Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/4qVVqmmqA7OspRA_VRFwRBkyv9o.roa
File: 4qVVqmmqA7OspRA_VRFwRBkyv9o.roa (raw, json)
Hash identifier: v13MYpWF4w6556nbUyMzn5zdKadLhTn87Mtg6y+99Gg=
Subject key identifier: E2:A5:55:AA:69:AA:03:B3:AC:A5:10:3F:55:11:70:44:19:32:BF:DA
Certificate issuer: /CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Certificate serial: 01942444F466E6D088E8B4129D5942927DB4
Authority key identifier: 8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/4qVVqmmqA7OspRA_VRFwRBkyv9o.roa
Signing time: Wed 01 Jan 2025 23:48:06 +0000
ROA not before: Wed 01 Jan 2025 23:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15600
IP address blocks: 84.241.64.0/18 maxlen: 18
185.92.64.0/22 maxlen: 22
2a01:b540::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:f4:66:e6:d0:88:e8:b4:12:9d:59:42:92:7d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Validity
Not Before: Jan 1 23:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2a555aa69aa03b3aca5103f551170441932bfda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:a2:32:85:f7:68:df:46:8d:77:b8:31:87:
65:14:ae:d0:bc:ae:84:75:4f:d0:c5:aa:93:05:2e:
d3:09:4f:4a:5d:12:46:e9:eb:2a:81:76:87:20:54:
ed:f5:52:fb:30:ac:b2:d6:5a:4f:77:88:e4:ef:9e:
49:1c:12:ee:1c:4f:45:64:36:b1:79:2d:86:35:f7:
06:72:80:1f:e6:03:e0:2c:92:0e:0a:7c:6a:24:74:
b5:d3:7d:19:c9:b9:4c:13:7f:83:34:8a:af:ff:0d:
a7:54:25:1c:71:0c:09:ce:20:7e:3a:2b:c9:21:56:
68:a8:e0:29:ab:d1:5b:aa:cb:ab:c4:7d:74:98:5b:
ea:39:cd:8e:e0:4a:5c:b7:45:ff:bf:7d:c6:c7:ed:
68:6e:01:68:8a:f5:91:21:0f:3a:f7:20:06:c6:08:
05:c1:34:cc:ef:a5:c3:1b:ad:f3:4e:df:6a:51:89:
79:4b:d5:f3:1d:fe:b6:fd:ee:98:06:90:34:aa:a4:
cd:24:c0:7b:a4:5f:39:29:5a:63:38:62:24:55:2d:
cd:b6:90:f4:d7:cd:86:8d:38:c4:f2:61:be:5d:27:
49:1d:a3:f3:20:18:c6:4e:cf:59:f1:0c:b1:c9:ec:
56:dc:81:38:cf:54:5a:f4:58:12:05:11:60:eb:80:
b9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A5:55:AA:69:AA:03:B3:AC:A5:10:3F:55:11:70:44:19:32:BF:DA
X509v3 Authority Key Identifier:
keyid:8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/4qVVqmmqA7OspRA_VRFwRBkyv9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.241.64.0/18
185.92.64.0/22
IPv6:
2a01:b540::/29
Signature Algorithm: sha256WithRSAEncryption
34:e1:ba:ca:05:58:30:3c:ba:b4:ee:41:72:e5:97:15:ac:6d:
de:8d:58:23:ea:02:bb:c7:e6:d1:be:83:89:76:8d:85:72:4e:
c0:77:ad:c8:81:6b:32:c8:fe:0b:8e:b4:81:3c:ae:bb:16:38:
f5:96:28:42:54:cb:b7:95:5b:7e:9a:8c:c3:c7:48:50:af:97:
cc:27:ca:8a:73:bb:13:eb:2c:e3:8e:ef:7d:9c:ec:71:2b:eb:
05:e2:81:26:92:d3:93:a6:93:d2:f8:6c:9f:02:a2:38:cd:95:
ff:06:4d:b9:e9:37:d4:9c:85:ac:f7:cd:b3:4e:25:b0:3a:8b:
79:9f:07:95:f1:78:62:ff:f4:74:73:8a:cb:ed:36:48:97:ec:
fd:83:97:b1:62:e6:db:ec:13:e0:cd:c6:9d:ee:31:ee:ba:3f:
2f:4b:2b:ae:c9:fd:77:81:7a:81:99:c2:17:32:76:6a:aa:33:
06:ab:f8:35:5b:c0:af:51:a1:2e:99:48:f2:b6:be:4d:28:cd:
23:a3:ac:4a:63:43:16:00:75:aa:3e:f4:5b:55:62:84:fb:c1:
1b:cb:c6:66:d8:ee:9e:12:ff:36:bf:3e:f0:8a:51:4e:54:9e:
96:f9:8c:7e:b1:b4:88:fa:a8:d0:b9:dd:91:1a:f9:a0:fb:86:
66:af:be:bb
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQkRPRm5tCI6LQSnVlCkn20MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMDI5YjFlYjUxY2Q0ZjRiYzRkZDk4NWEwZWM2NTNhNzVl
Y2E0MGMwHhcNMjUwMTAxMjM0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmE1NTVhYTY5YWEwM2IzYWNhNTEwM2Y1NTExNzA0NDE5MzJiZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7yiMoX3aN9GjXe4MYdlFK7QvK6E
dU/QxaqTBS7TCU9KXRJG6esqgXaHIFTt9VL7MKyy1lpPd4jk755JHBLuHE9FZDax
eS2GNfcGcoAf5gPgLJIOCnxqJHS1030ZyblME3+DNIqv/w2nVCUccQwJziB+OivJ
IVZoqOApq9FbqsurxH10mFvqOc2O4Epct0X/v33Gx+1obgFoivWRIQ869yAGxggF
wTTM76XDG63zTt9qUYl5S9XzHf62/e6YBpA0qqTNJMB7pF85KVpjOGIkVS3NtpD0
182GjTjE8mG+XSdJHaPzIBjGTs9Z8QyxyexW3IE4z1Ra9FgSBRFg64C5uQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFOKlVappqgOzrKUQP1URcEQZMr/aMB8GA1UdIwQY
MBaAFIoCmx61HNT0vE3ZhaDsZTp17KQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWdLYkhyVWMxUFM4VGRtRm9PeGxPblhzcEF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84ZDIwYmItZDcyZC00N2FhLWJlNDgt
MzgyNjljZWY1ZTAxLzEvNHFWVnFtbXFBN09zcFJBX1ZSRndSQmt5djlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My84ZDIwYmItZDcyZC00N2FhLWJlNDgtMzgyNjljZWY1ZTAx
LzEvaWdLYkhyVWMxUFM4VGRtRm9PeGxPblhzcEF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQGVPFAAwQC
uVxAMA0EAgACMAcDBQMqAbVAMA0GCSqGSIb3DQEBCwUAA4IBAQA04brKBVgwPLq0
7kFy5ZcVrG3ejVgj6gK7x+bRvoOJdo2Fck7Ad63IgWsyyP4LjrSBPK67Fjj1lihC
VMu3lVt+mozDx0hQr5fMJ8qKc7sT6yzjju99nOxxK+sF4oEmktOTppPS+GyfAqI4
zZX/Bk256TfUnIWs982zTiWwOot5nweV8Xhi//R0c4rL7TZIl+z9g5exYubb7BPg
zcad7jHuuj8vSyuuyf13gXqBmcIXMnZqqjMGq/g1W8CvUaEumUjytr5NKM0jo6xK
Y0MWAHWqPvRbVWKE+8Eby8Zm2O6eEv82vz7wilFOVJ6W+Yx+sbSI+qjQud2RGvmg
+4Zmr767
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:26:17 2025 by rpki-client