Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/Nf1rHETWcCnhWhR_uM_9B2P3jb8.roa
File: Nf1rHETWcCnhWhR_uM_9B2P3jb8.roa (raw, json)
Hash identifier: pBdKIUwSvvQqLJChVbTbSEDRXa+Ll262+ax9ivbZD0o=
Subject key identifier: 35:FD:6B:1C:44:D6:70:29:E1:5A:14:7F:B8:CF:FD:07:63:F7:8D:BF
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 0194221F88ABEF97873A1298132B010AD73E
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/Nf1rHETWcCnhWhR_uM_9B2P3jb8.roa
Signing time: Wed 01 Jan 2025 13:47:59 +0000
ROA not before: Wed 01 Jan 2025 13:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207713
IP address blocks: 81.19.139.0/24 maxlen: 32
81.19.140.0/24 maxlen: 32
81.19.141.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:88:ab:ef:97:87:3a:12:98:13:2b:01:0a:d7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Jan 1 13:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35fd6b1c44d67029e15a147fb8cffd0763f78dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:04:23:34:67:a9:5b:e8:d4:25:92:01:5e:
14:ec:45:e8:57:19:85:7a:bc:7c:d9:26:6a:51:d2:
bf:ce:03:cd:e3:cc:59:22:57:85:6b:e4:91:59:53:
f2:1d:32:95:b9:15:f2:1a:19:61:a7:a4:1f:c1:6a:
c0:12:4f:b4:30:b2:dc:86:32:1c:53:98:f9:13:a3:
10:7e:1f:c7:82:5d:78:7f:cc:eb:ba:61:5f:ae:f0:
14:dd:a7:75:25:ee:19:b7:cb:59:fa:59:bc:99:1e:
df:a2:47:2e:b5:ce:33:2e:93:5b:b5:ab:0e:93:70:
9e:bf:7e:f6:93:d9:f9:7f:53:50:6c:bf:3d:65:66:
d8:06:a3:33:ce:fb:86:e9:9f:18:03:cb:c2:84:3b:
06:64:a4:d8:1b:af:42:f6:97:3b:62:74:ae:26:68:
ce:ec:6f:bf:5c:85:4b:aa:a9:af:b5:88:a3:77:f4:
b8:44:b7:d2:be:b8:c5:1e:7d:56:bb:d2:fc:3d:59:
86:46:e5:16:b6:a9:fa:99:31:de:9e:9f:b2:8c:5d:
a5:d3:01:2f:b5:f5:5c:32:e6:62:8c:a8:6f:d5:dc:
10:5e:3e:44:88:07:18:1f:42:e1:f4:b3:2d:5f:26:
37:dd:89:65:a9:67:3d:7a:1f:f7:ed:9b:72:77:40:
54:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FD:6B:1C:44:D6:70:29:E1:5A:14:7F:B8:CF:FD:07:63:F7:8D:BF
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/Nf1rHETWcCnhWhR_uM_9B2P3jb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.139.0-81.19.141.255
Signature Algorithm: sha256WithRSAEncryption
7e:e6:7e:29:90:14:2a:62:0c:6e:c1:f0:9f:43:58:a4:1c:4d:
67:1a:aa:db:63:28:55:9d:33:b5:17:f1:f6:63:f0:98:ba:1c:
1f:b0:f3:b9:e0:e7:09:46:85:a3:81:e5:20:a1:f4:17:97:e7:
20:04:a6:ab:81:75:36:b4:d9:c8:f5:61:e1:2d:5e:f9:16:15:
55:c1:f5:02:67:20:d2:e5:34:f7:f3:58:9a:f9:df:db:ad:f1:
1c:b5:fb:00:f8:87:58:07:0b:aa:a6:4d:ac:0d:4f:a1:7a:dc:
8b:ec:0c:90:46:c6:5b:0a:68:15:99:05:be:ee:fa:a7:93:5c:
34:d2:3e:97:1f:fe:cc:1c:c5:96:e3:6a:c0:e6:ab:6c:43:73:
bc:20:cb:35:be:1f:b0:db:cc:dc:d0:fa:15:1e:78:d5:03:02:
73:2f:09:f2:7d:c3:f7:1b:8b:a5:6b:1c:c3:c5:52:7d:d4:22:
0c:46:14:3b:e1:cc:75:2a:1c:7f:ba:58:82:d0:e3:55:26:d6:
e4:21:4b:02:31:aa:dc:3e:95:02:67:2b:a6:dc:b6:a7:07:c4:
26:83:37:d8:e7:5b:50:bd:69:67:58:63:4f:af:61:b0:f4:7e:
5a:27:58:b3:31:89:e6:ef:17:40:2a:05:94:66:3c:0f:d2:83:
3e:9b:29:84
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQiH4ir75eHOhKYEysBCtc+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh
N2M3NmIwHhcNMjUwMTAxMTM0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWZkNmIxYzQ0ZDY3MDI5ZTE1YTE0N2ZiOGNmZmQwNzYzZjc4ZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZYEIzRnqVvo1CWSAV4U7EXoVxmF
erx82SZqUdK/zgPN48xZIleFa+SRWVPyHTKVuRXyGhlhp6QfwWrAEk+0MLLchjIc
U5j5E6MQfh/Hgl14f8zrumFfrvAU3ad1Je4Zt8tZ+lm8mR7fokcutc4zLpNbtasO
k3Cev372k9n5f1NQbL89ZWbYBqMzzvuG6Z8YA8vChDsGZKTYG69C9pc7YnSuJmjO
7G+/XIVLqqmvtYijd/S4RLfSvrjFHn1Wu9L8PVmGRuUWtqn6mTHenp+yjF2l0wEv
tfVcMuZijKhv1dwQXj5EiAcYH0Lh9LMtXyY33YllqWc9eh/37Ztyd0BU6wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFDX9axxE1nAp4VoUf7jP/Qdj942/MB8GA1UdIwQY
MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt
MjgzZmU1NGE2ZjJmLzEvTmYxckhFVFdjQ25oV2hSX3VNXzlCMlAzamI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm
LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABRE4sD
BAFRE4wwDQYJKoZIhvcNAQELBQADggEBAH7mfimQFCpiDG7B8J9DWKQcTWcaqttj
KFWdM7UX8fZj8Ji6HB+w87ng5wlGhaOB5SCh9BeX5yAEpquBdTa02cj1YeEtXvkW
FVXB9QJnINLlNPfzWJr539ut8Ry1+wD4h1gHC6qmTawNT6F63IvsDJBGxlsKaBWZ
Bb7u+qeTXDTSPpcf/swcxZbjasDmq2xDc7wgyzW+H7DbzNzQ+hUeeNUDAnMvCfJ9
w/cbi6VrHMPFUn3UIgxGFDvhzHUqHH+6WILQ41Um1uQhSwIxqtw+lQJnK6bctqcH
xCaDN9jnW1C9aWdYY0+vYbD0flonWLMxiebvF0AqBZRmPA/Sgz6bKYQ=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:30:21 2025 by rpki-client