Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/4tpJp9R-emqtO5_9VKSCIAq-5DQ.roa
File: 4tpJp9R-emqtO5_9VKSCIAq-5DQ.roa (raw, json)
Hash identifier: WKq7WE7Po0RSlnU/jYkaY2JCbB3RLDdMM/DAKFqdxbs=
Subject key identifier: E2:DA:49:A7:D4:7E:7A:6A:AD:3B:9F:FD:54:A4:82:20:0A:BE:E4:34
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01856D9D1821F8459CA1DA0DF1282350EBCA
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/4tpJp9R-emqtO5_9VKSCIAq-5DQ.roa
Signing time: Sun 01 Jan 2023 13:54:49 +0000
ROA not before: Sun 01 Jan 2023 13:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147293
IP address blocks: 141.98.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:18:21:f8:45:9c:a1:da:0d:f1:28:23:50:eb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 13:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2da49a7d47e7a6aad3b9ffd54a482200abee434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fe:15:1f:d9:c9:2e:e3:dc:9d:0a:a7:6c:10:
33:ea:6c:63:4d:99:21:b2:32:9d:e0:9e:5b:f9:61:
44:95:45:31:01:41:f5:a3:38:18:08:a9:7c:a1:4f:
db:88:e6:3f:93:9f:51:96:69:f0:c1:30:93:fa:a6:
c8:6a:7a:0a:93:24:75:57:7d:6d:db:9c:de:a9:1b:
39:0e:cf:e5:36:11:77:f0:5a:fb:dc:bd:0e:09:be:
b9:66:ea:50:59:bc:84:29:fb:55:18:f9:ca:66:e2:
c3:57:0b:62:a8:71:c4:d7:29:67:63:5f:20:d0:39:
e8:a6:5b:ca:ea:b5:71:96:85:81:9a:9e:34:42:34:
7f:c0:54:80:18:76:ca:01:6f:74:0b:ae:4f:bb:3b:
68:19:01:b4:8e:18:5d:c9:20:8d:92:a6:25:a7:91:
4d:2f:c6:6b:e6:51:eb:d7:8d:a7:ae:fa:9f:01:ae:
b3:32:dc:12:0a:33:8f:f1:bb:65:41:9f:aa:79:82:
d8:8f:2d:33:97:d7:d0:57:74:ba:7c:ad:ad:d3:a5:
98:ca:02:6d:43:5b:26:af:cc:f9:f6:5e:35:99:39:
0e:15:ff:21:1d:cf:e1:2e:03:50:86:98:71:0d:bd:
0c:de:d9:b7:f4:ea:74:9e:8d:42:73:40:23:c3:1e:
4c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DA:49:A7:D4:7E:7A:6A:AD:3B:9F:FD:54:A4:82:20:0A:BE:E4:34
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/4tpJp9R-emqtO5_9VKSCIAq-5DQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.75.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:47:74:53:1c:17:09:c2:aa:e8:62:5b:a0:fb:71:a2:f4:ca:
a0:8c:3f:7c:8f:14:23:78:d4:ea:16:77:96:20:e0:38:9c:36:
d8:e6:93:64:4b:7c:57:2a:5b:8f:4e:6e:02:04:87:59:5d:02:
3e:1f:9b:37:72:2a:45:51:ca:1f:43:56:2e:94:41:92:ca:96:
07:63:c3:8b:67:f9:0d:62:7a:39:82:2f:42:39:4e:eb:6d:bd:
6b:95:ac:98:be:c3:fb:48:ad:45:c8:06:8b:11:ed:66:70:2b:
c9:99:54:70:09:0e:b9:dd:21:86:cd:7f:99:13:2f:c9:00:a9:
c7:8a:21:7c:22:da:7c:55:7b:7e:79:1b:cc:1f:c7:ee:b7:80:
5a:73:80:d8:79:c1:58:2d:95:50:fb:f2:90:36:e9:70:94:0e:
37:2d:4c:95:db:af:95:11:e4:d4:8b:4f:ca:2a:87:c1:d3:7f:
eb:88:13:0a:7c:41:f1:96:6d:fa:df:23:b1:34:d3:5c:e8:02:
e1:d7:12:e3:74:d7:f8:2c:11:f3:0a:9a:74:35:ac:e8:e3:9e:
2c:b6:fb:e6:fc:da:89:00:56:b3:c2:a8:aa:d9:6c:b7:0e:e0:
bd:a4:a9:c3:2d:a8:d8:28:e8:72:4b:d5:3d:30:22:f1:b0:d8:
56:81:26:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtnRgh+EWcodoN8SgjUOvKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODE0Y2YyY2EzZTE3OTkzNDljY2Q0YzdlNmE3NmQ2M2Y4
MzRhM2QwHhcNMjMwMTAxMTM1NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmRhNDlhN2Q0N2U3YTZhYWQzYjlmZmQ1NGE0ODIyMDBhYmVlNDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf4VH9nJLuPcnQqnbBAz6mxjTZkh
sjKd4J5b+WFElUUxAUH1ozgYCKl8oU/biOY/k59RlmnwwTCT+qbIanoKkyR1V31t
25zeqRs5Ds/lNhF38Fr73L0OCb65ZupQWbyEKftVGPnKZuLDVwtiqHHE1ylnY18g
0DnoplvK6rVxloWBmp40QjR/wFSAGHbKAW90C65PuztoGQG0jhhdySCNkqYlp5FN
L8Zr5lHr142nrvqfAa6zMtwSCjOP8btlQZ+qeYLYjy0zl9fQV3S6fK2t06WYygJt
Q1smr8z59l41mTkOFf8hHc/hLgNQhphxDb0M3tm39Op0no1Cc0Ajwx5MIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOLaSafUfnpqrTuf/VSkgiAKvuQ0MB8GA1UdIwQY
MBaAFCGBTPLKPheZNJzNTH5qdtY/g0o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgt
MjI3MDFiNGJiNDA3LzEvNHRwSnA5Ui1lbXF0TzVfOVZLU0NJQXEtNURRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgtMjI3MDFiNGJiNDA3
LzEvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWJLMA0G
CSqGSIb3DQEBCwUAA4IBAQDJR3RTHBcJwqroYlug+3Gi9MqgjD98jxQjeNTqFneW
IOA4nDbY5pNkS3xXKluPTm4CBIdZXQI+H5s3cipFUcofQ1YulEGSypYHY8OLZ/kN
Yno5gi9COU7rbb1rlayYvsP7SK1FyAaLEe1mcCvJmVRwCQ653SGGzX+ZEy/JAKnH
iiF8Itp8VXt+eRvMH8fut4Bac4DYecFYLZVQ+/KQNulwlA43LUyV26+VEeTUi0/K
KofB03/riBMKfEHxlm363yOxNNNc6ALh1xLjdNf4LBHzCpp0Nazo454stvvm/NqJ
AFazwqiq2Wy3DuC9pKnDLajYKOhyS9U9MCLxsNhWgSbR
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:18 2025 by rpki-client