Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bO4Y5DyMm5PVD_pzuU-0jz4Eg9I.roa
File: bO4Y5DyMm5PVD_pzuU-0jz4Eg9I.roa (raw, json)
Hash identifier: 5jBL9u4QzLNJlmw7QwIFNZbn9Ii2njf8Ib+9j7ROPhw=
Subject key identifier: 6C:EE:18:E4:3C:8C:9B:93:D5:0F:FA:73:B9:4F:B4:8F:3E:04:83:D2
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 019427B5A1241FC610E8C765362114457061
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bO4Y5DyMm5PVD_pzuU-0jz4Eg9I.roa
Signing time: Thu 02 Jan 2025 15:50:02 +0000
ROA not before: Thu 02 Jan 2025 15:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62003
IP address blocks: 144.43.240.0/21 maxlen: 24
144.43.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a1:24:1f:c6:10:e8:c7:65:36:21:14:45:70:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Jan 2 15:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cee18e43c8c9b93d50ffa73b94fb48f3e0483d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:2a:06:95:ef:62:29:49:8e:8f:ed:c8:ef:
7f:76:18:30:d6:90:4b:33:63:50:6e:dd:c2:e3:de:
75:aa:14:a4:cd:4b:06:49:b7:14:60:86:f6:06:3b:
b0:a8:c2:fd:f6:25:fc:85:45:af:98:23:68:45:ea:
19:4f:07:aa:11:58:35:a1:64:cf:0e:3d:85:49:96:
48:16:6e:8e:fd:ec:19:a1:1f:12:dc:9d:b7:5e:0d:
aa:91:a9:31:19:b3:86:1c:f3:81:14:5d:bf:dd:99:
ae:23:e9:00:85:8d:d5:40:2f:f7:1b:b4:2f:de:0b:
a1:21:a8:5c:7b:ad:b8:67:0d:ef:ee:95:22:03:2b:
dc:55:c8:78:43:48:87:56:2a:a5:39:5d:6d:6f:43:
08:8a:70:9b:48:36:28:b2:52:da:be:b7:e8:5e:3f:
36:64:c7:93:7b:e4:25:f4:13:e9:00:b9:ee:14:fa:
c4:3e:df:1e:4a:dd:3b:50:48:31:36:9f:17:04:b0:
94:2d:e4:fb:6c:d3:13:e0:de:15:c1:0d:8b:dc:ee:
02:ca:46:39:34:eb:86:67:92:1c:b3:d2:a5:38:38:
32:9e:e1:5d:79:59:35:17:86:b6:1e:96:5c:f0:65:
3e:c8:30:bf:bc:49:c3:0a:78:de:40:c7:a6:d0:47:
95:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EE:18:E4:3C:8C:9B:93:D5:0F:FA:73:B9:4F:B4:8F:3E:04:83:D2
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bO4Y5DyMm5PVD_pzuU-0jz4Eg9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.43.240.0/21
144.43.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:ff:51:b1:75:79:4b:c7:07:fa:f5:65:8e:01:86:35:76:27:
78:ff:12:dd:a0:20:77:32:c5:cf:48:69:17:db:fe:74:e5:a1:
5c:ec:16:e2:f9:36:a7:e1:22:4b:cd:bb:0b:2b:1d:0d:84:05:
5f:e4:12:a3:dd:89:7b:30:bc:a5:c4:ad:e6:7f:75:d6:13:64:
d9:4a:a0:f6:27:d2:04:55:83:11:5e:9a:13:d5:76:d0:54:e4:
ad:19:06:de:b2:97:53:20:b0:82:7d:fa:e9:87:01:91:a4:17:
ae:43:d5:19:61:3a:00:12:34:a8:4a:32:a4:2d:c1:2b:5c:1f:
0a:c6:85:e6:eb:a0:69:99:89:46:84:e4:ed:a2:68:3d:de:87:
59:b4:74:d2:c1:5d:d1:c5:b5:c6:d1:2a:32:75:7b:70:57:35:
ab:31:d2:9c:90:9e:43:37:9e:dc:5d:4f:ac:5b:7e:48:b0:0c:
81:ca:a9:6a:86:b1:f9:43:69:cd:f3:9a:a2:34:36:33:56:39:
97:e4:ca:2f:60:79:b1:33:23:f2:c0:ee:19:0e:68:d3:af:ea:
69:5e:e2:03:65:8d:18:ec:20:ec:29:e7:c1:bd:7c:9c:26:6e:
18:43:94:80:f2:9c:f7:aa:0f:f7:11:1a:26:dc:b5:a1:d4:03:
f0:99:66:ec
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQntaEkH8YQ6MdlNiEURXBhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMDY5ZTE5ZTEyYzEwNDAwNGU4YjRiNzVmOGE3Nzg5Yjdl
MTEzOTYwHhcNMjUwMTAyMTU1MDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2VlMThlNDNjOGM5YjkzZDUwZmZhNzNiOTRmYjQ4ZjNlMDQ4M2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsYqBpXvYilJjo/tyO9/dhgw1pBL
M2NQbt3C4951qhSkzUsGSbcUYIb2BjuwqML99iX8hUWvmCNoReoZTweqEVg1oWTP
Dj2FSZZIFm6O/ewZoR8S3J23Xg2qkakxGbOGHPOBFF2/3ZmuI+kAhY3VQC/3G7Qv
3guhIahce624Zw3v7pUiAyvcVch4Q0iHViqlOV1tb0MIinCbSDYoslLavrfoXj82
ZMeTe+Ql9BPpALnuFPrEPt8eSt07UEgxNp8XBLCULeT7bNMT4N4VwQ2L3O4CykY5
NOuGZ5Ics9KlODgynuFdeVk1F4a2HpZc8GU+yDC/vEnDCnjeQMem0EeVOQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGzuGOQ8jJuT1Q/6c7lPtI8+BIPSMB8GA1UdIwQY
MBaAFG0GnhnhLBBABOi0t1+Kd4m34ROWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlFhZUdlRXNFRUFFNkxTM1g0cDNpYmZoRTVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jZjY0ZjYtMDc4OS00M2UzLWJkNmIt
N2JmZjI5NmM2YjAyLzEvYk80WTVEeU1tNVBWRF9wenVVLTBqejRFZzlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jZjY0ZjYtMDc4OS00M2UzLWJkNmItN2JmZjI5NmM2YjAy
LzEvYlFhZUdlRXNFRUFFNkxTM1g0cDNpYmZoRTVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDkCvwAwQC
kCv8MA0GCSqGSIb3DQEBCwUAA4IBAQCi/1GxdXlLxwf69WWOAYY1did4/xLdoCB3
MsXPSGkX2/505aFc7Bbi+Tan4SJLzbsLKx0NhAVf5BKj3Yl7MLylxK3mf3XWE2TZ
SqD2J9IEVYMRXpoT1XbQVOStGQbespdTILCCffrphwGRpBeuQ9UZYToAEjSoSjKk
LcErXB8KxoXm66BpmYlGhOTtomg93odZtHTSwV3RxbXG0SoydXtwVzWrMdKckJ5D
N57cXU+sW35IsAyByqlqhrH5Q2nN85qiNDYzVjmX5MovYHmxMyPywO4ZDmjTr+pp
XuIDZY0Y7CDsKefBvXycJm4YQ5SA8pz3qg/3ERom3LWh1APwmWbs
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:24:47 2025 by rpki-client