Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/6BzrArwu58N5sBVvJVBthqND_N4.roa
File: 6BzrArwu58N5sBVvJVBthqND_N4.roa (raw, json)
Hash identifier: OfB+8pNfA8OgycXqKbk5L8hxFdJxQJhdYPo6qkN9fXA=
Subject key identifier: E8:1C:EB:02:BC:2E:E7:C3:79:B0:15:6F:25:50:6D:86:A3:43:FC:DE
Certificate issuer: /CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Certificate serial: 01942444AB970D5FC8F71EB5D4CB8293D6DE
Authority key identifier: 0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/6BzrArwu58N5sBVvJVBthqND_N4.roa
Signing time: Wed 01 Jan 2025 23:47:47 +0000
ROA not before: Wed 01 Jan 2025 23:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21339
IP address blocks: 176.124.68.0/23 maxlen: 24
185.61.164.0/22 maxlen: 24
193.187.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ab:97:0d:5f:c8:f7:1e:b5:d4:cb:82:93:d6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Validity
Not Before: Jan 1 23:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e81ceb02bc2ee7c379b0156f25506d86a343fcde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:2e:cd:da:ae:bc:d9:ac:84:19:f4:11:02:
ec:25:f1:74:9f:e2:23:83:db:2c:a9:3b:80:ea:5b:
a1:5b:3e:95:59:b3:18:0f:26:57:b6:50:2c:c9:f4:
4e:3b:db:8e:ed:5a:98:c8:96:e6:f3:23:c8:2a:58:
d1:4b:dd:84:66:9a:5c:02:13:4a:bb:95:3d:81:03:
ec:ad:85:40:17:6e:bc:f8:1e:fa:30:0c:00:2a:90:
97:b5:49:3d:1c:d2:2f:26:c9:a7:a6:19:dc:71:ac:
be:04:e6:d8:48:9f:a1:1b:71:74:f9:67:d0:e7:1f:
a4:56:05:53:61:aa:d1:0c:d8:e1:07:75:63:d3:ae:
74:b1:f9:ea:18:6e:e3:fd:31:ac:65:c1:fd:ab:ea:
c1:65:12:c6:93:e6:54:0f:c5:3c:a9:17:55:31:9a:
9e:0a:9a:02:a2:66:01:0c:bf:2f:06:a2:37:67:93:
22:30:b0:fb:57:c8:24:75:e2:b0:68:11:80:c6:be:
c9:d5:cf:13:dc:f7:c9:49:fb:b7:29:c8:a5:29:d9:
37:49:91:e7:08:b3:77:9d:18:07:31:33:ba:c5:e5:
ad:42:b6:6a:0a:ab:13:07:c4:45:8a:bd:08:36:7b:
f9:fa:fc:48:6e:1c:6d:c5:07:5e:ed:96:d5:32:00:
c9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1C:EB:02:BC:2E:E7:C3:79:B0:15:6F:25:50:6D:86:A3:43:FC:DE
X509v3 Authority Key Identifier:
keyid:0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/6BzrArwu58N5sBVvJVBthqND_N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.68.0/23
185.61.164.0/22
193.187.99.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ca:2b:f0:c5:96:a1:1a:a8:33:d4:79:3e:05:9d:be:c7:ea:
21:62:60:a6:de:99:60:d0:a1:c7:f5:8a:a0:38:56:bf:69:97:
8b:61:f8:2e:9e:88:22:b8:5b:59:c6:68:7f:03:4e:b0:bd:23:
96:54:76:55:8d:5f:30:2b:fd:49:fe:66:dc:41:0e:ae:b8:6c:
a4:90:91:06:b4:7e:87:66:bd:ca:22:46:f5:12:a2:00:3e:b5:
a1:59:c1:64:46:7d:46:67:b9:4f:12:17:a7:e2:74:1e:bc:89:
bb:3d:aa:e9:b6:7e:d9:10:2c:06:00:d5:34:68:8b:04:a6:75:
c3:c1:ca:92:f6:1b:5e:48:21:6a:f7:da:93:f8:4b:be:c0:96:
14:10:be:4f:37:0f:8b:4a:64:7f:07:bd:d3:ba:7a:bf:47:17:
36:aa:6e:8a:a7:6c:8a:ef:ad:0a:c7:3a:6a:55:f1:17:c3:54:
41:67:b5:9b:6e:0c:33:e4:39:77:e4:df:36:fb:dc:a3:d5:00:
b6:89:bb:18:5a:da:14:73:83:a1:0b:72:12:9b:cc:56:f0:67:
71:05:5e:ec:24:55:ae:b3:37:35:31:1e:a7:ee:a3:9e:04:12:
71:ea:fd:c0:74:b0:39:4c:88:d2:31:18:3a:c4:7c:4a:a7:65:
e5:d5:14:c4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQkRKuXDV/I9x611MuCk9beMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOWM1YWU5NGNhZGVkODc1YzhkYjJmNTgzM2NhODhkMmY2
OGVkMGUwHhcNMjUwMTAxMjM0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODFjZWIwMmJjMmVlN2MzNzliMDE1NmYyNTUwNmQ4NmEzNDNmY2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3IuzdquvNmshBn0EQLsJfF0n+Ij
g9ssqTuA6luhWz6VWbMYDyZXtlAsyfROO9uO7VqYyJbm8yPIKljRS92EZppcAhNK
u5U9gQPsrYVAF268+B76MAwAKpCXtUk9HNIvJsmnphnccay+BObYSJ+hG3F0+WfQ
5x+kVgVTYarRDNjhB3Vj0650sfnqGG7j/TGsZcH9q+rBZRLGk+ZUD8U8qRdVMZqe
CpoComYBDL8vBqI3Z5MiMLD7V8gkdeKwaBGAxr7J1c8T3PfJSfu3KcilKdk3SZHn
CLN3nRgHMTO6xeWtQrZqCqsTB8RFir0INnv5+vxIbhxtxQde7ZbVMgDJswIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOgc6wK8LufDebAVbyVQbYajQ/zeMB8GA1UdIwQY
MBaAFA+cWulMre2HXI2y9YM8qI0vaO0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mZDFkZDUtMzI5NC00NTUwLWEzZTYt
OWFhYmI5OWZhMTBjLzEvNkJ6ckFyd3U1OE41c0JWdkpWQnRocU5EX040LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9mZDFkZDUtMzI5NC00NTUwLWEzZTYtOWFhYmI5OWZhMTBj
LzEvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBsHxEAwQC
uT2kAwQAwbtjMA0GCSqGSIb3DQEBCwUAA4IBAQBQyivwxZahGqgz1Hk+BZ2+x+oh
YmCm3plg0KHH9YqgOFa/aZeLYfgunogiuFtZxmh/A06wvSOWVHZVjV8wK/1J/mbc
QQ6uuGykkJEGtH6HZr3KIkb1EqIAPrWhWcFkRn1GZ7lPEhen4nQevIm7Parptn7Z
ECwGANU0aIsEpnXDwcqS9hteSCFq99qT+Eu+wJYUEL5PNw+LSmR/B73Tunq/Rxc2
qm6Kp2yK760KxzpqVfEXw1RBZ7Wbbgwz5Dl35N82+9yj1QC2ibsYWtoUc4OhC3IS
m8xW8GdxBV7sJFWuszc1MR6n7qOeBBJx6v3AdLA5TIjSMRg6xHxKp2Xl1RTE
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:36:31 2025 by rpki-client