Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/dcprJ6hkBzBXmDjDYSBeotu9ax8.roa
File: dcprJ6hkBzBXmDjDYSBeotu9ax8.roa (raw, json)
Hash identifier: eLisxpo8AoI3Dxh9SZ02A5UT18MOwzi3crTI9f3e/HM=
Subject key identifier: 75:CA:6B:27:A8:64:07:30:57:98:38:C3:61:20:5E:A2:DB:BD:6B:1F
Certificate issuer: /CN=e86fc9f927947aa48983b027cf3de38475b053d3
Certificate serial: 01941FFA6EB2F78849668A197D449C73782B
Authority key identifier: E8:6F:C9:F9:27:94:7A:A4:89:83:B0:27:CF:3D:E3:84:75:B0:53:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6G_J-SeUeqSJg7Anzz3jhHWwU9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/dcprJ6hkBzBXmDjDYSBeotu9ax8.roa
Signing time: Wed 01 Jan 2025 03:48:13 +0000
ROA not before: Wed 01 Jan 2025 03:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28795
IP address blocks: 194.247.180.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6e:b2:f7:88:49:66:8a:19:7d:44:9c:73:78:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86fc9f927947aa48983b027cf3de38475b053d3
Validity
Not Before: Jan 1 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75ca6b27a8640730579838c361205ea2dbbd6b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:49:21:4d:51:90:ba:23:88:28:16:78:c9:87:
fc:f1:fc:b4:f9:fe:05:93:44:83:21:89:f9:05:c4:
c9:11:b1:68:90:ca:f7:8f:43:34:1b:6f:b0:91:b3:
54:fb:57:b9:14:a5:8b:9f:32:1d:30:5e:69:3c:0c:
14:46:9e:10:9f:7e:13:0f:44:28:2d:c3:d4:d6:14:
0c:0d:e3:9c:02:32:04:06:b5:72:2f:9b:85:eb:8b:
94:bd:45:22:6d:bf:d4:0c:40:61:12:88:53:a7:c1:
b8:af:84:62:b7:d1:0a:a4:0f:88:20:c7:c5:87:a3:
59:31:12:42:cb:8b:20:9f:37:47:d0:b4:a2:91:42:
80:05:88:d6:31:41:95:df:76:81:57:3d:fe:86:a6:
ef:1a:31:f0:9c:49:0b:9d:7f:74:24:2b:aa:16:2b:
30:dd:55:42:48:60:77:77:a0:7f:f3:51:10:9b:f2:
7a:6d:ec:33:67:b0:8d:a6:35:dc:d4:82:2d:e0:cb:
b6:4c:cc:4b:39:ad:c1:86:70:b7:d4:df:bb:ec:6c:
ea:59:52:fc:bb:fe:32:ab:17:76:fe:5b:c2:1e:8a:
7c:cc:a8:38:d8:cd:52:a7:bf:83:c1:33:40:a3:80:
ea:2d:c2:68:06:c5:f7:6f:41:89:90:8e:ec:7f:67:
b0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CA:6B:27:A8:64:07:30:57:98:38:C3:61:20:5E:A2:DB:BD:6B:1F
X509v3 Authority Key Identifier:
keyid:E8:6F:C9:F9:27:94:7A:A4:89:83:B0:27:CF:3D:E3:84:75:B0:53:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6G_J-SeUeqSJg7Anzz3jhHWwU9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/dcprJ6hkBzBXmDjDYSBeotu9ax8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/6G_J-SeUeqSJg7Anzz3jhHWwU9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.180.0/23
Signature Algorithm: sha256WithRSAEncryption
10:3f:fa:c5:45:6f:95:22:f1:f0:07:60:42:70:de:47:32:d2:
29:15:83:36:e9:c2:76:14:f4:97:80:15:36:d7:d7:97:f8:a2:
fe:dd:b4:b8:1b:2a:eb:c7:75:62:b3:dc:f0:cd:ed:b2:a9:d4:
9f:c0:90:82:4c:4c:c2:16:d1:de:59:97:b7:18:d9:4e:4d:c1:
3e:db:30:b3:63:0b:c9:e5:7a:eb:22:59:3b:3e:81:a0:09:9a:
8c:89:e3:4a:78:6c:06:23:b6:71:be:78:3e:9b:7a:b5:77:9b:
9d:b8:48:d2:87:d6:69:69:c2:f8:f1:57:9c:ef:dd:5e:8d:f4:
45:0e:fc:10:9c:69:41:c4:77:4a:2c:09:00:31:cd:69:38:90:
d1:3b:e3:53:17:7a:a9:a2:19:83:e7:6c:8e:be:ff:43:69:ac:
e1:9f:74:4f:fe:4c:2e:7a:59:cc:33:a5:0b:de:35:16:aa:bd:
60:ee:1b:3b:17:f8:ad:d0:d6:42:bd:b7:da:0e:29:bb:6b:9d:
8b:e1:9e:bb:8d:66:4e:3f:d7:95:20:25:81:f1:0b:fd:c8:d8:
11:71:d9:26:d7:1f:7b:d7:f2:48:96:e4:de:61:d6:56:d9:66:
b7:71:94:e3:14:e2:f2:bd:45:03:2c:54:9e:ad:5c:a4:61:5d:
c0:22:09:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+m6y94hJZooZfUScc3grMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NmZjOWY5Mjc5NDdhYTQ4OTgzYjAyN2NmM2RlMzg0NzVi
MDUzZDMwHhcNMjUwMTAxMDM0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWNhNmIyN2E4NjQwNzMwNTc5ODM4YzM2MTIwNWVhMmRiYmQ2YjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EkhTVGQuiOIKBZ4yYf88fy0+f4F
k0SDIYn5BcTJEbFokMr3j0M0G2+wkbNU+1e5FKWLnzIdMF5pPAwURp4Qn34TD0Qo
LcPU1hQMDeOcAjIEBrVyL5uF64uUvUUibb/UDEBhEohTp8G4r4Rit9EKpA+IIMfF
h6NZMRJCy4sgnzdH0LSikUKABYjWMUGV33aBVz3+hqbvGjHwnEkLnX90JCuqFisw
3VVCSGB3d6B/81EQm/J6bewzZ7CNpjXc1IIt4Mu2TMxLOa3BhnC31N+77GzqWVL8
u/4yqxd2/lvCHop8zKg42M1Sp7+DwTNAo4DqLcJoBsX3b0GJkI7sf2ewIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHXKayeoZAcwV5g4w2EgXqLbvWsfMB8GA1UdIwQY
MBaAFOhvyfknlHqkiYOwJ88944R1sFPTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkdfSi1TZVVlcVNKZzdBbnp6M2poSFd3VTlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9iYzk1NjMtOGZmOS00ZTk1LThlN2Ut
MTNiNGMwZDBhYWUxLzEvZGNwcko2aGtCekJYbURqRFlTQmVvdHU5YXg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9iYzk1NjMtOGZmOS00ZTk1LThlN2UtMTNiNGMwZDBhYWUx
LzEvNkdfSi1TZVVlcVNKZzdBbnp6M2poSFd3VTlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwve0MA0G
CSqGSIb3DQEBCwUAA4IBAQAQP/rFRW+VIvHwB2BCcN5HMtIpFYM26cJ2FPSXgBU2
19eX+KL+3bS4Gyrrx3Vis9zwze2yqdSfwJCCTEzCFtHeWZe3GNlOTcE+2zCzYwvJ
5XrrIlk7PoGgCZqMieNKeGwGI7Zxvng+m3q1d5uduEjSh9ZpacL48Vec791ejfRF
DvwQnGlBxHdKLAkAMc1pOJDRO+NTF3qpohmD52yOvv9Daazhn3RP/kwuelnMM6UL
3jUWqr1g7hs7F/it0NZCvbfaDim7a52L4Z67jWZOP9eVICWB8Qv9yNgRcdkm1x97
1/JIluTeYdZW2Wa3cZTjFOLyvUUDLFSerVykYV3AIgm8
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:40 2025 by rpki-client