Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/vQy6a6NTEAZwwzZEgqZ7s7CD2Sw.roa
File: vQy6a6NTEAZwwzZEgqZ7s7CD2Sw.roa (raw, json)
Hash identifier: eCRwk/+JF3YykOACMbGT9h5ea0SspdLqSge077r4Iz0=
Subject key identifier: BD:0C:BA:6B:A3:53:10:06:70:C3:36:44:82:A6:7B:B3:B0:83:D9:2C
Certificate issuer: /CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Certificate serial: 019423D6B906FA7AC1BA8E26D443DB47F9DD
Authority key identifier: 06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/vQy6a6NTEAZwwzZEgqZ7s7CD2Sw.roa
Signing time: Wed 01 Jan 2025 21:47:42 +0000
ROA not before: Wed 01 Jan 2025 21:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13020
IP address blocks: 94.45.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b9:06:fa:7a:c1:ba:8e:26:d4:43:db:47:f9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Validity
Not Before: Jan 1 21:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd0cba6ba353100670c3364482a67bb3b083d92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:9d:e5:a5:35:b4:90:d3:91:a7:c9:0b:0a:
cc:ee:fd:5e:ae:52:e9:03:07:e4:cf:c7:19:e5:55:
7c:fe:9a:5c:3b:29:71:68:5c:b7:86:1e:9d:32:99:
20:31:47:41:d3:71:6e:74:ea:11:47:02:2e:05:e5:
31:e2:d3:f0:d8:09:73:26:a8:18:af:f0:8f:3b:b3:
e8:cb:71:4d:54:52:72:bf:59:38:b9:92:d5:4b:dd:
a3:1d:b3:37:22:de:79:2d:e6:24:54:12:19:ed:b6:
49:02:aa:c4:fc:0f:db:f4:17:ab:b7:51:a8:f6:71:
df:26:5e:6e:cb:3c:a7:07:f4:c1:87:b1:ff:81:8d:
9a:30:42:6d:ed:de:7d:2d:09:8c:35:46:36:49:c5:
b5:1a:83:f8:fc:dc:58:fa:39:78:a1:d4:0a:c7:e1:
47:9b:3b:85:28:90:c2:30:5e:53:ab:20:6d:2b:87:
1f:7c:4c:0b:3b:59:99:84:10:8b:18:92:00:06:5c:
d0:74:25:67:56:af:5a:02:11:2c:31:c5:4a:f0:86:
35:dd:85:62:68:70:75:e4:19:b6:67:00:eb:fc:aa:
a6:c1:21:33:67:dd:05:28:25:9d:10:38:d8:9f:aa:
f0:c0:10:a0:1d:6d:b3:9a:55:cf:4b:e3:2b:43:3a:
90:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0C:BA:6B:A3:53:10:06:70:C3:36:44:82:A6:7B:B3:B0:83:D9:2C
X509v3 Authority Key Identifier:
keyid:06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/vQy6a6NTEAZwwzZEgqZ7s7CD2Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.45.224.0/19
Signature Algorithm: sha256WithRSAEncryption
a9:c9:3d:9e:51:a1:71:9e:c5:2f:ca:aa:65:98:74:3e:33:f3:
8b:20:a1:36:8a:98:74:3e:ee:5a:a4:1d:1f:ca:e5:b6:e4:b8:
f7:31:11:d9:d8:20:0c:b7:50:72:8c:0a:27:31:1d:20:ad:34:
0c:7e:ea:6e:e8:7d:89:d9:a1:de:35:44:92:82:f4:8f:52:1e:
2d:8f:46:1f:f9:be:ed:ec:f8:87:29:04:1f:10:64:ac:f4:3c:
a6:ed:3c:e8:5e:d4:a4:28:9a:47:fe:85:f8:22:0d:51:b8:30:
f7:d2:00:2c:3b:17:36:33:74:6b:a6:a9:ac:e7:87:32:4c:7f:
f1:d3:c8:6b:5f:70:6d:25:27:44:7f:d6:c4:8c:15:08:79:a5:
97:1f:d6:23:30:3a:84:45:74:3c:fb:d7:47:e4:bb:c4:50:71:
68:97:60:a6:ae:a7:af:5f:a7:b2:d3:db:09:c3:79:01:9d:71:
62:56:a3:18:ce:69:7d:bb:18:f6:fc:87:fc:a5:9b:2a:f6:38:
e0:1c:02:b7:e9:05:13:27:23:c0:02:5e:48:95:e1:e3:85:28:
ce:ba:d3:8e:ad:f6:a2:5c:38:e7:d1:c1:03:fc:c7:34:ce:17:
21:dc:3c:26:7b:70:9e:8e:ae:1a:00:82:ae:4d:6b:e5:d4:94:
11:a4:0f:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1rkG+nrBuo4m1EPbR/ndMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDc5YzQyOWE3MTQ2ZjFmOWFhMDQ5YmRiNDJjYTk1MTQ0
Yjc0ZGEwHhcNMjUwMTAxMjE0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDBjYmE2YmEzNTMxMDA2NzBjMzM2NDQ4MmE2N2JiM2IwODNkOTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsqd5aU1tJDTkafJCwrM7v1erlLp
Awfkz8cZ5VV8/ppcOylxaFy3hh6dMpkgMUdB03FudOoRRwIuBeUx4tPw2AlzJqgY
r/CPO7Poy3FNVFJyv1k4uZLVS92jHbM3It55LeYkVBIZ7bZJAqrE/A/b9Bert1Go
9nHfJl5uyzynB/TBh7H/gY2aMEJt7d59LQmMNUY2ScW1GoP4/NxY+jl4odQKx+FH
mzuFKJDCMF5TqyBtK4cffEwLO1mZhBCLGJIABlzQdCVnVq9aAhEsMcVK8IY13YVi
aHB15Bm2ZwDr/KqmwSEzZ90FKCWdEDjYn6rwwBCgHW2zmlXPS+MrQzqQKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL0MumujUxAGcMM2RIKme7Owg9ksMB8GA1UdIwQY
MBaAFAYHnEKacUbx+aoEm9tCypUUS3TaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdlY1FwcHhSdkg1cWdTYjIwTEtsUlJMZE5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83NDA1ODktODVjZC00OTdhLTkwYzEt
YTJmOWE4YTUxYmIwLzEvdlF5NmE2TlRFQVp3d3paRWdxWjdzN0NEMlN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi83NDA1ODktODVjZC00OTdhLTkwYzEtYTJmOWE4YTUxYmIw
LzEvQmdlY1FwcHhSdkg1cWdTYjIwTEtsUlJMZE5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFXi3gMA0G
CSqGSIb3DQEBCwUAA4IBAQCpyT2eUaFxnsUvyqplmHQ+M/OLIKE2iph0Pu5apB0f
yuW25Lj3MRHZ2CAMt1ByjAonMR0grTQMfupu6H2J2aHeNUSSgvSPUh4tj0Yf+b7t
7PiHKQQfEGSs9Dym7TzoXtSkKJpH/oX4Ig1RuDD30gAsOxc2M3Rrpqms54cyTH/x
08hrX3BtJSdEf9bEjBUIeaWXH9YjMDqERXQ8+9dH5LvEUHFol2CmrqevX6ey09sJ
w3kBnXFiVqMYzml9uxj2/If8pZsq9jjgHAK36QUTJyPAAl5IleHjhSjOutOOrfai
XDjn0cED/Mc0zhch3Dwme3Cejq4aAIKuTWvl1JQRpA/b
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:49:01 2025 by rpki-client