Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mAxnpbGxQ6afITxMXT5iZr_tb2w.roa
File: mAxnpbGxQ6afITxMXT5iZr_tb2w.roa (raw, json)
Hash identifier: QV5l7xyUefb9vlvv5BIiGjzkSFU0j7NPWL+Qr+frrQ4=
Subject key identifier: 98:0C:67:A5:B1:B1:43:A6:9F:21:3C:4C:5D:3E:62:66:BF:ED:6F:6C
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01958989E2FA62C3361446EDA21DECAC67A4
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mAxnpbGxQ6afITxMXT5iZr_tb2w.roa
Signing time: Wed 12 Mar 2025 08:47:49 +0000
ROA not before: Wed 12 Mar 2025 08:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59993
IP address blocks: 194.145.142.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:89:e2:fa:62:c3:36:14:46:ed:a2:1d:ec:ac:67:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Mar 12 08:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=980c67a5b1b143a69f213c4c5d3e6266bfed6f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c2:76:9c:b6:ea:40:39:2f:0a:fe:63:fc:47:
99:d5:20:df:93:ca:34:76:19:6a:81:49:d5:2a:7a:
66:53:43:96:8a:6d:74:7a:e9:56:0b:93:0b:3c:a4:
dd:75:70:7e:87:dc:55:94:47:1d:31:b1:c0:b4:4d:
ed:bf:af:d7:c3:30:5e:10:e7:62:8f:75:ec:0d:34:
af:2a:a7:a7:32:73:8f:a7:a2:ed:de:b0:0e:2c:90:
92:7a:8c:39:57:69:8f:91:28:b4:46:5e:bf:d6:8f:
79:63:7c:fb:c6:37:cf:72:9d:ea:70:ba:58:ea:8e:
0f:63:ac:8c:90:ae:28:ab:43:d2:22:38:12:00:0a:
09:c6:d8:3d:a9:2c:bb:a4:f3:1e:6c:c7:3d:1b:80:
db:f3:9f:ac:37:09:17:99:b7:5f:d3:16:80:19:6d:
ba:13:aa:94:71:1f:2b:5e:07:f0:43:8f:41:0d:3d:
eb:60:c3:03:53:cb:a3:5b:99:8f:b3:ae:73:64:6e:
ca:40:e4:94:f6:7e:57:be:66:06:26:1b:62:2c:c6:
72:55:05:b1:34:d1:79:08:2c:56:66:5a:f8:81:30:
8d:6c:9c:49:95:ff:9f:f7:f5:3f:68:9f:48:4d:d5:
97:0e:f5:a5:9b:f7:3f:41:d5:64:d6:e9:dc:a5:48:
8d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0C:67:A5:B1:B1:43:A6:9F:21:3C:4C:5D:3E:62:66:BF:ED:6F:6C
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mAxnpbGxQ6afITxMXT5iZr_tb2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.142.0/24
Signature Algorithm: sha256WithRSAEncryption
22:6e:74:df:6b:a3:d4:d2:ba:42:f7:6b:d1:3f:b1:9e:5b:d1:
6e:e7:23:99:12:fd:b2:19:3e:8a:22:bb:6b:45:72:10:2f:d8:
c0:49:d1:0e:4e:72:36:be:55:e3:cc:1e:dc:7b:26:c2:25:9f:
55:ad:47:df:bd:b5:78:97:d5:b7:a6:f1:6d:a1:88:f1:04:91:
46:2c:a4:58:8e:62:b1:c0:ac:5c:71:b2:13:c2:ff:a8:01:3a:
8d:a1:bb:30:3c:8e:ec:06:33:d2:c9:98:0d:10:6a:54:a3:a6:
2e:36:40:ae:92:56:35:15:ce:e2:a2:8b:c8:d5:62:d9:a0:52:
e5:ab:9d:56:76:40:36:35:13:f4:cc:b0:ea:58:ae:11:f3:86:
ab:80:ab:31:c4:d5:df:e4:d4:2b:6f:43:4b:0c:7f:dd:24:a8:
38:2b:d7:4c:cd:e1:f4:b1:48:f2:68:6b:df:8c:68:2c:3a:d8:
33:56:f5:44:fd:cf:6f:47:0c:21:67:ff:26:3e:1d:a2:53:94:
96:d2:e7:6d:47:06:42:ae:63:5a:cf:b4:17:93:2a:db:c4:7d:
c2:b6:be:fe:87:20:fa:fd:a5:e6:a7:15:fd:7c:db:a7:b1:2f:
5e:31:f7:cd:57:9d:69:ec:32:ed:2e:d3:24:4a:a5:47:37:70:
9f:01:d4:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWJieL6YsM2FEbtoh3srGekMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjUwMzEyMDg0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODBjNjdhNWIxYjE0M2E2OWYyMTNjNGM1ZDNlNjI2NmJmZWQ2ZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cJ2nLbqQDkvCv5j/EeZ1SDfk8o0
dhlqgUnVKnpmU0OWim10eulWC5MLPKTddXB+h9xVlEcdMbHAtE3tv6/XwzBeEOdi
j3XsDTSvKqenMnOPp6Lt3rAOLJCSeow5V2mPkSi0Rl6/1o95Y3z7xjfPcp3qcLpY
6o4PY6yMkK4oq0PSIjgSAAoJxtg9qSy7pPMebMc9G4Db85+sNwkXmbdf0xaAGW26
E6qUcR8rXgfwQ49BDT3rYMMDU8ujW5mPs65zZG7KQOSU9n5XvmYGJhtiLMZyVQWx
NNF5CCxWZlr4gTCNbJxJlf+f9/U/aJ9ITdWXDvWlm/c/QdVk1uncpUiN4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJgMZ6WxsUOmnyE8TF0+Yma/7W9sMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvbUF4bnBiR3hRNmFmSVR4TVhUNWlacl90YjJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpGOMA0G
CSqGSIb3DQEBCwUAA4IBAQAibnTfa6PU0rpC92vRP7GeW9Fu5yOZEv2yGT6KIrtr
RXIQL9jASdEOTnI2vlXjzB7ceybCJZ9VrUffvbV4l9W3pvFtoYjxBJFGLKRYjmKx
wKxccbITwv+oATqNobswPI7sBjPSyZgNEGpUo6YuNkCuklY1Fc7ioovI1WLZoFLl
q51WdkA2NRP0zLDqWK4R84argKsxxNXf5NQrb0NLDH/dJKg4K9dMzeH0sUjyaGvf
jGgsOtgzVvVE/c9vRwwhZ/8mPh2iU5SW0udtRwZCrmNaz7QXkyrbxH3Ctr7+hyD6
/aXmpxX9fNunsS9eMffNV51p7DLtLtMkSqVHN3CfAdQP
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:35:59 2025 by rpki-client