Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/6d-AyMF7ZaaM5Mjt7QfO5cW_2AY.roa
File: 6d-AyMF7ZaaM5Mjt7QfO5cW_2AY.roa (raw, json)
Hash identifier: ZUwXdaD1P85dbAvt2mEWIMU5POb+euNbtRK/RK4dLgk=
Subject key identifier: E9:DF:80:C8:C1:7B:65:A6:8C:E4:C8:ED:ED:07:CE:E5:C5:BF:D8:06
Certificate issuer: /CN=af5bc49d5f01a235af9289cf4926affef7af92b0
Certificate serial: 019423D74D43DE8B56E2872CFF734EA9429F
Authority key identifier: AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/6d-AyMF7ZaaM5Mjt7QfO5cW_2AY.roa
Signing time: Wed 01 Jan 2025 21:48:20 +0000
ROA not before: Wed 01 Jan 2025 21:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50673
IP address blocks: 185.254.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:4d:43:de:8b:56:e2:87:2c:ff:73:4e:a9:42:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5bc49d5f01a235af9289cf4926affef7af92b0
Validity
Not Before: Jan 1 21:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9df80c8c17b65a68ce4c8eded07cee5c5bfd806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d4:33:5f:1f:e5:5a:83:ed:63:b5:e1:0a:50:
c6:de:15:b6:15:79:20:71:be:3e:44:05:0b:71:e2:
bd:10:cb:f5:57:17:59:d4:fb:47:3c:f5:7d:1d:53:
b9:72:e7:44:f2:46:3c:53:af:88:a5:17:b5:32:1d:
b1:f9:86:87:c1:dd:b6:c7:18:02:56:72:da:06:a0:
11:ae:f6:8a:8d:4e:b5:da:26:b2:e1:cf:af:25:aa:
13:de:ce:68:96:a0:29:cf:03:0f:34:c0:39:18:b6:
55:94:19:02:d6:9a:32:05:c9:58:7e:bb:ab:46:6b:
15:9a:21:51:3b:ff:3b:ec:04:e1:7f:6b:73:2f:09:
91:7c:2b:2b:e0:8d:24:63:01:a4:04:aa:ee:cb:39:
0b:e6:ee:4d:13:b6:40:df:d7:cb:e4:ca:be:d9:5c:
b6:78:87:69:73:56:34:f7:db:30:bf:9e:1c:4b:11:
4b:96:e5:e4:c8:59:eb:29:3d:ca:a0:ae:f0:6c:51:
fa:28:d3:ec:76:43:76:15:17:24:ab:a1:ff:22:86:
49:5e:53:34:18:3a:d4:49:40:67:67:07:cb:0f:40:
26:fc:80:56:19:99:ce:ff:15:8e:b3:55:6a:55:2e:
6a:31:0c:82:3b:7d:00:03:85:b2:f1:3e:73:5f:8b:
dc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DF:80:C8:C1:7B:65:A6:8C:E4:C8:ED:ED:07:CE:E5:C5:BF:D8:06
X509v3 Authority Key Identifier:
keyid:AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/6d-AyMF7ZaaM5Mjt7QfO5cW_2AY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.172.0/22
Signature Algorithm: sha256WithRSAEncryption
16:38:bd:8a:65:0b:15:2a:fd:cc:45:de:b9:7f:3a:07:ab:3f:
ec:8d:f8:22:53:e0:32:54:a6:88:38:3b:1f:05:5c:be:28:1c:
13:ef:0a:97:6a:d6:5f:5d:74:c6:75:ad:c5:7d:a7:12:3e:31:
de:64:92:37:57:f0:d9:2f:08:c7:cd:ff:f4:86:53:dd:6b:61:
2e:0b:05:43:fd:9d:c5:9b:1b:27:f6:78:5b:47:11:17:ae:aa:
c6:11:50:48:81:74:22:76:d4:43:7e:ec:75:33:b6:65:33:57:
ec:99:7e:a1:3c:18:17:27:0f:e6:b3:b5:a9:5d:26:1e:a9:50:
3a:59:f0:23:b9:7b:1c:7c:6d:6a:28:ee:ca:da:ba:5d:6c:59:
0d:04:a8:69:3c:af:a2:52:e6:d1:c8:af:61:aa:d5:26:e7:32:
f2:9b:48:3a:72:7f:e6:bf:83:1b:8e:03:7f:a7:03:2f:70:ad:
2e:f2:98:f1:f3:ae:2f:ba:15:49:f5:ee:bc:97:9d:0e:66:cf:
f8:7a:21:94:8b:c7:dc:a4:83:52:f4:12:c4:7c:a4:02:cb:f5:
04:a3:ff:c4:b3:c8:47:4a:6b:b7:ca:c6:d3:0a:3d:40:bf:d9:
96:a7:2d:25:3a:97:be:d3:40:3f:15:1d:dc:42:95:c7:ee:e7:
e6:a5:09:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj101D3otW4ocs/3NOqUKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNWJjNDlkNWYwMWEyMzVhZjkyODljZjQ5MjZhZmZlZjdh
ZjkyYjAwHhcNMjUwMTAxMjE0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWRmODBjOGMxN2I2NWE2OGNlNGM4ZWRlZDA3Y2VlNWM1YmZkODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NQzXx/lWoPtY7XhClDG3hW2FXkg
cb4+RAULceK9EMv1VxdZ1PtHPPV9HVO5cudE8kY8U6+IpRe1Mh2x+YaHwd22xxgC
VnLaBqARrvaKjU612iay4c+vJaoT3s5olqApzwMPNMA5GLZVlBkC1poyBclYfrur
RmsVmiFRO/877AThf2tzLwmRfCsr4I0kYwGkBKruyzkL5u5NE7ZA39fL5Mq+2Vy2
eIdpc1Y099swv54cSxFLluXkyFnrKT3KoK7wbFH6KNPsdkN2FRckq6H/IoZJXlM0
GDrUSUBnZwfLD0Am/IBWGZnO/xWOs1VqVS5qMQyCO30AA4Wy8T5zX4vcFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOnfgMjBe2WmjOTI7e0HzuXFv9gGMB8GA1UdIwQY
MBaAFK9bxJ1fAaI1r5KJz0kmr/73r5KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjF2RW5WOEJvald2a29uUFNTYXZfdmV2a3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9mMmZiZDgtZDZlMS00N2FkLWFhMjEt
MTQ3ZTQ1NzI4NzNhLzEvNmQtQXlNRjdaYWFNNU1qdDdRZk81Y1dfMkFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9mMmZiZDgtZDZlMS00N2FkLWFhMjEtMTQ3ZTQ1NzI4NzNh
LzEvcjF2RW5WOEJvald2a29uUFNTYXZfdmV2a3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuf6sMA0G
CSqGSIb3DQEBCwUAA4IBAQAWOL2KZQsVKv3MRd65fzoHqz/sjfgiU+AyVKaIODsf
BVy+KBwT7wqXatZfXXTGda3FfacSPjHeZJI3V/DZLwjHzf/0hlPda2EuCwVD/Z3F
mxsn9nhbRxEXrqrGEVBIgXQidtRDfux1M7ZlM1fsmX6hPBgXJw/ms7WpXSYeqVA6
WfAjuXscfG1qKO7K2rpdbFkNBKhpPK+iUubRyK9hqtUm5zLym0g6cn/mv4MbjgN/
pwMvcK0u8pjx864vuhVJ9e68l50OZs/4eiGUi8fcpINS9BLEfKQCy/UEo//Es8hH
Smu3ysbTCj1Av9mWpy0lOpe+00A/FR3cQpXH7ufmpQnH
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:36:51 2025 by rpki-client