Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/JyWi5BFZcLnbfEzmECOIrpo9WqY.roa
File: JyWi5BFZcLnbfEzmECOIrpo9WqY.roa (raw, json)
Hash identifier: BGeaCEXgvEq5NNxKl+Ag2+yFWkLD9Y1n05TPe3xR8kw=
Subject key identifier: 27:25:A2:E4:11:59:70:B9:DB:7C:4C:E6:10:23:88:AE:9A:3D:5A:A6
Certificate issuer: /CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
Certificate serial: 0194221FA445D2BD101C69C9F57F89A2693D
Authority key identifier: A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/JyWi5BFZcLnbfEzmECOIrpo9WqY.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210169
IP address blocks: 195.95.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a4:45:d2:bd:10:1c:69:c9:f5:7f:89:a2:69:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2725a2e4115970b9db7c4ce6102388ae9a3d5aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:2e:ef:2a:12:c5:ba:e5:98:11:da:e6:cd:
bc:a7:9b:9e:ca:86:b7:2f:62:7d:1a:b3:d5:70:32:
3d:d1:f0:b9:0c:12:f0:b3:45:a9:a7:b8:1d:1a:8e:
ad:ef:81:c3:7e:0e:3c:33:4c:9c:46:48:ee:ea:1c:
09:e3:21:5b:d6:ae:e0:78:fa:a7:b9:3b:60:07:2b:
a2:87:f3:17:ba:89:0f:7d:89:d2:aa:60:ac:5f:79:
04:1b:2f:a9:0a:92:23:1d:af:70:2a:26:1d:8f:a6:
d0:30:30:a6:54:7d:be:09:e6:aa:80:8b:9c:d4:db:
2b:94:e3:99:91:fd:73:fa:04:a3:a1:d2:f2:45:fa:
50:67:ae:83:1c:24:a6:bb:47:ce:9c:d8:34:20:8a:
b5:07:19:fd:04:89:d1:86:71:72:b8:28:70:61:f0:
f2:07:4e:93:c7:64:77:14:83:3d:7b:72:0a:8a:86:
ce:96:2c:8c:b9:04:4f:3b:70:50:f1:ff:c5:f3:81:
84:72:e5:4b:94:c9:76:b5:26:40:e0:fb:44:e0:77:
57:de:71:a8:52:69:09:3e:12:de:35:0f:0d:53:46:
1f:af:1d:fa:1a:b0:29:76:67:88:82:89:b3:4c:35:
e3:c2:4f:fe:52:c5:a2:63:36:76:e5:7e:f4:55:39:
5c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:25:A2:E4:11:59:70:B9:DB:7C:4C:E6:10:23:88:AE:9A:3D:5A:A6
X509v3 Authority Key Identifier:
keyid:A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/JyWi5BFZcLnbfEzmECOIrpo9WqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.151.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:de:7c:76:20:cd:a7:d4:58:54:bf:7b:82:f8:97:73:be:fa:
48:77:4c:2d:ff:f8:a9:c6:cc:e7:47:0d:fe:74:9c:ae:97:c3:
42:89:cf:94:34:b7:3d:7f:7d:f3:67:d1:6b:66:c5:4a:a6:55:
7e:33:6c:45:21:0e:b9:49:5a:65:d6:da:78:18:33:4a:6a:e4:
6d:27:3c:86:20:ef:90:83:e8:b5:75:5f:5d:3d:10:a1:fa:ee:
e9:90:82:36:ab:c3:17:bd:ba:25:ff:f4:03:db:ca:7d:fc:07:
0f:4e:38:96:58:64:45:a3:d1:50:46:4d:63:41:2f:f7:26:cf:
65:ff:12:9f:8e:20:08:20:c5:38:c8:69:0a:de:a7:5f:9a:10:
14:48:a3:cc:89:f1:71:46:1b:52:51:e4:fc:75:2b:0c:39:32:
f4:13:cd:ab:41:81:41:49:c5:40:01:c4:2b:83:11:92:e5:fe:
f2:e7:0a:d6:36:eb:0a:16:d0:af:cf:ac:96:6d:d2:99:69:b9:
87:45:aa:1e:6f:a3:c4:b8:ed:01:4a:1d:35:43:bf:12:61:71:
90:63:16:14:91:81:36:8c:10:d6:af:37:d2:67:ac:a3:31:e7:
fb:96:02:60:8c:b2:d2:be:50:a7:b3:73:a3:7e:ef:e8:ee:e9:
57:ec:c8:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH6RF0r0QHGnJ9X+Jomk9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYzEzMDA3MmQyY2U5Y2Y1NjJiODMxOThlZGFhZGFmYTQ4
ZjZkYjQwHhcNMjUwMTAxMTM0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzI1YTJlNDExNTk3MGI5ZGI3YzRjZTYxMDIzODhhZTlhM2Q1YWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1ku7yoSxbrlmBHa5s28p5ueyoa3
L2J9GrPVcDI90fC5DBLws0Wpp7gdGo6t74HDfg48M0ycRkju6hwJ4yFb1q7gePqn
uTtgByuih/MXuokPfYnSqmCsX3kEGy+pCpIjHa9wKiYdj6bQMDCmVH2+CeaqgIuc
1NsrlOOZkf1z+gSjodLyRfpQZ66DHCSmu0fOnNg0IIq1Bxn9BInRhnFyuChwYfDy
B06Tx2R3FIM9e3IKiobOliyMuQRPO3BQ8f/F84GEcuVLlMl2tSZA4PtE4HdX3nGo
UmkJPhLeNQ8NU0Yfrx36GrApdmeIgomzTDXjwk/+UsWiYzZ25X70VTlcGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCclouQRWXC523xM5hAjiK6aPVqmMB8GA1UdIwQY
MBaAFKHBMActLOnPViuDGY7ara+kj220MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2NFd0J5MHM2YzlXSzRNWmp0cXRyNlNQYmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9mNWJiNTEtNzA4Zi00ZGQyLTg4MGYt
ODdkOTA1NjFhYTQ4LzEvSnlXaTVCRlpjTG5iZkV6bUVDT0lycG85V3FZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9mNWJiNTEtNzA4Zi00ZGQyLTg4MGYtODdkOTA1NjFhYTQ4
LzEvb2NFd0J5MHM2YzlXSzRNWmp0cXRyNlNQYmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1+XMA0G
CSqGSIb3DQEBCwUAA4IBAQA83nx2IM2n1FhUv3uC+JdzvvpId0wt//ipxsznRw3+
dJyul8NCic+UNLc9f33zZ9FrZsVKplV+M2xFIQ65SVpl1tp4GDNKauRtJzyGIO+Q
g+i1dV9dPRCh+u7pkII2q8MXvbol//QD28p9/AcPTjiWWGRFo9FQRk1jQS/3Js9l
/xKfjiAIIMU4yGkK3qdfmhAUSKPMifFxRhtSUeT8dSsMOTL0E82rQYFBScVAAcQr
gxGS5f7y5wrWNusKFtCvz6yWbdKZabmHRaoeb6PEuO0BSh01Q78SYXGQYxYUkYE2
jBDWrzfSZ6yjMef7lgJgjLLSvlCns3Ojfu/o7ulX7Mg9
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:12:10 2025 by rpki-client