Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/bz0QjIkqD5-RMeJmKg1JG6p5-Ws.roa
File: bz0QjIkqD5-RMeJmKg1JG6p5-Ws.roa (raw, json)
Hash identifier: 1PiFMOcXEw++DLpqX3fex/SiFqoIja/HYiTy+CElJPg=
Subject key identifier: 6F:3D:10:8C:89:2A:0F:9F:91:31:E2:66:2A:0D:49:1B:AA:79:F9:6B
Certificate issuer: /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial: 0194266BC01877E24F744AF9A83B2D68EF27
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/bz0QjIkqD5-RMeJmKg1JG6p5-Ws.roa
Signing time: Thu 02 Jan 2025 09:49:43 +0000
ROA not before: Thu 02 Jan 2025 09:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62053
IP address blocks: 188.215.115.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c0:18:77:e2:4f:74:4a:f9:a8:3b:2d:68:ef:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Validity
Not Before: Jan 2 09:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f3d108c892a0f9f9131e2662a0d491baa79f96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:91:35:13:93:c1:da:0a:fc:c7:5b:ed:c7:
16:73:8e:52:6b:81:50:c4:6e:23:fc:18:9c:ef:68:
27:b8:8c:df:63:74:fc:c9:03:b5:52:27:02:71:e7:
d7:91:50:6b:d8:ea:c2:35:0b:fb:f3:b8:3d:5c:1f:
b1:2e:37:16:c6:18:44:be:aa:7e:09:b6:f9:d1:0b:
cb:f0:9a:b4:21:a5:9c:38:6e:67:93:bb:e8:12:78:
de:9a:14:e1:7c:da:ff:33:d0:89:d8:af:58:ec:33:
50:42:e2:43:9a:8b:33:30:a2:ad:c1:fc:60:cb:4c:
a4:49:9f:ae:8e:b1:14:af:38:3b:79:43:d6:7a:c9:
17:83:5d:fb:02:8d:92:6e:46:31:5c:32:84:b5:f7:
49:51:96:96:db:fb:70:77:8f:60:c0:7a:29:b6:ef:
c0:d9:71:ed:63:37:4c:33:33:cb:a8:ac:d1:61:9c:
b5:4e:5c:6a:28:6c:11:f9:d9:26:33:6d:76:f2:81:
46:7f:05:10:bf:1b:e7:1d:eb:06:b4:f0:ed:76:d4:
e7:79:a6:85:5a:0c:25:87:0b:98:6d:71:c2:30:77:
d0:0a:59:65:62:ff:1b:97:74:ef:ff:78:f8:9d:a4:
23:f1:b1:6a:68:15:70:7f:70:c3:c0:d7:82:c3:af:
aa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3D:10:8C:89:2A:0F:9F:91:31:E2:66:2A:0D:49:1B:AA:79:F9:6B
X509v3 Authority Key Identifier:
keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/bz0QjIkqD5-RMeJmKg1JG6p5-Ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.115.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:83:b9:58:3b:d5:3a:d3:39:47:92:e4:1d:b1:e0:cb:a6:7c:
56:48:ba:7c:c7:3c:1f:cf:ad:b1:8d:8f:6d:1f:23:f7:3f:eb:
85:08:1b:98:65:99:d2:81:a8:f4:04:60:06:ed:ac:db:90:f7:
e9:2b:1d:1b:98:fa:80:e8:96:5c:2c:a8:e6:53:d9:0e:7a:a8:
e4:3d:73:22:9e:16:cc:df:b6:35:77:ff:a5:cb:10:3a:13:87:
3d:36:f6:20:6c:8f:ce:0b:ca:c6:01:e0:46:d6:a6:ed:02:e0:
d8:df:c3:09:9f:0a:9f:dc:9d:a0:50:12:d1:df:6a:85:86:75:
4c:80:91:98:9a:41:3e:7d:22:7b:66:12:69:a3:0f:f8:13:79:
c4:49:42:78:34:5b:22:bf:3f:b5:ee:ec:f1:05:2c:f3:f7:50:
4a:02:60:17:76:2c:9f:82:8f:7e:25:25:2b:1b:5d:22:1d:67:
54:de:f2:96:93:b6:9f:54:76:ff:43:70:d9:81:a6:b1:90:55:
92:3d:66:94:ea:5e:de:89:a5:b2:0c:51:54:44:e3:f2:a0:04:
26:24:71:a6:2c:99:ce:da:ca:79:80:9e:5a:53:6d:f6:35:fc:
9b:19:ee:2e:22:58:fa:a5:27:e7:de:d1:a4:93:8c:df:11:39:
36:e7:9f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:37:07 2025 by rpki-client