Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/3sgJ0XKOjFsTN20Wv5a5Z60t9uA.roa
File: 3sgJ0XKOjFsTN20Wv5a5Z60t9uA.roa (raw, json)
Hash identifier: +d7gGRFPujMuR8tRn3YHDPeJYnC/y9CaLNMs4ldlR0U=
Subject key identifier: DE:C8:09:D1:72:8E:8C:5B:13:37:6D:16:BF:96:B9:67:AD:2D:F6:E0
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019422FBCEDAC9A663DFD4A08E533A5C0F19
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/3sgJ0XKOjFsTN20Wv5a5Z60t9uA.roa
Signing time: Wed 01 Jan 2025 17:48:35 +0000
ROA not before: Wed 01 Jan 2025 17:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212249
IP address blocks: 141.98.113.0/24 maxlen: 24
141.98.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ce:da:c9:a6:63:df:d4:a0:8e:53:3a:5c:0f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 17:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dec809d1728e8c5b13376d16bf96b967ad2df6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:01:c1:3c:cd:bb:e9:47:ee:b1:50:12:b7:12:
77:57:39:76:eb:51:e6:f4:ea:e0:8c:5f:11:6d:a2:
eb:63:03:bd:5e:c3:d8:a7:35:dc:c6:25:3d:46:90:
83:3a:a5:65:38:7f:7c:46:04:26:e5:78:0e:50:c5:
f4:1e:58:78:0f:a1:4a:f0:b1:28:86:a8:05:4a:3d:
46:e8:68:44:06:91:b8:64:41:7e:35:20:ec:61:28:
2c:c2:c6:96:f9:81:78:de:33:dd:50:06:40:b1:e2:
68:f5:18:45:f9:fa:5f:9c:38:b8:39:44:15:b7:ea:
36:df:b7:37:dd:be:9a:bb:ce:da:9b:f7:eb:23:53:
e0:5c:44:c1:0d:15:35:b4:c1:b7:1d:4e:99:ce:3d:
06:12:a8:39:6a:39:35:9a:af:f2:dc:c7:40:5e:42:
c7:22:0f:56:d2:83:73:98:46:25:66:9f:70:ce:ab:
83:fa:5d:09:30:c9:cd:19:ac:fd:d2:d4:21:23:cf:
eb:fb:b2:dc:0e:8b:9b:f9:08:26:a4:59:88:87:e4:
dd:03:62:09:da:17:1a:dc:12:a9:72:da:ee:60:92:
6c:75:c2:61:49:7e:27:98:96:d7:b9:18:d2:26:29:
6b:c5:86:e3:d2:67:4a:b1:a6:c7:13:74:61:e5:00:
c0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C8:09:D1:72:8E:8C:5B:13:37:6D:16:BF:96:B9:67:AD:2D:F6:E0
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/3sgJ0XKOjFsTN20Wv5a5Z60t9uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.113.0-141.98.114.255
Signature Algorithm: sha256WithRSAEncryption
7b:2b:21:dd:e4:19:1d:9c:e9:c7:58:dc:4c:fa:6d:6c:d1:44:
e7:6b:60:28:37:66:a8:ee:c4:02:06:cd:9d:31:3d:1a:ce:e3:
27:b2:38:80:94:2d:12:76:8b:1b:e6:71:bf:c3:cb:10:ad:97:
27:ae:77:85:61:6a:1b:35:af:82:62:e2:b7:98:30:52:d2:d8:
45:bb:6d:b5:0b:f5:26:87:84:11:dd:6d:a3:d3:08:a0:d5:0f:
db:78:2e:c4:7d:ff:1e:e6:2b:37:4b:51:e8:08:90:68:32:fb:
01:d5:f8:3a:d0:db:07:60:c0:a8:25:6e:e0:8b:03:dc:06:19:
dd:0a:b3:1d:9a:0b:33:78:f3:1f:00:f0:4a:44:4c:05:f7:9d:
9c:e9:c3:0e:a8:f0:30:03:e1:e1:1e:72:fe:db:03:d5:14:dc:
5d:16:f2:22:4a:f2:fe:53:11:92:31:d0:8f:b1:8c:b3:d1:d1:
66:a9:91:56:eb:a7:6e:8e:10:0d:3e:b5:d8:f5:76:9f:50:73:
55:3e:3d:1a:92:44:59:b8:19:f1:12:40:de:9d:c4:07:33:3d:
ed:f8:f4:7f:79:48:fb:dc:29:78:3e:3d:80:04:5c:a9:f8:67:
d6:ca:b5:29:27:ec:82:e8:9e:69:8c:f1:fa:09:fb:61:2b:21:
9e:39:72:86
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQi+87ayaZj39SgjlM6XA8ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTUwOWIzM2RhNTVmM2U1ZDUyODNlYjYyMWQwZDM1ZDdh
ZWVkNWMwHhcNMjUwMTAxMTc0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWM4MDlkMTcyOGU4YzViMTMzNzZkMTZiZjk2Yjk2N2FkMmRmNmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gHBPM276UfusVAStxJ3Vzl261Hm
9OrgjF8RbaLrYwO9XsPYpzXcxiU9RpCDOqVlOH98RgQm5XgOUMX0Hlh4D6FK8LEo
hqgFSj1G6GhEBpG4ZEF+NSDsYSgswsaW+YF43jPdUAZAseJo9RhF+fpfnDi4OUQV
t+o237c33b6au87am/frI1PgXETBDRU1tMG3HU6Zzj0GEqg5ajk1mq/y3MdAXkLH
Ig9W0oNzmEYlZp9wzquD+l0JMMnNGaz90tQhI8/r+7LcDoub+QgmpFmIh+TdA2IJ
2hca3BKpctruYJJsdcJhSX4nmJbXuRjSJilrxYbj0mdKsabHE3Rh5QDACwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFN7ICdFyjoxbEzdtFr+WuWetLfbgMB8GA1UdIwQY
MBaAFE+VCbM9pV8+XVKD62IdDTXXru1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQt
NjAxMDdlMmI1MTA5LzEvM3NnSjBYS09qRnNUTjIwV3Y1YTVaNjB0OXVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQtNjAxMDdlMmI1MTA5
LzEvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACNYnED
BACNYnIwDQYJKoZIhvcNAQELBQADggEBAHsrId3kGR2c6cdY3Ez6bWzRROdrYCg3
ZqjuxAIGzZ0xPRrO4yeyOICULRJ2ixvmcb/DyxCtlyeud4Vhahs1r4Ji4reYMFLS
2EW7bbUL9SaHhBHdbaPTCKDVD9t4LsR9/x7mKzdLUegIkGgy+wHV+DrQ2wdgwKgl
buCLA9wGGd0Ksx2aCzN48x8A8EpETAX3nZzpww6o8DAD4eEecv7bA9UU3F0W8iJK
8v5TEZIx0I+xjLPR0WapkVbrp26OEA0+tdj1dp9Qc1U+PRqSRFm4GfESQN6dxAcz
Pe349H95SPvcKXg+PYAEXKn4Z9bKtSkn7ILonmmM8foJ+2ErIZ45coY=
-----END CERTIFICATE-----
Generated at Fri Apr 18 12:38:44 2025 by rpki-client