Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/CJVe4Q9dvFn43GMuu9ouncpPy44.roa
File: CJVe4Q9dvFn43GMuu9ouncpPy44.roa (raw, json)
Hash identifier: fVjdLHUWi0mI5w+c0YY8mq7OHdrDZDIYLR8WdsperC8=
Subject key identifier: 08:95:5E:E1:0F:5D:BC:59:F8:DC:63:2E:BB:DA:2E:9D:CA:4F:CB:8E
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 0194266B81B40004C1AB96337B1278460CFE
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/CJVe4Q9dvFn43GMuu9ouncpPy44.roa
Signing time: Thu 02 Jan 2025 09:49:27 +0000
ROA not before: Thu 02 Jan 2025 09:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49338
IP address blocks: 81.4.186.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:81:b4:00:04:c1:ab:96:33:7b:12:78:46:0c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 09:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08955ee10f5dbc59f8dc632ebbda2e9dca4fcb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ad:65:15:fb:05:b9:99:44:84:24:d4:c9:d6:
6b:ad:21:a7:12:a0:59:08:a8:55:56:b6:6f:c3:88:
be:0e:fe:4a:81:46:38:01:47:70:3f:17:cd:36:ca:
86:b7:9e:cb:25:57:6b:af:8f:38:d8:bb:5a:18:b1:
03:69:e7:28:9e:aa:f5:64:50:c3:5b:55:5f:94:6a:
4b:4e:85:96:b8:85:df:66:a1:75:24:91:83:3c:ec:
94:dc:a8:dc:73:d8:e0:4a:c0:aa:9b:c6:99:35:1f:
e3:ab:35:f0:6c:70:b1:07:4a:67:ff:2a:7a:15:14:
d1:2d:c9:ed:61:88:bc:97:bd:8e:2d:3d:2f:91:a1:
38:05:36:44:1c:51:02:a2:8a:a0:13:b6:87:08:58:
88:f9:49:86:7b:4f:4d:a5:42:35:ed:e3:4b:50:c7:
5e:4d:a1:ae:d1:25:bd:6f:6b:62:fc:23:65:db:e1:
b4:75:83:fe:83:77:99:ec:f4:05:57:1f:f9:6a:3c:
c6:e5:5c:dc:2e:87:9f:92:cc:e5:e1:f1:8f:00:ae:
fd:6c:97:3d:fb:48:8e:4e:f2:26:fc:ed:ec:52:19:
87:8c:f1:9e:7a:95:67:5e:71:b5:7a:6e:1b:cb:81:
25:f4:a2:53:e4:2e:0d:4d:0f:33:34:18:f2:0a:f9:
b1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:95:5E:E1:0F:5D:BC:59:F8:DC:63:2E:BB:DA:2E:9D:CA:4F:CB:8E
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/CJVe4Q9dvFn43GMuu9ouncpPy44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.4.186.0/23
Signature Algorithm: sha256WithRSAEncryption
43:7a:8f:fb:39:86:fe:eb:ab:24:32:05:c6:36:d2:6b:69:e0:
ee:a6:f7:f2:54:d3:90:14:a5:65:1d:1d:3d:a9:24:1d:2c:ac:
1f:5a:99:8c:5e:36:b5:20:6e:0b:d6:77:f1:1f:82:d1:7d:84:
7f:14:72:64:ef:97:c9:12:c0:71:0f:39:8b:97:15:57:34:fb:
49:0e:ce:dd:9d:3d:23:0d:78:df:f8:6c:7c:11:3c:30:06:45:
a2:55:dc:39:ce:e2:a2:53:1c:90:2d:d5:53:22:ec:46:7b:7c:
34:37:51:2c:aa:21:6f:52:b6:98:7e:83:ca:4c:62:d6:81:40:
64:9c:42:a9:eb:46:5c:a2:04:77:6d:31:60:21:a6:78:28:b6:
89:0d:39:6d:ce:33:9c:7a:f9:79:1e:02:c8:f8:7d:69:da:2a:
07:96:e9:4d:0c:be:c1:06:5b:85:a7:79:7e:e6:a2:ce:bb:c7:
ff:4a:06:d8:43:97:bf:aa:c7:86:ad:07:2b:35:ae:71:74:1e:
59:32:78:3b:b2:41:86:ca:a0:f3:ce:4a:a5:87:d2:e6:b7:34:
13:7a:ef:52:35:de:0c:5d:08:dd:6b:34:47:cd:13:84:dc:e5:
7c:1a:57:8d:a8:2b:54:03:df:24:83:29:f9:af:fe:55:be:7f:
d5:e6:fd:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma4G0AATBq5YzexJ4Rgz+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5
MzZmZDUwHhcNMjUwMTAyMDk0OTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODk1NWVlMTBmNWRiYzU5ZjhkYzYzMmViYmRhMmU5ZGNhNGZjYjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq1lFfsFuZlEhCTUydZrrSGnEqBZ
CKhVVrZvw4i+Dv5KgUY4AUdwPxfNNsqGt57LJVdrr4842LtaGLEDaeconqr1ZFDD
W1VflGpLToWWuIXfZqF1JJGDPOyU3Kjcc9jgSsCqm8aZNR/jqzXwbHCxB0pn/yp6
FRTRLcntYYi8l72OLT0vkaE4BTZEHFECooqgE7aHCFiI+UmGe09NpUI17eNLUMde
TaGu0SW9b2ti/CNl2+G0dYP+g3eZ7PQFVx/5ajzG5VzcLoefkszl4fGPAK79bJc9
+0iOTvIm/O3sUhmHjPGeepVnXnG1em4by4El9KJT5C4NTQ8zNBjyCvmxIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAiVXuEPXbxZ+NxjLrvaLp3KT8uOMB8GA1UdIwQY
MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt
YjBmNGI5YzM3ZTQ5LzEvQ0pWZTRROWR2Rm40M0dNdXU5b3VuY3BQeTQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5
LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUQS6MA0G
CSqGSIb3DQEBCwUAA4IBAQBDeo/7OYb+66skMgXGNtJraeDupvfyVNOQFKVlHR09
qSQdLKwfWpmMXja1IG4L1nfxH4LRfYR/FHJk75fJEsBxDzmLlxVXNPtJDs7dnT0j
DXjf+Gx8ETwwBkWiVdw5zuKiUxyQLdVTIuxGe3w0N1EsqiFvUraYfoPKTGLWgUBk
nEKp60ZcogR3bTFgIaZ4KLaJDTltzjOcevl5HgLI+H1p2ioHlulNDL7BBluFp3l+
5qLOu8f/SgbYQ5e/qseGrQcrNa5xdB5ZMng7skGGyqDzzkqlh9LmtzQTeu9SNd4M
XQjdazRHzROE3OV8GleNqCtUA98kgyn5r/5Vvn/V5v27
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:02:09 2025 by rpki-client