Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/svqhEadqQneC1t0CnWRhArIDy88.roa
File: svqhEadqQneC1t0CnWRhArIDy88.roa (raw, json)
Hash identifier: wDWr8fm+YsGh80CsrJRjklW0EmjLP+8q2iY6GB/kCYA=
Subject key identifier: B2:FA:A1:11:A7:6A:42:77:82:D6:DD:02:9D:64:61:02:B2:03:CB:CF
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 018689BAA909BD6D5AD7BDA51149FDB2F7BD
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/svqhEadqQneC1t0CnWRhArIDy88.roa
Signing time: Sat 25 Feb 2023 17:59:16 +0000
ROA not before: Sat 25 Feb 2023 17:59:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209139
IP address blocks: 141.105.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:89:ba:a9:09:bd:6d:5a:d7:bd:a5:11:49:fd:b2:f7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Feb 25 17:59:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2faa111a76a427782d6dd029d646102b203cbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:d7:20:ae:32:7c:e4:d0:94:d8:8d:8c:91:
8b:35:89:f1:be:d9:51:bf:aa:46:8d:d3:aa:04:b6:
75:fe:64:c0:2e:a3:ec:d5:2a:28:43:34:73:ff:89:
ea:23:98:23:0b:a1:72:77:21:cf:a4:76:e7:bb:e7:
9d:bb:b5:5c:14:f0:c8:45:25:be:76:05:fe:d8:99:
88:47:34:74:ad:18:9a:56:45:5f:65:18:87:0e:71:
48:46:ae:f0:47:88:5b:19:e2:ef:a8:1c:14:42:fd:
ba:ac:04:73:d9:4e:81:89:1e:b3:bd:ca:b4:ce:eb:
62:fe:96:82:0f:fa:8b:63:8c:2a:10:a7:8b:c9:28:
29:18:1a:6a:67:da:cd:c8:bf:c8:48:8b:cd:aa:28:
74:c3:c6:41:1b:bd:78:f0:f0:e7:f9:95:45:98:b1:
b2:f6:34:bc:ce:98:7f:a1:fe:10:3e:85:c9:5d:39:
14:c3:55:c2:89:5e:82:25:4c:2f:4d:09:01:24:62:
36:9f:47:62:79:f0:e5:52:31:ae:dc:6b:de:10:06:
08:cf:77:30:da:11:ae:0b:5f:ca:e9:ea:b2:3c:f8:
5a:12:08:30:c0:aa:56:5e:5d:b3:f0:ef:e4:b8:59:
2c:8c:8e:de:c3:20:ec:f1:c2:5c:e2:f3:b5:5a:56:
e8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FA:A1:11:A7:6A:42:77:82:D6:DD:02:9D:64:61:02:B2:03:CB:CF
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/svqhEadqQneC1t0CnWRhArIDy88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.137.0/24
Signature Algorithm: sha256WithRSAEncryption
94:80:2b:92:72:6d:dd:86:8e:bc:cd:d9:da:83:ae:9e:04:63:
91:32:7a:ba:9b:24:27:9b:c8:80:dd:7e:c6:0a:62:cd:9c:e1:
3b:50:0b:87:86:a7:28:d1:18:73:1e:5b:df:87:f3:6e:71:0f:
54:c1:04:33:86:0d:37:98:81:db:94:d3:38:43:5c:b4:eb:93:
f3:14:95:23:e0:93:53:22:c2:eb:65:20:05:ba:80:1a:ee:95:
1e:9d:46:37:15:ec:9d:be:ca:58:a5:9f:2e:89:f2:85:61:e0:
f1:07:e2:04:65:2c:56:82:4f:3e:b1:f6:30:9b:68:4a:e0:68:
ed:62:6a:43:85:34:14:75:0b:55:a2:d9:1f:a4:c8:a6:89:ad:
bc:bd:29:bc:64:69:2d:c9:ac:cf:86:b9:ad:99:77:8f:a9:e8:
1e:f4:1c:62:cd:4e:ef:7b:e9:a1:f7:74:55:77:8b:e7:0b:4e:
a4:64:a1:f5:b9:77:b7:b6:38:cf:e2:bb:85:2c:c3:8d:5e:6f:
ac:70:2c:3e:1a:25:a0:92:1c:98:47:60:ee:db:c8:a8:e1:7d:
6b:19:75:a0:7b:ec:06:dc:84:cd:4a:1e:35:09:c9:34:3a:e1:
29:18:bb:b4:9d:74:ef:2b:9b:ae:3e:ea:aa:65:fb:03:9c:92:
79:27:d2:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaJuqkJvW1a172lEUn9sve9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjViYWUyNTc3OGJlZWQ4ODgwYzA4ZGYyZDNmMzdmYzM3
YWJjMWUwHhcNMjMwMjI1MTc1OTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmZhYTExMWE3NmE0Mjc3ODJkNmRkMDI5ZDY0NjEwMmIyMDNjYmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM7XIK4yfOTQlNiNjJGLNYnxvtlR
v6pGjdOqBLZ1/mTALqPs1SooQzRz/4nqI5gjC6FydyHPpHbnu+edu7VcFPDIRSW+
dgX+2JmIRzR0rRiaVkVfZRiHDnFIRq7wR4hbGeLvqBwUQv26rARz2U6BiR6zvcq0
zuti/paCD/qLY4wqEKeLySgpGBpqZ9rNyL/ISIvNqih0w8ZBG7148PDn+ZVFmLGy
9jS8zph/of4QPoXJXTkUw1XCiV6CJUwvTQkBJGI2n0diefDlUjGu3GveEAYIz3cw
2hGuC1/K6eqyPPhaEggwwKpWXl2z8O/kuFksjI7ewyDs8cJc4vO1WlboAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLL6oRGnakJ3gtbdAp1kYQKyA8vPMB8GA1UdIwQY
MBaAFKhluuJXeL7tiIDAjfLT83/DerweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTkt
MWI2Zjc1MGNmOWEyLzEvc3ZxaEVhZHFRbmVDMXQwQ25XUmhBcklEeTg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTktMWI2Zjc1MGNmOWEy
LzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWmJMA0G
CSqGSIb3DQEBCwUAA4IBAQCUgCuScm3dho68zdnag66eBGORMnq6myQnm8iA3X7G
CmLNnOE7UAuHhqco0RhzHlvfh/NucQ9UwQQzhg03mIHblNM4Q1y065PzFJUj4JNT
IsLrZSAFuoAa7pUenUY3FeydvspYpZ8uifKFYeDxB+IEZSxWgk8+sfYwm2hK4Gjt
YmpDhTQUdQtVotkfpMimia28vSm8ZGktyazPhrmtmXePqege9BxizU7ve+mh93RV
d4vnC06kZKH1uXe3tjjP4ruFLMONXm+scCw+GiWgkhyYR2Du28io4X1rGXWge+wG
3ITNSh41Cck0OuEpGLu0nXTvK5uuPuqqZfsDnJJ5J9JI
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:07:05 2025 by rpki-client