Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/bp5x62Zyl7JWmy23aQgvM10ld6k.roa
File: bp5x62Zyl7JWmy23aQgvM10ld6k.roa (raw, json)
Hash identifier: WQfC7fNdtGvy/wZ5eChzXDiN7gOvNpvcGnI7lpvTUh0=
Subject key identifier: 6E:9E:71:EB:66:72:97:B2:56:9B:2D:B7:69:08:2F:33:5D:25:77:A9
Certificate issuer: /CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Certificate serial: 0194F9370F036979530CE7CC57F44B7D8620
Authority key identifier: 7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/bp5x62Zyl7JWmy23aQgvM10ld6k.roa
Signing time: Wed 12 Feb 2025 08:12:02 +0000
ROA not before: Wed 12 Feb 2025 08:12:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44949
IP address blocks: 194.116.150.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:37:0f:03:69:79:53:0c:e7:cc:57:f4:4b:7d:86:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Validity
Not Before: Feb 12 08:12:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e9e71eb667297b2569b2db769082f335d2577a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:6f:55:fd:39:30:04:45:8d:8f:b1:e1:0a:
7f:a9:8a:1f:d1:67:2a:08:fc:d2:1b:24:db:1c:72:
e8:30:7b:8c:88:0c:51:64:12:1f:b4:e7:d8:6f:be:
07:cb:cd:d9:07:ae:8e:fd:24:1d:68:bd:8f:df:25:
e1:0f:fb:88:b9:47:ee:c6:ed:9d:a3:c3:d9:47:8b:
69:a0:cb:0b:ea:ea:f9:21:1d:ab:5e:74:75:f5:17:
7c:13:55:29:ac:d0:7d:16:54:89:8b:10:8e:b2:69:
ac:44:ad:62:73:1c:2b:0b:fa:5a:f3:38:98:1c:c5:
d0:65:ef:4f:5e:08:bf:21:ac:30:50:e3:53:96:db:
39:3d:82:e3:4e:37:9c:b7:06:af:c8:89:2a:63:c3:
f0:75:13:66:d4:9c:aa:98:a1:83:a8:7a:74:4a:63:
4c:2a:fc:7c:22:28:83:5a:e8:b1:cc:af:de:cb:87:
95:a3:90:4d:cf:6b:be:c0:2c:35:c0:a0:34:fc:af:
76:87:ab:e5:25:1d:b7:db:b1:18:cb:5e:cc:73:77:
99:ac:84:3c:90:66:10:3f:22:68:29:8c:90:87:8e:
ed:f1:ed:ad:a8:d8:70:0c:5a:93:3d:1d:95:7e:fc:
90:f9:a0:fd:4a:d6:5a:33:07:d7:a4:36:10:e2:a4:
54:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9E:71:EB:66:72:97:B2:56:9B:2D:B7:69:08:2F:33:5D:25:77:A9
X509v3 Authority Key Identifier:
keyid:7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/bp5x62Zyl7JWmy23aQgvM10ld6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.150.0/23
Signature Algorithm: sha256WithRSAEncryption
63:b6:b0:ab:97:4f:f7:bc:7f:39:ce:a3:78:a3:a9:20:d6:95:
1a:0c:f0:5a:63:32:6d:dd:28:6c:3b:43:99:c8:0d:45:ab:89:
b7:53:e9:90:57:70:fa:e9:dc:73:6e:0c:3a:04:a0:9f:c1:17:
82:2b:3c:7d:d8:66:13:7c:13:69:4c:87:91:25:f8:f7:6e:3b:
5d:6c:24:e6:fd:de:e5:a9:23:10:92:dc:c5:4f:eb:89:c9:d5:
20:de:c8:2a:67:48:e2:af:c5:f4:e5:bc:7c:87:ce:89:90:41:
dd:27:90:7d:85:46:37:22:6d:b9:dc:3a:a5:39:5f:73:5a:d4:
9a:cd:a2:6d:60:32:f3:41:b3:be:5a:a4:77:ce:30:33:bf:29:
eb:e7:76:d6:ad:f8:58:2e:54:db:42:78:82:1a:3f:6b:99:27:
83:a1:ee:90:aa:e8:82:43:d9:63:05:2c:6e:77:ef:68:2d:1f:
7d:2c:ff:a1:ce:f5:b8:5c:d7:b5:31:20:3d:48:94:71:1e:58:
bb:31:6b:bd:72:2a:ba:b6:2b:f5:1a:36:99:74:75:99:c8:87:
62:e9:b6:fe:a8:48:67:c0:20:c3:c9:5b:e2:c3:08:9f:97:67:
3b:00:e8:9c:83:ef:eb:6c:7c:23:b6:8a:75:6e:02:a6:7d:07:
f8:f3:fa:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZT5Nw8DaXlTDOfMV/RLfYYgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZWUzZjM4MjA3M2YyYzNlNGZjY2ZmY2EzODRjNWIwY2Q4
MjZjMjYwHhcNMjUwMjEyMDgxMjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTllNzFlYjY2NzI5N2IyNTY5YjJkYjc2OTA4MmYzMzVkMjU3N2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNhvVf05MARFjY+x4Qp/qYof0Wcq
CPzSGyTbHHLoMHuMiAxRZBIftOfYb74Hy83ZB66O/SQdaL2P3yXhD/uIuUfuxu2d
o8PZR4tpoMsL6ur5IR2rXnR19Rd8E1UprNB9FlSJixCOsmmsRK1icxwrC/pa8ziY
HMXQZe9PXgi/IawwUONTlts5PYLjTjectwavyIkqY8PwdRNm1JyqmKGDqHp0SmNM
Kvx8IiiDWuixzK/ey4eVo5BNz2u+wCw1wKA0/K92h6vlJR2327EYy17Mc3eZrIQ8
kGYQPyJoKYyQh47t8e2tqNhwDFqTPR2VfvyQ+aD9StZaMwfXpDYQ4qRU3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG6ecetmcpeyVpstt2kILzNdJXepMB8GA1UdIwQY
MBaAFH/uPzggc/LD5PzP/KOExbDNgmwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZi00X09DQno4c1BrX01fOG80VEZzTTJDYkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84Y2NlYmYtZjlmYS00YzQ2LWFlZTgt
Y2NiZmE3MzQyNGE3LzEvYnA1eDYyWnlsN0pXbXkyM2FRZ3ZNMTBsZDZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84Y2NlYmYtZjlmYS00YzQ2LWFlZTgtY2NiZmE3MzQyNGE3
LzEvZi00X09DQno4c1BrX01fOG80VEZzTTJDYkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwnSWMA0G
CSqGSIb3DQEBCwUAA4IBAQBjtrCrl0/3vH85zqN4o6kg1pUaDPBaYzJt3ShsO0OZ
yA1Fq4m3U+mQV3D66dxzbgw6BKCfwReCKzx92GYTfBNpTIeRJfj3bjtdbCTm/d7l
qSMQktzFT+uJydUg3sgqZ0jir8X05bx8h86JkEHdJ5B9hUY3Im253DqlOV9zWtSa
zaJtYDLzQbO+WqR3zjAzvynr53bWrfhYLlTbQniCGj9rmSeDoe6QquiCQ9ljBSxu
d+9oLR99LP+hzvW4XNe1MSA9SJRxHli7MWu9ciq6tiv1GjaZdHWZyIdi6bb+qEhn
wCDDyVviwwifl2c7AOicg+/rbHwjtop1bgKmfQf48/om
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:28 2025 by rpki-client on console.sobornost.net