Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/b9l5sinWdqskbev4cuOxwSEYd68.roa
File: b9l5sinWdqskbev4cuOxwSEYd68.roa (raw, json)
Hash identifier: qnq/UFSTcLvSI/5FTEwaMtiCFn9CDv5K60YTyMFcpss=
Subject key identifier: 6F:D9:79:B2:29:D6:76:AB:24:6D:EB:F8:72:E3:B1:C1:21:18:77:AF
Certificate issuer: /CN=547ce483c8241d7a4e6625977798035b638586c6
Certificate serial: 0194244504F8A112C05EA9F268D9240AF7F0
Authority key identifier: 54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/b9l5sinWdqskbev4cuOxwSEYd68.roa
Signing time: Wed 01 Jan 2025 23:48:10 +0000
ROA not before: Wed 01 Jan 2025 23:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44138
IP address blocks: 193.28.94.0/24 maxlen: 24
2001:67c:1b0c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:04:f8:a1:12:c0:5e:a9:f2:68:d9:24:0a:f7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547ce483c8241d7a4e6625977798035b638586c6
Validity
Not Before: Jan 1 23:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fd979b229d676ab246debf872e3b1c1211877af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:ec:57:57:11:08:1d:b5:82:a9:7e:f7:4f:
ce:39:10:81:50:e9:09:8f:37:a3:d3:f5:f6:48:08:
06:24:b5:e1:cd:37:17:3f:63:f2:e3:c1:05:28:1e:
46:88:1d:44:6d:a4:f2:93:23:e2:e2:1c:98:14:9c:
b4:1a:ba:29:bf:e5:a1:ff:2a:16:12:18:7c:41:08:
d6:59:63:66:67:7c:40:40:94:f7:69:1c:53:09:e2:
38:8a:18:8a:d6:e8:39:b4:29:4a:92:73:09:a7:fd:
8a:87:a9:cf:83:9d:c9:f8:d4:27:45:82:71:35:48:
7e:4d:eb:55:cf:00:ec:81:20:8a:b1:61:3e:dd:c1:
fd:8e:f4:32:ed:c6:ed:40:f2:cf:0a:c6:55:8b:77:
9a:49:69:5a:05:ac:31:69:c6:10:3e:27:0a:cf:d8:
50:38:f4:a9:44:44:60:13:91:3b:4e:e2:a1:86:f2:
17:53:9c:dd:1a:e6:83:2c:9b:bc:bd:c3:ab:c1:97:
91:21:fc:4c:3b:cb:fd:04:04:0f:93:19:d5:0c:fa:
ac:c9:00:7e:98:13:ce:5c:1e:cb:bc:3f:95:3f:36:
25:ea:80:f8:6f:50:7d:4a:61:b4:3d:84:fe:09:52:
3e:10:3b:cf:76:d2:e9:53:62:84:07:5a:3f:b6:cc:
19:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D9:79:B2:29:D6:76:AB:24:6D:EB:F8:72:E3:B1:C1:21:18:77:AF
X509v3 Authority Key Identifier:
keyid:54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/b9l5sinWdqskbev4cuOxwSEYd68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.94.0/24
IPv6:
2001:67c:1b0c::/48
Signature Algorithm: sha256WithRSAEncryption
9b:d2:f4:90:e2:c7:1f:af:f4:4e:15:50:5d:79:ed:cc:39:3f:
16:3a:0b:1c:c9:c3:d1:2b:88:2c:cf:64:24:4d:1d:43:31:34:
a0:ac:51:ce:9a:66:d2:aa:f1:ba:2e:ba:b9:8f:0a:92:09:98:
63:c7:9b:bc:4c:37:76:57:13:c1:03:37:79:8d:46:ab:35:06:
6b:c2:a0:97:95:ad:5a:74:64:0b:66:b5:94:2d:b0:bd:57:41:
47:e5:21:eb:83:70:90:31:c6:4a:a0:3e:a4:fd:93:cf:1b:1b:
2a:f2:d6:43:62:f2:f6:c2:a5:4f:1b:e2:9e:e7:99:25:42:e8:
b0:11:39:f0:8a:4d:36:ac:70:88:09:be:4e:d4:06:a6:77:6b:
83:27:a7:19:09:15:6e:68:47:d0:97:a5:34:60:01:bb:fc:6f:
fa:b0:d2:96:31:fa:a2:fe:79:56:b9:74:9f:34:56:f1:6e:79:
f9:64:31:07:74:dd:c1:61:95:93:bb:09:ec:eb:64:8e:8d:56:
57:41:05:b2:b7:50:1a:ca:6c:81:0c:64:b3:cb:67:14:b6:25:
6a:d5:5a:1f:63:b6:2c:30:cb:17:0a:aa:96:53:1c:d4:8d:81:
98:62:4a:56:28:e2:0c:8e:64:d2:b6:54:fd:c6:5a:a7:6e:67:
0b:8a:1c:a3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQkRQT4oRLAXqnyaNkkCvfwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0N2NlNDgzYzgyNDFkN2E0ZTY2MjU5Nzc3OTgwMzViNjM4
NTg2YzYwHhcNMjUwMTAxMjM0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmQ5NzliMjI5ZDY3NmFiMjQ2ZGViZjg3MmUzYjFjMTIxMTg3N2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmzsV1cRCB21gql+90/OORCBUOkJ
jzej0/X2SAgGJLXhzTcXP2Py48EFKB5GiB1EbaTykyPi4hyYFJy0Gropv+Wh/yoW
Ehh8QQjWWWNmZ3xAQJT3aRxTCeI4ihiK1ug5tClKknMJp/2Kh6nPg53J+NQnRYJx
NUh+TetVzwDsgSCKsWE+3cH9jvQy7cbtQPLPCsZVi3eaSWlaBawxacYQPicKz9hQ
OPSpRERgE5E7TuKhhvIXU5zdGuaDLJu8vcOrwZeRIfxMO8v9BAQPkxnVDPqsyQB+
mBPOXB7LvD+VPzYl6oD4b1B9SmG0PYT+CVI+EDvPdtLpU2KEB1o/tswZsQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG/ZebIp1narJG3r+HLjscEhGHevMB8GA1UdIwQY
MBaAFFR85IPIJB16TmYll3eYA1tjhYbGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkh6a2c4Z2tIWHBPWmlXWGQ1Z0RXMk9GaHNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8yY2JlMzktNGZhYy00NWFmLTk5ZmQt
NTJlYzYxYmM2YzAwLzEvYjlsNXNpbldkcXNrYmV2NGN1T3h3U0VZZDY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8yY2JlMzktNGZhYy00NWFmLTk5ZmQtNTJlYzYxYmM2YzAw
LzEvVkh6a2c4Z2tIWHBPWmlXWGQ1Z0RXMk9GaHNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwRxeMA8E
AgACMAkDBwAgAQZ8GwwwDQYJKoZIhvcNAQELBQADggEBAJvS9JDixx+v9E4VUF15
7cw5PxY6CxzJw9EriCzPZCRNHUMxNKCsUc6aZtKq8bouurmPCpIJmGPHm7xMN3ZX
E8EDN3mNRqs1BmvCoJeVrVp0ZAtmtZQtsL1XQUflIeuDcJAxxkqgPqT9k88bGyry
1kNi8vbCpU8b4p7nmSVC6LAROfCKTTascIgJvk7UBqZ3a4MnpxkJFW5oR9CXpTRg
Abv8b/qw0pYx+qL+eVa5dJ80VvFueflkMQd03cFhlZO7CezrZI6NVldBBbK3UBrK
bIEMZLPLZxS2JWrVWh9jtiwwyxcKqpZTHNSNgZhiSlYo4gyOZNK2VP3GWqduZwuK
HKM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:56:04 2025 by rpki-client