Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6c819f-6838-4918-8635-892b3c3722b9/1/lL4UjCKSHMxDqDpAUZHMZrSX9ac.roa
File: lL4UjCKSHMxDqDpAUZHMZrSX9ac.roa (raw, json)
Hash identifier: MAR/rVwtU4LjhGxAvOL9LYt/11AjaXPTQdj5aFrNqZQ=
Subject key identifier: 94:BE:14:8C:22:92:1C:CC:43:A8:3A:40:51:91:CC:66:B4:97:F5:A7
Certificate issuer: /CN=4d4b1a8eb7cd0fa7e27d7aed628d4626954d4ddb
Certificate serial: 014CEFC7
Authority key identifier: 4D:4B:1A:8E:B7:CD:0F:A7:E2:7D:7A:ED:62:8D:46:26:95:4D:4D:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TUsajrfND6fifXrtYo1GJpVNTds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6c819f-6838-4918-8635-892b3c3722b9/1/lL4UjCKSHMxDqDpAUZHMZrSX9ac.roa
Signing time: Sat 01 Jan 2022 02:54:56 +0000
ROA not before: Sat 01 Jan 2022 02:54:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 27176
IP address blocks: 37.16.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21819335 (0x14cefc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d4b1a8eb7cd0fa7e27d7aed628d4626954d4ddb
Validity
Not Before: Jan 1 02:54:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94be148c22921ccc43a83a405191cc66b497f5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:02:ba:1f:71:1d:2a:3f:c9:e1:b8:7f:0d:
03:b3:e3:39:fa:12:94:50:61:db:7b:e5:33:82:96:
cf:93:99:0a:94:dd:24:00:ba:b6:49:3f:db:d9:49:
3f:4d:05:4c:80:7c:75:e4:52:5b:71:06:f1:e3:49:
d1:2c:e4:d7:f5:1d:01:e3:24:ac:5e:94:3f:d2:d9:
5d:86:29:27:6e:75:cb:8d:2e:eb:3f:ad:c0:44:c9:
12:d6:19:59:1e:6b:90:c7:e1:f0:8a:20:2b:7d:0c:
74:7e:00:0a:5a:cd:09:b2:78:c6:7c:c6:18:7e:8c:
51:d9:eb:87:c0:a5:43:63:13:e5:e4:02:b1:ef:b4:
2f:48:6d:e4:38:be:ce:8c:4d:a1:77:a4:40:6e:b7:
a8:a2:ba:40:15:d9:91:52:1f:63:9c:24:19:ea:28:
1e:06:3a:5c:db:a0:e9:a2:df:1b:c6:2b:a0:89:3a:
66:f8:ff:3e:dd:f2:81:f7:21:07:02:30:5c:27:37:
88:28:d7:4f:dd:84:51:d9:55:e5:6f:58:5f:25:4b:
b8:16:db:86:b6:f7:70:ed:a1:6f:c2:8a:1b:d5:8c:
7e:5c:e1:1d:9f:21:bf:87:54:bd:aa:a7:e2:93:c5:
9e:57:18:0e:96:e8:a7:ea:18:e7:cc:5f:64:b6:a6:
56:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BE:14:8C:22:92:1C:CC:43:A8:3A:40:51:91:CC:66:B4:97:F5:A7
X509v3 Authority Key Identifier:
keyid:4D:4B:1A:8E:B7:CD:0F:A7:E2:7D:7A:ED:62:8D:46:26:95:4D:4D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TUsajrfND6fifXrtYo1GJpVNTds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6c819f-6838-4918-8635-892b3c3722b9/1/lL4UjCKSHMxDqDpAUZHMZrSX9ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6c819f-6838-4918-8635-892b3c3722b9/1/TUsajrfND6fifXrtYo1GJpVNTds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.79.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:74:5b:b4:0f:67:be:27:3b:64:5b:17:30:db:fe:35:bb:5d:
98:ee:ed:ab:a2:bb:be:7f:52:bb:91:d2:9c:a3:69:0e:1e:e9:
6f:1b:c3:d9:22:20:3e:fb:5c:9f:58:bc:b8:0d:44:4e:9a:a7:
45:f9:2f:d2:5b:a7:c1:93:f3:78:a0:70:b7:59:38:4e:31:ff:
08:64:8d:e1:b3:0c:0f:52:d2:97:ca:fc:64:18:a1:26:94:49:
f7:24:1a:37:f1:85:86:3b:e8:aa:cd:7e:98:ed:53:40:22:c1:
69:a4:fc:2d:c2:e7:4f:4d:a5:c9:94:24:3a:bf:68:49:df:e0:
1d:7e:4e:b8:78:51:15:06:7b:af:08:49:8f:bd:ed:97:ab:23:
b6:65:7b:a4:bf:79:2f:e6:99:73:a6:60:2a:4e:07:f6:fc:8f:
53:3b:ff:80:84:fc:29:d3:28:ae:ab:37:74:5d:da:3a:81:4a:
55:33:56:13:f5:8a:b9:f5:b6:32:57:49:9a:33:ff:d7:bd:d3:
b5:62:cb:8a:29:7c:1b:04:77:1f:2e:0f:3e:43:05:f3:33:bb:
44:09:b8:79:36:d4:99:2c:27:04:b9:12:ef:9d:92:17:69:42:
48:c1:2a:74:4c:3f:2f:93:6d:a4:92:58:c3:67:16:da:17:43:
8b:6f:3b:0c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAUzvxzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZDRiMWE4ZWI3Y2QwZmE3ZTI3ZDdhZWQ2MjhkNDYyNjk1NGQ0ZGRiMB4XDTIyMDEw
MTAyNTQ1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTRiZTE0OGMyMjky
MWNjYzQzYTgzYTQwNTE5MWNjNjZiNDk3ZjVhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK1IArofcR0qP8nhuH8NA7PjOfoSlFBh23vlM4KWz5OZCpTd
JAC6tkk/29lJP00FTIB8deRSW3EG8eNJ0Szk1/UdAeMkrF6UP9LZXYYpJ251y40u
6z+twETJEtYZWR5rkMfh8IogK30MdH4AClrNCbJ4xnzGGH6MUdnrh8ClQ2MT5eQC
se+0L0ht5Di+zoxNoXekQG63qKK6QBXZkVIfY5wkGeooHgY6XNug6aLfG8YroIk6
Zvj/Pt3ygfchBwIwXCc3iCjXT92EUdlV5W9YXyVLuBbbhrb3cO2hb8KKG9WMflzh
HZ8hv4dUvaqn4pPFnlcYDpbop+oY58xfZLamVpcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSUvhSMIpIczEOoOkBRkcxmtJf1pzAfBgNVHSMEGDAWgBRNSxqOt80Pp+J9
eu1ijUYmlU1N2zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RVc2FqcmZORDZmaWZYcnRZbzFHSnBWTlRkcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjIvNmM4MTlmLTY4MzgtNDkxOC04NjM1LTg5MmIzYzM3MjJiOS8x
L2xMNFVqQ0tTSE14RHFEcEFVWkhNWnJTWDlhYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIv
NmM4MTlmLTY4MzgtNDkxOC04NjM1LTg5MmIzYzM3MjJiOS8xL1RVc2FqcmZORDZm
aWZYcnRZbzFHSnBWTlRkcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACUQTzANBgkqhkiG9w0BAQsFAAOC
AQEAW3RbtA9nvic7ZFsXMNv+NbtdmO7tq6K7vn9Su5HSnKNpDh7pbxvD2SIgPvtc
n1i8uA1ETpqnRfkv0lunwZPzeKBwt1k4TjH/CGSN4bMMD1LSl8r8ZBihJpRJ9yQa
N/GFhjvoqs1+mO1TQCLBaaT8LcLnT02lyZQkOr9oSd/gHX5OuHhRFQZ7rwhJj73t
l6sjtmV7pL95L+aZc6ZgKk4H9vyPUzv/gIT8KdMorqs3dF3aOoFKVTNWE/WKufW2
MldJmjP/173TtWLLiil8GwR3Hy4PPkMF8zO7RAm4eTbUmSwnBLkS752SF2lCSMEq
dEw/L5NtpJJYw2cW2hdDi287DA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:45:18 2025 by rpki-client