Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/6FO-oZvPgtv4_ZlqTg1O6tpnZJ8.roa
File: 6FO-oZvPgtv4_ZlqTg1O6tpnZJ8.roa (raw, json)
Hash identifier: 7jUWOdrtse7wGh+cil3KKWbrfBU1bB/iNmV5llZ4YZM=
Subject key identifier: E8:53:BE:A1:9B:CF:82:DB:F8:FD:99:6A:4E:0D:4E:EA:DA:67:64:9F
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 0194B9AC0E4569EFE4EA76E5A5A65F9B383C
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/6FO-oZvPgtv4_ZlqTg1O6tpnZJ8.roa
Signing time: Fri 31 Jan 2025 00:04:08 +0000
ROA not before: Fri 31 Jan 2025 00:04:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214693
IP address blocks: 83.147.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b9:ac:0e:45:69:ef:e4:ea:76:e5:a5:a6:5f:9b:38:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Jan 31 00:04:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e853bea19bcf82dbf8fd996a4e0d4eeada67649f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:de:5b:40:d0:03:52:ea:02:5b:4b:d4:4f:ed:
16:3f:45:ec:09:61:20:c8:76:84:64:e4:20:da:03:
98:e7:82:d1:23:2a:72:be:9b:ac:93:9e:70:a6:82:
f9:fe:ed:84:7c:1e:0c:a1:c6:b9:ec:3b:49:20:ba:
bd:57:7e:db:27:da:a6:58:38:ca:23:8d:10:57:ac:
b6:ee:94:d3:36:d9:e5:c3:d1:49:c6:0f:31:fe:de:
51:fb:8c:37:4b:97:61:93:1d:37:db:6d:7d:7a:32:
3c:cc:ff:3c:0f:b4:92:38:d0:19:76:5b:f2:15:7d:
14:36:ff:d7:f1:ba:2d:a8:ce:a4:eb:01:d2:84:3e:
9c:34:f2:c7:c8:e3:88:31:f0:84:3b:f1:23:9c:0f:
9d:fb:89:05:2b:c0:5e:dc:a1:f4:7f:1e:b1:88:80:
67:88:e9:ef:87:67:b2:9e:ad:b6:5b:ec:8f:a4:e2:
66:71:e8:8a:6f:dc:f4:c5:8c:32:91:1d:5e:e1:84:
45:06:dd:cb:51:db:bf:07:a2:f5:db:00:5d:15:45:
02:8e:5f:ad:82:e3:63:3f:db:0b:06:6d:bd:a9:cc:
97:c3:3b:56:ec:91:25:ca:37:e8:b5:db:24:57:fd:
72:e5:63:3e:34:f1:bd:d2:4c:a5:29:71:2b:9f:e9:
8f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:53:BE:A1:9B:CF:82:DB:F8:FD:99:6A:4E:0D:4E:EA:DA:67:64:9F
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/6FO-oZvPgtv4_ZlqTg1O6tpnZJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.222.0/24
Signature Algorithm: sha256WithRSAEncryption
08:e3:1f:23:a5:49:50:be:0d:5f:14:81:63:2e:06:7f:5d:47:
c8:21:b1:0f:2b:a7:80:16:f6:b3:62:c7:d5:42:5f:5b:b9:ed:
31:be:03:e7:c8:47:cd:17:59:79:93:c9:26:98:50:83:ea:29:
27:87:36:7e:91:21:4f:61:14:db:69:1e:9e:13:42:df:f9:7a:
4a:31:d1:ae:d4:e9:2b:16:c0:75:d7:18:a1:ad:2f:68:0f:c7:
f5:d7:e2:1c:fe:ba:21:94:4c:77:31:72:fa:68:4c:be:22:ef:
0c:e4:f2:6a:b9:d9:96:a4:72:d9:a8:dd:ec:c0:82:0d:80:df:
c0:52:4b:51:60:32:72:f6:76:19:7c:87:fd:47:42:4a:be:ca:
6f:15:cd:44:4b:c0:86:5f:5a:76:7b:09:b5:6e:0f:8a:fe:9e:
dd:5e:82:84:59:6f:03:b0:22:0a:6f:24:f7:54:6d:eb:3c:99:
bd:a2:70:bb:2d:4f:b9:b4:72:ab:15:0b:d7:95:3b:ad:9f:6c:
82:32:dd:27:2b:e4:50:d0:81:46:69:b3:5c:fd:e1:65:f4:e7:
05:52:a6:4c:b0:00:08:8b:7d:b9:cf:e3:09:3e:69:26:e4:cd:
92:89:fb:11:67:ee:59:c9:58:1c:7e:5b:14:38:9c:0b:fc:f8:
d0:34:d1:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZS5rA5Fae/k6nblpaZfmzg8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy
OWY5YzkwHhcNMjUwMTMxMDAwNDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODUzYmVhMTliY2Y4MmRiZjhmZDk5NmE0ZTBkNGVlYWRhNjc2NDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw95bQNADUuoCW0vUT+0WP0XsCWEg
yHaEZOQg2gOY54LRIypyvpusk55wpoL5/u2EfB4Moca57DtJILq9V37bJ9qmWDjK
I40QV6y27pTTNtnlw9FJxg8x/t5R+4w3S5dhkx032219ejI8zP88D7SSONAZdlvy
FX0UNv/X8botqM6k6wHShD6cNPLHyOOIMfCEO/EjnA+d+4kFK8Be3KH0fx6xiIBn
iOnvh2eynq22W+yPpOJmceiKb9z0xYwykR1e4YRFBt3LUdu/B6L12wBdFUUCjl+t
guNjP9sLBm29qcyXwztW7JElyjfotdskV/1y5WM+NPG90kylKXErn+mPZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOhTvqGbz4Lb+P2Zak4NTuraZ2SfMB8GA1UdIwQY
MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt
NDlmOTgxZWU1OTgxLzEvNkZPLW9adlBndHY0X1pscVRnMU82dHBuWko4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx
LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU5PeMA0G
CSqGSIb3DQEBCwUAA4IBAQAI4x8jpUlQvg1fFIFjLgZ/XUfIIbEPK6eAFvazYsfV
Ql9bue0xvgPnyEfNF1l5k8kmmFCD6iknhzZ+kSFPYRTbaR6eE0Lf+XpKMdGu1Okr
FsB11xihrS9oD8f11+Ic/rohlEx3MXL6aEy+Iu8M5PJqudmWpHLZqN3swIINgN/A
UktRYDJy9nYZfIf9R0JKvspvFc1ES8CGX1p2ewm1bg+K/p7dXoKEWW8DsCIKbyT3
VG3rPJm9onC7LU+5tHKrFQvXlTutn2yCMt0nK+RQ0IFGabNc/eFl9OcFUqZMsAAI
i325z+MJPmkm5M2SifsRZ+5ZyVgcflsUOJwL/PjQNNGV
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:02:17 2025 by rpki-client