Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/a_aUBQJtfRr4z73N6vhdVTYgPes.roa
File: a_aUBQJtfRr4z73N6vhdVTYgPes.roa (raw, json)
Hash identifier: 4W92T67NEjmQtAa4Hv5uyugYKKl+YBXPFzOrRxZ6i2Y=
Subject key identifier: 6B:F6:94:05:02:6D:7D:1A:F8:CF:BD:CD:EA:F8:5D:55:36:20:3D:EB
Certificate issuer: /CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Certificate serial: 019424B3AFC5628A52BF763C39BFB9532E68
Authority key identifier: FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/a_aUBQJtfRr4z73N6vhdVTYgPes.roa
Signing time: Thu 02 Jan 2025 01:49:03 +0000
ROA not before: Thu 02 Jan 2025 01:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50612
IP address blocks: 185.147.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:af:c5:62:8a:52:bf:76:3c:39:bf:b9:53:2e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Validity
Not Before: Jan 2 01:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bf69405026d7d1af8cfbdcdeaf85d5536203deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:55:3d:b3:c6:e0:a2:d6:7c:f5:19:0b:30:
0e:60:a6:b9:e8:8b:97:90:2f:26:ac:e1:90:62:fe:
f6:ad:86:84:7d:55:30:a1:e7:3e:01:c9:28:b3:a0:
4d:4f:62:91:1a:37:98:0b:48:86:53:eb:25:dd:ad:
88:3c:ba:f2:68:2e:f9:4f:e0:f4:00:ff:35:70:a0:
78:9f:0a:f6:46:38:a0:5f:f6:df:7c:4c:1a:e0:26:
93:1b:5c:21:66:86:d5:59:c5:4e:d4:5d:8c:49:05:
8e:d9:91:73:b6:91:26:a8:d7:19:ef:fc:af:2e:cd:
0c:3a:26:a3:b4:c6:47:45:0b:06:6b:09:0c:ee:9a:
e9:92:44:2b:db:f8:ce:c1:c6:cb:a9:a2:4c:a0:47:
fe:6e:15:8b:66:32:1c:f8:36:c1:5b:ce:8c:f9:f7:
f6:7b:76:2e:74:54:03:57:07:3b:d2:35:7e:0e:ec:
da:01:63:7e:e1:de:01:cd:be:e3:a1:c5:aa:64:a2:
f4:54:85:d7:f5:3a:b6:70:f4:39:92:96:d5:23:5e:
80:dd:7d:f0:6e:b5:58:bf:d5:9b:2f:31:ce:6e:07:
17:84:cf:09:3c:49:f4:da:5c:f5:6c:e1:ba:2f:09:
78:b5:d9:05:2b:9e:06:eb:8b:df:4a:2f:0d:25:d4:
80:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F6:94:05:02:6D:7D:1A:F8:CF:BD:CD:EA:F8:5D:55:36:20:3D:EB
X509v3 Authority Key Identifier:
keyid:FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/a_aUBQJtfRr4z73N6vhdVTYgPes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.126.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:ac:63:f3:da:06:29:c1:20:b4:04:a8:3c:4c:3e:99:f4:ae:
2b:71:f3:e9:22:c6:af:28:9f:53:73:c0:69:10:b7:07:75:f3:
e0:57:4c:4c:5c:3c:ea:9b:3e:da:3c:1a:4c:0f:6f:90:b1:67:
1d:77:78:b9:2c:08:01:41:90:a7:7d:ea:18:75:f4:fd:bb:4c:
22:13:c7:44:ab:81:16:96:75:5f:09:c5:4d:1d:05:0b:32:c0:
35:16:8c:3f:e7:98:2b:68:6c:54:05:7a:a2:64:fe:82:40:52:
7c:8d:ac:b1:6a:3f:ad:17:47:80:28:1f:b1:93:da:cf:99:99:
8b:05:10:77:3a:1c:a8:01:4b:80:6d:b7:02:cb:33:09:d5:b9:
ae:62:5b:a9:54:5f:08:98:48:f1:00:69:36:81:ae:99:84:14:
d7:74:4c:32:1b:b6:23:65:90:fa:2a:f4:5b:f6:7f:e7:bf:09:
96:70:97:e8:43:22:49:da:54:a4:e1:3b:48:70:b9:13:92:55:
cd:f3:c3:12:80:df:bd:5d:a7:b3:b5:2d:50:b9:0e:b7:2b:65:
3d:e4:b0:6a:87:4f:c3:08:14:02:c6:2b:d8:90:68:88:bc:f3:
09:e1:30:e2:f7:97:b4:f6:17:32:ca:ab:06:5f:3f:8f:2c:09:
17:02:ee:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks6/FYopSv3Y8Ob+5Uy5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYjI2Mjc2NzI4NzdkMGY2ZGU5YmM0ZTdlMTg2ZWVkZDEz
NTYxMTAwHhcNMjUwMTAyMDE0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmY2OTQwNTAyNmQ3ZDFhZjhjZmJkY2RlYWY4NWQ1NTM2MjAzZGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLRVPbPG4KLWfPUZCzAOYKa56IuX
kC8mrOGQYv72rYaEfVUwoec+Ackos6BNT2KRGjeYC0iGU+sl3a2IPLryaC75T+D0
AP81cKB4nwr2RjigX/bffEwa4CaTG1whZobVWcVO1F2MSQWO2ZFztpEmqNcZ7/yv
Ls0MOiajtMZHRQsGawkM7prpkkQr2/jOwcbLqaJMoEf+bhWLZjIc+DbBW86M+ff2
e3YudFQDVwc70jV+DuzaAWN+4d4Bzb7jocWqZKL0VIXX9Tq2cPQ5kpbVI16A3X3w
brVYv9WbLzHObgcXhM8JPEn02lz1bOG6Lwl4tdkFK54G64vfSi8NJdSA7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGv2lAUCbX0a+M+9zer4XVU2ID3rMB8GA1UdIwQY
MBaAFP+yYnZyh30Pbem8Tn4Ybu3RNWEQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yMmM1MTAtMzQ4MC00Y2UxLThkZDgt
MTk3NDY5NDc1NThkLzEvYV9hVUJRSnRmUnI0ejczTjZ2aGRWVFlnUGVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8yMmM1MTAtMzQ4MC00Y2UxLThkZDgtMTk3NDY5NDc1NThk
LzEvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZN+MA0G
CSqGSIb3DQEBCwUAA4IBAQCcrGPz2gYpwSC0BKg8TD6Z9K4rcfPpIsavKJ9Tc8Bp
ELcHdfPgV0xMXDzqmz7aPBpMD2+QsWcdd3i5LAgBQZCnfeoYdfT9u0wiE8dEq4EW
lnVfCcVNHQULMsA1Fow/55graGxUBXqiZP6CQFJ8jayxaj+tF0eAKB+xk9rPmZmL
BRB3OhyoAUuAbbcCyzMJ1bmuYlupVF8ImEjxAGk2ga6ZhBTXdEwyG7YjZZD6KvRb
9n/nvwmWcJfoQyJJ2lSk4TtIcLkTklXN88MSgN+9XaeztS1QuQ63K2U95LBqh0/D
CBQCxivYkGiIvPMJ4TDi95e09hcyyqsGXz+PLAkXAu5m
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:35 2025 by rpki-client