Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/yFAScqy1SZnNR2xfePl0FenNN0g.roa
File: yFAScqy1SZnNR2xfePl0FenNN0g.roa (raw, json)
Hash identifier: vURxboeBcUQDk9P166WC/cJAnLRENen5C6McIffi+y4=
Subject key identifier: C8:50:12:72:AC:B5:49:99:CD:47:6C:5F:78:F9:74:15:E9:CD:37:48
Certificate issuer: /CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
Certificate serial: 01941FFA121DE44C9B92FEC2AFB2469DD257
Authority key identifier: 6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/yFAScqy1SZnNR2xfePl0FenNN0g.roa
Signing time: Wed 01 Jan 2025 03:47:49 +0000
ROA not before: Wed 01 Jan 2025 03:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8762
IP address blocks: 147.95.0.0/16 maxlen: 16
147.95.128.0/20 maxlen: 20
147.95.160.0/24 maxlen: 24
147.95.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:12:1d:e4:4c:9b:92:fe:c2:af:b2:46:9d:d2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
Validity
Not Before: Jan 1 03:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8501272acb54999cd476c5f78f97415e9cd3748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:7c:fc:07:9d:01:ad:b9:02:29:ed:fd:a9:
5d:47:90:c9:eb:03:08:0b:97:27:b1:24:98:2e:43:
c3:38:86:f5:9c:ad:55:48:61:97:8a:ef:46:86:a0:
eb:70:4a:03:6f:b4:16:eb:5b:7a:b7:c5:76:47:5d:
ee:2a:7b:7f:09:7c:11:5c:8f:de:41:a7:aa:28:36:
b3:77:4b:e7:11:d0:05:e7:76:e9:51:74:c4:41:7c:
e5:bd:e8:e0:1e:e7:24:53:a7:44:75:6a:89:c5:5a:
bc:6d:cf:10:70:a3:3d:aa:3a:03:f5:ce:fd:05:4b:
35:7e:6b:8b:35:3b:88:0c:11:f3:0c:10:5f:d2:d3:
7a:61:f6:c0:d8:1b:71:01:1d:d7:15:3f:6b:39:31:
bd:23:83:76:99:9b:78:b0:4f:47:4c:14:62:34:82:
1f:be:91:9f:cb:e8:b6:8d:50:5b:30:90:b3:8f:1e:
19:74:80:c4:c6:1d:b6:50:5a:ad:24:df:b7:3e:e7:
18:0e:94:2c:9a:89:6c:df:8e:4b:c7:d3:b0:3f:ca:
27:1d:77:3e:55:51:22:b9:af:28:40:d8:a9:1d:ac:
ef:e6:da:42:6c:70:cc:34:d6:ae:20:3a:9a:d9:56:
7a:aa:49:14:fc:23:ae:22:6c:d2:37:6b:77:0c:8d:
e4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:50:12:72:AC:B5:49:99:CD:47:6C:5F:78:F9:74:15:E9:CD:37:48
X509v3 Authority Key Identifier:
keyid:6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/yFAScqy1SZnNR2xfePl0FenNN0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.95.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:28:e5:ad:58:71:ad:a8:31:18:ac:32:31:78:18:69:51:9d:
ab:50:82:d0:42:fd:2c:c0:2c:4c:93:40:dd:ec:aa:58:1a:22:
71:4b:21:95:40:c4:3f:e0:59:f2:ec:44:76:2b:96:2c:e9:9e:
7d:9a:e0:65:08:ea:2b:72:d1:f8:f6:09:74:fa:ce:0b:e4:20:
68:17:97:78:c0:71:bb:40:02:15:76:35:8b:cb:41:94:56:45:
d0:1f:26:b0:b4:55:83:94:47:5d:a4:7f:19:26:bb:e7:e9:47:
60:a5:a6:eb:e9:29:ef:b1:ee:8f:f4:3c:dd:14:c3:25:78:8e:
27:0d:02:60:b7:9f:f8:65:90:2e:18:ba:3f:e3:77:17:a6:37:
8d:d1:6e:98:7b:29:8a:6f:18:7b:46:e4:0b:17:ca:18:c9:0f:
35:8a:83:7d:35:5c:d9:5d:68:cd:c7:ec:ed:c3:b0:16:aa:43:
84:a8:01:56:a9:23:ab:bf:b8:1f:a4:88:1a:eb:c3:79:60:0b:
fe:6c:cf:6e:f0:41:22:de:19:e1:2e:a6:58:28:cc:1b:29:ca:
00:04:ab:f8:59:17:6b:6b:5d:83:10:54:a4:05:b3:26:58:d6:
57:a9:2d:c9:35:80:af:f9:41:22:15:c0:4b:8f:ee:c8:d0:04:
cd:bf:0a:0c
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQf+hId5Eybkv7Cr7JGndJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMzRmYTUzZDFkODRkYmFiZTY5OGQ1YmJjY2FlZGYxMDlk
MTU3YWUwHhcNMjUwMTAxMDM0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODUwMTI3MmFjYjU0OTk5Y2Q0NzZjNWY3OGY5NzQxNWU5Y2QzNzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui98/AedAa25Aint/aldR5DJ6wMI
C5cnsSSYLkPDOIb1nK1VSGGXiu9GhqDrcEoDb7QW61t6t8V2R13uKnt/CXwRXI/e
QaeqKDazd0vnEdAF53bpUXTEQXzlvejgHuckU6dEdWqJxVq8bc8QcKM9qjoD9c79
BUs1fmuLNTuIDBHzDBBf0tN6YfbA2BtxAR3XFT9rOTG9I4N2mZt4sE9HTBRiNIIf
vpGfy+i2jVBbMJCzjx4ZdIDExh22UFqtJN+3PucYDpQsmols345Lx9OwP8onHXc+
VVEiua8oQNipHazv5tpCbHDMNNauIDqa2VZ6qkkU/COuImzSN2t3DI3kjQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFMhQEnKstUmZzUdsX3j5dBXpzTdIMB8GA1UdIwQY
MBaAFGs0+lPR2E26vmmNW7zK7fEJ0VeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXpUNlU5SFlUYnEtYVkxYnZNcnQ4UW5SVjY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81MjhkZTEtOGY2OC00Y2I5LWI2Y2Ut
ZmZhYWEyOTlhZjYxLzEveUZBU2NxeTFTWm5OUjJ4ZmVQbDBGZW5OTjBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi81MjhkZTEtOGY2OC00Y2I5LWI2Y2UtZmZhYWEyOTlhZjYx
LzEvYXpUNlU5SFlUYnEtYVkxYnZNcnQ4UW5SVjY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk18wDQYJ
KoZIhvcNAQELBQADggEBAB8o5a1Yca2oMRisMjF4GGlRnatQgtBC/SzALEyTQN3s
qlgaInFLIZVAxD/gWfLsRHYrlizpnn2a4GUI6ity0fj2CXT6zgvkIGgXl3jAcbtA
AhV2NYvLQZRWRdAfJrC0VYOUR12kfxkmu+fpR2ClpuvpKe+x7o/0PN0UwyV4jicN
AmC3n/hlkC4Yuj/jdxemN43Rbph7KYpvGHtG5AsXyhjJDzWKg301XNldaM3H7O3D
sBaqQ4SoAVapI6u/uB+kiBrrw3lgC/5sz27wQSLeGeEuplgozBspygAEq/hZF2tr
XYMQVKQFsyZY1lepLck1gK/5QSIVwEuP7sjQBM2/Cgw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:59:13 2025 by rpki-client