Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/3LJsJAxQUnMWxmTEqbv2Ne-HHLQ.roa
File: 3LJsJAxQUnMWxmTEqbv2Ne-HHLQ.roa (raw, json)
Hash identifier: +PAAkbA2OVlIxFRlm52Uu/fGQNUJSRnOJ9Ha52EnEH8=
Subject key identifier: DC:B2:6C:24:0C:50:52:73:16:C6:64:C4:A9:BB:F6:35:EF:87:1C:B4
Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial: 01949A4EDB4CBD820FA4876499217A38ECDA
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/3LJsJAxQUnMWxmTEqbv2Ne-HHLQ.roa
Signing time: Fri 24 Jan 2025 21:54:06 +0000
ROA not before: Fri 24 Jan 2025 21:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205097
IP address blocks: 94.45.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9a:4e:db:4c:bd:82:0f:a4:87:64:99:21:7a:38:ec:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Validity
Not Before: Jan 24 21:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcb26c240c50527316c664c4a9bbf635ef871cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:d1:3a:d8:65:ab:5f:04:40:42:b5:d8:ec:
b9:d6:dc:54:34:27:9c:de:38:4d:98:1d:59:f9:b6:
31:71:cb:3e:7c:cb:41:fe:c6:b5:3f:42:45:34:ab:
1d:3c:b4:ae:b0:9e:3c:7c:47:10:a3:93:6e:31:6a:
5b:fb:e9:f5:0f:b1:29:69:f9:e5:81:da:f3:e2:75:
ae:3e:fd:ca:54:39:07:ed:7f:e4:48:d1:46:65:41:
70:c1:54:3a:2a:a1:a4:67:cb:d2:a5:ec:46:db:30:
cd:89:b3:96:6d:39:46:52:17:5c:16:cd:9d:9b:13:
61:f2:f8:87:25:45:42:b8:c3:ea:df:30:b9:55:06:
ce:43:5a:63:32:81:fb:3b:a7:98:f3:13:6e:20:63:
c5:59:58:c0:62:2e:7b:03:ec:07:e6:cb:33:c4:5b:
3d:6a:29:85:04:e2:94:d8:9e:c3:9b:7c:31:33:52:
bb:f8:66:bf:9b:e3:9b:7d:a8:b0:76:34:78:83:53:
d6:c0:3a:c7:06:bb:5e:ba:e6:64:b5:d4:25:12:05:
e8:12:cd:cb:84:47:2c:ca:2e:82:aa:81:ab:29:f5:
4e:86:b1:69:f3:0b:0b:22:bb:dd:2b:f1:d4:40:de:
6e:cc:b2:66:f6:8e:62:3a:72:1d:81:33:1c:33:86:
19:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B2:6C:24:0C:50:52:73:16:C6:64:C4:A9:BB:F6:35:EF:87:1C:B4
X509v3 Authority Key Identifier:
keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/3LJsJAxQUnMWxmTEqbv2Ne-HHLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.45.143.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:5a:1f:db:1b:20:21:d1:8b:dd:2c:28:fa:19:42:5e:8c:4a:
0c:e0:e5:34:bf:44:56:06:27:b9:9c:6b:3c:73:de:aa:f1:25:
3b:25:2f:5f:e7:22:f9:f6:2d:0a:29:54:f2:3c:fa:12:94:82:
76:e3:13:e6:8b:ea:7e:d7:59:0c:3a:e6:a2:2c:af:c0:dd:a0:
8b:9c:ae:0b:b1:2e:5d:b8:9d:11:2f:8a:94:ef:3c:1f:71:d4:
9a:19:d4:76:dd:b0:8a:e3:0a:ea:07:7c:b8:be:71:ba:54:86:
14:10:c7:ba:65:0f:a0:6e:4b:bf:52:17:c2:44:f6:93:cf:9f:
69:b7:30:ff:2b:63:f4:13:89:75:46:eb:f7:3f:f5:72:b5:19:
57:b5:9f:0c:8a:77:84:fb:f2:c3:60:a2:3c:59:e6:b3:be:52:
24:92:22:e9:f7:b9:7d:94:ae:11:38:a1:39:79:e3:15:ed:ab:
05:f8:df:32:7d:4b:cb:c7:dd:ae:3a:aa:c4:f7:df:ff:f9:d0:
cc:f7:05:52:88:90:12:9d:45:47:06:92:ca:0d:f8:40:c3:36:
03:43:77:b4:19:cd:19:a8:53:c8:54:71:a9:92:0c:40:48:32:
72:22:0c:10:9f:78:a4:e1:56:3d:90:5e:33:a4:a0:dd:f2:35:
37:18:3f:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSaTttMvYIPpIdkmSF6OOzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMTRlYjFlZWY2NmMyZDM0OWYzZjdkN2JhZmE2OGU0OWZi
ZmVjOWMwHhcNMjUwMTI0MjE1NDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2IyNmMyNDBjNTA1MjczMTZjNjY0YzRhOWJiZjYzNWVmODcxY2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB3ROthlq18EQEK12Oy51txUNCec
3jhNmB1Z+bYxccs+fMtB/sa1P0JFNKsdPLSusJ48fEcQo5NuMWpb++n1D7Epafnl
gdrz4nWuPv3KVDkH7X/kSNFGZUFwwVQ6KqGkZ8vSpexG2zDNibOWbTlGUhdcFs2d
mxNh8viHJUVCuMPq3zC5VQbOQ1pjMoH7O6eY8xNuIGPFWVjAYi57A+wH5sszxFs9
aimFBOKU2J7Dm3wxM1K7+Ga/m+ObfaiwdjR4g1PWwDrHBrteuuZktdQlEgXoEs3L
hEcsyi6CqoGrKfVOhrFp8wsLIrvdK/HUQN5uzLJm9o5iOnIdgTMcM4YZqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNyybCQMUFJzFsZkxKm79jXvhxy0MB8GA1UdIwQY
MBaAFB4U6x7vZsLTSfP317r6aOSfv+ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMt
OWNhOThmNDk1MGNmLzEvM0xKc0pBeFFVbk1XeG1URXFidjJOZS1ISExRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMtOWNhOThmNDk1MGNm
LzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXi2PMA0G
CSqGSIb3DQEBCwUAA4IBAQAcWh/bGyAh0YvdLCj6GUJejEoM4OU0v0RWBie5nGs8
c96q8SU7JS9f5yL59i0KKVTyPPoSlIJ24xPmi+p+11kMOuaiLK/A3aCLnK4LsS5d
uJ0RL4qU7zwfcdSaGdR23bCK4wrqB3y4vnG6VIYUEMe6ZQ+gbku/UhfCRPaTz59p
tzD/K2P0E4l1Ruv3P/VytRlXtZ8MineE+/LDYKI8WeazvlIkkiLp97l9lK4ROKE5
eeMV7asF+N8yfUvLx92uOqrE99//+dDM9wVSiJASnUVHBpLKDfhAwzYDQ3e0Gc0Z
qFPIVHGpkgxASDJyIgwQn3ik4VY9kF4zpKDd8jU3GD+E
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:42 2025 by rpki-client