDJyzNEWDVKigGA0DZ
vHNJ/uQ3tQ8RPFBHyLIfTC2wEWSWq/DaopeCv3W/gpu+eHhYo3LKJZy7ldAlxONQ
OGVLI7Z87tIYPtcVv1cTfVsVOFGmV181o2MVGMjwab8A+F+y0lOt5nZ4+v78KWt7
a1J8r1kvsXJJtFfBq4UWe9q4rPg+4zosB+nrgxikHVP8iimGoOc4leXvOTtJK8S7
w+zNrjNdwcPjK6ME5dx8dEvjrCXLzrRcSrWLK/v5N7vm
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:29:15 2025 by rpki-client