Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/aGS6ei6H35d6DNbbquXfPtjqDUE.roa
File: aGS6ei6H35d6DNbbquXfPtjqDUE.roa (raw, json)
Hash identifier: 0KLVtBWSZ4Xd+WQAAUDttWN8bC4BgE0nIyv6zzJcSr4=
Subject key identifier: 68:64:BA:7A:2E:87:DF:97:7A:0C:D6:DB:AA:E5:DF:3E:D8:EA:0D:41
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747FD46F95BC0E4C2C0D9AC9F8AF6D3
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/aGS6ei6H35d6DNbbquXfPtjqDUE.roa
Signing time: Thu 02 Jan 2025 13:50:16 +0000
ROA not before: Thu 02 Jan 2025 13:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202209
IP address blocks: 94.236.145.0/24 maxlen: 24
94.236.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:fd:46:f9:5b:c0:e4:c2:c0:d9:ac:9f:8a:f6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6864ba7a2e87df977a0cd6dbaae5df3ed8ea0d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3e:f5:c9:ca:d7:56:1e:61:e1:5c:6c:47:e8:
63:b8:43:ff:41:a3:d4:58:10:09:2f:a1:9f:2d:ec:
42:aa:e9:a5:57:de:e0:cf:dd:a9:0b:3e:1d:f1:17:
a0:69:30:b4:2b:3d:21:41:fe:cc:e4:0f:f8:73:40:
01:36:6f:68:e4:15:2b:64:41:7e:7c:f8:b2:29:9f:
09:2a:21:aa:68:43:7e:89:db:f9:95:b6:29:a6:67:
3e:b1:1a:76:77:3f:cd:fa:8e:8c:cc:57:8f:ac:dd:
c4:0c:e0:40:27:ed:1e:d7:b9:c9:0c:92:57:9f:b1:
8e:1f:bb:97:6d:d4:67:30:21:12:7a:df:32:59:c3:
67:85:5c:f4:4f:ee:68:2d:c3:f9:33:64:2c:d3:b7:
c2:18:1a:d4:d2:1c:34:25:f4:12:35:a3:69:5a:ee:
95:80:50:89:5c:dd:3a:d2:ca:6c:2f:71:f9:9f:a2:
b7:d7:b0:d4:bc:01:5b:20:87:e6:53:18:bd:1f:ca:
44:e7:90:2d:82:8e:ec:4a:45:cb:34:e6:0c:cb:a7:
39:da:65:12:5f:4f:09:ca:73:29:e3:f0:22:36:57:
ab:fd:94:86:8c:8c:b8:a6:03:36:08:dc:27:43:ac:
4c:b6:66:cb:d0:a8:a2:26:d9:b1:ec:d7:cd:af:20:
5f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:64:BA:7A:2E:87:DF:97:7A:0C:D6:DB:AA:E5:DF:3E:D8:EA:0D:41
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/aGS6ei6H35d6DNbbquXfPtjqDUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.236.145.0/24
94.236.159.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:45:3c:9f:e3:5f:38:08:08:9f:3d:94:95:59:bb:3f:10:28:
e6:01:84:45:85:2f:39:a4:d0:46:12:5a:7e:f6:db:cd:4f:96:
22:ac:83:71:27:3b:4a:fe:9b:6d:5b:0b:5e:6f:82:e5:1b:21:
e5:1b:57:2d:1d:bc:c5:57:e0:b9:e4:b9:76:c8:15:1f:20:4c:
dc:14:4f:4d:e2:bc:27:0b:e6:8d:06:a0:d0:f0:1f:b6:79:8f:
f2:f6:83:07:8f:bb:00:1d:9c:75:fa:e9:6f:b2:39:8e:50:a6:
27:78:6e:18:f9:b1:86:2b:51:9e:c4:5b:aa:0f:0d:b7:c5:db:
fa:00:7f:2f:1a:8e:97:61:48:3a:a0:82:ee:9a:e2:52:15:e9:
31:63:b6:fe:84:6c:a1:b4:de:8d:08:1a:b4:81:f5:fd:c0:6c:
af:bf:27:14:57:f0:71:64:d9:0b:5a:61:37:ca:08:1e:5b:8c:
63:42:8c:34:26:b6:d9:da:22:08:64:86:56:2b:46:7b:26:6d:
62:9d:58:26:67:ba:07:a1:f7:35:04:f1:b2:57:e7:d0:69:c7:
d0:d0:7e:0b:a5:09:f9:d8:d6:c2:15:a4:28:fc:9d:f5:ec:68:
b7:93:6c:f4:44:9c:48:2b:5b:e9:dd:34:42:cf:5a:67:c3:ed:
94:ef:ba:3a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQnR/1G+VvA5MLA2ayfivbTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjUwMTAyMTM1MDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODY0YmE3YTJlODdkZjk3N2EwY2Q2ZGJhYWU1ZGYzZWQ4ZWEwZDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD71ycrXVh5h4VxsR+hjuEP/QaPU
WBAJL6GfLexCqumlV97gz92pCz4d8RegaTC0Kz0hQf7M5A/4c0ABNm9o5BUrZEF+
fPiyKZ8JKiGqaEN+idv5lbYppmc+sRp2dz/N+o6MzFePrN3EDOBAJ+0e17nJDJJX
n7GOH7uXbdRnMCESet8yWcNnhVz0T+5oLcP5M2Qs07fCGBrU0hw0JfQSNaNpWu6V
gFCJXN060spsL3H5n6K317DUvAFbIIfmUxi9H8pE55Atgo7sSkXLNOYMy6c52mUS
X08JynMp4/AiNler/ZSGjIy4pgM2CNwnQ6xMtmbL0KiiJtmx7NfNryBfbwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGhkunouh9+XegzW26rl3z7Y6g1BMB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvYUdTNmVpNkgzNWQ2RE5iYnF1WGZQdGpxRFVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXuyRAwQA
XuyfMA0GCSqGSIb3DQEBCwUAA4IBAQBrRTyf4184CAifPZSVWbs/ECjmAYRFhS85
pNBGElp+9tvNT5YirINxJztK/pttWwteb4LlGyHlG1ctHbzFV+C55Ll2yBUfIEzc
FE9N4rwnC+aNBqDQ8B+2eY/y9oMHj7sAHZx1+ulvsjmOUKYneG4Y+bGGK1GexFuq
Dw23xdv6AH8vGo6XYUg6oILumuJSFekxY7b+hGyhtN6NCBq0gfX9wGyvvycUV/Bx
ZNkLWmE3yggeW4xjQow0JrbZ2iIIZIZWK0Z7Jm1inVgmZ7oHofc1BPGyV+fQacfQ
0H4LpQn52NbCFaQo/J317Gi3k2z0RJxIK1vp3TRCz1pnw+2U77o6
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:19:48 2025 by rpki-client