Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/b829CjllXtRCfkRzhcJ-FpPXDGw.roa
File: b829CjllXtRCfkRzhcJ-FpPXDGw.roa (raw, json)
Hash identifier: 5uIVLrL3+rmz9e5e6LGnzC+8hwKs3uLSgf8nCpOcaW8=
Subject key identifier: 6F:CD:BD:0A:39:65:5E:D4:42:7E:44:73:85:C2:7E:16:93:D7:0C:6C
Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial: 019422200C69D95AEDADB34483D8B8DBCE6B
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/b829CjllXtRCfkRzhcJ-FpPXDGw.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 194.50.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0c:69:d9:5a:ed:ad:b3:44:83:d8:b8:db:ce:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fcdbd0a39655ed4427e447385c27e1693d70c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fe:3f:97:53:16:ad:dd:06:e1:6a:a8:88:11:
f6:c4:e4:38:b7:e9:39:1c:cb:81:44:d6:6f:be:41:
66:bc:64:49:6a:de:af:23:d6:bc:35:dc:fd:61:03:
d8:91:18:e2:fb:11:2f:c7:00:4e:9d:4d:8f:49:8a:
8a:c5:48:3b:e2:2c:13:ae:3c:5f:73:0e:f7:a9:f1:
6c:19:a3:56:84:9a:0f:ad:47:1f:f5:62:c9:ba:bd:
2a:e9:a6:b6:aa:e5:52:1b:77:0d:aa:f9:90:03:bc:
09:6b:44:2a:a6:0c:d5:ea:c2:0c:d3:cd:e0:80:01:
62:db:42:12:d9:eb:91:3d:d8:58:92:e5:19:15:2c:
82:e5:53:89:d0:3f:e5:df:21:e0:98:78:d2:79:b5:
37:bf:48:e6:3d:bc:36:f7:65:bd:b3:41:3b:e6:bc:
7a:72:6c:8b:d2:01:59:9f:55:38:05:1c:31:60:a6:
87:31:93:f9:92:c1:97:b8:53:d4:0e:f9:85:0b:b4:
41:32:2e:45:54:43:56:b5:5f:25:97:9c:f9:9d:5f:
fc:1f:7d:7b:e0:a4:0c:11:9c:46:69:6c:21:d2:f4:
9c:ae:f9:05:3c:65:44:e7:a5:ed:7c:a7:fa:2f:f4:
80:50:88:dc:1b:1f:7f:c3:8f:37:92:bd:c2:c8:4f:
f0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CD:BD:0A:39:65:5E:D4:42:7E:44:73:85:C2:7E:16:93:D7:0C:6C
X509v3 Authority Key Identifier:
keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/b829CjllXtRCfkRzhcJ-FpPXDGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.21.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:cc:18:1f:35:54:85:57:2b:9a:6d:6f:18:54:67:38:95:4b:
16:55:c9:8f:95:15:30:0d:6e:7b:dc:19:bd:b5:20:8e:cb:9d:
74:03:78:47:9d:0e:d8:78:b7:14:8a:57:01:4b:e4:bd:16:3b:
67:6a:24:42:4b:99:f6:7f:05:d4:d8:41:b6:7c:6c:97:7a:1b:
c2:ee:c9:d2:4d:34:47:8d:9a:5c:fe:30:4f:a4:a8:c6:21:c6:
48:4d:e2:bf:19:78:2d:15:6c:50:6a:3f:ed:07:e1:e3:68:10:
98:5b:76:b4:5d:55:f1:8d:85:18:5a:18:4c:4c:55:a6:83:e3:
2e:07:a4:58:11:05:23:e2:3d:16:ce:2f:17:ed:e8:26:9d:e9:
fc:4d:f9:c6:76:b0:5f:12:13:f7:2e:1b:5d:4e:91:07:85:35:
d2:56:6e:0b:24:d6:69:7e:6e:ca:9d:04:25:90:8b:e2:f4:b9:
d9:96:d0:d3:7c:f3:83:81:8a:aa:3c:70:62:ad:90:58:6e:28:
2d:e2:12:49:dc:b6:e0:8a:9a:ff:0d:15:67:37:7c:5d:94:00:
91:a2:33:07:52:46:7f:84:91:f7:56:83:76:60:9a:c5:33:59:
84:e8:dd:75:78:e9:54:92:76:78:46:f3:98:ef:b0:5b:43:3f:
5d:a0:a2:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIAxp2VrtrbNEg9i4285rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiOTVlMWNiYzY3ZTc4MmRiZjlmOGU3NDRlNDM3MjY4YmRj
YzM5Y2UwHhcNMjUwMTAxMTM0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmNkYmQwYTM5NjU1ZWQ0NDI3ZTQ0NzM4NWMyN2UxNjkzZDcwYzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP4/l1MWrd0G4WqoiBH2xOQ4t+k5
HMuBRNZvvkFmvGRJat6vI9a8Ndz9YQPYkRji+xEvxwBOnU2PSYqKxUg74iwTrjxf
cw73qfFsGaNWhJoPrUcf9WLJur0q6aa2quVSG3cNqvmQA7wJa0QqpgzV6sIM083g
gAFi20IS2euRPdhYkuUZFSyC5VOJ0D/l3yHgmHjSebU3v0jmPbw292W9s0E75rx6
cmyL0gFZn1U4BRwxYKaHMZP5ksGXuFPUDvmFC7RBMi5FVENWtV8ll5z5nV/8H317
4KQMEZxGaWwh0vScrvkFPGVE56XtfKf6L/SAUIjcGx9/w483kr3CyE/wzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG/NvQo5ZV7UQn5Ec4XCfhaT1wxsMB8GA1UdIwQY
MBaAFMuV4cvGfngtv5+OdE5Dcmi9zDnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83M2UwMGYtZTNlMy00ZDIzLWFkNmIt
NzY2ODJlNzk0Y2MzLzEvYjgyOUNqbGxYdFJDZmtSemhjSi1GcFBYREd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83M2UwMGYtZTNlMy00ZDIzLWFkNmItNzY2ODJlNzk0Y2Mz
LzEveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjIVMA0G
CSqGSIb3DQEBCwUAA4IBAQA8zBgfNVSFVyuabW8YVGc4lUsWVcmPlRUwDW573Bm9
tSCOy510A3hHnQ7YeLcUilcBS+S9FjtnaiRCS5n2fwXU2EG2fGyXehvC7snSTTRH
jZpc/jBPpKjGIcZITeK/GXgtFWxQaj/tB+HjaBCYW3a0XVXxjYUYWhhMTFWmg+Mu
B6RYEQUj4j0Wzi8X7egmnen8TfnGdrBfEhP3LhtdTpEHhTXSVm4LJNZpfm7KnQQl
kIvi9LnZltDTfPODgYqqPHBirZBYbigt4hJJ3Lbgipr/DRVnN3xdlACRojMHUkZ/
hJH3VoN2YJrFM1mE6N11eOlUknZ4RvOY77BbQz9doKLL
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:35 2025 by rpki-client