Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/beZ7lH8hrnPfpblkYum9nSpHi_k.roa
File: beZ7lH8hrnPfpblkYum9nSpHi_k.roa (raw, json)
Hash identifier: 0beIcur3K2WF3b2cBEFEvhkfim8wSnu7ud2d6583fXU=
Subject key identifier: 6D:E6:7B:94:7F:21:AE:73:DF:A5:B9:64:62:E9:BD:9D:2A:47:8B:F9
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B567610F84612D61318ADEB495B390
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/beZ7lH8hrnPfpblkYum9nSpHi_k.roa
Signing time: Thu 02 Jan 2025 15:49:47 +0000
ROA not before: Thu 02 Jan 2025 15:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62091
IP address blocks: 192.162.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:67:61:0f:84:61:2d:61:31:8a:de:b4:95:b3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6de67b947f21ae73dfa5b96462e9bd9d2a478bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:16:f0:f0:07:2e:8a:29:15:9b:6f:49:8b:
c1:fc:84:72:46:89:cf:5e:e4:92:4f:29:21:fd:d6:
85:2f:b8:f7:bf:6c:9d:40:4b:fc:f0:e8:01:46:dd:
a1:78:cd:b0:26:a8:23:0f:47:b9:e6:1b:05:f7:3d:
7c:f4:77:a4:53:82:31:72:f5:73:4b:30:8a:58:d8:
c4:19:e8:2c:bf:c6:f2:a6:be:cf:22:4e:7d:6f:ec:
e6:6d:b6:de:ee:2b:54:3b:a0:a9:cd:2c:2d:a2:05:
cf:ff:d1:7c:3a:ef:ce:cc:78:c0:e0:e8:76:77:5e:
b1:1b:8a:ac:53:15:7c:c3:84:f5:1b:a9:e2:e3:f2:
c4:41:51:af:60:b2:2d:98:63:36:37:d5:c7:6b:90:
ab:11:a4:5d:13:9b:5f:c8:27:62:66:3f:1b:39:be:
f2:99:a6:6d:3a:d3:1d:93:0f:f8:b0:62:d2:7f:f5:
3b:b3:80:3d:42:81:c4:42:ef:1d:3b:71:c6:dd:84:
e2:75:b2:2e:05:c6:29:c6:f9:59:f3:63:89:68:e6:
a7:b6:75:6b:f2:6f:15:54:6e:41:f2:de:ac:57:5a:
9b:09:df:96:46:13:f6:ec:63:66:38:f7:51:38:0f:
fe:4c:28:65:35:2e:12:53:ab:83:f4:a3:e6:ff:d9:
53:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E6:7B:94:7F:21:AE:73:DF:A5:B9:64:62:E9:BD:9D:2A:47:8B:F9
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/beZ7lH8hrnPfpblkYum9nSpHi_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.64.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:a3:82:f0:9a:7a:e7:cd:75:83:0e:53:53:04:64:6b:49:eb:
6e:41:3c:a0:38:25:54:8a:d1:e3:90:0a:af:bb:3e:0c:79:3d:
a2:30:0b:a3:06:00:f7:5d:9b:0c:0a:84:6f:59:2d:7d:42:63:
23:6e:fc:1a:50:80:05:c1:48:ec:7d:3d:1f:d6:6c:b6:f5:4c:
b2:cb:1b:ad:4c:3c:c3:e0:74:7d:2d:e7:5c:bf:41:aa:de:bd:
04:06:fa:5d:0f:9f:c7:93:1d:e2:dc:79:73:bd:e3:5f:1e:fb:
53:8b:57:e6:25:e5:6d:75:79:29:2f:e7:30:97:75:ec:12:4a:
c1:47:e5:80:db:7c:d8:37:89:8c:f4:76:e2:19:60:1d:ab:ba:
27:c2:4c:31:f0:38:ea:8d:e8:42:e5:c2:56:86:3e:ca:55:04:
a8:15:0f:f8:98:7b:b4:fb:6e:fe:c2:19:40:e1:38:76:73:7d:
06:74:da:b4:5b:21:08:5f:f0:95:da:80:52:99:fd:f3:13:cd:
9c:22:69:30:d8:8d:c5:64:eb:a8:fd:dd:8e:6b:54:5c:ab:11:
a0:f7:92:ea:39:62:b3:e9:b5:6a:a1:67:98:c2:25:27:91:c4:
5f:58:14:60:4e:fb:36:d2:90:a2:79:59:c5:85:3d:32:35:2c:
22:5a:53:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntWdhD4RhLWExit60lbOQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjUwMTAyMTU0OTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGU2N2I5NDdmMjFhZTczZGZhNWI5NjQ2MmU5YmQ5ZDJhNDc4YmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsAW8PAHLoopFZtvSYvB/IRyRonP
XuSSTykh/daFL7j3v2ydQEv88OgBRt2heM2wJqgjD0e55hsF9z189HekU4IxcvVz
SzCKWNjEGegsv8bypr7PIk59b+zmbbbe7itUO6CpzSwtogXP/9F8Ou/OzHjA4Oh2
d16xG4qsUxV8w4T1G6ni4/LEQVGvYLItmGM2N9XHa5CrEaRdE5tfyCdiZj8bOb7y
maZtOtMdkw/4sGLSf/U7s4A9QoHEQu8dO3HG3YTidbIuBcYpxvlZ82OJaOantnVr
8m8VVG5B8t6sV1qbCd+WRhP27GNmOPdROA/+TChlNS4SU6uD9KPm/9lTnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG3me5R/Ia5z36W5ZGLpvZ0qR4v5MB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvYmVaN2xIOGhyblBmcGJsa1l1bTluU3BIaV9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKJAMA0G
CSqGSIb3DQEBCwUAA4IBAQCgo4LwmnrnzXWDDlNTBGRrSetuQTygOCVUitHjkAqv
uz4MeT2iMAujBgD3XZsMCoRvWS19QmMjbvwaUIAFwUjsfT0f1my29UyyyxutTDzD
4HR9Ledcv0Gq3r0EBvpdD5/Hkx3i3HlzveNfHvtTi1fmJeVtdXkpL+cwl3XsEkrB
R+WA23zYN4mM9HbiGWAdq7onwkwx8DjqjehC5cJWhj7KVQSoFQ/4mHu0+27+whlA
4Th2c30GdNq0WyEIX/CV2oBSmf3zE82cImkw2I3FZOuo/d2Oa1RcqxGg95LqOWKz
6bVqoWeYwiUnkcRfWBRgTvs20pCieVnFhT0yNSwiWlNp
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:45 2025 by rpki-client