Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/OYF94ILNmc9IGZCl0trT_vCrveA.roa
File: OYF94ILNmc9IGZCl0trT_vCrveA.roa (raw, json)
Hash identifier: uj8o2STwQYQOQKO9jHh+UgR4tdLDjqQa9LhPcW5B4qI=
Subject key identifier: 39:81:7D:E0:82:CD:99:CF:48:19:90:A5:D2:DA:D3:FE:F0:AB:BD:E0
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 019427B3DA33DACFF0003C8A4F665C9F68F6
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/OYF94ILNmc9IGZCl0trT_vCrveA.roa
Signing time: Thu 02 Jan 2025 15:48:05 +0000
ROA not before: Thu 02 Jan 2025 15:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19545
IP address blocks: 57.250.192.0/19 maxlen: 24
57.250.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:da:33:da:cf:f0:00:3c:8a:4f:66:5c:9f:68:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Jan 2 15:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39817de082cd99cf481990a5d2dad3fef0abbde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cf:38:cc:16:43:a0:af:d0:d8:51:26:8a:74:
e3:9c:ff:6b:c3:94:33:5a:5b:27:d0:75:84:8f:fe:
94:e9:f5:4c:4c:76:a6:c8:c6:81:92:35:07:e6:c9:
65:11:6d:f2:e1:5d:c7:1d:cd:ab:91:d0:c0:8e:ca:
cb:90:ee:3e:bc:e1:20:a6:83:13:62:df:f9:99:b4:
73:6a:7b:80:de:44:1e:a6:56:ac:f3:21:32:9d:df:
ad:02:c2:c1:78:28:6d:a9:b2:cf:f8:36:12:8e:cd:
92:d6:57:11:02:80:42:4f:3b:10:97:19:c1:c8:7d:
2f:d4:07:b9:61:99:85:92:9e:ea:09:75:3b:ba:b8:
1b:cc:cb:d0:df:ef:59:b7:da:62:91:ef:d3:17:33:
7d:55:70:cb:9d:83:ee:ee:e9:53:ea:58:99:0e:f3:
dd:58:11:4e:57:b4:62:b1:92:46:08:c6:a0:52:20:
3c:3e:64:0f:6b:9b:06:7a:1a:d9:70:86:5f:a1:72:
ce:5a:88:d9:ed:80:a0:e1:6e:cb:f4:05:3e:eb:b2:
bb:47:9e:70:cd:4f:5e:da:b1:4b:2f:e1:95:02:bf:
cf:3c:95:c1:18:27:bd:bb:f1:3e:1b:35:a5:92:fc:
41:c8:19:80:43:7e:cc:83:94:30:e2:14:e1:62:d8:
6c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:81:7D:E0:82:CD:99:CF:48:19:90:A5:D2:DA:D3:FE:F0:AB:BD:E0
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/OYF94ILNmc9IGZCl0trT_vCrveA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.250.192.0-57.250.224.255
Signature Algorithm: sha256WithRSAEncryption
38:33:1e:25:ed:19:a3:8d:3f:3a:bd:d9:77:d3:f3:c2:1e:d8:
08:cb:a9:6a:a6:17:e4:d2:88:6c:e5:d9:d0:6e:b1:02:ce:05:
35:c2:c4:c8:b1:eb:55:ef:bb:3d:c4:22:98:5d:f6:2e:73:62:
bc:c6:94:ef:d4:0b:92:13:76:f2:21:a5:a2:0a:5c:af:cb:a6:
19:34:b5:30:ca:4a:4e:b5:f6:5d:f6:6f:25:85:07:56:77:95:
45:2d:df:82:9c:bd:96:79:96:90:f9:de:1b:6b:5d:74:81:58:
94:cc:7a:ed:3f:d2:65:10:61:e1:2e:ea:8e:0f:a8:06:0f:56:
11:f8:08:9b:e0:e2:f0:d8:9d:b5:99:c4:7b:33:f3:ec:34:62:
6e:d5:2b:f8:63:d1:c5:bd:34:c3:87:ae:26:d7:96:7a:7e:cf:
71:a6:6a:22:d9:0c:5e:91:1b:19:27:4e:e2:c3:0d:06:fc:d0:
14:07:70:44:ed:c3:fc:2b:31:0d:44:31:59:bb:9d:52:69:f0:
3f:87:45:48:8b:6e:d1:86:ed:3c:ee:eb:a9:dd:0c:b3:29:c3:
32:d8:b2:09:77:1b:4a:68:f0:47:8b:e1:30:c8:8d:71:aa:9f:
ed:77:89:0e:22:65:60:8d:8b:b7:ed:f0:0b:2c:0d:a3:5e:ac:
1a:61:fb:bc
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQns9oz2s/wADyKT2Zcn2j2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZDViYTA4MTVjOWY1MTkzZjgwOTg5ZWU4OTNhY2FjYzRi
YTg4NDkwHhcNMjUwMTAyMTU0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTgxN2RlMDgyY2Q5OWNmNDgxOTkwYTVkMmRhZDNmZWYwYWJiZGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc84zBZDoK/Q2FEminTjnP9rw5Qz
Wlsn0HWEj/6U6fVMTHamyMaBkjUH5sllEW3y4V3HHc2rkdDAjsrLkO4+vOEgpoMT
Yt/5mbRzanuA3kQeplas8yEynd+tAsLBeChtqbLP+DYSjs2S1lcRAoBCTzsQlxnB
yH0v1Ae5YZmFkp7qCXU7urgbzMvQ3+9Zt9pike/TFzN9VXDLnYPu7ulT6liZDvPd
WBFOV7RisZJGCMagUiA8PmQPa5sGehrZcIZfoXLOWojZ7YCg4W7L9AU+67K7R55w
zU9e2rFLL+GVAr/PPJXBGCe9u/E+GzWlkvxByBmAQ37Mg5Qw4hThYthsRwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFDmBfeCCzZnPSBmQpdLa0/7wq73gMB8GA1UdIwQY
MBaAFEPVuggVyfUZP4CYnuiTrKzEuohJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEt
ZTEzZTU1NzljNWRjLzEvT1lGOTRJTE5tYzlJR1pDbDB0clRfdkNydmVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEtZTEzZTU1NzljNWRj
LzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAY5+sAD
BAA5+uAwDQYJKoZIhvcNAQELBQADggEBADgzHiXtGaONPzq92XfT88Ie2AjLqWqm
F+TSiGzl2dBusQLOBTXCxMix61Xvuz3EIphd9i5zYrzGlO/UC5ITdvIhpaIKXK/L
phk0tTDKSk619l32byWFB1Z3lUUt34KcvZZ5lpD53htrXXSBWJTMeu0/0mUQYeEu
6o4PqAYPVhH4CJvg4vDYnbWZxHsz8+w0Ym7VK/hj0cW9NMOHribXlnp+z3GmaiLZ
DF6RGxknTuLDDQb80BQHcETtw/wrMQ1EMVm7nVJp8D+HRUiLbtGG7Tzu66ndDLMp
wzLYsgl3G0po8EeL4TDIjXGqn+13iQ4iZWCNi7ft8AssDaNerBph+7w=
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:19:44 2025 by rpki-client