Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Sunm9rStbgyUsEMTSV-WdoAOEYI.roa
File: Sunm9rStbgyUsEMTSV-WdoAOEYI.roa (raw, json)
Hash identifier: seqeEAoqrrGj6pCaodGyFpOuJpIWwd1Jb3tuTcPtM4w=
Subject key identifier: 4A:E9:E6:F6:B4:AD:6E:0C:94:B0:43:13:49:5F:96:76:80:0E:11:82
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01942828132F14469EC1851AB5C83B345784
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Sunm9rStbgyUsEMTSV-WdoAOEYI.roa
Signing time: Thu 02 Jan 2025 17:55:02 +0000
ROA not before: Thu 02 Jan 2025 17:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40968
IP address blocks: 213.222.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:13:2f:14:46:9e:c1:85:1a:b5:c8:3b:34:57:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ae9e6f6b4ad6e0c94b04313495f9676800e1182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:18:cf:d3:d5:3d:6c:5e:1f:a2:d1:42:3b:
6c:66:4c:bf:b8:ba:83:b2:c2:bd:96:a9:38:ce:76:
2e:3b:57:90:e1:14:c4:76:9c:82:84:6f:d2:07:25:
6f:45:a0:2c:75:ec:ac:ba:dc:c7:56:c7:f6:97:b1:
73:7b:c4:50:e9:90:31:ca:cb:b0:e5:b6:14:71:4b:
54:be:29:c7:7d:4e:bf:ee:bd:b3:91:20:cc:0b:af:
99:20:aa:eb:76:07:bf:7f:68:6f:74:f3:66:51:d3:
bb:4b:9f:66:73:e7:39:94:44:cf:62:c0:56:f1:2a:
41:a7:f4:f3:4c:6a:1a:96:89:7b:18:dc:7f:b5:c4:
af:ab:3d:a6:39:5d:83:34:cd:e3:95:b4:d2:46:4d:
fa:1b:80:de:6b:90:b3:ea:5a:86:41:ba:86:5f:13:
ca:db:56:68:2e:cb:80:6e:87:c7:fc:7f:fe:a2:c2:
37:04:c5:83:ee:a4:a0:1c:16:6f:e2:1d:71:8d:9e:
15:08:4e:68:05:0b:1c:f3:4d:a1:39:c7:e0:56:4b:
d4:ff:74:7a:dd:c3:71:f9:38:d0:51:e5:fa:5e:ed:
a5:d8:19:65:3d:9e:51:9a:36:95:be:99:c0:90:fa:
26:51:fc:d1:9c:b0:f6:98:f4:51:2a:55:89:4f:51:
91:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E9:E6:F6:B4:AD:6E:0C:94:B0:43:13:49:5F:96:76:80:0E:11:82
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Sunm9rStbgyUsEMTSV-WdoAOEYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.222.33.0/24
Signature Algorithm: sha256WithRSAEncryption
72:48:f9:1d:a4:48:7a:62:5c:65:2c:77:05:c2:ba:df:8a:e2:
5d:cc:38:d0:fb:7a:4d:a9:5f:56:5a:27:0b:bc:78:6c:79:46:
9b:fc:d1:96:e9:40:0e:f4:8c:ec:a7:10:ac:c0:83:52:36:1a:
4f:24:cd:ba:26:05:c2:f8:a2:6b:f0:06:cb:c0:b8:f5:42:bd:
9e:f5:f3:46:60:0e:16:db:77:ef:28:d8:69:4a:39:e5:43:b7:
c5:9f:59:a6:20:e8:bd:73:04:7e:6c:6c:c9:50:6d:45:0d:59:
89:b8:82:d7:92:14:15:cc:0f:d4:5f:a0:3e:1b:68:42:09:e9:
d9:34:15:12:6b:cb:08:1b:87:8e:e9:08:86:78:35:3c:5c:15:
e0:07:af:79:2b:bd:2f:68:b0:5e:54:94:70:53:07:09:22:c4:
bc:ef:b9:81:55:3c:19:9b:44:83:a0:96:88:f9:a5:16:37:5f:
d5:41:7e:9e:ad:64:79:a2:e3:d0:4a:a0:f7:7c:b4:7f:53:04:
8d:13:18:0b:10:ca:aa:4b:1f:12:45:9f:a2:10:57:0a:90:59:
7c:ca:3b:da:3a:26:84:72:10:fa:62:61:df:07:89:32:05:f1:
f5:c1:59:df:24:32:da:29:d2:bd:df:22:00:b3:5a:5c:fb:df:
95:70:e2:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoKBMvFEaewYUatcg7NFeEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjUwMTAyMTc1NTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWU5ZTZmNmI0YWQ2ZTBjOTRiMDQzMTM0OTVmOTY3NjgwMGUxMTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplYYz9PVPWxeH6LRQjtsZky/uLqD
ssK9lqk4znYuO1eQ4RTEdpyChG/SByVvRaAsdeysutzHVsf2l7Fze8RQ6ZAxysuw
5bYUcUtUvinHfU6/7r2zkSDMC6+ZIKrrdge/f2hvdPNmUdO7S59mc+c5lETPYsBW
8SpBp/TzTGoalol7GNx/tcSvqz2mOV2DNM3jlbTSRk36G4Dea5Cz6lqGQbqGXxPK
21ZoLsuAbofH/H/+osI3BMWD7qSgHBZv4h1xjZ4VCE5oBQsc802hOcfgVkvU/3R6
3cNx+TjQUeX6Xu2l2BllPZ5RmjaVvpnAkPomUfzRnLD2mPRRKlWJT1GRnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFErp5va0rW4MlLBDE0lflnaADhGCMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvU3VubTlyU3RiZ3lVc0VNVFNWLVdkb0FPRVlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1d4hMA0G
CSqGSIb3DQEBCwUAA4IBAQBySPkdpEh6YlxlLHcFwrrfiuJdzDjQ+3pNqV9WWicL
vHhseUab/NGW6UAO9IzspxCswINSNhpPJM26JgXC+KJr8AbLwLj1Qr2e9fNGYA4W
23fvKNhpSjnlQ7fFn1mmIOi9cwR+bGzJUG1FDVmJuILXkhQVzA/UX6A+G2hCCenZ
NBUSa8sIG4eO6QiGeDU8XBXgB695K70vaLBeVJRwUwcJIsS877mBVTwZm0SDoJaI
+aUWN1/VQX6erWR5ouPQSqD3fLR/UwSNExgLEMqqSx8SRZ+iEFcKkFl8yjvaOiaE
chD6YmHfB4kyBfH1wVnfJDLaKdK93yIAs1pc+9+VcOKW
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:46 2025 by rpki-client