Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/k6vAZPYoHdRCo63AYTmi48skRhw.roa
File: k6vAZPYoHdRCo63AYTmi48skRhw.roa (raw, json)
Hash identifier: SzdnDp8HU7dtL+1ssCq3abGfy6JSu5LenwIqWzaID2Q=
Subject key identifier: 93:AB:C0:64:F6:28:1D:D4:42:A3:AD:C0:61:39:A2:E3:CB:24:46:1C
Certificate issuer: /CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Certificate serial: 0194221FC3B46B3F3B3D23F1942FA2BD5DA6
Authority key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/k6vAZPYoHdRCo63AYTmi48skRhw.roa
Signing time: Wed 01 Jan 2025 13:48:14 +0000
ROA not before: Wed 01 Jan 2025 13:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21150
IP address blocks: 188.64.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c3:b4:6b:3f:3b:3d:23:f1:94:2f:a2:bd:5d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Validity
Not Before: Jan 1 13:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93abc064f6281dd442a3adc06139a2e3cb24461c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:82:8c:6e:7b:66:18:2a:f9:1f:c4:f7:44:76:
77:b3:17:b6:7b:ac:c1:dd:52:da:c9:da:0d:de:09:
a6:6c:7b:56:c7:f1:c4:d2:7f:85:8e:37:d7:a5:86:
4b:fc:07:33:76:a4:2a:6a:39:df:9c:50:0c:92:6c:
ed:dc:5b:75:44:28:da:8e:91:33:c2:0f:b2:52:59:
13:06:f6:1f:8a:3b:2b:64:aa:f4:55:e8:90:7e:21:
99:c4:3c:c4:a9:16:83:03:2e:04:8f:e6:0c:e9:e9:
2b:73:0e:e1:74:bf:2c:b7:57:d4:6e:6d:fa:57:72:
1b:84:a9:6d:60:de:91:40:a6:c7:f2:2d:ca:67:39:
86:f7:c7:0b:0c:76:e5:d4:d8:fb:70:0a:9f:e1:a2:
28:90:1a:31:5a:4e:b4:40:74:84:7f:f1:4e:89:4e:
d9:84:5e:85:2b:00:16:14:bc:c2:ec:78:85:c7:28:
f1:ff:ce:1b:11:da:57:9e:53:84:0f:f8:f4:22:23:
e4:18:4b:98:ec:b3:86:2a:a4:27:88:c0:d4:e5:59:
88:2c:2d:c0:4c:7a:9d:fd:3e:7d:d7:fa:17:5b:a7:
5f:1c:73:4f:5a:8b:47:45:cd:a1:fd:4a:67:45:20:
0c:0b:7b:7e:b0:34:c1:bd:51:08:c1:72:bb:50:8f:
f1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AB:C0:64:F6:28:1D:D4:42:A3:AD:C0:61:39:A2:E3:CB:24:46:1C
X509v3 Authority Key Identifier:
keyid:8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/k6vAZPYoHdRCo63AYTmi48skRhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.16.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2a:1f:db:8e:29:c1:5e:13:48:d9:cb:6b:86:79:41:52:b7:
e6:48:bb:ab:2a:64:89:96:0c:64:5c:8f:94:bd:78:de:a0:b5:
94:1b:13:fb:cb:21:de:09:c5:bf:34:ad:23:59:44:98:ac:d5:
fd:8b:7e:c0:47:aa:02:e3:0e:05:fa:47:35:98:84:50:c5:c8:
8f:a1:2a:26:e6:3c:ce:39:63:2b:a1:37:e0:2a:ac:89:9a:ee:
55:2e:77:9b:2d:61:ea:ad:2c:7f:04:61:33:00:b7:36:87:53:
f7:07:b2:0e:02:d4:98:d0:cd:33:eb:58:a5:bc:1a:ec:d3:5c:
c7:ba:17:d1:71:7b:f9:f4:f5:63:fc:7e:0c:50:1e:ea:5e:23:
5a:3e:51:34:37:3a:76:c5:52:56:2b:0a:90:47:a3:d3:57:7f:
ec:2a:24:da:99:8f:42:67:ef:b1:e4:f3:e3:f3:0a:45:39:03:
14:28:7e:09:d5:d0:b4:ce:06:9a:1b:e3:5b:47:cf:af:60:f7:
02:20:fa:7d:b9:b0:b7:90:07:c7:c4:2f:98:1b:3b:94:dd:bb:
b6:d2:1f:02:33:a9:4a:71:66:5e:86:00:9e:dd:55:6a:0b:ff:
d0:46:96:9a:aa:d8:bc:a6:cc:37:c8:d7:95:da:0e:a5:97:46:
2c:32:b2:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH8O0az87PSPxlC+ivV2mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjOWRjY2Y5ZTJmMzdlYjEwNzQ5NmE3YWFmMTM4OTRlYzQ3
NmUzNzUwHhcNMjUwMTAxMTM0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2FiYzA2NGY2MjgxZGQ0NDJhM2FkYzA2MTM5YTJlM2NiMjQ0NjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIKMbntmGCr5H8T3RHZ3sxe2e6zB
3VLaydoN3gmmbHtWx/HE0n+FjjfXpYZL/AczdqQqajnfnFAMkmzt3Ft1RCjajpEz
wg+yUlkTBvYfijsrZKr0VeiQfiGZxDzEqRaDAy4Ej+YM6ekrcw7hdL8st1fUbm36
V3IbhKltYN6RQKbH8i3KZzmG98cLDHbl1Nj7cAqf4aIokBoxWk60QHSEf/FOiU7Z
hF6FKwAWFLzC7HiFxyjx/84bEdpXnlOED/j0IiPkGEuY7LOGKqQniMDU5VmILC3A
THqd/T591/oXW6dfHHNPWotHRc2h/UpnRSAMC3t+sDTBvVEIwXK7UI/xBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJOrwGT2KB3UQqOtwGE5ouPLJEYcMB8GA1UdIwQY
MBaAFIydzPni836xB0lqeq8TiU7EduN1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iZDU1ZWUtYzdhNi00MWI4LWJiMzEt
NmE4YzNiNjc2YjU3LzEvazZ2QVpQWW9IZFJDbzYzQVlUbWk0OHNrUmh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iZDU1ZWUtYzdhNi00MWI4LWJiMzEtNmE4YzNiNjc2YjU3
LzEvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEAQMA0G
CSqGSIb3DQEBCwUAA4IBAQAIKh/bjinBXhNI2ctrhnlBUrfmSLurKmSJlgxkXI+U
vXjeoLWUGxP7yyHeCcW/NK0jWUSYrNX9i37AR6oC4w4F+kc1mIRQxciPoSom5jzO
OWMroTfgKqyJmu5VLnebLWHqrSx/BGEzALc2h1P3B7IOAtSY0M0z61ilvBrs01zH
uhfRcXv59PVj/H4MUB7qXiNaPlE0Nzp2xVJWKwqQR6PTV3/sKiTamY9CZ++x5PPj
8wpFOQMUKH4J1dC0zgaaG+NbR8+vYPcCIPp9ubC3kAfHxC+YGzuU3bu20h8CM6lK
cWZehgCe3VVqC//QRpaaqti8psw3yNeV2g6ll0YsMrKe
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:02:42 2025 by rpki-client