Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/1-pP64K4_i8qDb-3-mkpkdoUvpwQ.roa
File: 1-pP64K4_i8qDb-3-mkpkdoUvpwQ.roa (raw, json)
Hash identifier: Kl3hSPrxfLsP3eL4mz9H4sGXJibptXkIeof0KRDPENU=
Subject key identifier: FA:93:FA:E0:AE:3F:8B:CA:83:6F:ED:FE:9A:4A:64:76:85:2F:A7:04
Certificate issuer: /CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Certificate serial: 019427B5A843832B687D0E9029517C4EC9E4
Authority key identifier: 04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/1-pP64K4_i8qDb-3-mkpkdoUvpwQ.roa
Signing time: Thu 02 Jan 2025 15:50:04 +0000
ROA not before: Thu 02 Jan 2025 15:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15491
IP address blocks: 146.255.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a8:43:83:2b:68:7d:0e:90:29:51:7c:4e:c9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Validity
Not Before: Jan 2 15:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa93fae0ae3f8bca836fedfe9a4a6476852fa704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:d6:9f:43:0b:d9:51:3c:88:a7:6f:ed:f0:
f8:77:72:75:bd:76:20:97:fc:68:d3:3b:d2:37:91:
9f:b6:71:7b:16:6d:72:19:5c:84:73:6f:4c:07:c0:
b5:e7:7f:d6:22:2c:1e:22:84:5b:5b:13:34:9d:4b:
82:35:1d:97:a8:d6:82:82:c3:df:2d:66:4e:31:3a:
cd:f2:ee:fe:67:03:55:78:90:63:77:3b:b3:2a:56:
9e:91:94:ed:af:75:b9:ba:6b:ec:d8:0e:fb:78:f7:
eb:b0:57:3f:d8:74:47:18:10:92:80:8f:01:b7:84:
d7:52:28:bc:bf:37:06:21:64:ff:9c:08:96:11:e5:
8f:fd:ea:29:be:fd:0f:fd:ca:5e:b6:3d:8c:44:c4:
4e:3e:8f:17:14:c7:fe:9d:ff:34:b2:e1:c9:d9:8d:
1f:d3:f3:08:00:58:67:5e:81:da:d0:d0:42:81:fa:
58:8d:ba:0e:3b:97:0a:7a:14:bf:8e:f6:a8:69:3d:
56:b4:73:dd:0f:5f:51:cb:ea:41:e8:61:99:ef:d8:
c1:7a:a0:1d:53:25:35:7c:e4:89:30:a0:24:e4:ac:
69:b5:67:88:8d:bb:b7:5a:d5:01:60:ed:60:90:9d:
3e:0d:45:67:dd:4b:7c:36:be:8f:b5:71:80:35:85:
20:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:93:FA:E0:AE:3F:8B:CA:83:6F:ED:FE:9A:4A:64:76:85:2F:A7:04
X509v3 Authority Key Identifier:
keyid:04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/1-pP64K4_i8qDb-3-mkpkdoUvpwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.224.0/19
Signature Algorithm: sha256WithRSAEncryption
bc:7b:67:a5:19:28:1a:41:c5:bf:6f:25:fb:68:4d:fe:35:6e:
4d:fb:c0:48:06:25:70:3b:a0:5a:e7:fd:d1:7e:93:1f:d9:6c:
bb:f0:9b:91:37:d0:42:b0:01:f6:19:32:20:c6:5c:e2:60:29:
42:b8:03:da:64:d8:3b:cb:5d:ef:e5:0e:ab:d7:c0:4f:83:e7:
3a:5b:bf:41:68:2a:0f:a2:6e:80:7b:05:fb:e5:c6:da:97:bf:
65:df:c6:1a:d8:e9:58:d3:5e:89:08:47:46:fe:64:98:de:80:
49:87:9d:59:72:e0:65:1d:2b:29:e4:14:3c:36:85:50:e4:e5:
84:e3:83:81:e1:0a:28:0f:91:fb:9e:fe:44:25:a7:2a:cd:5c:
93:1f:52:c7:38:33:48:96:25:22:67:37:80:b0:37:51:66:18:
68:5a:69:91:98:a1:60:11:71:37:50:07:04:67:a0:83:05:d8:
aa:ed:a2:a4:90:8f:28:71:7e:cb:87:2c:94:1c:b1:c5:f5:09:
fa:ae:83:ba:9d:47:1d:d0:26:eb:c9:b6:80:fe:55:38:1e:e0:
2d:b3:16:f8:40:1f:c2:5f:b6:41:14:4f:7e:f0:51:65:ff:1a:
51:51:16:d5:fc:28:82:cb:e7:0d:7d:07:5e:f2:96:8b:61:71:
7f:e1:d5:cd
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQntahDgytofQ6QKVF8TsnkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0OGVlZmI1YjI2NDgzNTYxNzExYzk5MGYyMGZmNTUyYWM0
ZTJjOWMwHhcNMjUwMTAyMTU1MDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTkzZmFlMGFlM2Y4YmNhODM2ZmVkZmU5YTRhNjQ3Njg1MmZhNzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT3Wn0ML2VE8iKdv7fD4d3J1vXYg
l/xo0zvSN5GftnF7Fm1yGVyEc29MB8C153/WIiweIoRbWxM0nUuCNR2XqNaCgsPf
LWZOMTrN8u7+ZwNVeJBjdzuzKlaekZTtr3W5umvs2A77ePfrsFc/2HRHGBCSgI8B
t4TXUii8vzcGIWT/nAiWEeWP/eopvv0P/cpetj2MRMROPo8XFMf+nf80suHJ2Y0f
0/MIAFhnXoHa0NBCgfpYjboOO5cKehS/jvaoaT1WtHPdD19Ry+pB6GGZ79jBeqAd
UyU1fOSJMKAk5KxptWeIjbu3WtUBYO1gkJ0+DUVn3Ut8Nr6PtXGANYUgtwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPqT+uCuP4vKg2/t/ppKZHaFL6cEMB8GA1UdIwQY
MBaAFASO77WyZINWFxHJkPIP9VKsTiycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkk3dnRiSmtnMVlYRWNtUThnXzFVcXhPTEp3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80YjYzNTQtYTdhMy00MzUxLWE3ZGUt
YWVhYzVkOWNkYzdiLzEvMS1wUDY0SzRfaThxRGItMy1ta3BrZG9VdnB3US5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNjEvNGI2MzU0LWE3YTMtNDM1MS1hN2RlLWFlYWM1ZDljZGM3
Yi8xL0JJN3Z0YkprZzFZWEVjbVE4Z18xVXF4T0xKdy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBZL/4DAN
BgkqhkiG9w0BAQsFAAOCAQEAvHtnpRkoGkHFv28l+2hN/jVuTfvASAYlcDugWuf9
0X6TH9lsu/CbkTfQQrAB9hkyIMZc4mApQrgD2mTYO8td7+UOq9fAT4PnOlu/QWgq
D6JugHsF++XG2pe/Zd/GGtjpWNNeiQhHRv5kmN6ASYedWXLgZR0rKeQUPDaFUOTl
hOODgeEKKA+R+57+RCWnKs1ckx9SxzgzSJYlImc3gLA3UWYYaFppkZihYBFxN1AH
BGeggwXYqu2ipJCPKHF+y4cslByxxfUJ+q6Dup1HHdAm68m2gP5VOB7gLbMW+EAf
wl+2QRRPfvBRZf8aUVEW1fwogsvnDX0HXvKWi2Fxf+HVzQ==
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:05:27 2025 by rpki-client