Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/V2k3r9u0ZPJ2ckzWzzvMt2q4pCM.roa
File: V2k3r9u0ZPJ2ckzWzzvMt2q4pCM.roa (raw, json)
Hash identifier: EyyfiTwKVwJmXlrkUNXvcqHJklzDbyt91RfOgn8g/Cc=
Subject key identifier: 57:69:37:AF:DB:B4:64:F2:76:72:4C:D6:CF:3B:CC:B7:6A:B8:A4:23
Certificate issuer: /CN=3124de2d6b780b3dbb5fbf5b926dcb8d2f0cc106
Certificate serial: 01826DF31409E204438121C0C8226E833441
Authority key identifier: 31:24:DE:2D:6B:78:0B:3D:BB:5F:BF:5B:92:6D:CB:8D:2F:0C:C1:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSTeLWt4Cz27X79bkm3LjS8MwQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/V2k3r9u0ZPJ2ckzWzzvMt2q4pCM.roa
Signing time: Fri 05 Aug 2022 12:20:23 +0000
ROA not before: Fri 05 Aug 2022 12:20:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 141.98.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:f3:14:09:e2:04:43:81:21:c0:c8:22:6e:83:34:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3124de2d6b780b3dbb5fbf5b926dcb8d2f0cc106
Validity
Not Before: Aug 5 12:20:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=576937afdbb464f276724cd6cf3bccb76ab8a423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e6:80:21:f4:e1:3e:6a:80:43:a7:b1:f4:f7:
37:44:8f:94:95:0b:50:d2:b3:7a:b0:5a:ba:73:0a:
fa:95:24:c6:e2:97:e1:42:8c:c7:33:c3:fd:37:ae:
13:e6:6c:8d:ae:3c:e6:de:2e:bb:b8:38:99:9c:d3:
92:67:71:a0:32:00:39:78:18:a7:8e:e6:de:b4:df:
c1:3d:98:e7:a3:80:e0:0d:0b:2b:bd:de:26:4a:37:
5b:07:e6:c7:f0:83:b8:dd:e1:bb:20:ad:cf:c6:dd:
20:4b:28:78:57:2d:01:4f:08:62:74:de:21:b7:91:
4b:03:0c:b7:92:a2:b6:9f:57:8a:6f:a1:c0:c2:e9:
b1:6a:e5:20:c3:90:a7:94:cb:2b:fe:f0:6c:ea:2c:
b2:1c:35:7b:64:c9:e6:10:8a:f2:ab:78:44:b1:31:
ae:6a:d0:1e:ad:4b:dc:ac:9c:2a:5f:25:47:21:52:
61:d7:06:44:ee:45:31:98:63:29:4d:ad:b0:44:06:
04:21:97:07:8a:aa:a2:c6:e1:02:b2:a6:61:a4:2d:
af:2b:77:0b:b2:20:46:ba:d7:49:d7:a6:8c:f0:62:
5e:f9:87:93:fc:64:ca:cf:27:b4:56:9d:c1:1f:88:
b9:6a:e9:40:41:e6:7e:d0:b4:99:ef:8f:84:cf:da:
90:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:69:37:AF:DB:B4:64:F2:76:72:4C:D6:CF:3B:CC:B7:6A:B8:A4:23
X509v3 Authority Key Identifier:
keyid:31:24:DE:2D:6B:78:0B:3D:BB:5F:BF:5B:92:6D:CB:8D:2F:0C:C1:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSTeLWt4Cz27X79bkm3LjS8MwQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/V2k3r9u0ZPJ2ckzWzzvMt2q4pCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/MSTeLWt4Cz27X79bkm3LjS8MwQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.4.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ba:2c:7e:52:c4:9e:97:10:ba:73:8f:de:bf:fb:bb:cb:a0:
70:61:0f:ae:6c:50:f3:c0:30:50:0f:c2:d3:60:67:2f:1a:8f:
62:07:61:12:38:59:5b:4f:32:95:bf:83:90:9b:f8:08:cd:e9:
de:80:23:29:bc:bc:32:28:d5:28:d1:8a:91:75:7f:02:05:b1:
4c:36:40:f9:a0:c7:cf:4c:3c:0e:0a:b1:dc:aa:f2:c5:a6:77:
ac:fb:86:16:8b:b1:15:9a:c6:d2:b2:6c:ea:16:e0:db:ca:de:
fc:85:fc:71:c2:aa:e6:62:44:8c:1b:f6:19:39:6f:ea:ee:01:
f5:f1:91:6d:6c:6e:a5:15:d8:c3:ee:39:b8:b1:a9:2b:3b:1c:
9e:87:c6:6f:57:cc:be:23:dd:c4:f8:15:4d:f4:92:78:37:3c:
69:cb:c9:7b:ff:16:4c:f0:87:dc:a8:7b:82:84:16:e2:4c:8f:
6e:9c:35:14:7b:28:2e:da:1c:d1:cf:c6:69:58:c8:98:0f:2e:
2f:fd:8e:61:2e:39:be:cf:3b:7f:cf:6f:eb:ab:7c:4d:28:8f:
0e:2a:77:6c:3a:18:c3:5e:41:23:b6:09:6d:c3:fa:af:b7:7b:
16:13:c4:80:0f:00:39:fb:44:5d:27:a1:b4:e5:61:e4:4a:1a:
47:4f:7c:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJt8xQJ4gRDgSHAyCJugzRBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMjRkZTJkNmI3ODBiM2RiYjVmYmY1YjkyNmRjYjhkMmYw
Y2MxMDYwHhcNMjIwODA1MTIyMDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzY5MzdhZmRiYjQ2NGYyNzY3MjRjZDZjZjNiY2NiNzZhYjhhNDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOaAIfThPmqAQ6ex9Pc3RI+UlQtQ
0rN6sFq6cwr6lSTG4pfhQozHM8P9N64T5myNrjzm3i67uDiZnNOSZ3GgMgA5eBin
jubetN/BPZjno4DgDQsrvd4mSjdbB+bH8IO43eG7IK3Pxt0gSyh4Vy0BTwhidN4h
t5FLAwy3kqK2n1eKb6HAwumxauUgw5CnlMsr/vBs6iyyHDV7ZMnmEIryq3hEsTGu
atAerUvcrJwqXyVHIVJh1wZE7kUxmGMpTa2wRAYEIZcHiqqixuECsqZhpC2vK3cL
siBGutdJ16aM8GJe+YeT/GTKzye0Vp3BH4i5aulAQeZ+0LSZ74+Ez9qQ3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFdpN6/btGTydnJM1s87zLdquKQjMB8GA1UdIwQY
MBaAFDEk3i1reAs9u1+/W5Jty40vDMEGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVNUZUxXdDRDejI3WDc5YmttM0xqUzhNd1FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC85MzZlYWItMDk0ZS00OTAzLTkxNDgt
YTc2Zjg2NTc1MjQ3LzEvVjJrM3I5dTBaUEoyY2t6V3p6dk10MnE0cENNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC85MzZlYWItMDk0ZS00OTAzLTkxNDgtYTc2Zjg2NTc1MjQ3
LzEvTVNUZUxXdDRDejI3WDc5YmttM0xqUzhNd1FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWIEMA0G
CSqGSIb3DQEBCwUAA4IBAQAmuix+UsSelxC6c4/ev/u7y6BwYQ+ubFDzwDBQD8LT
YGcvGo9iB2ESOFlbTzKVv4OQm/gIzenegCMpvLwyKNUo0YqRdX8CBbFMNkD5oMfP
TDwOCrHcqvLFpnes+4YWi7EVmsbSsmzqFuDbyt78hfxxwqrmYkSMG/YZOW/q7gH1
8ZFtbG6lFdjD7jm4sakrOxyeh8ZvV8y+I93E+BVN9JJ4Nzxpy8l7/xZM8IfcqHuC
hBbiTI9unDUUeygu2hzRz8ZpWMiYDy4v/Y5hLjm+zzt/z2/rq3xNKI8OKndsOhjD
XkEjtgltw/qvt3sWE8SADwA5+0RdJ6G05WHkShpHT3w9
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:50 2025 by rpki-client