Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vQtF-L-9ooOZxF-UCZufP97_4Tk.roa
File: vQtF-L-9ooOZxF-UCZufP97_4Tk.roa (raw, json)
Hash identifier: uZu5EdE4zrTNj+JjaQISrCgWGaWpGkfUNjvMVUEKljA=
Subject key identifier: BD:0B:45:F8:BF:BD:A2:83:99:C4:5F:94:09:9B:9F:3F:DE:FF:E1:39
Certificate issuer: /CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
Certificate serial: 0194258E79C773921A8CB20A6910A5467EA0
Authority key identifier: BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vQtF-L-9ooOZxF-UCZufP97_4Tk.roa
Signing time: Thu 02 Jan 2025 05:48:01 +0000
ROA not before: Thu 02 Jan 2025 05:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60943
IP address blocks: 46.255.31.0/24 maxlen: 24
193.160.240.0/22 maxlen: 22
2a0c:dac0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:79:c7:73:92:1a:8c:b2:0a:69:10:a5:46:7e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
Validity
Not Before: Jan 2 05:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd0b45f8bfbda28399c45f94099b9f3fdeffe139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:3c:ff:6a:fb:93:49:5d:66:18:20:3c:8f:
1f:dd:ff:b2:65:fa:1c:65:df:bf:81:18:a7:f2:63:
85:3a:e1:c1:d8:30:e7:98:03:0a:61:9b:a1:83:61:
b1:96:93:a2:d7:7e:b1:aa:12:cd:1a:d2:31:af:33:
a4:32:12:c8:a5:c9:1e:aa:6f:88:74:97:ef:40:5c:
39:4e:e1:00:0f:e8:b8:b6:e1:ed:ce:7a:59:78:41:
a0:d7:48:c2:ac:8c:1f:9c:68:b8:58:60:d9:14:00:
a0:1a:d6:55:b7:29:23:8c:e5:35:31:68:b7:87:12:
cb:d0:bd:6c:81:81:fb:97:bd:11:7b:57:50:c5:47:
9d:e4:ca:a4:77:e1:c9:d2:3c:df:13:a9:dc:01:72:
be:32:de:41:86:99:43:89:10:ed:fd:fe:6d:a1:b9:
d7:e1:fc:67:48:31:20:ea:1e:ae:c8:83:cc:8d:f6:
ad:09:53:3d:6e:07:e4:4d:ee:2a:9d:08:df:60:8b:
71:00:77:cc:dc:8a:14:04:52:df:3c:95:13:3c:14:
e8:ba:d5:cd:8b:5a:57:5f:bb:4a:31:25:34:ae:59:
d4:e6:52:79:3d:51:b2:24:d1:9d:81:47:17:49:26:
7f:07:c6:d5:5a:81:c2:2b:db:bd:b3:2e:31:fd:03:
51:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0B:45:F8:BF:BD:A2:83:99:C4:5F:94:09:9B:9F:3F:DE:FF:E1:39
X509v3 Authority Key Identifier:
keyid:BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vQtF-L-9ooOZxF-UCZufP97_4Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.31.0/24
193.160.240.0/22
IPv6:
2a0c:dac0::/29
Signature Algorithm: sha256WithRSAEncryption
78:2c:53:f5:8e:d6:3b:81:d0:2c:ff:c2:70:df:34:3d:e0:c8:
20:27:ee:2b:bf:14:a6:63:89:b9:46:a2:90:41:cb:ef:6c:1e:
df:89:f0:df:2b:34:a8:29:2f:f4:62:39:15:37:b2:cc:37:15:
94:11:5f:81:04:5e:f1:34:43:49:23:a1:7f:b0:06:25:5b:ca:
f1:0e:3d:31:60:46:fe:fa:48:82:01:69:10:b1:83:a6:35:81:
55:5e:bb:8a:02:47:7e:e2:3c:e0:25:e5:d9:52:66:45:98:b8:
62:00:6c:d7:97:9b:8b:fc:c2:90:ca:8a:11:42:29:a7:47:2e:
f0:df:4b:8d:75:cf:66:27:67:8a:c5:2e:b1:30:07:b4:f3:bb:
f3:b4:ab:66:c5:78:2b:1c:c1:3c:bc:16:bd:97:45:ea:4b:b1:
a7:f5:06:db:60:91:3c:9c:10:44:d8:62:ff:a8:05:23:a1:a3:
01:6c:1b:d3:e9:08:f7:db:d6:0f:3f:48:e1:20:d0:4a:57:cf:
1f:55:46:ca:f8:dc:b3:73:4b:55:77:04:ca:37:78:f0:09:92:
70:19:07:ee:fd:e4:2b:06:4b:10:b5:99:5a:08:6a:e9:8c:54:
1c:3a:22:bd:28:6d:da:85:3d:de:be:18:ea:25:67:85:ca:55:
f5:a3:a7:b1
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQljnnHc5IajLIKaRClRn6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMjkzODU5MGUwZDAwMTk3MjU2NjJkNGI0YWU0Y2M5ZWMz
YTczNGQwHhcNMjUwMTAyMDU0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDBiNDVmOGJmYmRhMjgzOTljNDVmOTQwOTliOWYzZmRlZmZlMTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtA8/2r7k0ldZhggPI8f3f+yZfoc
Zd+/gRin8mOFOuHB2DDnmAMKYZuhg2GxlpOi136xqhLNGtIxrzOkMhLIpckeqm+I
dJfvQFw5TuEAD+i4tuHtznpZeEGg10jCrIwfnGi4WGDZFACgGtZVtykjjOU1MWi3
hxLL0L1sgYH7l70Re1dQxUed5Mqkd+HJ0jzfE6ncAXK+Mt5BhplDiRDt/f5tobnX
4fxnSDEg6h6uyIPMjfatCVM9bgfkTe4qnQjfYItxAHfM3IoUBFLfPJUTPBToutXN
i1pXX7tKMSU0rlnU5lJ5PVGyJNGdgUcXSSZ/B8bVWoHCK9u9sy4x/QNRBwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFL0LRfi/vaKDmcRflAmbnz/e/+E5MB8GA1UdIwQY
MBaAFL8pOFkODQAZclZi1LSuTMnsOnNNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnlrNFdRNE5BQmx5Vm1MVXRLNU15ZXc2YzAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84MzNhYTItYWYwNC00ZjEwLWExNjct
NmFjZDg2Njg2ZTg1LzEvdlF0Ri1MLTlvb09aeEYtVUNadWZQOTdfNFRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy84MzNhYTItYWYwNC00ZjEwLWExNjctNmFjZDg2Njg2ZTg1
LzEvdnlrNFdRNE5BQmx5Vm1MVXRLNU15ZXc2YzAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALv8fAwQC
waDwMA0EAgACMAcDBQMqDNrAMA0GCSqGSIb3DQEBCwUAA4IBAQB4LFP1jtY7gdAs
/8Jw3zQ94MggJ+4rvxSmY4m5RqKQQcvvbB7fifDfKzSoKS/0YjkVN7LMNxWUEV+B
BF7xNENJI6F/sAYlW8rxDj0xYEb++kiCAWkQsYOmNYFVXruKAkd+4jzgJeXZUmZF
mLhiAGzXl5uL/MKQyooRQimnRy7w30uNdc9mJ2eKxS6xMAe087vztKtmxXgrHME8
vBa9l0XqS7Gn9QbbYJE8nBBE2GL/qAUjoaMBbBvT6Qj329YPP0jhINBKV88fVUbK
+Nyzc0tVdwTKN3jwCZJwGQfu/eQrBksQtZlaCGrpjFQcOiK9KG3ahT3evhjqJWeF
ylX1o6ex
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:31:36 2025 by rpki-client