Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/hZ538f0QuQLVC8g75zE0FHfThyE.roa
File: hZ538f0QuQLVC8g75zE0FHfThyE.roa (raw, json)
Hash identifier: 6BFx6l28ZY2v5hI+MaoxcL0mUkGye2JVbNG/AHF+rNY=
Subject key identifier: 85:9E:77:F1:FD:10:B9:02:D5:0B:C8:3B:E7:31:34:14:77:D3:87:21
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019427B579BF217090CA2523100258E03D8D
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/hZ538f0QuQLVC8g75zE0FHfThyE.roa
Signing time: Thu 02 Jan 2025 15:49:52 +0000
ROA not before: Thu 02 Jan 2025 15:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201542
IP address blocks: 94.31.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:79:bf:21:70:90:ca:25:23:10:02:58:e0:3d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 2 15:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=859e77f1fd10b902d50bc83be731341477d38721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:8c:34:4b:6d:01:7e:c1:58:54:dc:37:52:
dc:e3:2c:73:a3:49:e8:aa:af:74:73:0d:13:ed:12:
d9:97:a5:0e:9c:11:23:56:67:1c:93:87:68:9a:82:
38:3f:fa:ae:c4:20:02:97:92:a3:d1:a0:26:48:45:
f2:94:14:0e:2f:70:84:73:e3:6d:fb:11:c9:5c:0a:
ab:c2:4e:38:f9:7a:48:e4:cd:04:0b:4f:31:82:ec:
f5:b2:21:1d:4e:77:76:98:08:8d:49:b3:8e:2f:a0:
f5:ad:d8:1b:57:2d:5e:a3:49:41:ee:2d:21:b9:60:
f2:1d:bb:c5:32:5b:12:11:58:bf:f0:50:3c:50:6e:
63:6a:c0:78:6e:f4:f9:b5:9c:73:59:cd:1f:25:71:
33:ce:d2:91:95:e3:a4:a9:95:e9:f8:15:28:d8:5d:
17:2a:40:cc:2b:59:03:45:ad:46:aa:a4:d3:5d:20:
ad:9c:f4:3a:5d:d7:5b:5a:28:ea:5f:f9:e2:3a:bc:
07:5b:4e:80:4e:00:9d:10:7b:98:ac:67:c9:60:dd:
ca:9b:b8:50:45:06:f5:15:cf:8e:a3:2f:b4:2b:c0:
3b:42:51:fd:0d:86:0a:cd:1c:c3:a4:3e:18:cc:18:
87:37:a6:24:52:58:18:19:d8:31:8c:31:bb:5d:06:
84:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9E:77:F1:FD:10:B9:02:D5:0B:C8:3B:E7:31:34:14:77:D3:87:21
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/hZ538f0QuQLVC8g75zE0FHfThyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.31.51.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:80:a5:15:06:df:bf:97:b9:07:21:8e:8f:07:22:c9:2c:84:
24:29:a0:3b:cf:d0:62:9c:d8:3e:d0:43:d6:44:c6:f3:43:24:
8a:b5:3c:46:f2:bc:84:b9:e5:7e:06:3d:1e:54:96:55:8e:7a:
b3:0e:5e:d3:b3:34:2e:63:3d:a9:1a:a6:38:e9:18:a2:7e:15:
ec:6d:10:40:6a:ac:f4:f2:bb:0f:5f:7b:88:18:63:3c:25:2b:
d8:6e:f6:dc:8d:d7:ec:b0:d0:79:8a:a1:0a:03:0a:35:ac:3c:
d3:5c:5e:29:b2:69:33:4f:e1:26:b6:30:82:68:c6:db:f1:e5:
c8:16:60:58:72:fd:98:d7:d0:fb:be:72:fd:9f:f9:8a:89:0f:
69:fc:78:d0:b4:56:e1:9a:46:9d:c8:47:7e:ba:85:25:a1:4e:
35:2b:08:64:f2:cc:c7:0e:0f:63:c6:62:56:2e:5f:1c:b3:be:
97:a0:48:7b:e9:44:57:bf:49:ac:a9:a1:8d:f1:48:04:32:9a:
53:b5:2b:f1:d1:b9:0f:11:bc:8a:34:10:37:d8:d7:31:9a:fc:
df:9c:ae:95:01:8a:29:6b:88:7d:67:06:55:07:03:79:96:9d:
d6:08:89:5f:74:17:c7:41:3d:15:37:e6:e2:fe:cd:98:68:3f:
5e:49:4d:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntXm/IXCQyiUjEAJY4D2NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMGNjOTQyOWI2MzM4MmU5YjE3MTRkMjFiM2M5NmQyZTVl
YmUyNTcwHhcNMjUwMTAyMTU0OTUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTllNzdmMWZkMTBiOTAyZDUwYmM4M2JlNzMxMzQxNDc3ZDM4NzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRmMNEttAX7BWFTcN1Lc4yxzo0no
qq90cw0T7RLZl6UOnBEjVmcck4domoI4P/quxCACl5Kj0aAmSEXylBQOL3CEc+Nt
+xHJXAqrwk44+XpI5M0EC08xguz1siEdTnd2mAiNSbOOL6D1rdgbVy1eo0lB7i0h
uWDyHbvFMlsSEVi/8FA8UG5jasB4bvT5tZxzWc0fJXEzztKRleOkqZXp+BUo2F0X
KkDMK1kDRa1GqqTTXSCtnPQ6XddbWijqX/niOrwHW06ATgCdEHuYrGfJYN3Km7hQ
RQb1Fc+Ooy+0K8A7QlH9DYYKzRzDpD4YzBiHN6YkUlgYGdgxjDG7XQaE4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIWed/H9ELkC1QvIO+cxNBR304chMB8GA1UdIwQY
MBaAFOMMyUKbYzgumxcU0hs8ltLl6+JXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUt
ZGI0ZjM1MmU5YWQzLzEvaFo1MzhmMFF1UUxWQzhnNzV6RTBGSGZUaHlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUtZGI0ZjM1MmU5YWQz
LzEvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXh8zMA0G
CSqGSIb3DQEBCwUAA4IBAQCmgKUVBt+/l7kHIY6PByLJLIQkKaA7z9BinNg+0EPW
RMbzQySKtTxG8ryEueV+Bj0eVJZVjnqzDl7TszQuYz2pGqY46RiifhXsbRBAaqz0
8rsPX3uIGGM8JSvYbvbcjdfssNB5iqEKAwo1rDzTXF4psmkzT+EmtjCCaMbb8eXI
FmBYcv2Y19D7vnL9n/mKiQ9p/HjQtFbhmkadyEd+uoUloU41Kwhk8szHDg9jxmJW
Ll8cs76XoEh76URXv0msqaGN8UgEMppTtSvx0bkPEbyKNBA32NcxmvzfnK6VAYop
a4h9ZwZVBwN5lp3WCIlfdBfHQT0VN+bi/s2YaD9eSU37
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:39 2025 by rpki-client