Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f4944d-0058-45e7-ab8d-746b411c6fab/1/cBLD_1wWacgGegtl4_fz3ajx-YE.roa
File: cBLD_1wWacgGegtl4_fz3ajx-YE.roa (raw, json)
Hash identifier: /kwzsy7F4dt+lOkUCbsIyfjI40JgOpId3qMPJmXW4IY=
Subject key identifier: 70:12:C3:FF:5C:16:69:C8:06:7A:0B:65:E3:F7:F3:DD:A8:F1:F9:81
Certificate issuer: /CN=ba8026b1852ed6ffa6d03d8e9bb71b484640d4dc
Certificate serial: B583
Authority key identifier: BA:80:26:B1:85:2E:D6:FF:A6:D0:3D:8E:9B:B7:1B:48:46:40:D4:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoAmsYUu1v-m0D2Om7cbSEZA1Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f4944d-0058-45e7-ab8d-746b411c6fab/1/cBLD_1wWacgGegtl4_fz3ajx-YE.roa
Signing time: Mon 03 Jan 2022 16:01:42 +0000
ROA not before: Mon 03 Jan 2022 16:01:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 193.17.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46467 (0xb583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8026b1852ed6ffa6d03d8e9bb71b484640d4dc
Validity
Not Before: Jan 3 16:01:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7012c3ff5c1669c8067a0b65e3f7f3dda8f1f981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7c:79:14:3c:a9:34:fc:05:00:3c:fc:d7:1d:
da:85:1f:f6:83:a0:ef:fe:e1:cd:88:f4:ca:9b:47:
27:ed:e5:b4:d6:ec:ed:a9:9c:22:98:a1:68:64:f0:
5a:70:24:a3:3e:1d:c0:92:cd:85:de:6b:8c:bd:dc:
44:c3:6a:12:bb:2b:ce:5d:fd:34:a8:51:68:82:b5:
4c:22:53:02:46:43:ae:ed:6f:e4:49:b1:2b:f5:90:
6e:99:13:7d:09:c5:55:56:fa:86:c4:a4:79:9f:0a:
35:3d:b1:4c:0d:56:47:fe:ec:bc:e0:54:05:0d:2d:
c5:c3:0e:f2:90:f8:75:0e:a5:b8:71:2c:1b:ef:74:
e7:85:2a:10:64:98:c7:2a:22:a4:79:35:b4:f4:5a:
d8:a0:2d:48:6b:d3:e7:9e:be:bf:b2:05:d7:c4:f0:
b2:1d:da:89:32:41:32:9d:ee:71:41:ae:80:26:ed:
c9:90:0f:7a:b8:a0:f5:28:57:4f:d0:21:3e:7f:8e:
14:f9:40:38:b6:77:f9:e7:78:93:45:2d:78:6f:9a:
2b:90:a1:6a:f9:ad:94:ae:44:8f:a1:f9:9c:a6:56:
a3:bf:ab:ca:86:a9:c9:77:fb:e9:af:16:49:88:fd:
b9:e2:1e:ae:69:be:8d:86:f8:db:50:88:9c:11:ff:
6b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:12:C3:FF:5C:16:69:C8:06:7A:0B:65:E3:F7:F3:DD:A8:F1:F9:81
X509v3 Authority Key Identifier:
keyid:BA:80:26:B1:85:2E:D6:FF:A6:D0:3D:8E:9B:B7:1B:48:46:40:D4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoAmsYUu1v-m0D2Om7cbSEZA1Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f4944d-0058-45e7-ab8d-746b411c6fab/1/cBLD_1wWacgGegtl4_fz3ajx-YE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f4944d-0058-45e7-ab8d-746b411c6fab/1/uoAmsYUu1v-m0D2Om7cbSEZA1Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.201.0/24
Signature Algorithm: sha256WithRSAEncryption
43:92:02:c8:65:69:0b:29:a8:db:29:b8:81:74:d8:cc:8e:e4:
37:00:74:d7:7f:f4:6c:10:22:fa:65:85:46:71:11:7c:d9:7b:
fd:1c:1d:0e:26:3b:eb:38:3b:39:43:c3:69:f4:10:cf:32:f4:
49:f1:c1:b7:c5:d8:a2:be:22:99:95:f4:57:a6:64:a7:e8:13:
9b:6d:fe:97:c1:37:0a:d4:47:b7:9c:10:0f:26:7b:b3:f3:4a:
a8:12:fa:bc:90:21:51:9a:89:6a:46:ea:7e:99:21:ca:23:bd:
9f:01:78:fd:58:63:a5:f8:c0:4d:36:87:e9:ad:a0:b6:a9:3c:
08:aa:1b:8d:db:c6:cd:e2:13:c6:9b:51:07:f2:55:ce:62:7f:
5b:11:b3:ec:61:eb:41:37:87:55:c2:46:df:d9:bc:75:c6:dd:
4a:b0:fd:1f:0a:fe:ad:a6:13:fc:6c:a9:8f:c9:80:16:0f:55:
ac:88:73:4e:35:ab:f3:59:db:95:df:7e:29:56:af:be:04:af:
e0:e3:7e:ce:20:ae:4e:88:99:77:11:a3:64:86:a6:e0:95:cc:
c1:4f:96:5d:c6:19:50:84:12:d9:6a:a7:e9:89:ee:ff:c8:cb:
1d:f3:f7:2b:97:f0:53:c4:78:80:8a:db:b4:8f:8f:ab:dd:4c:
c5:b7:f0:b3
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDALWDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJh
ODAyNmIxODUyZWQ2ZmZhNmQwM2Q4ZTliYjcxYjQ4NDY0MGQ0ZGMwHhcNMjIwMTAz
MTYwMTQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3MDEyYzNmZjVjMTY2
OWM4MDY3YTBiNjVlM2Y3ZjNkZGE4ZjFmOTgxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA7Hx5FDypNPwFADz81x3ahR/2g6Dv/uHNiPTKm0cn7eW01uzt
qZwimKFoZPBacCSjPh3Aks2F3muMvdxEw2oSuyvOXf00qFFogrVMIlMCRkOu7W/k
SbEr9ZBumRN9CcVVVvqGxKR5nwo1PbFMDVZH/uy84FQFDS3Fww7ykPh1DqW4cSwb
73TnhSoQZJjHKiKkeTW09FrYoC1Ia9Pnnr6/sgXXxPCyHdqJMkEyne5xQa6AJu3J
kA96uKD1KFdP0CE+f44U+UA4tnf553iTRS14b5orkKFq+a2UrkSPofmcplajv6vK
hqnJd/vprxZJiP254h6uab6NhvjbUIicEf9rvQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFHASw/9cFmnIBnoLZeP3892o8fmBMB8GA1UdIwQYMBaAFLqAJrGFLtb/ptA9
jpu3G0hGQNTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
dW9BbXNZVXUxdi1tMEQyT203Y2JTRVpBMU53LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9lNy9mNDk0NGQtMDA1OC00NWU3LWFiOGQtNzQ2YjQxMWM2ZmFiLzEv
Y0JMRF8xd1dhY2dHZWd0bDRfZnozYWp4LVlFLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9m
NDk0NGQtMDA1OC00NWU3LWFiOGQtNzQ2YjQxMWM2ZmFiLzEvdW9BbXNZVXUxdi1t
MEQyT203Y2JTRVpBMU53LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRHJMA0GCSqGSIb3DQEBCwUAA4IB
AQBDkgLIZWkLKajbKbiBdNjMjuQ3AHTXf/RsECL6ZYVGcRF82Xv9HB0OJjvrODs5
Q8Np9BDPMvRJ8cG3xdiiviKZlfRXpmSn6BObbf6XwTcK1Ee3nBAPJnuz80qoEvq8
kCFRmolqRup+mSHKI72fAXj9WGOl+MBNNofpraC2qTwIqhuN28bN4hPGm1EH8lXO
Yn9bEbPsYetBN4dVwkbf2bx1xt1KsP0fCv6tphP8bKmPyYAWD1WsiHNONavzWduV
334pVq++BK/g437OIK5OiJl3EaNkhqbglczBT5ZdxhlQhBLZaqfpie7/yMsd8/cr
l/BTxHiAitu0j4+r3UzFt/Cz
-----END CERTIFICATE-----
Generated at Mon May 12 16:20:43 2025 by rpki-client