Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/9bzay8DjASkJgeZB2kwc03IZl1E.roa
File: 9bzay8DjASkJgeZB2kwc03IZl1E.roa (raw, json)
Hash identifier: YnIRrZnkb+ZaEUQ60KogsTVA40VhsogIgFHewsnR6g8=
Subject key identifier: F5:BC:DA:CB:C0:E3:01:29:09:81:E6:41:DA:4C:1C:D3:72:19:97:51
Certificate issuer: /CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Certificate serial: 019424B3C94E28C1D75E9AB2A017E9D9473A
Authority key identifier: E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/9bzay8DjASkJgeZB2kwc03IZl1E.roa
Signing time: Thu 02 Jan 2025 01:49:09 +0000
ROA not before: Thu 02 Jan 2025 01:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200777
IP address blocks: 194.55.16.0/20 maxlen: 20
194.55.25.0/24 maxlen: 24
194.55.26.0/24 maxlen: 24
194.55.29.0/24 maxlen: 24
194.55.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c9:4e:28:c1:d7:5e:9a:b2:a0:17:e9:d9:47:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Validity
Not Before: Jan 2 01:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5bcdacbc0e301290981e641da4c1cd372199751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:0a:21:e7:79:4e:6d:53:be:3f:36:60:1c:
a3:8c:a3:43:0f:df:54:e8:a6:ec:3e:3c:bd:d0:ee:
e0:7a:71:90:15:72:6d:7e:38:2b:00:af:58:ef:5f:
f4:47:7c:f2:33:b5:78:0a:71:97:85:b2:e4:e3:6f:
b6:39:38:71:be:96:9d:c7:dd:04:4e:b6:8b:88:73:
45:6e:d2:19:11:f0:f3:8b:8e:0b:8e:74:e5:ca:a9:
80:8c:1b:87:10:a9:c4:8f:99:a7:0c:ca:ae:e2:b7:
11:41:12:43:ea:d0:89:31:78:47:ae:2f:ce:d8:3e:
c3:d2:e8:81:3d:34:21:a7:52:eb:02:8e:58:ca:35:
dc:b4:bd:f5:59:de:d3:ac:25:02:c4:58:c3:ce:14:
c4:90:55:2c:38:0e:4a:7f:e3:84:34:2d:23:f8:d4:
4d:6f:d6:21:d1:fa:7b:dd:c1:13:f4:8a:bd:62:68:
55:ce:c2:fe:eb:f5:70:62:74:64:aa:55:f2:d5:42:
fe:10:3a:9e:ee:a9:87:06:fa:74:13:63:95:8e:b5:
f3:c4:01:54:d5:44:40:aa:ac:b4:75:8d:63:a5:b3:
e1:29:91:49:f2:15:1c:1f:99:6e:b1:c4:f2:61:6d:
cb:19:d1:81:86:08:1a:9f:3a:f1:58:44:33:3b:51:
c8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BC:DA:CB:C0:E3:01:29:09:81:E6:41:DA:4C:1C:D3:72:19:97:51
X509v3 Authority Key Identifier:
keyid:E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/9bzay8DjASkJgeZB2kwc03IZl1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.16.0/20
Signature Algorithm: sha256WithRSAEncryption
77:b5:7b:04:34:d8:32:a3:90:60:64:9f:50:2d:39:72:0e:a3:
57:4e:73:2c:cb:8b:01:25:7b:ea:3f:b6:d5:ae:2c:50:5c:df:
ea:5b:ae:de:53:c5:5d:b7:7c:e8:87:27:2e:2d:a0:7b:95:a8:
ce:83:fb:d0:a7:69:72:24:40:f2:eb:cd:7c:6f:c0:06:02:7d:
8b:3d:a1:ad:59:87:0b:35:04:b4:ba:4d:0b:77:26:07:e4:81:
70:d3:75:0c:68:ca:3a:3d:55:67:90:9e:42:8f:5b:3b:3e:51:
7c:ce:32:cd:27:91:66:bb:58:b1:f0:7e:8a:ec:80:d2:44:8f:
4f:ec:4a:ef:cd:8c:ba:b0:8b:77:27:53:fd:18:84:30:a1:c2:
81:76:00:7d:16:e3:2b:cf:49:44:18:ce:9a:15:a4:62:a4:30:
28:e7:a0:8d:ee:ea:aa:64:0a:a1:27:e2:45:b3:1d:9e:34:f6:
c8:35:fe:f4:3f:c1:8f:0e:23:c0:40:85:1c:e9:d6:96:0f:a3:
02:bb:15:33:73:87:5e:f3:fb:48:f6:6c:9f:2d:d4:87:b6:2a:
52:d2:42:78:0e:20:29:45:5f:34:5d:b0:fe:08:9c:66:bf:ba:
62:78:a2:99:96:5e:29:c0:05:75:53:e7:e5:2d:39:35:4a:27:
3c:a7:2a:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks8lOKMHXXpqyoBfp2Uc6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDY0YzhjMTY3ZGQyYzg3YWEzZDg4YWNiZmFlNGMyMzNm
Zjc3YjAwHhcNMjUwMTAyMDE0OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWJjZGFjYmMwZTMwMTI5MDk4MWU2NDFkYTRjMWNkMzcyMTk5NzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttoKIed5Tm1Tvj82YByjjKNDD99U
6KbsPjy90O7genGQFXJtfjgrAK9Y71/0R3zyM7V4CnGXhbLk42+2OThxvpadx90E
TraLiHNFbtIZEfDzi44LjnTlyqmAjBuHEKnEj5mnDMqu4rcRQRJD6tCJMXhHri/O
2D7D0uiBPTQhp1LrAo5YyjXctL31Wd7TrCUCxFjDzhTEkFUsOA5Kf+OENC0j+NRN
b9Yh0fp73cET9Iq9YmhVzsL+6/VwYnRkqlXy1UL+EDqe7qmHBvp0E2OVjrXzxAFU
1URAqqy0dY1jpbPhKZFJ8hUcH5luscTyYW3LGdGBhgganzrxWEQzO1HIBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPW82svA4wEpCYHmQdpMHNNyGZdRMB8GA1UdIwQY
MBaAFOhGTIwWfdLIeqPYisv65MIz/3ewMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVaTWpCWjkwc2g2bzlpS3lfcmt3alBfZDdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jY2E2YzQtZWM3MC00NDA1LWE2YTgt
NmVhYTU5YjBkNzUwLzEvOWJ6YXk4RGpBU2tKZ2VaQjJrd2MwM0labDFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jY2E2YzQtZWM3MC00NDA1LWE2YTgtNmVhYTU5YjBkNzUw
LzEvNkVaTWpCWjkwc2g2bzlpS3lfcmt3alBfZDdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwjcQMA0G
CSqGSIb3DQEBCwUAA4IBAQB3tXsENNgyo5BgZJ9QLTlyDqNXTnMsy4sBJXvqP7bV
rixQXN/qW67eU8Vdt3zohycuLaB7lajOg/vQp2lyJEDy6818b8AGAn2LPaGtWYcL
NQS0uk0LdyYH5IFw03UMaMo6PVVnkJ5Cj1s7PlF8zjLNJ5Fmu1ix8H6K7IDSRI9P
7ErvzYy6sIt3J1P9GIQwocKBdgB9FuMrz0lEGM6aFaRipDAo56CN7uqqZAqhJ+JF
sx2eNPbINf70P8GPDiPAQIUc6daWD6MCuxUzc4de8/tI9myfLdSHtipS0kJ4DiAp
RV80XbD+CJxmv7pieKKZll4pwAV1U+flLTk1Sic8pyrK
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:43 2025 by rpki-client