Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/4NA1lEEwcRNigm1TxikhEX3VK3Q.roa
File: 4NA1lEEwcRNigm1TxikhEX3VK3Q.roa (raw, json)
Hash identifier: tg8edvlW9JTK8XmW5t5xc6N+e8Gvwr667PtcIKaXnoU=
Subject key identifier: E0:D0:35:94:41:30:71:13:62:82:6D:53:C6:29:21:11:7D:D5:2B:74
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F09EDC4A2C2E78F49DDD1D9680854A
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/4NA1lEEwcRNigm1TxikhEX3VK3Q.roa
Signing time: Mon 02 Jan 2023 05:24:55 +0000
ROA not before: Mon 02 Jan 2023 05:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34903
IP address blocks: 82.177.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:9e:dc:4a:2c:2e:78:f4:9d:dd:1d:96:80:85:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0d035944130711362826d53c62921117dd52b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:83:cb:c6:a3:66:5c:40:4a:ff:80:72:e2:bb:
88:02:e3:6a:f7:41:04:65:b6:15:47:7a:96:3a:47:
e8:83:43:f3:db:22:38:17:52:a9:db:d7:ea:9b:91:
74:e8:7d:fa:7a:13:ef:1b:70:36:ed:7e:99:8e:23:
7a:15:60:8a:bf:10:26:d9:33:56:43:5c:f7:3d:20:
51:b7:d0:d6:00:86:d7:fc:e8:ec:eb:bf:ad:1d:f3:
60:a6:75:73:ea:be:b4:ee:16:57:de:3a:27:b3:eb:
2b:1a:5d:c5:e1:38:58:98:04:76:d9:4d:1a:48:ce:
3b:43:01:c7:cb:9f:df:36:a5:6b:e2:9f:9a:08:5d:
32:af:5e:d9:4c:8f:00:44:33:9d:d2:97:b6:73:db:
7d:66:0c:f2:77:f1:3c:90:85:36:ec:37:92:98:9e:
09:f3:02:b6:62:24:ee:55:9a:c1:c2:44:e3:fb:40:
82:0c:e1:03:96:eb:af:a7:c7:32:3b:ae:d3:91:ff:
55:c6:22:13:e8:f2:99:a2:3f:8b:8a:68:33:e3:2e:
a2:5c:7c:de:ce:39:15:e9:c5:ea:da:77:b9:c1:56:
6d:4c:e6:04:9c:25:5b:44:39:db:22:18:fe:6c:1f:
a7:60:c3:ea:97:bd:88:45:29:8a:b2:46:d6:73:d1:
fa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D0:35:94:41:30:71:13:62:82:6D:53:C6:29:21:11:7D:D5:2B:74
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/4NA1lEEwcRNigm1TxikhEX3VK3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.18.0/24
Signature Algorithm: sha256WithRSAEncryption
84:58:3d:53:86:c4:7c:85:d0:21:cf:89:3e:44:35:8d:89:c1:
7e:ea:97:82:be:67:78:77:56:5f:b5:ea:24:2e:73:8c:ff:f0:
94:21:0f:7f:5b:dc:29:5d:d9:ca:dd:13:18:6b:96:4b:1d:99:
cd:b1:62:b4:02:65:01:c0:36:e8:23:13:03:1a:f5:c3:31:fd:
4b:42:24:ce:04:9a:a7:6a:78:07:fb:4c:9c:25:72:69:fd:3a:
08:24:79:3c:48:dc:7f:a6:de:84:d6:e1:68:02:82:b2:7e:c8:
6b:b1:cb:0a:11:0b:a1:65:2f:01:c3:72:b7:e8:eb:d1:48:ba:
ee:27:66:be:44:41:e0:e6:14:59:92:0d:a5:c6:f7:95:17:ec:
37:b0:79:4a:7a:4b:c5:c7:55:22:88:a9:97:0c:ad:3f:25:f6:
76:cd:5c:59:4c:ce:33:0d:3e:75:c5:25:90:c7:9d:1d:8b:43:
96:9e:0d:19:1f:74:2f:53:74:00:69:bc:d4:24:38:58:1a:ba:
29:7b:67:b1:c4:26:a2:8e:19:8c:19:d4:84:96:2b:23:24:16:
6a:a7:3e:9c:14:4a:66:81:89:c0:04:42:c8:de:a5:0a:4f:01:
0f:ba:be:ec:69:02:b4:7b:27:8d:79:e9:3d:77:45:8a:e4:fb:
9d:09:45:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw8J7cSiwuePSd3R2WgIVKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjMwMTAyMDUyNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGQwMzU5NDQxMzA3MTEzNjI4MjZkNTNjNjI5MjExMTdkZDUyYjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIPLxqNmXEBK/4By4ruIAuNq90EE
ZbYVR3qWOkfog0Pz2yI4F1Kp29fqm5F06H36ehPvG3A27X6ZjiN6FWCKvxAm2TNW
Q1z3PSBRt9DWAIbX/Ojs67+tHfNgpnVz6r607hZX3jons+srGl3F4ThYmAR22U0a
SM47QwHHy5/fNqVr4p+aCF0yr17ZTI8ARDOd0pe2c9t9Zgzyd/E8kIU27DeSmJ4J
8wK2YiTuVZrBwkTj+0CCDOEDluuvp8cyO67Tkf9VxiIT6PKZoj+Limgz4y6iXHze
zjkV6cXq2ne5wVZtTOYEnCVbRDnbIhj+bB+nYMPql72IRSmKskbWc9H6IwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFODQNZRBMHETYoJtU8YpIRF91St0MB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvNE5BMWxFRXdjUk5pZ20xVHhpa2hFWDNWSzNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUrESMA0G
CSqGSIb3DQEBCwUAA4IBAQCEWD1ThsR8hdAhz4k+RDWNicF+6peCvmd4d1Zfteok
LnOM//CUIQ9/W9wpXdnK3RMYa5ZLHZnNsWK0AmUBwDboIxMDGvXDMf1LQiTOBJqn
angH+0ycJXJp/ToIJHk8SNx/pt6E1uFoAoKyfshrscsKEQuhZS8Bw3K36OvRSLru
J2a+REHg5hRZkg2lxveVF+w3sHlKekvFx1UiiKmXDK0/JfZ2zVxZTM4zDT51xSWQ
x50di0OWng0ZH3QvU3QAabzUJDhYGrope2exxCaijhmMGdSElisjJBZqpz6cFEpm
gYnABELI3qUKTwEPur7saQK0eyeNeek9d0WK5PudCUVt
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:48 2025 by rpki-client