Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/PA7MJ2Yvi19bjuS4SkNDgLvkcJI.roa
File: PA7MJ2Yvi19bjuS4SkNDgLvkcJI.roa (raw, json)
Hash identifier: AdnrGbqgqAzwS2dozDGK+X4V3SIi3b+xg5quI+nBs5g=
Subject key identifier: 3C:0E:CC:27:66:2F:8B:5F:5B:8E:E4:B8:4A:43:43:80:BB:E4:70:92
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 019423D6A47D6DA96391B5059DB4E304B906
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/PA7MJ2Yvi19bjuS4SkNDgLvkcJI.roa
Signing time: Wed 01 Jan 2025 21:47:36 +0000
ROA not before: Wed 01 Jan 2025 21:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 159.197.224.0/19 maxlen: 24
161.8.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a4:7d:6d:a9:63:91:b5:05:9d:b4:e3:04:b9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Jan 1 21:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c0ecc27662f8b5f5b8ee4b84a434380bbe47092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ad:5f:55:be:08:16:72:f7:2c:e7:22:f7:81:
b4:f5:1c:e2:c9:3a:97:1b:6b:02:cb:a0:cd:7e:11:
ec:f0:53:7e:99:a6:fd:3f:b0:6b:30:55:45:a3:5f:
1f:05:95:a3:50:79:9a:cd:81:85:f0:a1:08:b3:00:
87:72:f3:d1:52:6e:dd:3e:f1:55:29:ac:50:cf:35:
6c:95:90:83:54:cf:81:f3:8c:21:61:d5:9b:77:54:
5f:f6:67:25:54:10:3e:95:1a:e0:c8:f1:b6:0c:33:
5e:33:4b:1a:8c:3e:c1:34:92:44:2f:bf:0e:b2:25:
42:8e:db:7e:c6:f9:5b:58:34:4f:d2:73:3b:f6:33:
a4:f9:95:b4:ea:ff:c2:9f:94:3c:ff:e3:24:2e:da:
c0:44:04:c4:c6:50:99:1b:a7:6e:81:ed:77:99:93:
0f:e6:23:4f:8b:c1:8c:ba:67:4c:cd:c5:af:ca:28:
b5:25:2e:ad:94:0c:da:ab:54:26:af:d2:0e:87:cc:
8e:8c:12:e1:84:11:d8:30:de:1a:81:4e:2d:15:a7:
15:a4:f7:50:58:75:5c:b9:a7:ff:ec:f8:9d:b5:ab:
dd:76:68:51:1a:18:c2:bd:f0:ed:46:89:aa:2a:d7:
2c:e3:38:bf:b1:03:b8:ea:57:aa:19:e2:49:f2:1d:
7c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0E:CC:27:66:2F:8B:5F:5B:8E:E4:B8:4A:43:43:80:BB:E4:70:92
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/PA7MJ2Yvi19bjuS4SkNDgLvkcJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.197.224.0/19
161.8.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a2:76:5d:ad:d3:a1:1b:df:7c:2d:b3:7a:e8:c0:dc:6e:a4:09:
dc:a3:23:8a:10:a3:d7:1a:51:08:19:20:06:00:3c:c9:8f:94:
75:62:de:59:62:c5:cc:02:df:05:ed:03:b7:8f:ce:09:00:4d:
2b:5f:06:a4:18:1f:8c:f6:6a:37:e0:1d:40:34:ce:38:b2:30:
a4:42:7b:ca:a9:5b:e9:dc:59:b6:f3:7c:ec:0f:58:bc:88:05:
ba:af:5f:be:9b:76:51:21:33:26:68:9c:e0:9f:9c:6a:17:8c:
d7:eb:d0:c1:77:35:09:c3:b2:46:9f:4d:38:d2:e1:cd:8b:30:
d9:f5:cd:74:bd:52:ee:97:eb:1e:a1:46:f5:32:19:04:8c:a1:
51:d9:fa:c7:78:b4:fe:10:f7:0f:07:54:bc:6d:46:b1:ec:e8:
7b:9c:1e:31:7a:ca:31:96:aa:9a:1c:b2:42:a5:b2:5e:96:1a:
0e:89:1f:5c:bd:70:25:e0:c7:0a:e2:5c:46:4e:9c:37:3f:83:
b4:6d:9c:e3:07:23:37:6e:99:50:2a:17:e9:20:80:07:ab:17:
86:7f:4f:66:4b:04:40:c5:1c:c2:2c:73:10:73:8e:a7:90:77:
66:74:fe:62:bd:f6:7b:e9:b7:03:6b:ea:66:3f:c4:ea:b7:3b:
4f:72:f8:c4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj1qR9baljkbUFnbTjBLkGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5
MWQ0YTkwHhcNMjUwMTAxMjE0NzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzBlY2MyNzY2MmY4YjVmNWI4ZWU0Yjg0YTQzNDM4MGJiZTQ3MDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra1fVb4IFnL3LOci94G09RziyTqX
G2sCy6DNfhHs8FN+mab9P7BrMFVFo18fBZWjUHmazYGF8KEIswCHcvPRUm7dPvFV
KaxQzzVslZCDVM+B84whYdWbd1Rf9mclVBA+lRrgyPG2DDNeM0sajD7BNJJEL78O
siVCjtt+xvlbWDRP0nM79jOk+ZW06v/Cn5Q8/+MkLtrARATExlCZG6duge13mZMP
5iNPi8GMumdMzcWvyii1JS6tlAzaq1Qmr9IOh8yOjBLhhBHYMN4agU4tFacVpPdQ
WHVcuaf/7PidtavddmhRGhjCvfDtRomqKtcs4zi/sQO46leqGeJJ8h181QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDwOzCdmL4tfW47kuEpDQ4C75HCSMB8GA1UdIwQY
MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt
ZWI3YWFhNjgyOGJlLzEvUEE3TUoyWXZpMTlianVTNFNrTkRnTHZrY0pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl
LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFn8XgAwQF
oQigMA0GCSqGSIb3DQEBCwUAA4IBAQCidl2t06Eb33wts3rowNxupAncoyOKEKPX
GlEIGSAGADzJj5R1Yt5ZYsXMAt8F7QO3j84JAE0rXwakGB+M9mo34B1ANM44sjCk
QnvKqVvp3Fm283zsD1i8iAW6r1++m3ZRITMmaJzgn5xqF4zX69DBdzUJw7JGn004
0uHNizDZ9c10vVLul+seoUb1MhkEjKFR2frHeLT+EPcPB1S8bUax7Oh7nB4xesox
lqqaHLJCpbJelhoOiR9cvXAl4McK4lxGTpw3P4O0bZzjByM3bplQKhfpIIAHqxeG
f09mSwRAxRzCLHMQc46nkHdmdP5ivfZ76bcDa+pmP8TqtztPcvjE
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:19 2025 by rpki-client