Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/6_6aszZyp8SMXQXxbcRlY9OzEp0.roa
File: 6_6aszZyp8SMXQXxbcRlY9OzEp0.roa (raw, json)
Hash identifier: ZpSCW2orH40kWdy7qjBS6/cwd0XChgeSKq4b9UXMouQ=
Subject key identifier: EB:FE:9A:B3:36:72:A7:C4:8C:5D:05:F1:6D:C4:65:63:D3:B3:12:9D
Certificate issuer: /CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Certificate serial: 0194266BBC86377B46EE6A7DA0996B5E1C6D
Authority key identifier: 32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/6_6aszZyp8SMXQXxbcRlY9OzEp0.roa
Signing time: Thu 02 Jan 2025 09:49:42 +0000
ROA not before: Thu 02 Jan 2025 09:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48876
IP address blocks: 194.79.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:bc:86:37:7b:46:ee:6a:7d:a0:99:6b:5e:1c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Validity
Not Before: Jan 2 09:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebfe9ab33672a7c48c5d05f16dc46563d3b3129d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:62:87:bb:75:16:f7:83:ae:c8:d7:c8:cf:
84:59:c4:31:34:3b:af:1b:1c:49:d9:26:9a:ce:d0:
37:b1:5e:28:89:cc:5d:f3:c9:f1:56:2d:92:6f:7c:
bc:72:d9:fb:77:4b:4a:6c:27:eb:62:08:05:b3:dd:
87:84:f7:6b:7d:f9:1e:38:fa:d1:89:a5:99:df:e7:
97:2d:88:22:91:00:7c:d6:c7:1d:58:d3:6a:eb:7b:
ff:a8:75:2d:19:3a:26:dd:fd:40:44:5b:f7:ad:cb:
b5:22:ef:bc:17:83:c7:35:fc:20:d1:d7:e7:56:c9:
87:5a:f3:bf:78:a1:a4:23:da:be:c1:54:1a:9d:88:
9f:91:4d:4b:cc:9b:96:d1:8d:0c:e2:d6:d1:54:b7:
68:16:24:79:c3:11:10:95:06:ae:6a:34:44:09:eb:
4f:64:83:17:b0:7f:9e:ba:e3:c7:7c:7a:04:f0:d2:
d2:9d:6d:25:96:b9:f9:35:fb:dd:f2:3d:05:c1:a9:
3d:60:51:49:13:0d:3d:95:45:a5:6f:90:63:b4:b4:
ee:4b:f5:76:03:ea:b5:cd:ab:e7:f9:df:85:23:e5:
25:4a:3f:2c:c5:0f:6c:88:81:d9:ef:10:88:5e:09:
23:fe:ab:49:06:b1:ff:bd:ce:33:af:3f:a6:34:16:
91:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FE:9A:B3:36:72:A7:C4:8C:5D:05:F1:6D:C4:65:63:D3:B3:12:9D
X509v3 Authority Key Identifier:
keyid:32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/6_6aszZyp8SMXQXxbcRlY9OzEp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.79.250.0/23
Signature Algorithm: sha256WithRSAEncryption
41:d7:2e:f7:a7:0f:80:3f:61:8e:12:fc:e4:c0:90:9e:a6:7c:
84:ab:35:2c:be:44:7c:60:a9:7d:52:ba:bd:12:f1:6c:09:c0:
54:a1:4f:81:29:ca:ac:65:5a:6a:27:84:aa:6f:88:67:c8:b2:
bc:af:c5:0f:39:41:1a:31:3f:ce:f8:16:be:12:2c:c3:ca:83:
a8:f7:55:5e:b9:e8:67:08:8d:ac:50:93:2f:6b:14:72:87:f2:
3d:9f:d6:b8:8b:a6:eb:97:07:63:dc:5c:c1:23:4c:e4:88:8f:
e6:11:1c:7f:b9:a3:79:90:80:e0:47:ac:05:a6:c8:8e:83:2c:
25:21:81:74:e0:3c:df:db:ca:ea:58:ca:14:45:3d:8f:55:8f:
7e:d4:23:9b:0d:1f:0a:5e:66:ee:a8:b2:48:15:11:ea:9a:7b:
2a:df:01:3c:ec:1d:fb:8a:7c:9d:f7:ae:b7:06:22:ce:83:ea:
72:8a:a2:a7:d5:71:3f:c6:fb:00:b8:cf:7a:cc:02:fd:59:b1:
b2:d1:5a:d8:8d:e9:65:4d:d6:fd:f8:9d:cd:4c:a3:cd:4a:99:
82:cd:20:78:f8:ce:14:db:b1:a5:f2:9a:ae:b6:5f:fc:4d:39:
3a:19:2d:2c:ea:13:15:2e:9c:43:40:df:e9:b1:a9:cb:0c:38:
3b:de:cf:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma7yGN3tG7mp9oJlrXhxtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZjFiODVmYTVkZTU3YTVmZTEyM2RlM2E5MDVmM2NiMzZh
YjhhZmUwHhcNMjUwMTAyMDk0OTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmZlOWFiMzM2NzJhN2M0OGM1ZDA1ZjE2ZGM0NjU2M2QzYjMxMjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnBih7t1FveDrsjXyM+EWcQxNDuv
GxxJ2SaaztA3sV4oicxd88nxVi2Sb3y8ctn7d0tKbCfrYggFs92HhPdrffkeOPrR
iaWZ3+eXLYgikQB81scdWNNq63v/qHUtGTom3f1ARFv3rcu1Iu+8F4PHNfwg0dfn
VsmHWvO/eKGkI9q+wVQanYifkU1LzJuW0Y0M4tbRVLdoFiR5wxEQlQauajRECetP
ZIMXsH+euuPHfHoE8NLSnW0llrn5Nfvd8j0Fwak9YFFJEw09lUWlb5BjtLTuS/V2
A+q1zavn+d+FI+UlSj8sxQ9siIHZ7xCIXgkj/qtJBrH/vc4zrz+mNBaRhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOv+mrM2cqfEjF0F8W3EZWPTsxKdMB8GA1UdIwQY
MBaAFDLxuF+l3lel/hI946kF88s2q4r+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXZHNFg2WGVWNlgtRWozanFRWHp5emFyaXY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iYzE4MjgtMzUzNi00ZDBmLTk1MmIt
OWQyNzA5MTc4NGNjLzEvNl82YXN6WnlwOFNNWFFYeGJjUmxZOU96RXAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iYzE4MjgtMzUzNi00ZDBmLTk1MmItOWQyNzA5MTc4NGNj
LzEvTXZHNFg2WGVWNlgtRWozanFRWHp5emFyaXY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwk/6MA0G
CSqGSIb3DQEBCwUAA4IBAQBB1y73pw+AP2GOEvzkwJCepnyEqzUsvkR8YKl9Urq9
EvFsCcBUoU+BKcqsZVpqJ4Sqb4hnyLK8r8UPOUEaMT/O+Ba+EizDyoOo91Veuehn
CI2sUJMvaxRyh/I9n9a4i6brlwdj3FzBI0zkiI/mERx/uaN5kIDgR6wFpsiOgywl
IYF04Dzf28rqWMoURT2PVY9+1CObDR8KXmbuqLJIFRHqmnsq3wE87B37inyd9663
BiLOg+pyiqKn1XE/xvsAuM96zAL9WbGy0VrYjellTdb9+J3NTKPNSpmCzSB4+M4U
27Gl8pqutl/8TTk6GS0s6hMVLpxDQN/psanLDDg73s8X
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:21 2025 by rpki-client