Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/Sxv2qfBulo0RZ4sOhid2MAKKMoU.roa
File: Sxv2qfBulo0RZ4sOhid2MAKKMoU.roa (raw, json)
Hash identifier: +dfhAhJaGsdSKSv4nD2C88vZfSVLCjgFSc+TcGcgmrU=
Subject key identifier: 4B:1B:F6:A9:F0:6E:96:8D:11:67:8B:0E:86:27:76:30:02:8A:32:85
Certificate issuer: /CN=0100a169c8e696ca169b599c7a171193fff06d2a
Certificate serial: 0194258EF2A003FB6AB84131476C91D9BC6E
Authority key identifier: 01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/Sxv2qfBulo0RZ4sOhid2MAKKMoU.roa
Signing time: Thu 02 Jan 2025 05:48:32 +0000
ROA not before: Thu 02 Jan 2025 05:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.29.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f2:a0:03:fb:6a:b8:41:31:47:6c:91:d9:bc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0100a169c8e696ca169b599c7a171193fff06d2a
Validity
Not Before: Jan 2 05:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b1bf6a9f06e968d11678b0e86277630028a3285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:3e:31:ef:c8:20:1e:b4:7c:fd:d2:6e:a1:
4c:f6:90:68:26:d6:ee:7f:d6:31:65:d3:f9:c0:09:
01:46:64:35:c1:63:ea:f6:4d:55:c3:69:51:f2:6b:
95:1b:f4:b5:1a:4e:fd:8b:9e:ab:00:e1:b3:f3:71:
71:69:cd:b1:b0:30:97:df:e1:6d:9f:27:4f:9a:8a:
0e:d7:52:74:f8:cc:25:f3:ee:13:01:ca:f6:2d:d2:
b0:f9:8d:fd:0a:41:67:c4:db:ee:7b:dd:6e:6e:a4:
a9:26:34:3d:64:c3:8b:ad:17:64:d2:8a:6d:ca:71:
35:4d:0e:2f:17:cc:ef:bb:e6:43:bb:ba:2b:96:ef:
a6:8a:30:eb:c8:62:a2:a3:7e:86:8f:e1:bf:02:e6:
5f:01:fe:02:f9:10:39:27:b8:79:09:7f:a7:cc:b5:
5c:38:ba:0a:69:0a:42:4c:43:25:38:56:49:18:d4:
0b:30:f2:9f:92:b2:22:8b:a5:6a:63:c7:65:72:8b:
b0:e6:a7:78:e4:96:21:55:2c:cd:60:e4:1e:88:aa:
3b:56:26:85:96:1b:55:d1:a5:fa:bb:d6:f0:af:51:
bd:cf:e6:3c:ae:42:b2:fa:a7:e6:72:91:66:ca:2c:
60:88:79:05:6a:bd:39:ca:df:13:f5:7b:85:03:2b:
f0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1B:F6:A9:F0:6E:96:8D:11:67:8B:0E:86:27:76:30:02:8A:32:85
X509v3 Authority Key Identifier:
keyid:01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/Sxv2qfBulo0RZ4sOhid2MAKKMoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.47.0/24
Signature Algorithm: sha256WithRSAEncryption
47:da:ca:ce:9f:b4:94:d8:8f:43:7b:9a:f9:af:a3:75:24:70:
f0:06:48:8d:56:dd:46:c0:fd:52:98:46:d9:23:05:e2:5c:9d:
28:5a:f7:a0:ed:f2:53:21:46:fc:14:f2:e2:7a:0a:6e:4a:db:
29:8d:ad:d6:81:63:20:bb:4e:5e:0a:b4:a8:a2:ca:81:61:e7:
79:8a:f6:be:c9:ab:a9:71:d6:82:06:06:fb:d0:00:89:56:a2:
a2:bb:52:cf:ae:af:5f:67:aa:ac:0d:97:90:92:60:4f:df:68:
77:8b:b6:8b:50:10:ed:20:17:40:b2:79:47:99:0a:72:d7:8e:
9a:b9:c0:b5:8d:63:f2:1f:36:3f:58:1a:4a:09:2f:45:85:a8:
c5:2f:2b:5c:e6:ab:69:00:ef:4f:92:e1:8f:3b:c8:7f:3c:57:
f0:8e:30:1f:6e:41:44:6f:a5:ff:25:ee:24:db:48:a1:e7:7f:
e8:a3:b8:89:be:2c:a9:01:83:f6:63:2b:05:2f:03:64:4b:ce:
73:43:e9:95:e9:93:17:ce:e2:ae:bf:0d:34:f7:0f:a0:49:f7:
07:4e:73:aa:71:cf:56:c3:ad:d6:d3:7d:eb:d9:a2:3f:db:3a:
8d:91:ec:cc:d3:67:49:94:4a:2d:66:e3:97:e4:12:ea:8e:ad:
d1:19:ee:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljvKgA/tquEExR2yR2bxuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMDBhMTY5YzhlNjk2Y2ExNjliNTk5YzdhMTcxMTkzZmZm
MDZkMmEwHhcNMjUwMTAyMDU0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjFiZjZhOWYwNmU5NjhkMTE2NzhiMGU4NjI3NzYzMDAyOGEzMjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAg+Me/IIB60fP3SbqFM9pBoJtbu
f9YxZdP5wAkBRmQ1wWPq9k1Vw2lR8muVG/S1Gk79i56rAOGz83Fxac2xsDCX3+Ft
nydPmooO11J0+Mwl8+4TAcr2LdKw+Y39CkFnxNvue91ubqSpJjQ9ZMOLrRdk0opt
ynE1TQ4vF8zvu+ZDu7orlu+mijDryGKio36Gj+G/AuZfAf4C+RA5J7h5CX+nzLVc
OLoKaQpCTEMlOFZJGNQLMPKfkrIii6VqY8dlcouw5qd45JYhVSzNYOQeiKo7ViaF
lhtV0aX6u9bwr1G9z+Y8rkKy+qfmcpFmyixgiHkFar05yt8T9XuFAyvwqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEsb9qnwbpaNEWeLDoYndjACijKFMB8GA1UdIwQY
MBaAFAEAoWnI5pbKFptZnHoXEZP/8G0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVFDaGFjam1sc29XbTFtY2VoY1JrX193YlNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80NmM5NWMtN2YyMS00Y2M3LThlOGYt
YjU2NmFlYjk1ZjkzLzEvU3h2MnFmQnVsbzBSWjRzT2hpZDJNQUtLTW9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni80NmM5NWMtN2YyMS00Y2M3LThlOGYtYjU2NmFlYjk1Zjkz
LzEvQVFDaGFjam1sc29XbTFtY2VoY1JrX193YlNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuR0vMA0G
CSqGSIb3DQEBCwUAA4IBAQBH2srOn7SU2I9De5r5r6N1JHDwBkiNVt1GwP1SmEbZ
IwXiXJ0oWveg7fJTIUb8FPLiegpuStspja3WgWMgu05eCrSoosqBYed5iva+yaup
cdaCBgb70ACJVqKiu1LPrq9fZ6qsDZeQkmBP32h3i7aLUBDtIBdAsnlHmQpy146a
ucC1jWPyHzY/WBpKCS9FhajFLytc5qtpAO9PkuGPO8h/PFfwjjAfbkFEb6X/Je4k
20ih53/oo7iJviypAYP2YysFLwNkS85zQ+mV6ZMXzuKuvw009w+gSfcHTnOqcc9W
w63W033r2aI/2zqNkezM02dJlEotZuOX5BLqjq3RGe7z
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:56 2025 by rpki-client