Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/Bm65E--O4RsSyCzNAmCOH5DCwbg.roa
File: Bm65E--O4RsSyCzNAmCOH5DCwbg.roa (raw, json)
Hash identifier: Dk5vtQSO5xVuQ/klL2R5yHYHzC51XBPO7azd9yPCmHY=
Subject key identifier: 06:6E:B9:13:EF:8E:E1:1B:12:C8:2C:CD:02:60:8E:1F:90:C2:C1:B8
Certificate issuer: /CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Certificate serial: 0194258ECDEAA2AA6D496490B4403ED97164
Authority key identifier: 73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/Bm65E--O4RsSyCzNAmCOH5DCwbg.roa
Signing time: Thu 02 Jan 2025 05:48:23 +0000
ROA not before: Thu 02 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213307
IP address blocks: 94.154.12.0/24 maxlen: 24
2a05:7700::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:cd:ea:a2:aa:6d:49:64:90:b4:40:3e:d9:71:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Validity
Not Before: Jan 2 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=066eb913ef8ee11b12c82ccd02608e1f90c2c1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:81:e1:8f:7d:4d:31:7c:10:cc:6d:cb:d1:1f:
ee:95:54:d3:6c:27:5e:65:97:7f:17:11:3b:63:22:
bd:cb:67:a3:b6:6a:aa:59:66:01:57:04:b1:e7:b1:
f4:35:66:95:15:c4:c4:f8:6b:f7:3c:31:cf:f5:7e:
aa:db:83:0c:6c:3c:d7:0e:a8:99:af:55:de:b1:dc:
65:f0:85:2f:84:2f:e3:ea:5c:91:71:36:cb:ed:04:
60:87:84:72:a5:22:52:90:0d:0c:ec:6e:4e:ae:62:
ec:4f:db:43:26:82:60:cd:63:6b:30:bb:99:36:c7:
fa:4a:48:18:3a:35:0e:0b:c0:48:11:c8:5f:b7:db:
10:35:ac:5e:50:20:8f:6c:c6:05:37:bf:32:f0:bd:
d5:0c:7b:99:48:aa:80:0b:fa:33:34:4c:2d:f6:f3:
97:38:0c:32:33:18:6e:d9:10:46:9a:02:a1:91:1f:
f8:5a:18:27:a4:e1:4d:f6:30:3b:36:1f:a7:03:4f:
0f:f0:54:6a:ee:52:23:d5:f4:6f:5f:91:78:f0:14:
e9:79:6e:3f:9f:6c:10:67:10:db:59:c1:76:a3:b2:
51:a4:bd:2f:8c:db:be:74:0e:77:66:91:72:2d:c2:
b6:70:ad:57:a5:32:8d:62:d3:da:b1:69:ba:1d:c3:
60:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6E:B9:13:EF:8E:E1:1B:12:C8:2C:CD:02:60:8E:1F:90:C2:C1:B8
X509v3 Authority Key Identifier:
keyid:73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/Bm65E--O4RsSyCzNAmCOH5DCwbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.12.0/24
IPv6:
2a05:7700::/29
Signature Algorithm: sha256WithRSAEncryption
61:e7:ef:20:eb:71:70:5e:07:c9:c0:00:e0:51:8c:b0:15:35:
36:05:32:77:d4:12:c8:52:e9:f4:e3:90:6c:19:a5:60:ed:3c:
36:ae:1d:fb:0b:2e:b9:77:3c:ff:7a:c2:dc:f0:25:63:52:f7:
68:aa:34:a5:73:2d:49:ca:a2:5e:d9:01:09:14:4f:8d:49:c0:
de:bb:34:4f:d6:50:40:c2:ab:1f:12:60:1d:ed:50:fa:1d:a0:
bb:a7:10:03:79:ac:2d:a0:c8:3c:f6:a2:43:d8:68:1d:95:fc:
d4:d7:49:7f:f3:5e:7f:1a:c5:0c:f7:60:81:29:56:45:ba:54:
ce:b7:46:56:d0:36:66:d8:16:6b:fc:9c:fb:15:a3:ca:04:65:
be:a6:b2:11:65:e8:c1:8d:cc:0f:54:d4:0f:0f:4d:81:67:b8:
74:1e:01:75:09:a3:37:18:80:7c:a3:3f:e9:9c:3c:1a:41:51:
2d:aa:bc:a1:c0:dd:3c:ed:23:50:e5:80:44:2a:a0:63:14:bc:
2e:5e:fe:f7:80:20:c5:bb:5d:60:5e:59:8c:a8:9f:de:c5:d5:
ec:1c:e7:f8:6f:cc:7f:ea:a0:81:2e:8c:bb:6a:30:8c:96:9e:
fa:50:d9:5f:0c:93:e5:e7:58:d8:bf:e6:cb:6e:07:91:a4:a1:
e9:40:b0:ef
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQljs3qoqptSWSQtEA+2XFkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczOGU2NWZiMDNlNmQ2MDdkOGJlMjA0MzQ1ZDZlMDVhNDYw
YjlhNGYwHhcNMjUwMTAyMDU0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjZlYjkxM2VmOGVlMTFiMTJjODJjY2QwMjYwOGUxZjkwYzJjMWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoHhj31NMXwQzG3L0R/ulVTTbCde
ZZd/FxE7YyK9y2ejtmqqWWYBVwSx57H0NWaVFcTE+Gv3PDHP9X6q24MMbDzXDqiZ
r1Xesdxl8IUvhC/j6lyRcTbL7QRgh4RypSJSkA0M7G5OrmLsT9tDJoJgzWNrMLuZ
Nsf6SkgYOjUOC8BIEchft9sQNaxeUCCPbMYFN78y8L3VDHuZSKqAC/ozNEwt9vOX
OAwyMxhu2RBGmgKhkR/4WhgnpOFN9jA7Nh+nA08P8FRq7lIj1fRvX5F48BTpeW4/
n2wQZxDbWcF2o7JRpL0vjNu+dA53ZpFyLcK2cK1XpTKNYtPasWm6HcNgTQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAZuuRPvjuEbEsgszQJgjh+QwsG4MB8GA1UdIwQY
MBaAFHOOZfsD5tYH2L4gQ0XW4FpGC5pPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzQ1bC13UG0xZ2ZZdmlCRFJkYmdXa1lMbWs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iYTYxY2UtOWM4Ni00MmVmLTkwZmIt
ZGQ1MTVlNjNjZmNiLzEvQm02NUUtLU80UnNTeUN6TkFtQ09INURDd2JnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9iYTYxY2UtOWM4Ni00MmVmLTkwZmItZGQ1MTVlNjNjZmNi
LzEvYzQ1bC13UG0xZ2ZZdmlCRFJkYmdXa1lMbWs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXpoMMA0E
AgACMAcDBQMqBXcAMA0GCSqGSIb3DQEBCwUAA4IBAQBh5+8g63FwXgfJwADgUYyw
FTU2BTJ31BLIUun045BsGaVg7Tw2rh37Cy65dzz/esLc8CVjUvdoqjSlcy1JyqJe
2QEJFE+NScDeuzRP1lBAwqsfEmAd7VD6HaC7pxADeawtoMg89qJD2GgdlfzU10l/
815/GsUM92CBKVZFulTOt0ZW0DZm2BZr/Jz7FaPKBGW+prIRZejBjcwPVNQPD02B
Z7h0HgF1CaM3GIB8oz/pnDwaQVEtqryhwN087SNQ5YBEKqBjFLwuXv73gCDFu11g
XlmMqJ/exdXsHOf4b8x/6qCBLoy7ajCMlp76UNlfDJPl51jYv+bLbgeRpKHpQLDv
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:12 2025 by rpki-client