Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/t4wOKfZBFKXZzzCG12rDjNWCtck.roa
File: t4wOKfZBFKXZzzCG12rDjNWCtck.roa (raw, json)
Hash identifier: mvEY+dYzE/HHgzwgOuYVcJ0HNTTQPL4qHN5pglpVEdk=
Subject key identifier: B7:8C:0E:29:F6:41:14:A5:D9:CF:30:86:D7:6A:C3:8C:D5:82:B5:C9
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 019427B61006B489C48A4C10E15794C27B51
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/t4wOKfZBFKXZzzCG12rDjNWCtck.roa
Signing time: Thu 02 Jan 2025 15:50:30 +0000
ROA not before: Thu 02 Jan 2025 15:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42962
IP address blocks: 5.181.224.0/24 maxlen: 24
194.61.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:10:06:b4:89:c4:8a:4c:10:e1:57:94:c2:7b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Jan 2 15:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b78c0e29f64114a5d9cf3086d76ac38cd582b5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:23:c5:84:f6:99:4c:73:72:2d:38:2f:71:01:
27:5e:09:c0:92:26:1d:6a:5f:a9:34:4b:86:85:1a:
92:9a:fd:7d:c1:0a:ee:81:81:25:f9:a1:9d:6b:52:
fc:16:fa:8e:ec:2b:45:93:0f:22:c4:05:c3:fd:4a:
b3:5e:35:94:28:aa:28:83:ff:b9:90:20:77:1a:7c:
49:09:a7:aa:46:a8:b6:2f:1e:ec:04:d4:21:5b:ea:
b9:75:4c:00:b5:77:19:24:b4:99:1c:6e:46:7b:b1:
72:4c:cd:e6:60:b3:a1:7b:08:da:96:ef:6f:9a:a4:
14:5d:21:1b:3b:98:e3:be:9a:da:75:98:4a:ce:b4:
75:89:bb:3f:3b:20:f8:01:9b:a0:c5:e9:e8:48:2a:
bf:e7:eb:24:e7:a1:b9:82:29:d0:fd:81:65:f9:3b:
39:27:b7:c5:79:f5:52:7e:33:a2:72:ee:5a:59:11:
e5:49:7d:f6:98:f9:5a:c0:e1:9e:39:ee:b3:f3:db:
51:fe:07:fe:f8:71:21:93:1d:de:d5:84:db:c3:c6:
c9:62:33:62:98:20:ca:3e:d8:1f:e3:f7:84:0e:b5:
b9:79:e4:d6:c8:3c:f8:91:90:5a:91:8d:4a:0c:c9:
1f:15:60:a6:14:71:24:b7:dc:c8:eb:7b:b2:44:dc:
33:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8C:0E:29:F6:41:14:A5:D9:CF:30:86:D7:6A:C3:8C:D5:82:B5:C9
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/t4wOKfZBFKXZzzCG12rDjNWCtck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.224.0/24
194.61.237.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:4a:63:a3:3e:8d:10:9a:d7:af:94:05:7b:2d:7c:4d:e8:b9:
8e:cb:45:45:fe:a2:75:bf:56:b4:bc:42:b8:4d:46:bd:24:a3:
11:d6:77:c2:64:f1:e4:02:e0:8c:9e:c8:25:a1:4f:79:0d:27:
76:6b:c3:4e:7c:44:7d:04:42:fd:23:ca:ac:75:e6:da:8d:48:
ab:dd:38:a4:50:ba:6c:bb:d8:2f:74:1a:cf:8f:5a:a6:a5:b5:
59:d4:9d:af:80:c6:00:5f:21:fe:19:97:a4:e3:97:79:19:21:
db:70:6f:99:4f:96:4b:67:80:0a:44:3b:a3:0f:48:71:ff:15:
b7:d5:b2:af:70:62:b5:9c:7c:25:74:db:c7:be:0c:c7:31:7a:
4e:d4:a2:51:65:e8:58:4c:c9:3e:41:8a:27:d3:10:c5:fe:07:
c1:b3:82:a6:e6:4f:e9:87:f0:46:89:56:bd:ab:5d:5f:c2:39:
cb:68:d1:8f:a1:f2:8d:68:22:77:37:df:9b:51:e9:f0:fe:ca:
8d:03:83:99:f9:3c:2e:d6:58:78:d4:77:55:cf:39:c3:97:8b:
bf:a2:2c:b2:c6:49:d6:7b:aa:d8:6d:76:db:72:61:d8:bf:4e:
c4:0c:82:d4:1e:64:b1:17:24:5a:01:7a:bb:6b:63:f1:4c:a4:
fb:be:57:0e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQnthAGtInEikwQ4VeUwntRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5
MjU4ZjEwHhcNMjUwMTAyMTU1MDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzhjMGUyOWY2NDExNGE1ZDljZjMwODZkNzZhYzM4Y2Q1ODJiNWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiPFhPaZTHNyLTgvcQEnXgnAkiYd
al+pNEuGhRqSmv19wQrugYEl+aGda1L8FvqO7CtFkw8ixAXD/UqzXjWUKKoog/+5
kCB3GnxJCaeqRqi2Lx7sBNQhW+q5dUwAtXcZJLSZHG5Ge7FyTM3mYLOhewjalu9v
mqQUXSEbO5jjvpradZhKzrR1ibs/OyD4AZugxenoSCq/5+sk56G5ginQ/YFl+Ts5
J7fFefVSfjOicu5aWRHlSX32mPlawOGeOe6z89tR/gf++HEhkx3e1YTbw8bJYjNi
mCDKPtgf4/eEDrW5eeTWyDz4kZBakY1KDMkfFWCmFHEkt9zI63uyRNwzdQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLeMDin2QRSl2c8whtdqw4zVgrXJMB8GA1UdIwQY
MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt
Njk3OTQ4ZWE3MWY1LzEvdDR3T0tmWkJGS1haenpDRzEyckRqTldDdGNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1
LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbXgAwQA
wj3tMA0GCSqGSIb3DQEBCwUAA4IBAQAsSmOjPo0QmtevlAV7LXxN6LmOy0VF/qJ1
v1a0vEK4TUa9JKMR1nfCZPHkAuCMnsgloU95DSd2a8NOfER9BEL9I8qsdebajUir
3TikULpsu9gvdBrPj1qmpbVZ1J2vgMYAXyH+GZek45d5GSHbcG+ZT5ZLZ4AKRDuj
D0hx/xW31bKvcGK1nHwldNvHvgzHMXpO1KJRZehYTMk+QYon0xDF/gfBs4Km5k/p
h/BGiVa9q11fwjnLaNGPofKNaCJ3N9+bUenw/sqNA4OZ+Twu1lh41HdVzznDl4u/
oiyyxknWe6rYbXbbcmHYv07EDILUHmSxFyRaAXq7a2PxTKT7vlcO
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:40:41 2025 by rpki-client