Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/L3NZE3diqCfrOMqlaqYV4hdJSf4.roa
File: L3NZE3diqCfrOMqlaqYV4hdJSf4.roa (raw, json)
Hash identifier: vcQOyWenVbLS69il7j69IF/EsJjMjN7DJNMQo/ozyO8=
Subject key identifier: 2F:73:59:13:77:62:A8:27:EB:38:CA:A5:6A:A6:15:E2:17:49:49:FE
Certificate issuer: /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial: 0194244506E3DC5AA424C92D7860BBE1B312
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/L3NZE3diqCfrOMqlaqYV4hdJSf4.roa
Signing time: Wed 01 Jan 2025 23:48:11 +0000
ROA not before: Wed 01 Jan 2025 23:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 83.137.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:06:e3:dc:5a:a4:24:c9:2d:78:60:bb:e1:b3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Validity
Not Before: Jan 1 23:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f7359137762a827eb38caa56aa615e2174949fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:db:a7:9b:8a:3c:f9:2c:ff:30:eb:69:11:50:
ee:07:ae:ed:5e:ea:95:cf:db:0a:21:79:32:45:68:
b5:fd:fc:79:3c:fa:71:bd:70:0f:0a:fd:95:3f:ef:
7d:06:7e:17:a3:c7:27:b4:c3:fa:a3:ee:8d:a2:91:
49:4b:ef:d7:32:43:04:62:39:ff:67:08:2b:4f:51:
af:23:5e:58:7d:70:03:0e:d8:aa:80:c0:3b:de:56:
01:7c:3e:ba:eb:fb:03:f5:e0:fc:9c:1a:1e:8e:56:
f6:5e:14:63:f2:11:49:18:d9:0e:95:b4:46:ab:d2:
80:15:65:7f:85:2c:eb:f4:66:fb:51:ac:b5:63:d8:
3b:a6:57:31:e8:04:4b:d1:1b:e1:42:81:a0:e9:a6:
b9:7e:31:70:10:32:22:9b:9d:cb:0c:fe:48:73:07:
87:9d:cf:f1:73:6b:ac:90:f7:1c:0d:4a:ea:32:41:
ff:8e:41:6a:6a:e8:4f:f2:84:d9:11:4e:15:10:7c:
c8:93:de:4c:57:63:b5:c6:c5:c2:b7:ac:d5:82:73:
e7:04:94:55:a2:5a:bc:e6:be:a1:72:5a:cb:d1:1b:
e6:8b:5b:b5:c9:d5:6f:9b:21:0c:a1:da:64:d5:19:
62:f4:9f:45:15:b6:27:b9:20:be:e5:b5:7b:97:50:
91:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:73:59:13:77:62:A8:27:EB:38:CA:A5:6A:A6:15:E2:17:49:49:FE
X509v3 Authority Key Identifier:
keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/L3NZE3diqCfrOMqlaqYV4hdJSf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.245.0/24
Signature Algorithm: sha256WithRSAEncryption
49:4d:eb:d4:87:65:27:e8:8a:ee:d1:9e:79:8f:a4:79:5f:3c:
b6:4c:b5:25:ac:a6:15:64:7a:94:23:7b:ec:2c:df:0a:e1:fe:
79:cb:27:fc:2d:69:26:7b:c3:f0:98:62:5e:be:70:21:1e:65:
5c:3b:34:8a:06:86:79:fb:0e:62:0e:b1:f0:5f:9b:cf:a6:ed:
ae:f3:6a:89:f3:c9:1c:15:ab:17:31:bc:19:0c:c0:a2:88:67:
dd:7c:95:16:ec:27:ea:42:6e:ee:fe:30:60:c5:98:85:3e:5f:
42:83:fb:96:99:4c:69:cd:18:69:02:6c:26:2c:6d:9f:47:89:
1f:dc:a6:48:db:14:6e:40:f1:ee:6f:84:1e:59:b4:13:de:12:
71:97:1c:11:21:66:6a:af:f6:b4:e6:e7:57:71:b3:df:81:58:
87:d9:3c:62:31:5a:1d:dd:0e:d6:13:7e:df:33:7c:a3:a5:da:
ba:cb:ac:75:77:d3:ac:1a:63:39:74:b7:8f:a6:39:a5:a2:c3:
7e:4d:18:8d:a0:c9:f5:7a:5a:ef:71:ea:93:1f:98:7b:60:2e:
29:fa:dc:85:a8:6a:71:de:7c:8f:39:ba:36:20:16:51:01:b6:
34:f3:03:8f:22:70:ff:c7:df:49:b1:f8:05:a5:f7:9d:90:5e:
e1:99:5a:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRQbj3FqkJMkteGC74bMSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZDlhMGE0YjU3YTBlZWM3YzRlNTJhMTE5ZGI0YjFjNjU2
ZjRkYjQwHhcNMjUwMTAxMjM0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjczNTkxMzc3NjJhODI3ZWIzOGNhYTU2YWE2MTVlMjE3NDk0OWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdunm4o8+Sz/MOtpEVDuB67tXuqV
z9sKIXkyRWi1/fx5PPpxvXAPCv2VP+99Bn4Xo8cntMP6o+6NopFJS+/XMkMEYjn/
ZwgrT1GvI15YfXADDtiqgMA73lYBfD666/sD9eD8nBoejlb2XhRj8hFJGNkOlbRG
q9KAFWV/hSzr9Gb7Uay1Y9g7plcx6ARL0RvhQoGg6aa5fjFwEDIim53LDP5IcweH
nc/xc2uskPccDUrqMkH/jkFqauhP8oTZEU4VEHzIk95MV2O1xsXCt6zVgnPnBJRV
olq85r6hclrL0Rvmi1u1ydVvmyEModpk1Rli9J9FFbYnuSC+5bV7l1CRPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC9zWRN3Yqgn6zjKpWqmFeIXSUn+MB8GA1UdIwQY
MBaAFEbZoKS1eg7sfE5SoRnbSxxlb020MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQt
MmVlMmI3Mjk1ZGZmLzEvTDNOWkUzZGlxQ2ZyT01xbGFxWVY0aGRKU2Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQtMmVlMmI3Mjk1ZGZm
LzEvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU4n1MA0G
CSqGSIb3DQEBCwUAA4IBAQBJTevUh2Un6Iru0Z55j6R5Xzy2TLUlrKYVZHqUI3vs
LN8K4f55yyf8LWkme8PwmGJevnAhHmVcOzSKBoZ5+w5iDrHwX5vPpu2u82qJ88kc
FasXMbwZDMCiiGfdfJUW7CfqQm7u/jBgxZiFPl9Cg/uWmUxpzRhpAmwmLG2fR4kf
3KZI2xRuQPHub4QeWbQT3hJxlxwRIWZqr/a05udXcbPfgViH2TxiMVod3Q7WE37f
M3yjpdq6y6x1d9OsGmM5dLePpjmlosN+TRiNoMn1elrvceqTH5h7YC4p+tyFqGpx
3nyPObo2IBZRAbY08wOPInD/x99JsfgFpfedkF7hmVow
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:47:54 2025 by rpki-client