Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/mAifwF8GUv7G8ELn9OeFpxHYEK8.roa
File: mAifwF8GUv7G8ELn9OeFpxHYEK8.roa (raw, json)
Hash identifier: PG25x/zzal7YNB1dwfK9vMIqUeHjak2merNPumiM3Q4=
Subject key identifier: 98:08:9F:C0:5F:06:52:FE:C6:F0:42:E7:F4:E7:85:A7:11:D8:10:AF
Certificate issuer: /CN=6cf96a7c01d62e37acecf0786f64978905121647
Certificate serial: 019424458B647E2C9ECF892AEEF145B3D120
Authority key identifier: 6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/mAifwF8GUv7G8ELn9OeFpxHYEK8.roa
Signing time: Wed 01 Jan 2025 23:48:44 +0000
ROA not before: Wed 01 Jan 2025 23:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203946
IP address blocks: 185.117.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:8b:64:7e:2c:9e:cf:89:2a:ee:f1:45:b3:d1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf96a7c01d62e37acecf0786f64978905121647
Validity
Not Before: Jan 1 23:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98089fc05f0652fec6f042e7f4e785a711d810af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:52:bb:c6:07:ef:24:38:f0:af:39:76:15:20:
15:4f:b9:aa:3d:95:9c:76:b9:fd:fd:65:08:51:5a:
64:33:25:16:0a:d0:18:7a:9f:37:d1:e8:e8:4c:77:
98:5a:cc:ec:3d:0b:8c:61:c5:37:ef:35:1d:58:03:
08:35:0e:c0:d9:98:71:0c:86:09:70:bb:ad:48:d4:
0d:0f:13:b0:81:53:11:22:41:be:45:e2:7f:f9:c4:
39:68:f1:e1:bd:f3:b6:8d:ed:9e:b9:0a:19:40:1a:
37:91:d6:8e:c1:f9:ac:44:3d:a0:7a:14:bd:46:a0:
18:9c:2f:19:51:15:2f:c9:64:50:2f:f8:b4:7a:50:
1b:e3:d8:10:c5:ed:93:1b:7c:1b:cc:62:0a:cc:ff:
50:d7:ae:3f:64:48:d4:69:61:16:8e:60:78:ca:20:
37:b0:39:a0:42:1d:68:6d:ed:2f:aa:9e:82:05:f4:
49:71:33:32:ba:c3:3e:3b:d6:af:f7:37:af:09:45:
04:9f:b3:1b:f1:dd:d0:75:b9:1a:f8:3a:ad:11:8d:
c7:50:4e:d4:3c:ee:c9:08:a9:17:dd:57:7f:9a:0c:
ac:96:da:71:09:94:34:59:83:43:5c:12:9b:0f:2d:
10:d6:8b:3f:c9:67:c7:08:97:d4:a7:a4:6c:02:67:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:08:9F:C0:5F:06:52:FE:C6:F0:42:E7:F4:E7:85:A7:11:D8:10:AF
X509v3 Authority Key Identifier:
keyid:6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/mAifwF8GUv7G8ELn9OeFpxHYEK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.133.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b5:09:78:19:ac:fd:ad:32:5e:2d:b1:aa:4a:fb:55:e8:9d:
bb:33:aa:9a:df:e6:85:50:6d:b2:1c:ca:6d:bb:61:dd:2a:04:
08:cf:25:9f:bb:03:dd:5f:c8:d7:5e:51:84:3f:c3:43:96:50:
7a:b5:ef:cb:6a:68:26:6a:5e:51:e2:8f:63:04:91:c5:41:c4:
69:d9:16:52:63:cc:88:68:5b:bc:4d:eb:75:b0:51:f9:6f:f9:
b0:13:62:c5:3a:6d:87:19:ac:12:85:3b:10:13:97:3a:05:4d:
a9:e5:f9:31:6c:d9:76:38:04:44:61:40:6a:a4:ef:81:2c:c9:
ad:95:a0:a0:48:63:d6:6b:37:e5:7f:4b:63:12:dc:51:25:ce:
cf:8c:87:f4:07:3a:1f:94:36:60:2b:8a:c8:55:0c:56:7c:a0:
00:a3:1e:b0:66:55:51:9e:46:58:01:7c:a1:ac:47:63:6f:fe:
e7:67:dc:2f:7c:7a:e5:84:e2:e7:88:ff:53:9f:0f:0a:81:16:
d7:25:cc:37:65:0c:9b:0d:bc:42:7a:8d:88:e7:5a:14:51:de:
83:1a:a0:b0:65:ee:ef:0b:1e:64:1b:e3:d7:0c:29:4b:c1:09:
d6:9e:4b:45:09:cc:c7:78:5f:a7:2d:33:e7:8e:66:7f:12:c5:
d7:9d:8d:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRYtkfiyez4kq7vFFs9EgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZjk2YTdjMDFkNjJlMzdhY2VjZjA3ODZmNjQ5Nzg5MDUx
MjE2NDcwHhcNMjUwMTAxMjM0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODA4OWZjMDVmMDY1MmZlYzZmMDQyZTdmNGU3ODVhNzExZDgxMGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllK7xgfvJDjwrzl2FSAVT7mqPZWc
drn9/WUIUVpkMyUWCtAYep830ejoTHeYWszsPQuMYcU37zUdWAMINQ7A2ZhxDIYJ
cLutSNQNDxOwgVMRIkG+ReJ/+cQ5aPHhvfO2je2euQoZQBo3kdaOwfmsRD2gehS9
RqAYnC8ZURUvyWRQL/i0elAb49gQxe2TG3wbzGIKzP9Q164/ZEjUaWEWjmB4yiA3
sDmgQh1obe0vqp6CBfRJcTMyusM+O9av9zevCUUEn7Mb8d3Qdbka+DqtEY3HUE7U
PO7JCKkX3Vd/mgysltpxCZQ0WYNDXBKbDy0Q1os/yWfHCJfUp6RsAmd7IwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJgIn8BfBlL+xvBC5/TnhacR2BCvMB8GA1UdIwQY
MBaAFGz5anwB1i43rOzweG9kl4kFEhZHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlBscWZBSFdMamVzN1BCNGIyU1hpUVVTRmtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy81ZjBmMDYtNTZmNC00MWE1LTg4OWEt
YjE1YjNmYmMwNGE2LzEvbUFpZndGOEdVdjdHOEVMbjlPZUZweEhZRUs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy81ZjBmMDYtNTZmNC00MWE1LTg4OWEtYjE1YjNmYmMwNGE2
LzEvYlBscWZBSFdMamVzN1BCNGIyU1hpUVVTRmtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXWFMA0G
CSqGSIb3DQEBCwUAA4IBAQCatQl4Gaz9rTJeLbGqSvtV6J27M6qa3+aFUG2yHMpt
u2HdKgQIzyWfuwPdX8jXXlGEP8NDllB6te/Lamgmal5R4o9jBJHFQcRp2RZSY8yI
aFu8Tet1sFH5b/mwE2LFOm2HGawShTsQE5c6BU2p5fkxbNl2OAREYUBqpO+BLMmt
laCgSGPWazflf0tjEtxRJc7PjIf0BzoflDZgK4rIVQxWfKAAox6wZlVRnkZYAXyh
rEdjb/7nZ9wvfHrlhOLniP9Tnw8KgRbXJcw3ZQybDbxCeo2I51oUUd6DGqCwZe7v
Cx5kG+PXDClLwQnWnktFCczHeF+nLTPnjmZ/EsXXnY34
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:41:02 2025 by rpki-client