Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/hZzdEV89UIlpyAqq4Kc3si8CNoM.roa
File: hZzdEV89UIlpyAqq4Kc3si8CNoM.roa (raw, json)
Hash identifier: d1WlFoJHZ3C9ZD8ErKPK4CYZhKvTRioRSz/Q+loHQuE=
Subject key identifier: 85:9C:DD:11:5F:3D:50:89:69:C8:0A:AA:E0:A7:37:B2:2F:02:36:83
Certificate issuer: /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Certificate serial: 0194228DBD5080BBA35A16E4A389AA8C7998
Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/hZzdEV89UIlpyAqq4Kc3si8CNoM.roa
Signing time: Wed 01 Jan 2025 15:48:21 +0000
ROA not before: Wed 01 Jan 2025 15:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43751
IP address blocks: 93.191.216.0/21 maxlen: 24
2a02:4b0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:bd:50:80:bb:a3:5a:16:e4:a3:89:aa:8c:79:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Validity
Not Before: Jan 1 15:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=859cdd115f3d508969c80aaae0a737b22f023683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ef:41:e8:f9:71:c2:77:1b:5a:e3:03:75:d0:
cb:5e:5b:46:eb:21:e5:77:9c:bf:1c:cd:13:e3:8f:
e5:1f:c5:66:2d:ea:17:3a:e7:da:3f:ed:5a:cc:17:
00:e4:8b:01:86:fd:f8:f7:8d:20:ec:cf:fc:02:cc:
4b:2d:df:4d:3b:37:1a:5a:b6:47:54:30:f8:fb:8e:
cc:54:32:18:4d:7a:c8:5d:f1:b5:23:e0:42:de:a6:
a6:50:28:27:fd:71:87:45:b8:a7:bd:40:d5:03:25:
d0:21:50:d1:42:2c:8e:92:9d:16:43:0f:61:c5:4c:
fc:85:49:2a:5f:ed:cf:22:3f:2e:21:c6:f1:e9:ee:
b4:43:22:2a:34:aa:55:c8:f9:d0:1b:e8:81:2d:82:
03:34:cb:57:f0:76:fa:cf:61:ff:3b:66:b0:97:b4:
01:96:6c:80:0a:b8:55:90:6d:ad:3a:7c:c0:d9:ab:
35:90:2a:24:5c:54:e2:a4:68:70:97:b6:94:34:c6:
c9:08:3a:ee:55:64:89:9d:39:f9:f9:6d:ee:d3:d8:
0f:3b:c1:d3:41:e8:90:1e:53:66:1e:e1:65:34:69:
e4:b1:84:3f:dc:b5:32:9b:5c:ea:b4:5d:93:61:0e:
f7:e5:b2:bd:3b:f2:2e:9a:cd:6f:37:46:45:c4:23:
67:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9C:DD:11:5F:3D:50:89:69:C8:0A:AA:E0:A7:37:B2:2F:02:36:83
X509v3 Authority Key Identifier:
keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/hZzdEV89UIlpyAqq4Kc3si8CNoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.216.0/21
IPv6:
2a02:4b0::/32
Signature Algorithm: sha256WithRSAEncryption
2a:68:df:16:d0:e5:af:2f:e4:5d:ba:e0:40:4c:a8:36:1a:3c:
3e:87:6f:7c:ba:07:1b:2b:58:ad:19:78:e6:9a:cf:52:2a:86:
85:41:18:04:6c:4d:db:e3:d5:ab:85:b7:07:4f:7d:70:52:9c:
5a:2b:92:f6:65:bb:38:dc:fb:53:92:49:d9:30:f0:e1:1a:91:
02:63:58:4d:4a:6d:62:dc:ed:68:e2:59:f7:48:f6:51:c7:c2:
ff:e6:ff:7e:dc:b5:73:8c:24:be:1f:19:0b:7a:80:a8:77:5b:
e8:0e:f5:08:90:c9:2f:d5:26:78:9f:12:f6:b4:37:92:fb:4b:
27:10:bd:a5:9d:e6:63:e4:ac:35:0e:83:5c:b0:18:50:81:2d:
a3:6d:aa:83:bd:04:0f:51:7b:dd:36:67:9d:ca:3f:10:b5:0b:
d2:c4:4e:62:ea:2c:1b:ef:95:fd:4b:87:c6:60:a1:14:87:36:
ff:06:8d:7e:40:86:da:5d:db:5f:52:b7:5e:46:5f:ca:da:4c:
a3:d4:b0:7e:c0:6c:28:e2:5a:33:ad:94:7a:be:8e:7e:fd:9f:
2c:64:a9:f8:63:a6:d8:8f:eb:c8:7b:65:27:64:82:56:15:9a:
61:44:7f:ec:d3:c7:73:29:62:07:0c:7c:c4:8e:3d:32:a2:8a:
0a:05:8a:9b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQijb1QgLujWhbko4mqjHmYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZjJmYjBmYTUyZGUxM2MzMzY2ODljZjNmNDgyOWQ2MzUw
Njc1MGYwHhcNMjUwMTAxMTU0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTljZGQxMTVmM2Q1MDg5NjljODBhYWFlMGE3MzdiMjJmMDIzNjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO9B6PlxwncbWuMDddDLXltG6yHl
d5y/HM0T44/lH8VmLeoXOufaP+1azBcA5IsBhv34940g7M/8AsxLLd9NOzcaWrZH
VDD4+47MVDIYTXrIXfG1I+BC3qamUCgn/XGHRbinvUDVAyXQIVDRQiyOkp0WQw9h
xUz8hUkqX+3PIj8uIcbx6e60QyIqNKpVyPnQG+iBLYIDNMtX8Hb6z2H/O2awl7QB
lmyACrhVkG2tOnzA2as1kCokXFTipGhwl7aUNMbJCDruVWSJnTn5+W3u09gPO8HT
QeiQHlNmHuFlNGnksYQ/3LUym1zqtF2TYQ735bK9O/Iums1vN0ZFxCNnswIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIWc3RFfPVCJacgKquCnN7IvAjaDMB8GA1UdIwQY
MBaAFGzy+w+lLeE8M2aJzz9IKdY1BnUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTkt
NmVjOTgyOTUxY2Y3LzEvaFp6ZEVWODlVSWxweUFxcTRLYzNzaThDTm9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTktNmVjOTgyOTUxY2Y3
LzEvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDXb/YMA0E
AgACMAcDBQAqAgSwMA0GCSqGSIb3DQEBCwUAA4IBAQAqaN8W0OWvL+RduuBATKg2
Gjw+h298ugcbK1itGXjmms9SKoaFQRgEbE3b49WrhbcHT31wUpxaK5L2Zbs43PtT
kknZMPDhGpECY1hNSm1i3O1o4ln3SPZRx8L/5v9+3LVzjCS+HxkLeoCod1voDvUI
kMkv1SZ4nxL2tDeS+0snEL2lneZj5Kw1DoNcsBhQgS2jbaqDvQQPUXvdNmedyj8Q
tQvSxE5i6iwb75X9S4fGYKEUhzb/Bo1+QIbaXdtfUrdeRl/K2kyj1LB+wGwo4loz
rZR6vo5+/Z8sZKn4Y6bYj+vIe2UnZIJWFZphRH/s08dzKWIHDHzEjj0yoooKBYqb
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:06 2025 by rpki-client