Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/B3w7E9gvZEzFwMrG99Xq-T1MEBw.roa
File: B3w7E9gvZEzFwMrG99Xq-T1MEBw.roa (raw, json)
Hash identifier: X2c/+qNKKXp5+FBng9aKxlFFZbDBWHiqkfhHgQbP6bg=
Subject key identifier: 07:7C:3B:13:D8:2F:64:4C:C5:C0:CA:C6:F7:D5:EA:F9:3D:4C:10:1C
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 0194221F7CB844843B182C11E2BA7C9D01FF
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/B3w7E9gvZEzFwMrG99Xq-T1MEBw.roa
Signing time: Wed 01 Jan 2025 13:47:56 +0000
ROA not before: Wed 01 Jan 2025 13:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59511
IP address blocks: 94.177.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7c:b8:44:84:3b:18:2c:11:e2:ba:7c:9d:01:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=077c3b13d82f644cc5c0cac6f7d5eaf93d4c101c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:42:11:f3:cd:ea:eb:5b:2f:b7:bf:5d:0e:
3f:07:b1:b5:e5:20:e3:f5:9b:d5:72:21:75:89:5c:
34:a4:fb:2d:9d:22:95:ed:a3:5f:3e:32:ae:37:0b:
3f:f8:7e:26:2e:ed:02:9f:80:0a:dd:38:88:19:00:
28:21:e0:02:cd:fa:15:3a:b0:97:48:ea:94:5d:b6:
88:16:76:fc:63:d1:30:87:b5:29:56:20:44:2a:e0:
02:af:7b:38:ac:d5:48:eb:97:09:7e:1a:f9:e3:d8:
ae:7c:84:ea:25:47:72:af:cf:e4:fd:8d:70:38:4d:
d7:3a:aa:cc:73:32:ed:c8:37:64:a2:85:c6:32:c2:
e4:19:88:b9:b6:2b:7b:95:28:93:90:01:25:67:d4:
84:62:ad:9f:1a:65:b5:57:17:95:d9:33:13:34:76:
e8:86:64:fa:25:e5:8c:fb:d9:95:74:d0:f9:d0:76:
38:11:a0:44:c3:ce:b6:f6:be:bd:de:86:1d:64:9a:
fb:40:65:8f:ad:3c:dc:08:a4:98:39:a8:d0:81:04:
82:cb:4a:a3:93:48:54:17:bc:65:05:59:7a:5e:35:
a6:e3:ee:fd:1a:35:37:40:35:b0:3a:87:6c:c8:a1:
ff:25:f4:ac:86:cf:0f:39:c0:71:1c:a2:ba:b3:8a:
e8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7C:3B:13:D8:2F:64:4C:C5:C0:CA:C6:F7:D5:EA:F9:3D:4C:10:1C
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/B3w7E9gvZEzFwMrG99Xq-T1MEBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.26.0/24
Signature Algorithm: sha256WithRSAEncryption
34:0f:35:d3:8f:02:ca:69:6e:fd:9f:57:c5:dc:d9:7e:cc:d3:
f7:16:41:b8:49:ff:71:f5:1e:d1:c3:57:f4:ce:30:b1:15:4f:
17:fc:5a:e6:8e:1c:9d:58:29:c9:9a:2d:34:ac:b4:f2:e2:75:
57:ba:1f:e8:46:8f:9d:a1:9d:03:70:e8:1b:8b:f5:4c:fc:81:
b5:a3:7e:e0:73:82:f2:8d:49:ac:9a:6c:50:1a:90:39:21:db:
c1:8d:db:03:ee:35:28:dc:1a:aa:88:b9:e4:9f:1a:56:8a:2a:
b3:46:e8:11:97:fa:53:e1:f2:11:f0:cf:26:43:12:34:4e:f9:
c4:13:75:33:df:ae:53:19:89:de:82:81:d9:a0:e8:22:ef:2e:
bc:5e:86:a1:7c:69:da:7d:c5:22:69:a1:1a:f7:fa:87:81:25:
27:e3:e6:c3:4d:b0:b2:ec:11:7c:b1:85:ac:a4:ed:3f:95:c6:
09:a0:62:97:3a:a9:96:03:6a:b7:6c:19:a6:e0:d8:bb:b0:89:
a5:6b:6a:97:90:65:00:f6:98:4a:8d:e5:95:3b:c5:11:fe:d5:
bc:65:6e:f7:92:b9:64:8a:be:8c:bf:e1:eb:5c:09:17:22:fc:
b9:bd:37:cd:23:d6:b3:36:bd:77:fe:69:2e:8d:21:1a:a7:2d:
c3:0a:cb:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH3y4RIQ7GCwR4rp8nQH/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3
YjQ1ODkwHhcNMjUwMTAxMTM0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzdjM2IxM2Q4MmY2NDRjYzVjMGNhYzZmN2Q1ZWFmOTNkNGMxMDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxZCEfPN6utbL7e/XQ4/B7G15SDj
9ZvVciF1iVw0pPstnSKV7aNfPjKuNws/+H4mLu0Cn4AK3TiIGQAoIeACzfoVOrCX
SOqUXbaIFnb8Y9Ewh7UpViBEKuACr3s4rNVI65cJfhr549iufITqJUdyr8/k/Y1w
OE3XOqrMczLtyDdkooXGMsLkGYi5tit7lSiTkAElZ9SEYq2fGmW1VxeV2TMTNHbo
hmT6JeWM+9mVdND50HY4EaBEw8629r693oYdZJr7QGWPrTzcCKSYOajQgQSCy0qj
k0hUF7xlBVl6XjWm4+79GjU3QDWwOodsyKH/JfSshs8POcBxHKK6s4ro6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAd8OxPYL2RMxcDKxvfV6vk9TBAcMB8GA1UdIwQY
MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt
MmVjZTA0ZTE4NWMyLzEvQjN3N0U5Z3ZaRXpGd01yRzk5WHEtVDFNRUJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy
LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrEaMA0G
CSqGSIb3DQEBCwUAA4IBAQA0DzXTjwLKaW79n1fF3Nl+zNP3FkG4Sf9x9R7Rw1f0
zjCxFU8X/FrmjhydWCnJmi00rLTy4nVXuh/oRo+doZ0DcOgbi/VM/IG1o37gc4Ly
jUmsmmxQGpA5IdvBjdsD7jUo3BqqiLnknxpWiiqzRugRl/pT4fIR8M8mQxI0TvnE
E3Uz365TGYnegoHZoOgi7y68XoahfGnafcUiaaEa9/qHgSUn4+bDTbCy7BF8sYWs
pO0/lcYJoGKXOqmWA2q3bBmm4Ni7sImla2qXkGUA9phKjeWVO8UR/tW8ZW73krlk
ir6Mv+HrXAkXIvy5vTfNI9azNr13/mkujSEapy3DCssT
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:42:39 2025 by rpki-client