Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/E0T1YER4XZmlMg6KzoWjPGGs-5U.roa
File: E0T1YER4XZmlMg6KzoWjPGGs-5U.roa (raw, json)
Hash identifier: Y4442q1kqePthZgMHh3t2cd9DquW+hdbjFwwwkoxShc=
Subject key identifier: 13:44:F5:60:44:78:5D:99:A5:32:0E:8A:CE:85:A3:3C:61:AC:FB:95
Certificate issuer: /CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Certificate serial: 018CC7948B57B69B9F908A4AA34D7BF7470A
Authority key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/E0T1YER4XZmlMg6KzoWjPGGs-5U.roa
Signing time: Tue 02 Jan 2024 00:30:50 +0000
ROA not before: Tue 02 Jan 2024 00:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12757
IP address blocks: 194.0.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:8b:57:b6:9b:9f:90:8a:4a:a3:4d:7b:f7:47:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Validity
Not Before: Jan 2 00:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1344f56044785d99a5320e8ace85a33c61acfb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:d7:2b:76:dd:6e:49:d9:d6:90:2e:04:85:
11:8d:b6:87:98:82:40:1c:7b:d0:15:9a:f8:a8:71:
6e:41:1e:3b:71:a9:f3:6d:3f:62:98:05:e0:ed:99:
59:fc:9f:3e:8b:d7:f4:b5:3b:f6:35:01:87:69:a3:
08:98:cc:f0:ac:0c:a6:a8:c6:8d:f1:b2:c1:a2:cf:
4e:10:11:30:4e:42:74:eb:d9:89:2e:2f:91:11:31:
1a:b8:c1:4c:86:6f:56:7a:ba:cf:8e:d6:ad:8d:ab:
49:68:e8:ff:53:45:a5:d6:d0:2f:36:4b:45:22:38:
15:2c:d7:48:a8:ef:19:28:46:4c:f7:24:0f:59:85:
64:a9:93:4f:a7:f1:1b:24:d9:69:bc:d8:57:70:e8:
5b:c8:da:3f:6d:70:74:14:ec:d4:3b:89:b1:c6:84:
6c:37:93:5d:f6:d3:f3:c7:c3:2d:63:70:ec:ec:5a:
7b:7c:c5:64:66:d5:d9:b7:22:67:31:ae:d9:b7:7c:
69:29:b3:4c:16:ce:ae:59:e3:6a:03:67:cb:a5:8a:
8d:06:97:3d:a3:6c:27:77:e2:e3:9b:88:a2:76:3c:
e3:cf:f5:85:29:5a:f2:3c:e7:6a:cc:ff:de:87:48:
c8:a7:bd:c1:ca:30:c9:1b:be:c8:48:e3:9e:a8:8f:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:44:F5:60:44:78:5D:99:A5:32:0E:8A:CE:85:A3:3C:61:AC:FB:95
X509v3 Authority Key Identifier:
keyid:12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/E0T1YER4XZmlMg6KzoWjPGGs-5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.51.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ea:06:be:df:9e:e4:99:42:d7:8b:f3:87:8e:ea:d6:29:a7:
5f:ca:a2:37:c2:1e:3b:b8:9d:a2:50:78:95:3e:98:59:f6:b8:
56:a1:df:a7:37:84:77:1c:c8:62:81:b1:a3:25:2c:50:7e:08:
80:e4:b2:08:a3:ca:e3:d3:e8:65:ef:de:70:bf:c5:dd:47:fa:
ed:43:ff:a4:ab:d7:92:2d:36:10:26:75:b8:3e:ed:54:6e:47:
ae:c2:cf:a3:f6:91:52:2a:ab:11:75:fe:f5:f0:93:00:42:52:
fe:4b:c8:cb:89:80:e5:ea:c0:aa:47:9c:74:27:9c:ee:13:a0:
0d:55:67:dc:e8:16:6c:df:a2:29:fb:7a:95:37:32:27:d6:b3:
a3:e6:d1:47:26:17:e4:7a:cc:c3:3e:11:66:12:b5:fc:ff:d8:
6c:87:30:dd:b3:7d:21:9d:ec:38:d5:51:60:64:81:8e:bb:ed:
0c:24:b6:a0:e0:2a:15:5c:1c:d4:d1:bc:3b:2c:04:b4:71:19:
a5:4b:9b:ea:81:14:c9:0b:69:58:66:9c:c8:22:2d:dc:cf:ed:
5c:9f:70:42:d4:67:4f:29:5e:45:db:3f:0a:b6:e4:3c:0e:b7:
a4:bf:8d:ef:e8:c8:75:c8:95:6f:6a:d9:52:6c:eb:f2:ab:46:
bd:0c:4e:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlItXtpufkIpKo01790cKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTUxYmY1N2Y1MzE2YjJkZDVjZDhhM2Y3OTg1MjdlYWMx
NGI3NzQwHhcNMjQwMTAyMDAzMDUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzQ0ZjU2MDQ0Nzg1ZDk5YTUzMjBlOGFjZTg1YTMzYzYxYWNmYjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgrXK3bdbknZ1pAuBIURjbaHmIJA
HHvQFZr4qHFuQR47canzbT9imAXg7ZlZ/J8+i9f0tTv2NQGHaaMImMzwrAymqMaN
8bLBos9OEBEwTkJ069mJLi+RETEauMFMhm9WerrPjtatjatJaOj/U0Wl1tAvNktF
IjgVLNdIqO8ZKEZM9yQPWYVkqZNPp/EbJNlpvNhXcOhbyNo/bXB0FOzUO4mxxoRs
N5Nd9tPzx8MtY3Ds7Fp7fMVkZtXZtyJnMa7Zt3xpKbNMFs6uWeNqA2fLpYqNBpc9
o2wnd+Ljm4iidjzjz/WFKVryPOdqzP/eh0jIp73ByjDJG77ISOOeqI8UNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBNE9WBEeF2ZpTIOis6FozxhrPuVMB8GA1UdIwQY
MBaAFBIVG/V/Uxay3VzYo/eYUn6sFLd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhVYjlYOVRGckxkWE5pajk1aFNmcXdVdDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jNTBkMGMtMzg4ZS00YzAwLWJlZjQt
NGRjNmE0ZjRlZTU1LzEvRTBUMVlFUjRYWm1sTWc2S3pvV2pQR0dzLTVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jNTBkMGMtMzg4ZS00YzAwLWJlZjQtNGRjNmE0ZjRlZTU1
LzEvRWhVYjlYOVRGckxkWE5pajk1aFNmcXdVdDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgAzMA0G
CSqGSIb3DQEBCwUAA4IBAQBq6ga+357kmULXi/OHjurWKadfyqI3wh47uJ2iUHiV
PphZ9rhWod+nN4R3HMhigbGjJSxQfgiA5LIIo8rj0+hl795wv8XdR/rtQ/+kq9eS
LTYQJnW4Pu1Ubkeuws+j9pFSKqsRdf718JMAQlL+S8jLiYDl6sCqR5x0J5zuE6AN
VWfc6BZs36Ip+3qVNzIn1rOj5tFHJhfkeszDPhFmErX8/9hshzDds30hnew41VFg
ZIGOu+0MJLag4CoVXBzU0bw7LAS0cRmlS5vqgRTJC2lYZpzIIi3cz+1cn3BC1GdP
KV5F2z8KtuQ8Drekv43v6Mh1yJVvatlSbOvyq0a9DE4w
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:14 2025 by rpki-client