Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/bpnZBaQMqQCP4_HM_J4jb2lHwKU.roa
File: bpnZBaQMqQCP4_HM_J4jb2lHwKU.roa (raw, json)
Hash identifier: 3xaBBKosMJSpzXSuRQMz4T/JTkCvN7b+xo0iaMV0UsA=
Subject key identifier: 6E:99:D9:05:A4:0C:A9:00:8F:E3:F1:CC:FC:9E:23:6F:69:47:C0:A5
Certificate issuer: /CN=7a8192e9f740e8d238059e28a0a037083081b7d2
Certificate serial: 01942747ABAE74CF2868D2F36299597FC21D
Authority key identifier: 7A:81:92:E9:F7:40:E8:D2:38:05:9E:28:A0:A0:37:08:30:81:B7:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/bpnZBaQMqQCP4_HM_J4jb2lHwKU.roa
Signing time: Thu 02 Jan 2025 13:49:55 +0000
ROA not before: Thu 02 Jan 2025 13:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208856
IP address blocks: 193.32.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ab:ae:74:cf:28:68:d2:f3:62:99:59:7f:c2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8192e9f740e8d238059e28a0a037083081b7d2
Validity
Not Before: Jan 2 13:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e99d905a40ca9008fe3f1ccfc9e236f6947c0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:e9:d1:7f:4a:2d:d6:87:da:81:42:f8:cd:
d3:8b:d1:a1:6f:b9:52:f2:4c:a6:4c:14:ba:b5:55:
03:22:98:04:bd:6d:4b:6d:2d:bb:fa:68:8b:65:93:
f9:dd:4d:31:98:b8:07:f4:cc:65:08:bc:c1:36:9c:
d5:19:85:26:fd:46:6f:5f:8e:b6:81:87:ca:49:4d:
7b:f7:24:fd:aa:a1:90:07:4a:75:a2:e1:18:b2:7b:
30:12:94:47:08:5d:ca:0f:e4:83:66:64:c6:e8:3c:
13:41:5b:f0:49:1c:8f:c0:d4:ab:1e:cc:5c:fb:c4:
83:b4:8e:97:cf:4d:71:d0:fc:21:c6:fc:16:83:fd:
a5:3d:48:4e:4e:1e:70:95:9d:0b:d9:87:69:47:86:
91:36:79:7a:93:46:9d:34:a8:a5:5f:cd:0a:ec:55:
28:22:e9:12:d0:f6:97:a2:a0:b1:8c:dc:11:f6:84:
af:72:7e:c2:3e:51:92:4f:e1:d9:23:d1:86:be:7d:
e5:1e:c8:8c:41:e2:b7:89:1b:a9:16:86:3e:29:ff:
0c:9c:eb:1e:8d:83:8b:f8:26:1e:28:6d:ff:80:27:
62:de:14:a8:61:68:9f:88:75:97:e8:37:73:ac:0a:
7a:8a:b8:27:b4:1e:3d:69:fa:7f:12:7a:da:2a:60:
c2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:99:D9:05:A4:0C:A9:00:8F:E3:F1:CC:FC:9E:23:6F:69:47:C0:A5
X509v3 Authority Key Identifier:
keyid:7A:81:92:E9:F7:40:E8:D2:38:05:9E:28:A0:A0:37:08:30:81:B7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/bpnZBaQMqQCP4_HM_J4jb2lHwKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.112.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:23:dd:da:d1:35:69:67:5f:7b:09:17:13:f2:7a:99:26:b3:
e2:67:f6:62:b2:24:90:4a:98:5b:f4:9b:a9:f7:b4:98:62:8e:
3e:e7:99:6b:48:14:54:00:eb:60:c3:5b:52:1c:a1:88:1c:50:
11:54:46:5b:22:cc:12:17:5f:35:30:04:26:13:c2:2a:c8:48:
e6:1e:df:ca:df:6a:ed:88:3c:c3:4e:e9:4b:53:7b:b0:e1:05:
81:00:97:6d:ec:e6:79:22:71:05:b2:73:02:a5:7a:35:15:7d:
2d:09:01:49:3e:09:a6:70:c2:49:0d:e8:d7:cb:a2:e8:f6:38:
00:21:bc:0f:0b:70:9f:f5:12:28:32:a9:e5:81:1c:4f:ab:01:
7f:be:38:6b:48:47:42:9a:73:5d:df:3c:81:8e:9c:dc:9d:56:
a5:34:fc:4e:0a:86:9a:fa:c9:32:3f:2b:c6:4b:29:09:d1:b1:
b2:a8:0c:e0:1a:1c:e9:da:45:37:92:e9:d0:35:ab:4e:9d:bc:
5c:be:a9:1f:64:5b:f8:bd:cd:39:69:4d:d5:2f:ae:4b:6e:14:
67:a5:9d:50:b9:8f:21:09:59:3a:d1:e8:c2:7e:2b:1b:4b:8a:
ce:8e:84:f7:d6:cd:bb:57:41:3a:7b:f7:e5:cf:ef:00:f5:f3:
dd:d3:3b:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR6uudM8oaNLzYplZf8IdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhODE5MmU5Zjc0MGU4ZDIzODA1OWUyOGEwYTAzNzA4MzA4
MWI3ZDIwHhcNMjUwMTAyMTM0OTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTk5ZDkwNWE0MGNhOTAwOGZlM2YxY2NmYzllMjM2ZjY5NDdjMGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaXp0X9KLdaH2oFC+M3Ti9Ghb7lS
8kymTBS6tVUDIpgEvW1LbS27+miLZZP53U0xmLgH9MxlCLzBNpzVGYUm/UZvX462
gYfKSU179yT9qqGQB0p1ouEYsnswEpRHCF3KD+SDZmTG6DwTQVvwSRyPwNSrHsxc
+8SDtI6Xz01x0PwhxvwWg/2lPUhOTh5wlZ0L2YdpR4aRNnl6k0adNKilX80K7FUo
IukS0PaXoqCxjNwR9oSvcn7CPlGST+HZI9GGvn3lHsiMQeK3iRupFoY+Kf8MnOse
jYOL+CYeKG3/gCdi3hSoYWifiHWX6DdzrAp6irgntB49afp/EnraKmDCNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG6Z2QWkDKkAj+PxzPyeI29pR8ClMB8GA1UdIwQY
MBaAFHqBkun3QOjSOAWeKKCgNwgwgbfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW9HUzZmZEE2Tkk0Qlo0b29LQTNDRENCdDlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yMTg3NjAtNjJmZS00NWU5LTlhNGQt
YzBlMzNiYmY1MjM4LzEvYnBuWkJhUU1xUUNQNF9ITV9KNGpiMmxId0tVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8yMTg3NjAtNjJmZS00NWU5LTlhNGQtYzBlMzNiYmY1MjM4
LzEvZW9HUzZmZEE2Tkk0Qlo0b29LQTNDRENCdDlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSBwMA0G
CSqGSIb3DQEBCwUAA4IBAQAcI93a0TVpZ197CRcT8nqZJrPiZ/ZisiSQSphb9Jup
97SYYo4+55lrSBRUAOtgw1tSHKGIHFARVEZbIswSF181MAQmE8IqyEjmHt/K32rt
iDzDTulLU3uw4QWBAJdt7OZ5InEFsnMCpXo1FX0tCQFJPgmmcMJJDejXy6Lo9jgA
IbwPC3Cf9RIoMqnlgRxPqwF/vjhrSEdCmnNd3zyBjpzcnValNPxOCoaa+skyPyvG
SykJ0bGyqAzgGhzp2kU3kunQNatOnbxcvqkfZFv4vc05aU3VL65LbhRnpZ1QuY8h
CVk60ejCfisbS4rOjoT31s27V0E6e/flz+8A9fPd0zv6
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:42 2025 by rpki-client on console.sobornost.net