Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/lXukILbe6VXJ7h_Wf9WW21z12mw.roa
File: lXukILbe6VXJ7h_Wf9WW21z12mw.roa (raw, json)
Hash identifier: +Zzql9kBnSussoen1LHmVUwZhXfkIG96Hh/jt0AAOuY=
Subject key identifier: 95:7B:A4:20:B6:DE:E9:55:C9:EE:1F:D6:7F:D5:96:DB:5C:F5:DA:6C
Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial: 0194258FBDEC74C8A62DD8ABA49300C92BD9
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/lXukILbe6VXJ7h_Wf9WW21z12mw.roa
Signing time: Thu 02 Jan 2025 05:49:24 +0000
ROA not before: Thu 02 Jan 2025 05:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42873
IP address blocks: 192.129.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:bd:ec:74:c8:a6:2d:d8:ab:a4:93:00:c9:2b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Validity
Not Before: Jan 2 05:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=957ba420b6dee955c9ee1fd67fd596db5cf5da6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f8:e8:01:a4:06:7c:ac:c8:4a:21:7f:cc:50:
33:20:86:fe:d5:22:d6:a4:8d:94:37:32:4d:7c:1c:
80:59:80:9e:5e:42:fb:c0:61:e9:f8:15:21:42:1e:
9d:12:e2:7a:39:02:3a:30:50:62:02:c8:20:1d:16:
1b:45:a8:59:5b:dd:b2:0e:50:e9:0f:a3:55:92:3f:
f4:90:15:2b:ae:bb:48:11:71:8f:89:f2:62:fb:b9:
7e:77:3c:45:c0:45:5a:be:fc:a5:14:b4:c4:d6:25:
e5:5e:be:a4:f4:28:f9:1e:40:29:87:e9:c7:07:90:
0c:d2:28:0c:ad:66:f1:54:a5:3b:f9:f2:22:32:8a:
d9:7e:9d:22:7e:a2:63:7f:4b:3e:ba:a9:4b:72:6f:
07:b1:50:8a:53:df:df:5e:5f:c7:c5:91:25:27:90:
7a:d8:9f:33:83:2a:15:7d:49:3c:3d:49:02:7c:e5:
75:ab:75:b1:ac:95:e6:4f:26:29:3e:14:66:45:b6:
1f:41:d9:7d:61:d9:b9:e9:a4:75:aa:6f:79:79:2b:
e6:fc:11:be:5d:f1:9d:b7:66:77:77:a4:fe:ca:d2:
a6:83:0c:df:c1:c9:38:d5:c9:55:a7:07:10:64:11:
d0:92:cc:20:d9:2f:70:63:5e:3c:ec:0b:74:89:f4:
f3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7B:A4:20:B6:DE:E9:55:C9:EE:1F:D6:7F:D5:96:DB:5C:F5:DA:6C
X509v3 Authority Key Identifier:
keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/lXukILbe6VXJ7h_Wf9WW21z12mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.129.30.0/24
Signature Algorithm: sha256WithRSAEncryption
41:31:b2:1d:2c:c5:0a:fe:27:50:9c:07:9e:e9:32:bd:8a:7e:
af:61:f7:68:ed:f0:98:9f:1f:73:f5:19:11:69:f6:31:5e:1b:
ae:6a:37:76:62:fa:7a:ed:17:e9:5a:44:97:55:d8:a1:a7:1e:
2b:6d:d9:8e:0c:43:80:b7:75:b6:5b:5a:19:8b:0a:ba:e9:48:
f9:b7:09:3f:ee:f3:7e:84:e4:38:3c:04:9d:3c:cf:83:e4:80:
5d:18:66:97:7a:85:a7:8a:54:d9:ef:9e:4c:33:25:f4:c7:1c:
3a:65:64:ea:47:a3:d3:65:16:6e:79:81:0a:8a:19:94:b7:04:
36:17:8e:81:9f:c6:e7:82:00:ac:2d:c4:0f:58:d2:2c:48:4b:
12:89:bb:b4:25:a5:c0:bb:f1:6e:5b:40:83:75:c3:bb:24:cf:
fa:55:f4:66:cc:c0:46:56:1b:89:66:3f:d2:ac:a2:99:7c:93:
76:85:b4:0d:68:93:77:e6:29:57:0e:a3:c3:74:76:9e:13:6d:
de:3e:e1:c2:50:c7:7f:5f:58:c8:d3:2c:fb:49:ed:71:8f:06:
6f:24:42:d7:d3:30:13:b1:1c:a1:8e:30:da:53:28:14:69:50:
59:39:5f:50:b5:5e:48:8b:7b:47:ea:0d:bd:a8:7e:8b:d1:00:
6c:75:72:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj73sdMimLdirpJMAySvZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OTk5MDNkYWI4NWY2YTU5NzcyYjNlZGZkNGJmMGU0OTFh
ZjU3YzQwHhcNMjUwMTAyMDU0OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTdiYTQyMGI2ZGVlOTU1YzllZTFmZDY3ZmQ1OTZkYjVjZjVkYTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fjoAaQGfKzISiF/zFAzIIb+1SLW
pI2UNzJNfByAWYCeXkL7wGHp+BUhQh6dEuJ6OQI6MFBiAsggHRYbRahZW92yDlDp
D6NVkj/0kBUrrrtIEXGPifJi+7l+dzxFwEVavvylFLTE1iXlXr6k9Cj5HkAph+nH
B5AM0igMrWbxVKU7+fIiMorZfp0ifqJjf0s+uqlLcm8HsVCKU9/fXl/HxZElJ5B6
2J8zgyoVfUk8PUkCfOV1q3WxrJXmTyYpPhRmRbYfQdl9Ydm56aR1qm95eSvm/BG+
XfGdt2Z3d6T+ytKmgwzfwck41clVpwcQZBHQkswg2S9wY1487At0ifTzgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJV7pCC23ulVye4f1n/Vlttc9dpsMB8GA1UdIwQY
MBaAFKSZkD2rhfall3Kz7f1L8OSRr1fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQt
NTdlYzEyZTg2NDFlLzEvbFh1a0lMYmU2VlhKN2hfV2Y5V1cyMXoxMm13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQtNTdlYzEyZTg2NDFl
LzEvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIEeMA0G
CSqGSIb3DQEBCwUAA4IBAQBBMbIdLMUK/idQnAee6TK9in6vYfdo7fCYnx9z9RkR
afYxXhuuajd2Yvp67RfpWkSXVdihpx4rbdmODEOAt3W2W1oZiwq66Uj5twk/7vN+
hOQ4PASdPM+D5IBdGGaXeoWnilTZ755MMyX0xxw6ZWTqR6PTZRZueYEKihmUtwQ2
F46Bn8bnggCsLcQPWNIsSEsSibu0JaXAu/FuW0CDdcO7JM/6VfRmzMBGVhuJZj/S
rKKZfJN2hbQNaJN35ilXDqPDdHaeE23ePuHCUMd/X1jI0yz7Se1xjwZvJELX0zAT
sRyhjjDaUygUaVBZOV9QtV5Ii3tH6g29qH6L0QBsdXJq
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:40 2025 by rpki-client