Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/3U-TeGAXl7eY-rNi1qSpFBbr_q4.roa
File: 3U-TeGAXl7eY-rNi1qSpFBbr_q4.roa (raw, json)
Hash identifier: rOP4Q0zW0mSxvrUYkH2R4lNysGHGdmGDN5SVf3SzJeU=
Subject key identifier: DD:4F:93:78:60:17:97:B7:98:FA:B3:62:D6:A4:A9:14:16:EB:FE:AE
Certificate issuer: /CN=44046a683ab92b41819977245ce759e267a5036a
Certificate serial: 01856D78A86D72CC7CA36381E9156542C414
Authority key identifier: 44:04:6A:68:3A:B9:2B:41:81:99:77:24:5C:E7:59:E2:67:A5:03:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RARqaDq5K0GBmXckXOdZ4melA2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/3U-TeGAXl7eY-rNi1qSpFBbr_q4.roa
Signing time: Sun 01 Jan 2023 13:15:01 +0000
ROA not before: Sun 01 Jan 2023 13:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62111
IP address blocks: 194.156.76.0/24 maxlen: 24
2a11:a607:2a11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:a8:6d:72:cc:7c:a3:63:81:e9:15:65:42:c4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44046a683ab92b41819977245ce759e267a5036a
Validity
Not Before: Jan 1 13:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd4f9378601797b798fab362d6a4a91416ebfeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:09:17:54:60:f7:37:00:d9:fa:ef:b3:35:
0a:59:1e:d1:27:b0:2f:41:31:1f:80:c6:48:f8:ce:
fe:ec:4c:99:c7:31:73:5a:a6:7a:e6:33:38:5a:21:
30:8c:3f:7d:40:46:28:05:52:62:da:51:b4:90:99:
f3:a8:b6:13:5d:bd:9a:24:95:de:89:ea:f7:c1:8d:
c0:15:ce:94:bd:f8:23:63:9e:42:f0:fb:6a:37:ec:
7d:54:b4:e9:25:40:3c:3c:be:b8:92:18:18:44:43:
27:64:07:6b:b6:55:e3:ef:ce:33:13:4b:3e:4c:4e:
c0:0e:91:01:4c:40:3f:67:89:96:6e:46:f3:08:4d:
86:c3:ea:41:93:db:cf:b2:ac:1b:72:58:23:ce:78:
cd:04:b1:18:59:fa:4d:14:73:22:1f:de:ac:42:93:
97:38:d2:32:65:81:45:b2:87:01:9a:47:fe:c8:94:
d2:5f:bf:87:1c:08:42:df:52:b9:1e:a0:e6:f3:a5:
52:14:5e:f6:e6:cb:ca:84:eb:56:e8:17:30:14:79:
35:f8:74:41:c4:d3:0d:2e:ca:b8:9b:47:e3:ae:71:
b7:43:04:08:e0:64:14:45:ab:59:23:44:e7:af:73:
38:2d:7b:62:03:44:ff:0e:f6:29:90:ef:9c:e6:15:
32:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4F:93:78:60:17:97:B7:98:FA:B3:62:D6:A4:A9:14:16:EB:FE:AE
X509v3 Authority Key Identifier:
keyid:44:04:6A:68:3A:B9:2B:41:81:99:77:24:5C:E7:59:E2:67:A5:03:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RARqaDq5K0GBmXckXOdZ4melA2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/3U-TeGAXl7eY-rNi1qSpFBbr_q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/RARqaDq5K0GBmXckXOdZ4melA2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.76.0/24
IPv6:
2a11:a607:2a11::/48
Signature Algorithm: sha256WithRSAEncryption
6d:c5:27:6a:5e:e3:5f:76:9e:94:77:c0:7d:e2:ca:e9:0c:95:
e6:ab:3d:f7:f5:17:e8:8c:3d:ea:99:a8:4c:b8:26:8a:4a:a4:
d8:1b:14:e3:a6:13:b4:fc:33:c0:07:1a:4c:9a:5d:d5:76:98:
2e:9b:6f:c4:c0:a9:e4:e0:42:09:15:56:ab:71:25:46:a5:4b:
65:42:48:c7:a6:30:17:99:eb:c6:22:0c:20:4a:36:e6:9a:46:
50:7f:61:d1:d7:7c:c7:6d:46:b8:2e:8e:1d:7e:3f:1d:ba:e1:
61:af:aa:65:f5:12:a8:bb:f4:21:e8:71:da:36:15:8b:2b:21:
9c:d1:60:4b:2c:23:6c:4d:cd:71:43:56:b0:a5:ab:8b:6e:42:
40:be:88:65:cf:b3:d3:a5:09:26:fc:f1:14:74:37:17:f3:7f:
45:6e:4e:d5:4b:94:de:df:c3:12:47:ea:9f:c2:f7:3e:e8:be:
e6:37:9e:78:36:e4:68:94:12:1f:62:9e:b0:60:04:f5:97:35:
41:06:75:3b:c6:35:8d:b3:42:5f:5d:fe:ca:64:cd:20:f1:ef:
a2:ea:00:0a:29:16:97:0b:23:06:0a:a0:f5:c8:91:69:8d:c9:
6a:9c:56:2f:0c:bc:20:59:c9:dc:2a:4c:34:1d:fd:97:74:47:
94:48:cd:ab
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVteKhtcsx8o2OB6RVlQsQUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MDQ2YTY4M2FiOTJiNDE4MTk5NzcyNDVjZTc1OWUyNjdh
NTAzNmEwHhcNMjMwMTAxMTMxNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDRmOTM3ODYwMTc5N2I3OThmYWIzNjJkNmE0YTkxNDE2ZWJmZWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2QJF1Rg9zcA2frvszUKWR7RJ7Av
QTEfgMZI+M7+7EyZxzFzWqZ65jM4WiEwjD99QEYoBVJi2lG0kJnzqLYTXb2aJJXe
ier3wY3AFc6UvfgjY55C8PtqN+x9VLTpJUA8PL64khgYREMnZAdrtlXj784zE0s+
TE7ADpEBTEA/Z4mWbkbzCE2Gw+pBk9vPsqwbclgjznjNBLEYWfpNFHMiH96sQpOX
ONIyZYFFsocBmkf+yJTSX7+HHAhC31K5HqDm86VSFF725svKhOtW6BcwFHk1+HRB
xNMNLsq4m0fjrnG3QwQI4GQURatZI0Tnr3M4LXtiA0T/DvYpkO+c5hUyGQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN1Pk3hgF5e3mPqzYtakqRQW6/6uMB8GA1UdIwQY
MBaAFEQEamg6uStBgZl3JFznWeJnpQNqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkFScWFEcTVLMEdCbVhja1hPZFo0bWVsQTJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80OWRiNmMtN2Q1MS00YTRkLWJjMjkt
ODQxMmJlZjU2ZjIzLzEvM1UtVGVHQVhsN2VZLXJOaTFxU3BGQmJyX3E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80OWRiNmMtN2Q1MS00YTRkLWJjMjktODQxMmJlZjU2ZjIz
LzEvUkFScWFEcTVLMEdCbVhja1hPZFo0bWVsQTJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwpxMMA8E
AgACMAkDBwAqEaYHKhEwDQYJKoZIhvcNAQELBQADggEBAG3FJ2pe4192npR3wH3i
yukMlearPff1F+iMPeqZqEy4JopKpNgbFOOmE7T8M8AHGkyaXdV2mC6bb8TAqeTg
QgkVVqtxJUalS2VCSMemMBeZ68YiDCBKNuaaRlB/YdHXfMdtRrgujh1+Px264WGv
qmX1Eqi79CHocdo2FYsrIZzRYEssI2xNzXFDVrClq4tuQkC+iGXPs9OlCSb88RR0
Nxfzf0VuTtVLlN7fwxJH6p/C9z7ovuY3nng25GiUEh9inrBgBPWXNUEGdTvGNY2z
Ql9d/spkzSDx76LqAAopFpcLIwYKoPXIkWmNyWqcVi8MvCBZydwqTDQd/Zd0R5RI
zas=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:46 2025 by rpki-client