Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/B6IAypRDNnn3wQIonYGMbrtebVA.roa
File: B6IAypRDNnn3wQIonYGMbrtebVA.roa (raw, json)
Hash identifier: RDNajdiQ2iOHeS1ehJ984LhPxM3hBSKi1PJW1BaavLE=
Subject key identifier: 07:A2:00:CA:94:43:36:79:F7:C1:02:28:9D:81:8C:6E:BB:5E:6D:50
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 01942067F5901A0668C2AE76A0CF107A2DEC
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/B6IAypRDNnn3wQIonYGMbrtebVA.roa
Signing time: Wed 01 Jan 2025 05:47:51 +0000
ROA not before: Wed 01 Jan 2025 05:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12350
IP address blocks: 193.247.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f5:90:1a:06:68:c2:ae:76:a0:cf:10:7a:2d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Jan 1 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07a200ca94433679f7c102289d818c6ebb5e6d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2e:38:5a:63:b4:bf:65:7e:17:f9:8f:b6:a3:
54:fe:5c:64:80:0d:4d:3a:63:0c:b1:60:91:f7:94:
cc:be:0c:e9:3d:23:0a:be:fe:77:6b:08:45:d3:e8:
c2:6c:5e:64:66:f5:fe:40:a1:72:4d:d3:5a:68:46:
09:38:3e:13:74:00:27:28:9e:be:e6:39:d4:ed:72:
7a:08:7c:67:ff:c7:a2:6a:dc:8b:0d:4e:4a:95:16:
a8:20:c3:89:c3:0b:be:ea:a2:f2:5d:79:07:74:d8:
f0:12:27:42:2c:81:c8:64:21:80:70:77:88:ef:7b:
c1:92:cc:73:de:cf:f4:eb:2f:ab:3e:7e:49:b5:ed:
32:e6:ed:d6:12:54:73:92:90:a4:f1:48:0d:9f:31:
b9:fd:74:73:8f:85:e6:97:7a:33:ab:96:c4:98:77:
f4:ae:2f:e4:a2:7f:92:1a:b0:d0:18:2b:37:a3:7b:
8c:ef:15:76:fb:51:4d:d2:e5:95:77:98:91:5f:45:
94:f7:8f:64:7a:5c:83:27:e5:fa:14:8e:95:ad:52:
1e:d8:fe:84:53:fb:f8:4c:a9:21:d6:6d:fe:b4:d7:
f1:74:7e:e6:1d:12:e9:7f:04:2b:b7:0c:84:98:4a:
0f:40:6f:82:95:46:9e:bd:c7:d4:00:db:67:0a:05:
4d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A2:00:CA:94:43:36:79:F7:C1:02:28:9D:81:8C:6E:BB:5E:6D:50
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/B6IAypRDNnn3wQIonYGMbrtebVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.66.0/24
Signature Algorithm: sha256WithRSAEncryption
31:9d:ac:33:e9:37:f1:49:6a:17:fd:57:95:14:91:a1:5e:61:
66:c7:3d:d3:92:ab:00:74:96:bd:0e:26:98:36:29:7e:95:09:
b1:72:c4:18:d6:7c:ab:9d:b2:0d:11:f9:a5:09:b3:bb:13:09:
97:24:29:4d:34:de:ff:43:58:d5:84:4f:a4:5d:9d:d6:ad:5b:
8c:64:cb:4e:7c:a0:d6:37:10:66:c9:3b:fe:9a:41:b2:96:0e:
12:3b:be:81:d8:77:76:99:8c:49:d6:90:21:74:bd:c2:40:98:
90:c9:dc:e7:a1:5b:d4:cc:13:84:e7:b4:48:d5:9e:0a:2b:d2:
91:fc:69:96:7b:06:72:45:ee:68:6d:a1:c0:a1:90:e8:c8:b3:
d9:75:fc:1d:49:2b:22:27:79:81:00:d7:69:84:70:a6:c2:00:
ef:6a:2a:f1:0d:0f:d8:3e:ef:77:27:1d:7a:32:dc:80:3a:10:
dc:6c:03:ae:7d:ed:34:0f:d0:98:5d:08:5a:f0:88:bc:71:ad:
2b:82:33:6b:de:b8:cb:04:82:02:fb:7d:e8:3c:43:97:9b:33:
b4:d1:94:ab:c7:20:84:df:70:e2:e9:79:fe:c5:ed:2c:05:da:
f3:a2:b7:a9:f0:83:27:bb:d7:13:82:46:75:ce:53:eb:75:b8:
d9:cd:6d:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ/WQGgZowq52oM8Qei3sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5M2UzN2ViOWNiMTk4MzI1ZDY1NjY3MzI4OTI1OGQyOGVi
OWYzYjgwHhcNMjUwMTAxMDU0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2EyMDBjYTk0NDMzNjc5ZjdjMTAyMjg5ZDgxOGM2ZWJiNWU2ZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS44WmO0v2V+F/mPtqNU/lxkgA1N
OmMMsWCR95TMvgzpPSMKvv53awhF0+jCbF5kZvX+QKFyTdNaaEYJOD4TdAAnKJ6+
5jnU7XJ6CHxn/8eiatyLDU5KlRaoIMOJwwu+6qLyXXkHdNjwEidCLIHIZCGAcHeI
73vBksxz3s/06y+rPn5Jte0y5u3WElRzkpCk8UgNnzG5/XRzj4Xml3ozq5bEmHf0
ri/kon+SGrDQGCs3o3uM7xV2+1FN0uWVd5iRX0WU949kelyDJ+X6FI6VrVIe2P6E
U/v4TKkh1m3+tNfxdH7mHRLpfwQrtwyEmEoPQG+ClUaevcfUANtnCgVNvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAeiAMqUQzZ598ECKJ2BjG67Xm1QMB8GA1UdIwQY
MBaAFKk+N+ucsZgyXWVmcyiSWNKOufO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVQ0MzY1eXhtREpkWldaektKSlkwbzY1ODdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wNDYxZDItMjE4Mi00MDhlLTg2ZGYt
MzlmNzUzNzU3ODQ4LzEvQjZJQXlwUkRObm4zd1FJb25ZR01icnRlYlZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8wNDYxZDItMjE4Mi00MDhlLTg2ZGYtMzlmNzUzNzU3ODQ4
LzEvcVQ0MzY1eXhtREpkWldaektKSlkwbzY1ODdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfdCMA0G
CSqGSIb3DQEBCwUAA4IBAQAxnawz6TfxSWoX/VeVFJGhXmFmxz3TkqsAdJa9DiaY
Nil+lQmxcsQY1nyrnbINEfmlCbO7EwmXJClNNN7/Q1jVhE+kXZ3WrVuMZMtOfKDW
NxBmyTv+mkGylg4SO76B2Hd2mYxJ1pAhdL3CQJiQydznoVvUzBOE57RI1Z4KK9KR
/GmWewZyRe5obaHAoZDoyLPZdfwdSSsiJ3mBANdphHCmwgDvairxDQ/YPu93Jx16
MtyAOhDcbAOufe00D9CYXQha8Ii8ca0rgjNr3rjLBIIC+33oPEOXmzO00ZSrxyCE
33Di6Xn+xe0sBdrzorep8IMnu9cTgkZ1zlPrdbjZzW0y
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:22 2025 by rpki-client on console.sobornost.net