Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/7t5qNC9gChKbH2IkmVh6cPdeOtI.roa
File: 7t5qNC9gChKbH2IkmVh6cPdeOtI.roa (raw, json)
Hash identifier: NF6uDXY5xoJw3nsW1WUZ4W7bZINqOVbB+Z7X2JaeA7w=
Subject key identifier: EE:DE:6A:34:2F:60:0A:12:9B:1F:62:24:99:58:7A:70:F7:5E:3A:D2
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 019421B22A1334378A2062BA2470B48D09D9
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/7t5qNC9gChKbH2IkmVh6cPdeOtI.roa
Signing time: Wed 01 Jan 2025 11:48:31 +0000
ROA not before: Wed 01 Jan 2025 11:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15690
IP address blocks: 194.177.194.0/23 maxlen: 24
195.251.202.0/23 maxlen: 23
195.251.204.0/24 maxlen: 24
2001:648:2011::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2a:13:34:37:8a:20:62:ba:24:70:b4:8d:09:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 11:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eede6a342f600a129b1f622499587a70f75e3ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7c:27:88:ca:14:ba:9f:4b:0a:8c:78:35:2d:
66:fe:6b:fa:63:61:fd:cc:92:59:ab:69:d8:db:4c:
be:25:02:58:a3:31:3b:ac:15:c8:66:ef:95:de:74:
1e:0a:58:40:37:64:6b:62:8d:b8:7b:e3:d9:63:fc:
08:78:8a:ae:05:83:45:76:eb:63:0a:b9:05:0c:7b:
cd:df:30:2a:3e:23:bc:89:f0:fb:0e:24:64:2e:c4:
34:3e:29:6c:66:f9:54:c5:3f:63:ca:54:6f:3a:d3:
2c:ab:68:b5:dc:99:60:27:68:f4:72:1d:47:a7:7b:
a0:74:fb:5e:bb:c5:9e:3e:2c:40:31:a4:ea:10:41:
dd:0b:be:ad:5d:07:47:b5:bc:54:55:b0:cc:e1:8f:
b7:af:ee:47:aa:75:21:ea:3f:c2:72:44:19:fb:ee:
d8:ea:3c:cb:2d:b1:b7:71:57:a3:46:3d:09:97:50:
85:68:2a:25:8c:fc:30:d6:ba:37:24:2b:d5:7c:07:
63:d0:ea:c9:23:44:af:9f:bd:23:72:49:98:e4:00:
ba:d6:03:63:8b:86:62:36:f0:44:72:33:c6:0d:ae:
d1:51:36:af:61:b8:45:d2:90:b9:a8:9d:44:74:44:
21:94:67:ea:90:9f:82:54:45:83:64:a7:a5:d2:de:
69:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DE:6A:34:2F:60:0A:12:9B:1F:62:24:99:58:7A:70:F7:5E:3A:D2
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/7t5qNC9gChKbH2IkmVh6cPdeOtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.177.194.0/23
195.251.202.0-195.251.204.255
IPv6:
2001:648:2011::/48
Signature Algorithm: sha256WithRSAEncryption
73:06:56:74:03:66:f4:6d:53:35:ac:05:38:80:5d:a7:ac:82:
a8:31:31:24:74:62:28:37:23:4f:85:cf:5a:aa:a1:56:5f:0b:
3d:ae:1e:41:b0:bc:f6:23:e6:b9:61:a0:28:21:d6:66:62:8e:
ac:29:b6:5f:be:41:b0:e2:e4:a9:f9:2c:3d:52:d4:ac:d4:97:
c3:4c:d0:8e:dc:68:1f:54:88:93:80:0d:43:4a:5e:0b:92:58:
87:b1:1c:35:ec:3b:c6:fa:e5:05:d5:50:10:c0:8b:f7:df:9c:
30:f0:e7:e8:f0:83:c4:dd:f8:01:31:ff:3e:50:f2:03:a1:35:
6c:ee:52:41:b5:da:87:2b:3b:17:79:fc:66:12:f2:27:a6:07:
2e:7a:b9:96:c7:b4:b5:ca:cb:12:2b:f9:9d:e5:74:8b:db:7d:
41:37:4f:3c:88:3a:b9:51:9a:b4:67:e3:99:22:57:1b:e5:29:
a0:55:4d:ed:b7:c4:7d:f0:17:80:b4:8b:ff:18:b8:47:23:b6:
d3:3f:1c:29:08:11:fe:35:3d:99:4f:58:65:2a:bb:e8:da:1d:
7b:18:68:ac:9b:25:48:f3:ee:a6:42:1c:f5:e0:42:92:df:0e:
65:3b:e4:6a:1b:b8:04:fd:02:e8:be:3c:9c:88:92:8e:b2:b1:
f4:a0:1e:e6
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAZQhsioTNDeKIGK6JHC0jQnZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1
MjlkYzMwHhcNMjUwMTAxMTE0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWRlNmEzNDJmNjAwYTEyOWIxZjYyMjQ5OTU4N2E3MGY3NWUzYWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3wniMoUup9LCox4NS1m/mv6Y2H9
zJJZq2nY20y+JQJYozE7rBXIZu+V3nQeClhAN2RrYo24e+PZY/wIeIquBYNFdutj
CrkFDHvN3zAqPiO8ifD7DiRkLsQ0PilsZvlUxT9jylRvOtMsq2i13JlgJ2j0ch1H
p3ugdPteu8WePixAMaTqEEHdC76tXQdHtbxUVbDM4Y+3r+5HqnUh6j/CckQZ++7Y
6jzLLbG3cVejRj0Jl1CFaColjPww1ro3JCvVfAdj0OrJI0Svn70jckmY5AC61gNj
i4ZiNvBEcjPGDa7RUTavYbhF0pC5qJ1EdEQhlGfqkJ+CVEWDZKel0t5pEQIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFO7eajQvYAoSmx9iJJlYenD3XjrSMB8GA1UdIwQY
MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut
YWFhNDU1M2QyYWJkLzEvN3Q1cU5DOWdDaEtiSDJJa21WaDZjUGRlT3RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk
LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUAwQBwrHCMAwD
BAHD+8oDBADD+8wwDwQCAAIwCQMHACABBkggETANBgkqhkiG9w0BAQsFAAOCAQEA
cwZWdANm9G1TNawFOIBdp6yCqDExJHRiKDcjT4XPWqqhVl8LPa4eQbC89iPmuWGg
KCHWZmKOrCm2X75BsOLkqfksPVLUrNSXw0zQjtxoH1SIk4ANQ0peC5JYh7EcNew7
xvrlBdVQEMCL99+cMPDn6PCDxN34ATH/PlDyA6E1bO5SQbXahys7F3n8ZhLyJ6YH
Lnq5lse0tcrLEiv5neV0i9t9QTdPPIg6uVGatGfjmSJXG+UpoFVN7bfEffAXgLSL
/xi4RyO20z8cKQgR/jU9mU9YZSq76NodexhorJslSPPupkIc9eBCkt8OZTvkahu4
BP0C6L48nIiSjrKx9KAe5g==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net