Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/kjZNOidGRKaYdxShfAMV7q87UPA.roa
File: kjZNOidGRKaYdxShfAMV7q87UPA.roa (raw, json)
Hash identifier: 0cnfySN2xjQ3MEgAffJbFZmtZLELUMAWcuobV3FR0kE=
Subject key identifier: 92:36:4D:3A:27:46:44:A6:98:77:14:A1:7C:03:15:EE:AF:3B:50:F0
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A50F2F9FA50BC813F610BCAC5B3F2
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/kjZNOidGRKaYdxShfAMV7q87UPA.roa
Signing time: Wed 01 Jan 2025 19:49:17 +0000
ROA not before: Wed 01 Jan 2025 19:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 702
IP address blocks: 145.4.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:50:f2:f9:fa:50:bc:81:3f:61:0b:ca:c5:b3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92364d3a274644a6987714a17c0315eeaf3b50f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4a:52:05:16:a6:cd:ed:c5:1d:5d:52:ca:6e:
f8:98:09:57:dc:9d:44:06:ad:bc:0d:d9:16:2d:62:
94:10:39:da:28:7f:c6:d7:44:d9:e6:26:a8:53:44:
b2:84:d7:01:ba:10:1a:5e:d4:3a:ee:0c:d0:73:c4:
09:e7:6c:11:40:fd:5e:06:ac:64:c1:14:cb:78:10:
19:2f:60:25:02:ab:51:c0:cc:dc:38:6e:e4:e4:83:
3c:19:b8:f3:9a:97:c8:c6:74:9e:0d:d0:c1:a8:ec:
01:25:1b:b3:c4:34:f4:c5:ef:7f:ba:ba:c6:8c:29:
a5:3c:06:68:93:44:46:13:06:b6:de:b5:70:b1:ee:
aa:66:d4:4f:60:8b:7c:17:67:d8:8e:f3:79:28:ee:
89:a0:0c:e4:d4:4e:16:8d:e6:78:ba:0c:97:59:dc:
ae:dc:6b:28:07:9a:08:0a:63:c3:ba:a2:28:38:ba:
78:23:a1:80:2a:16:8a:b1:09:30:84:de:70:f3:46:
e3:45:d3:bc:11:3e:a1:92:bb:f2:b0:fb:e7:c8:51:
f2:07:66:85:8d:f4:bb:c4:d4:30:56:ed:23:07:8f:
1e:53:b0:67:b5:40:c8:d5:79:d5:98:fe:d1:a7:2a:
54:db:29:5e:70:4a:9d:1f:18:20:fb:92:a1:9d:9f:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:36:4D:3A:27:46:44:A6:98:77:14:A1:7C:03:15:EE:AF:3B:50:F0
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/kjZNOidGRKaYdxShfAMV7q87UPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.4.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:9c:3d:25:ec:8b:a5:13:fa:4f:21:2c:a0:6e:f4:bb:b8:db:
e2:ca:83:ef:00:66:92:d6:3e:81:99:8f:5f:dd:f1:80:bd:dc:
a6:e2:ad:83:4a:e0:0c:8a:14:2c:e3:a5:bb:b8:6b:fe:22:52:
73:ac:87:3b:b1:a2:ca:37:4d:05:ab:a7:38:d9:68:22:4d:c4:
d8:fa:ea:50:a0:70:c1:95:2c:c7:60:e7:a5:94:6c:95:bc:06:
e7:7a:fc:7e:15:1c:c9:5b:d2:d1:bc:76:d8:c1:93:6d:8c:07:
58:33:f7:10:68:57:9b:13:e2:18:a5:4f:3d:8a:3b:07:33:78:
db:a8:ad:d3:54:aa:76:ba:68:fb:5c:5e:f9:80:2f:74:c8:ad:
59:eb:a7:2a:3c:d7:1a:00:d7:0d:29:b2:a3:56:59:06:0d:f8:
ae:ad:cb:f9:0e:27:f5:0d:ec:c3:d4:4f:85:30:a0:a0:97:e3:
4e:4f:b2:ed:d4:4d:57:5e:bf:97:e4:d4:7a:0e:dc:d6:d9:19:
ea:52:47:ee:2d:9d:fc:9a:ad:6d:d3:cd:9e:df:ae:a3:83:88:
02:f3:17:be:d8:8f:3f:ae:a1:4a:cb:37:ea:5a:0e:4e:dd:52:
13:00:c8:b6:5e:aa:47:fc:8e:bb:96:32:9d:02:51:78:b3:24:
cc:66:29:df
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQjalDy+fpQvIE/YQvKxbPyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjUwMTAxMTk0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjM2NGQzYTI3NDY0NGE2OTg3NzE0YTE3YzAzMTVlZWFmM2I1MGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkpSBRamze3FHV1Sym74mAlX3J1E
Bq28DdkWLWKUEDnaKH/G10TZ5iaoU0SyhNcBuhAaXtQ67gzQc8QJ52wRQP1eBqxk
wRTLeBAZL2AlAqtRwMzcOG7k5IM8GbjzmpfIxnSeDdDBqOwBJRuzxDT0xe9/urrG
jCmlPAZok0RGEwa23rVwse6qZtRPYIt8F2fYjvN5KO6JoAzk1E4WjeZ4ugyXWdyu
3GsoB5oICmPDuqIoOLp4I6GAKhaKsQkwhN5w80bjRdO8ET6hkrvysPvnyFHyB2aF
jfS7xNQwVu0jB48eU7BntUDI1XnVmP7RpypU2ylecEqdHxgg+5KhnZ81MQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFJI2TTonRkSmmHcUoXwDFe6vO1DwMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEva2paTk9pZEdSS2FZZHhTaGZBTVY3cTg3VVBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkQQwDQYJ
KoZIhvcNAQELBQADggEBAGCcPSXsi6UT+k8hLKBu9Lu42+LKg+8AZpLWPoGZj1/d
8YC93KbirYNK4AyKFCzjpbu4a/4iUnOshzuxoso3TQWrpzjZaCJNxNj66lCgcMGV
LMdg56WUbJW8Bud6/H4VHMlb0tG8dtjBk22MB1gz9xBoV5sT4hilTz2KOwczeNuo
rdNUqna6aPtcXvmAL3TIrVnrpyo81xoA1w0psqNWWQYN+K6ty/kOJ/UN7MPUT4Uw
oKCX405Psu3UTVdev5fk1HoO3NbZGepSR+4tnfyarW3TzZ7frqODiALzF77Yjz+u
oUrLN+paDk7dUhMAyLZeqkf8jruWMp0CUXizJMxmKd8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:42 2025 by rpki-client