Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/h3Mqndko6mGvpRk4qOY-z3_h_VY.roa
File: h3Mqndko6mGvpRk4qOY-z3_h_VY.roa (raw, json)
Hash identifier: Ob6Q3WhQDMnTLNNuO91dMoC/X/tiyvxnurfHNTc4wL4=
Subject key identifier: 87:73:2A:9D:D9:28:EA:61:AF:A5:19:38:A8:E6:3E:CF:7F:E1:FD:56
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 019427B6629C575E6CCA563EF8720D9ACD44
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/h3Mqndko6mGvpRk4qOY-z3_h_VY.roa
Signing time: Thu 02 Jan 2025 15:50:51 +0000
ROA not before: Thu 02 Jan 2025 15:50:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 185.101.170.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:62:9c:57:5e:6c:ca:56:3e:f8:72:0d:9a:cd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Jan 2 15:50:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87732a9dd928ea61afa51938a8e63ecf7fe1fd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:89:45:b5:60:38:a7:30:56:e8:45:22:f0:b9:
83:bd:c7:d3:23:e5:3a:e1:7d:ad:7e:f5:0a:f5:54:
3a:f5:1d:22:69:89:03:5f:c8:8d:30:b0:33:44:a0:
39:02:a9:27:3a:8e:e1:f5:47:92:ed:68:c7:64:c0:
b5:61:49:47:9e:8a:e6:f1:bb:dd:da:9f:5a:77:d1:
38:23:05:06:bb:1d:6e:6b:03:c9:ab:e0:4f:93:01:
2c:c7:7a:98:e7:83:48:89:eb:d1:51:16:56:25:b4:
7d:32:8e:99:7a:7f:1f:10:5b:22:23:b3:a5:eb:81:
f5:5c:89:6e:99:56:f4:23:6d:d0:f6:a0:5d:a2:60:
57:c7:b5:37:e8:e4:98:6e:95:f0:39:3e:04:d2:00:
21:7d:3a:bc:5f:3b:d8:7e:8d:ef:9b:f2:f8:d5:51:
e8:57:3c:62:d4:3e:3d:6c:4a:4d:28:11:94:81:1e:
ce:95:de:fb:bc:c4:f1:91:af:71:96:9c:2e:76:97:
1f:fd:6d:c9:12:e0:c6:82:09:1e:0f:9e:45:4b:de:
48:25:15:40:a3:31:10:29:1e:48:29:63:95:9c:e9:
bd:78:99:80:8a:a1:b7:2a:c0:c2:6f:bf:4e:ae:af:
a4:2c:4e:9a:05:8a:08:d7:4e:f2:6f:f7:e3:f3:49:
0c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:73:2A:9D:D9:28:EA:61:AF:A5:19:38:A8:E6:3E:CF:7F:E1:FD:56
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/h3Mqndko6mGvpRk4qOY-z3_h_VY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.170.0/23
Signature Algorithm: sha256WithRSAEncryption
88:78:51:11:6d:bb:74:de:f3:10:cd:6f:e4:b6:5f:a4:ef:3e:
f5:f3:67:cb:42:0f:87:14:c7:e3:37:ef:2e:67:8e:74:b3:98:
9e:b6:d9:de:7f:05:c7:ca:f7:7e:45:7f:68:95:25:ea:6d:8e:
38:52:88:7a:5f:14:6e:28:e2:6c:ca:4e:ef:ff:d7:4c:e0:22:
61:56:c9:ef:fa:31:e4:98:d7:d3:00:3c:f0:38:cf:41:13:58:
67:3e:42:03:5f:32:1f:6c:62:4a:21:75:8d:bc:d3:df:85:29:
4a:6a:50:b1:2a:2d:6c:02:cc:f6:47:8e:61:9e:46:cd:5c:89:
0f:4b:3f:ab:b2:44:22:a0:6f:5b:90:21:4f:f5:26:cf:ef:d8:
2b:e1:32:e3:6a:04:9a:ee:c5:a8:a0:77:5d:d8:1c:69:b8:c1:
83:89:38:fa:b4:92:70:b5:6a:57:1f:24:38:bc:22:57:8d:24:
b7:b5:f5:cf:1b:c1:71:46:2d:f6:d0:a5:e1:95:99:6d:d3:7a:
db:40:6f:4b:82:d9:46:10:fc:81:fc:d0:6f:9b:10:ae:0b:39:
8e:ef:81:1b:52:3e:81:6e:64:c5:4a:ec:0e:30:d0:e6:28:55:
d3:45:8a:7e:0e:ab:31:dd:64:f9:07:f7:38:be:ad:f7:3c:ae:
76:a1:4f:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntmKcV15sylY++HINms1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MWZkYzdhMmYxMWE1NzY2ZDNhZDdiZGY2MjVjZTVlMTE5
YThmZGYwHhcNMjUwMTAyMTU1MDUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzczMmE5ZGQ5MjhlYTYxYWZhNTE5MzhhOGU2M2VjZjdmZTFmZDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84lFtWA4pzBW6EUi8LmDvcfTI+U6
4X2tfvUK9VQ69R0iaYkDX8iNMLAzRKA5AqknOo7h9UeS7WjHZMC1YUlHnorm8bvd
2p9ad9E4IwUGux1uawPJq+BPkwEsx3qY54NIievRURZWJbR9Mo6Zen8fEFsiI7Ol
64H1XIlumVb0I23Q9qBdomBXx7U36OSYbpXwOT4E0gAhfTq8XzvYfo3vm/L41VHo
Vzxi1D49bEpNKBGUgR7Old77vMTxka9xlpwudpcf/W3JEuDGggkeD55FS95IJRVA
ozEQKR5IKWOVnOm9eJmAiqG3KsDCb79Orq+kLE6aBYoI107yb/fj80kMAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIdzKp3ZKOphr6UZOKjmPs9/4f1WMB8GA1UdIwQY
MBaAFFQf3HovEaV2bTrXvfYlzl4Rmo/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkJfY2VpOFJwWFp0T3RlOTlpWE9YaEdhajk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84ZmFkNjctYmI2Yi00NzczLWI4MWUt
YzkwMGE4OWYyMGYxLzEvaDNNcW5ka282bUd2cFJrNHFPWS16M19oX1ZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC84ZmFkNjctYmI2Yi00NzczLWI4MWUtYzkwMGE4OWYyMGYx
LzEvVkJfY2VpOFJwWFp0T3RlOTlpWE9YaEdhajk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuWWqMA0G
CSqGSIb3DQEBCwUAA4IBAQCIeFERbbt03vMQzW/ktl+k7z7182fLQg+HFMfjN+8u
Z450s5iettnefwXHyvd+RX9olSXqbY44Uoh6XxRuKOJsyk7v/9dM4CJhVsnv+jHk
mNfTADzwOM9BE1hnPkIDXzIfbGJKIXWNvNPfhSlKalCxKi1sAsz2R45hnkbNXIkP
Sz+rskQioG9bkCFP9SbP79gr4TLjagSa7sWooHdd2BxpuMGDiTj6tJJwtWpXHyQ4
vCJXjSS3tfXPG8FxRi320KXhlZlt03rbQG9LgtlGEPyB/NBvmxCuCzmO74EbUj6B
bmTFSuwOMNDmKFXTRYp+Dqsx3WT5B/c4vq33PK52oU/c
-----END CERTIFICATE-----
Generated at Thu Apr 3 22:22:48 2025 by rpki-client