Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/BePRjTkR8iqS0aKYkWoXO5rdZqs.roa
File: BePRjTkR8iqS0aKYkWoXO5rdZqs.roa (raw, json)
Hash identifier: 5lOIKJhZgBSvV56adD3ViMIXkXtZthUITRA8YVcKob8=
Subject key identifier: 05:E3:D1:8D:39:11:F2:2A:92:D1:A2:98:91:6A:17:3B:9A:DD:66:AB
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01941FFA50610B8D276CC924749C6593E16C
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/BePRjTkR8iqS0aKYkWoXO5rdZqs.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401479
IP address blocks: 93.127.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:50:61:0b:8d:27:6c:c9:24:74:9c:65:93:e1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05e3d18d3911f22a92d1a298916a173b9add66ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:d9:ce:f8:c0:c3:e5:5c:95:63:77:da:d1:
cd:e8:07:f0:50:b5:c1:09:16:6f:97:84:87:bd:2a:
bb:53:4a:ae:7e:89:53:4d:9c:3d:f7:2e:9b:fe:a9:
d0:03:71:89:4a:9e:80:33:43:5c:13:a2:f8:1a:aa:
e4:16:5c:ab:11:4f:85:4a:07:75:0c:eb:f4:36:3c:
fd:e4:45:21:f6:8f:1c:80:13:20:12:3a:cf:2e:e7:
b5:4b:95:18:db:3f:c1:5c:1f:6c:16:6b:8d:fe:96:
0b:c3:9e:01:bf:db:34:a0:ab:ee:24:5c:76:2a:5f:
21:fe:fc:09:24:9e:89:3b:f2:0c:6c:5e:1a:a5:4d:
42:51:e9:41:ed:a9:c7:f0:4d:69:7c:92:39:14:91:
8e:7e:b5:0a:00:1a:39:4c:25:f6:dc:69:d7:13:b2:
92:b2:93:ba:c6:33:ac:6c:2d:07:ee:f3:cc:48:f1:
83:3c:77:e0:60:b0:50:39:eb:8a:38:24:e9:ff:8b:
be:28:5d:1a:33:73:64:6b:2c:48:ca:8c:c7:de:2c:
58:9e:d7:73:6b:7a:12:4a:44:ec:8a:35:39:b0:b9:
df:a1:55:ee:06:3e:1d:f8:3e:31:47:8a:fb:11:b0:
31:c2:e6:fe:94:ec:af:94:ec:1a:c5:06:f6:67:22:
7c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E3:D1:8D:39:11:F2:2A:92:D1:A2:98:91:6A:17:3B:9A:DD:66:AB
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/BePRjTkR8iqS0aKYkWoXO5rdZqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.128.0/20
Signature Algorithm: sha256WithRSAEncryption
c3:98:f3:87:ae:8c:26:31:ce:8c:d6:6a:ef:64:30:b1:6f:7e:
63:ab:15:23:56:d1:0f:45:e9:ec:68:fd:ce:2e:12:39:9d:c7:
af:61:fe:d2:d5:c0:06:47:70:db:ae:f2:b6:54:85:49:d3:c5:
a4:c2:19:1f:b2:2a:ea:f2:3e:0e:e5:e2:35:73:96:84:f8:12:
ba:93:9e:74:fe:f8:68:31:e3:2c:73:67:30:6a:cc:6d:aa:0e:
65:1d:25:d1:fa:3f:75:c2:ed:e7:e9:cd:b4:9a:e1:ba:8c:f0:
29:ef:d2:5d:cc:87:d0:f1:5e:31:ed:43:32:24:ba:d3:24:e2:
9d:d1:34:7f:bf:13:36:5a:e3:06:eb:74:58:d0:64:e5:76:4f:
07:c1:cc:15:23:25:10:f9:7a:08:ff:ca:bc:b7:74:8e:1f:1a:
ee:9d:fb:3a:c8:98:4c:68:64:2f:e2:c7:f2:36:5b:7a:35:3b:
c0:0a:16:b0:56:cd:92:87:91:ea:51:3a:6c:41:df:78:c3:8b:
c1:de:89:d1:f3:69:f0:cd:1b:41:15:cc:e9:74:27:9c:23:a0:
fa:6f:1a:80:69:8d:83:ec:d1:f2:c7:d9:cc:60:d0:42:e3:e9:
bd:f6:90:44:c6:e1:0b:eb:6f:ab:ba:6b:3a:86:ca:8f:36:7f:
31:1d:96:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+lBhC40nbMkkdJxlk+FsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2
ZGRlNmYwHhcNMjUwMTAxMDM0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWUzZDE4ZDM5MTFmMjJhOTJkMWEyOTg5MTZhMTczYjlhZGQ2NmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqDZzvjAw+VclWN32tHN6AfwULXB
CRZvl4SHvSq7U0qufolTTZw99y6b/qnQA3GJSp6AM0NcE6L4GqrkFlyrEU+FSgd1
DOv0Njz95EUh9o8cgBMgEjrPLue1S5UY2z/BXB9sFmuN/pYLw54Bv9s0oKvuJFx2
Kl8h/vwJJJ6JO/IMbF4apU1CUelB7anH8E1pfJI5FJGOfrUKABo5TCX23GnXE7KS
spO6xjOsbC0H7vPMSPGDPHfgYLBQOeuKOCTp/4u+KF0aM3NkayxIyozH3ixYntdz
a3oSSkTsijU5sLnfoVXuBj4d+D4xR4r7EbAxwub+lOyvlOwaxQb2ZyJ8bQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAXj0Y05EfIqktGimJFqFzua3WarMB8GA1UdIwQY
MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt
NDQxNDU1OGZkY2JiLzEvQmVQUmpUa1I4aXFTMGFLWWtXb1hPNXJkWnFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji
LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEXX+AMA0G
CSqGSIb3DQEBCwUAA4IBAQDDmPOHrowmMc6M1mrvZDCxb35jqxUjVtEPRensaP3O
LhI5ncevYf7S1cAGR3DbrvK2VIVJ08Wkwhkfsirq8j4O5eI1c5aE+BK6k550/vho
MeMsc2cwasxtqg5lHSXR+j91wu3n6c20muG6jPAp79JdzIfQ8V4x7UMyJLrTJOKd
0TR/vxM2WuMG63RY0GTldk8HwcwVIyUQ+XoI/8q8t3SOHxrunfs6yJhMaGQv4sfy
Nlt6NTvAChawVs2Sh5HqUTpsQd94w4vB3onR82nwzRtBFczpdCecI6D6bxqAaY2D
7NHyx9nMYNBC4+m99pBExuEL62+rums6hsqPNn8xHZaF
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:10 2025 by rpki-client