Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/Rgcekkes1KhkPm-geec6ef8_SvQ.roa
File: Rgcekkes1KhkPm-geec6ef8_SvQ.roa (raw, json)
Hash identifier: 0N6GYLdc56+kVBGDj5O5jPTIUR3nKttL77HbNqyqtCs=
Subject key identifier: 46:07:1E:92:47:AC:D4:A8:64:3E:6F:A0:79:E7:3A:79:FF:3F:4A:F4
Certificate issuer: /CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Certificate serial: 0194990EE6C485D7F83F4DBCB9B39BA5571D
Authority key identifier: 01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/Rgcekkes1KhkPm-geec6ef8_SvQ.roa
Signing time: Fri 24 Jan 2025 16:04:38 +0000
ROA not before: Fri 24 Jan 2025 16:04:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200161
IP address blocks: 83.217.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:99:0e:e6:c4:85:d7:f8:3f:4d:bc:b9:b3:9b:a5:57:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Validity
Not Before: Jan 24 16:04:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46071e9247acd4a8643e6fa079e73a79ff3f4af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:56:05:22:44:e4:9a:00:e7:21:8a:c1:9c:
02:be:51:e4:35:1d:80:d4:2f:fc:ff:c8:27:43:06:
7a:a7:fc:6e:10:fa:9e:a0:52:bf:89:8f:e9:a2:c1:
c4:8d:62:53:00:db:b2:a5:73:d3:da:b6:16:14:9d:
22:2f:e7:96:45:cd:ae:8b:f4:0e:6b:6e:3b:0e:27:
b8:4b:15:2a:e1:41:c8:0d:50:9c:71:5f:5b:1a:ae:
5c:0c:66:21:3d:27:d3:9b:6c:53:0c:70:68:85:bf:
60:3d:9f:8a:60:55:58:c3:d6:c3:b5:7f:c7:42:30:
70:6b:15:de:81:3e:b7:47:00:c5:d5:1c:eb:2c:70:
68:df:a8:fa:c7:3f:d8:5c:54:72:33:bb:68:6c:ac:
c4:32:7e:d7:09:b1:ea:e5:fa:03:6f:8b:93:4e:0f:
4e:f0:8c:1a:6b:77:49:fb:cd:40:a4:42:39:76:db:
45:24:58:f0:34:06:8b:33:cb:92:31:1b:23:d6:66:
b0:0d:1d:4f:a9:c6:9c:5d:d3:57:c5:c6:76:a6:85:
ae:b7:23:f1:c7:85:59:3a:8c:ba:7d:c4:5c:fc:13:
e1:13:9d:3a:4c:a1:1e:11:1c:be:a8:19:e5:f1:1a:
f7:8e:19:b3:2c:52:32:44:4e:0d:2b:11:51:44:58:
89:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:07:1E:92:47:AC:D4:A8:64:3E:6F:A0:79:E7:3A:79:FF:3F:4A:F4
X509v3 Authority Key Identifier:
keyid:01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/Rgcekkes1KhkPm-geec6ef8_SvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.26.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:cc:0d:ff:ef:07:61:a8:3b:87:d2:37:b8:80:2a:86:0f:0d:
a1:b8:59:31:a8:71:55:6a:77:87:0d:94:e2:36:a4:67:f0:53:
f3:07:5d:78:8d:d6:78:83:05:6b:59:d5:e6:92:35:54:11:18:
5a:bc:50:e4:a2:9a:2c:8b:ae:ae:54:cb:07:aa:b0:f1:11:92:
83:cf:ff:b0:a9:f4:e3:f0:27:70:71:7b:5a:b4:35:4f:49:46:
ac:50:2d:44:3a:71:69:22:23:bc:19:f3:32:f7:40:10:2e:47:
17:46:fa:25:3f:de:b2:1e:f7:6a:26:b5:79:1c:b7:ba:3f:73:
e0:9c:e6:c0:34:6f:6c:5d:27:6e:09:8e:98:72:3c:0e:6f:43:
47:4d:f2:ab:40:a8:b5:b7:c2:ea:09:2a:df:a0:47:3c:2c:04:
92:3c:2b:76:ec:ee:06:f1:f9:4c:ac:7f:4a:04:9a:cb:f2:7e:
af:b0:ca:f0:80:cc:03:8b:43:2e:8f:68:35:0b:3c:e9:1b:c2:
b3:20:33:06:67:42:d9:f0:a8:04:46:0f:8c:d1:ae:e4:cf:27:
cc:47:c5:81:c9:cf:54:14:25:35:0b:ae:f8:52:dd:0f:d5:68:
38:e3:b8:d2:49:bb:cb:3c:15:75:3c:14:9e:c8:52:56:56:f3:
0a:a8:44:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSZDubEhdf4P028ubObpVcdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNmU1ZTMxZmE4NzE2YWFhNTRlMThmY2RjZmVkM2ZjOTRk
YjkwYjUwHhcNMjUwMTI0MTYwNDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjA3MWU5MjQ3YWNkNGE4NjQzZTZmYTA3OWU3M2E3OWZmM2Y0YWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyBWBSJE5JoA5yGKwZwCvlHkNR2A
1C/8/8gnQwZ6p/xuEPqeoFK/iY/posHEjWJTANuypXPT2rYWFJ0iL+eWRc2ui/QO
a247Die4SxUq4UHIDVCccV9bGq5cDGYhPSfTm2xTDHBohb9gPZ+KYFVYw9bDtX/H
QjBwaxXegT63RwDF1RzrLHBo36j6xz/YXFRyM7tobKzEMn7XCbHq5foDb4uTTg9O
8Iwaa3dJ+81ApEI5dttFJFjwNAaLM8uSMRsj1mawDR1PqcacXdNXxcZ2poWutyPx
x4VZOoy6fcRc/BPhE506TKEeERy+qBnl8Rr3jhmzLFIyRE4NKxFRRFiJbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEYHHpJHrNSoZD5voHnnOnn/P0r0MB8GA1UdIwQY
MBaAFAFuXjH6hxaqpU4Y/Nz+0/yU25C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVc1ZU1mcUhGcXFsVGhqODNQN1RfSlRia0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9hZjRlZjgtZWQwNy00YWNkLWE0MmYt
Yzk2YzJjZTg1OWU1LzEvUmdjZWtrZXMxS2hrUG0tZ2VlYzZlZjhfU3ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9hZjRlZjgtZWQwNy00YWNkLWE0MmYtYzk2YzJjZTg1OWU1
LzEvQVc1ZU1mcUhGcXFsVGhqODNQN1RfSlRia0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU9kaMA0G
CSqGSIb3DQEBCwUAA4IBAQAvzA3/7wdhqDuH0je4gCqGDw2huFkxqHFVaneHDZTi
NqRn8FPzB114jdZ4gwVrWdXmkjVUERhavFDkoposi66uVMsHqrDxEZKDz/+wqfTj
8CdwcXtatDVPSUasUC1EOnFpIiO8GfMy90AQLkcXRvolP96yHvdqJrV5HLe6P3Pg
nObANG9sXSduCY6YcjwOb0NHTfKrQKi1t8LqCSrfoEc8LASSPCt27O4G8flMrH9K
BJrL8n6vsMrwgMwDi0Muj2g1CzzpG8KzIDMGZ0LZ8KgERg+M0a7kzyfMR8WByc9U
FCU1C674Ut0P1Wg447jSSbvLPBV1PBSeyFJWVvMKqESE
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:29:40 2025 by rpki-client