Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/bAq7NCQg3KQUq0C73n9DTh9N3QA.roa
File: bAq7NCQg3KQUq0C73n9DTh9N3QA.roa (raw, json)
Hash identifier: pzC3spTIvf8gdOkRG+uQC8E+FO/P4+4NR9s5ZCQt3sM=
Subject key identifier: 6C:0A:BB:34:24:20:DC:A4:14:AB:40:BB:DE:7F:43:4E:1F:4D:DD:00
Certificate issuer: /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial: 019421444C5B80A8DC9B104ABF04FB6629E1
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/bAq7NCQg3KQUq0C73n9DTh9N3QA.roa
Signing time: Wed 01 Jan 2025 09:48:31 +0000
ROA not before: Wed 01 Jan 2025 09:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213230
IP address blocks: 5.161.0.0/16 maxlen: 24
178.156.128.0/17 maxlen: 24
2a01:4ff::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4c:5b:80:a8:dc:9b:10:4a:bf:04:fb:66:29:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Validity
Not Before: Jan 1 09:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c0abb342420dca414ab40bbde7f434e1f4ddd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1b:68:e5:81:60:f2:ae:14:8e:88:34:6e:8c:
59:a4:0c:0f:30:3c:c3:bd:32:71:de:76:4b:7c:92:
27:c0:15:93:73:a6:a7:22:da:d0:fa:71:78:ba:c9:
09:6d:d6:c9:dd:05:87:c2:e1:ae:6b:f2:95:df:ee:
44:b3:da:b8:fc:76:12:f1:74:95:3e:8a:fb:4a:b4:
87:72:b6:71:40:b9:b2:08:ce:e2:23:6f:14:92:7b:
ab:37:48:ea:d5:c5:70:25:39:bc:ed:75:52:59:16:
1c:0e:48:e8:f7:6a:95:86:4c:71:00:56:d0:09:90:
b1:e2:3c:a1:c8:82:72:3e:4b:a2:4d:a1:0f:42:fb:
7c:16:bd:e3:bb:55:75:88:7b:ac:9a:6a:c9:9b:00:
c8:1e:28:35:ed:aa:85:65:45:70:7d:c0:7d:35:fa:
76:d3:a7:2b:29:1b:45:4b:78:8c:ef:b7:97:f8:4a:
65:4a:46:4c:17:cd:bc:bf:6a:3d:f3:08:be:0d:da:
98:18:20:6d:26:22:7f:9b:97:8c:0d:93:b5:9a:b5:
20:b5:57:31:af:9a:50:0b:b2:f9:07:e6:07:86:e1:
cc:cc:49:62:d0:84:09:3b:2a:4d:9c:42:83:e9:54:
18:b7:6b:ed:de:a1:7f:89:5e:b7:63:03:cb:76:d9:
d8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0A:BB:34:24:20:DC:A4:14:AB:40:BB:DE:7F:43:4E:1F:4D:DD:00
X509v3 Authority Key Identifier:
keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/bAq7NCQg3KQUq0C73n9DTh9N3QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.161.0.0/16
178.156.128.0/17
IPv6:
2a01:4ff::/40
Signature Algorithm: sha256WithRSAEncryption
69:16:48:da:ea:df:dc:8d:49:17:ae:7d:db:ca:60:7c:b6:1e:
c6:be:0c:81:47:1b:3b:9f:ba:15:9b:5f:a6:1a:26:cd:9d:41:
91:bb:7a:40:a1:92:1b:95:db:b1:c8:68:49:10:8d:5d:96:2e:
62:da:49:da:0f:43:ac:15:49:d5:b0:ab:0f:f7:99:45:63:5d:
8a:6d:ef:6e:ea:db:04:4e:a3:30:bb:10:69:84:86:67:08:5b:
a2:ec:c2:c1:19:fb:cf:da:4d:8d:18:a3:51:04:c1:78:f0:34:
dc:6f:64:82:68:86:a9:95:4d:5d:f8:ee:ae:1d:7e:e4:6f:1f:
3c:b9:88:a1:20:4e:1e:ce:02:31:b1:bf:38:d3:91:df:c9:b2:
de:e6:d1:7c:89:c4:7e:61:0a:2d:77:3c:37:02:3e:2b:2d:13:
e2:7d:ab:d2:c5:a6:12:dc:93:5a:b8:f4:b2:37:0c:14:f9:e3:
43:0d:c3:b8:af:18:fe:4b:9a:51:c5:54:3a:98:89:57:5d:af:
84:33:a4:1f:07:fe:76:0e:34:9e:53:99:5e:66:0a:9e:3c:4a:
ed:46:27:67:13:c6:cb:65:45:12:f9:e6:6e:d9:8d:80:fd:f2:
72:35:16:db:e5:ed:cb:0d:0e:ab:56:c1:74:2e:dc:97:2d:28:
54:21:66:61
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQhRExbgKjcmxBKvwT7ZinhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDZmNTc3MzVhNGU2M2RiZWY4NDhlZTBkOWQxOTllMjE1
ZjgzMDQwHhcNMjUwMTAxMDk0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzBhYmIzNDI0MjBkY2E0MTRhYjQwYmJkZTdmNDM0ZTFmNGRkZDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxto5YFg8q4Ujog0boxZpAwPMDzD
vTJx3nZLfJInwBWTc6anItrQ+nF4uskJbdbJ3QWHwuGua/KV3+5Es9q4/HYS8XSV
Por7SrSHcrZxQLmyCM7iI28UknurN0jq1cVwJTm87XVSWRYcDkjo92qVhkxxAFbQ
CZCx4jyhyIJyPkuiTaEPQvt8Fr3ju1V1iHusmmrJmwDIHig17aqFZUVwfcB9Nfp2
06crKRtFS3iM77eX+EplSkZMF828v2o98wi+DdqYGCBtJiJ/m5eMDZO1mrUgtVcx
r5pQC7L5B+YHhuHMzEli0IQJOypNnEKD6VQYt2vt3qF/iV63YwPLdtnYZQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFGwKuzQkINykFKtAu95/Q04fTd0AMB8GA1UdIwQY
MBaAFB9G9Xc1pOY9vvhI7g2dGZ4hX4MEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBiMWR6V2s1ajItLUVqdURaMFpuaUZmZ3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8xMDcyNjYtYWI1MS00NjJiLTlmYzIt
YTdjOTg5OGVlY2JjLzEvYkFxN05DUWczS1FVcTBDNzNuOURUaDlOM1FBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8xMDcyNjYtYWI1MS00NjJiLTlmYzItYTdjOTg5OGVlY2Jj
LzEvSDBiMWR6V2s1ajItLUVqdURaMFpuaUZmZ3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzARBAIAATALAwMABaEDBAey
nIAwDgQCAAIwCAMGACoBBP8AMA0GCSqGSIb3DQEBCwUAA4IBAQBpFkja6t/cjUkX
rn3bymB8th7GvgyBRxs7n7oVm1+mGibNnUGRu3pAoZIblduxyGhJEI1dli5i2kna
D0OsFUnVsKsP95lFY12Kbe9u6tsETqMwuxBphIZnCFui7MLBGfvP2k2NGKNRBMF4
8DTcb2SCaIaplU1d+O6uHX7kbx88uYihIE4ezgIxsb8405HfybLe5tF8icR+YQot
dzw3Aj4rLRPifavSxaYS3JNauPSyNwwU+eNDDcO4rxj+S5pRxVQ6mIlXXa+EM6Qf
B/52DjSeU5leZgqePErtRidnE8bLZUUS+eZu2Y2A/fJyNRbb5e3LDQ6rVsF0LtyX
LShUIWZh
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:56:34 2025 by rpki-client