Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/4YoTrMYsGaMYHxRnEqgcg_cMVU4.roa
File: 4YoTrMYsGaMYHxRnEqgcg_cMVU4.roa (raw, json)
Hash identifier: wYtD8IQfPDq8fhWI3l1ZE5I+Mmb5cXVGlsC+hhza/jA=
Subject key identifier: E1:8A:13:AC:C6:2C:19:A3:18:1F:14:67:12:A8:1C:83:F7:0C:55:4E
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018D31323B03BC0D8775120816238631B4D2
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/4YoTrMYsGaMYHxRnEqgcg_cMVU4.roa
Signing time: Mon 22 Jan 2024 12:43:11 +0000
ROA not before: Mon 22 Jan 2024 12:43:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35598
IP address blocks: 194.26.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:31:32:3b:03:bc:0d:87:75:12:08:16:23:86:31:b4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 22 12:43:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e18a13acc62c19a3181f146712a81c83f70c554e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:56:0c:07:22:fb:78:40:e9:c1:9d:4b:dd:06:
56:da:f4:20:23:d3:84:31:35:f6:2d:4b:c7:4e:17:
53:5b:5e:fe:58:3e:38:9f:8c:b9:c0:ce:60:94:9c:
f5:81:a9:c4:36:2f:8f:ee:47:70:b9:3d:ff:48:8b:
d8:a4:5c:8f:60:31:0c:bb:b2:6d:dc:5f:cd:4d:bd:
5c:ae:8f:b9:c2:a5:54:dd:88:93:31:08:ac:eb:be:
eb:d6:5a:e6:aa:da:47:2a:12:4e:fb:56:0f:4a:b1:
77:fe:15:59:82:92:f4:c6:f8:c8:ab:05:5d:e5:ab:
53:b2:66:b0:26:f8:15:18:85:85:55:87:e6:e3:2b:
fa:a7:d1:cd:9f:1c:5a:c0:eb:b7:65:f3:9e:7d:fb:
e9:b4:81:86:dd:2f:f9:98:e3:72:85:15:f2:e8:81:
cb:8f:ba:82:bc:d4:de:6c:37:44:fe:f9:5c:6b:cc:
0a:72:16:c3:30:04:b7:83:0c:fe:49:58:96:ad:80:
ba:0e:45:07:bb:4b:5d:65:2f:cd:f5:df:ed:85:90:
ed:e1:f0:7d:3c:08:88:11:ff:5b:d0:f9:c3:e0:f9:
d5:06:66:19:87:19:80:14:2a:fd:30:cf:aa:53:56:
cb:5f:7f:fa:38:ed:5b:2a:6f:73:86:7e:4a:eb:85:
8a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8A:13:AC:C6:2C:19:A3:18:1F:14:67:12:A8:1C:83:F7:0C:55:4E
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/4YoTrMYsGaMYHxRnEqgcg_cMVU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.210.0/24
Signature Algorithm: sha256WithRSAEncryption
64:9d:be:38:3b:eb:96:72:22:1b:06:a1:ec:92:c9:b1:e9:fc:
8b:b8:dd:16:1c:13:d0:82:a9:ae:5f:b4:d2:53:54:02:13:30:
6b:c2:9b:b9:c5:a4:92:f0:94:0c:5f:c9:b6:62:b4:21:9c:03:
2d:f4:36:1d:30:9f:66:ec:dc:ec:98:55:c8:52:dc:00:aa:f6:
69:fe:20:1a:22:9a:14:8e:01:50:62:1a:f7:ae:63:b0:25:63:
7b:79:14:9c:d5:6f:66:ed:47:3a:f6:ec:6c:f8:7e:3b:da:3d:
00:b3:01:78:a3:a9:4c:19:33:80:d7:78:ac:25:62:84:4c:9a:
89:25:3c:84:cd:26:1e:c4:93:0d:70:52:8d:19:44:6a:0a:8e:
a1:7d:d0:11:11:c3:58:21:73:81:c5:7b:66:2e:7f:d5:5d:09:
a6:07:1e:bc:c7:3c:d0:30:de:02:1d:43:e0:72:2b:37:7a:ca:
f4:34:e6:b6:88:90:76:f6:16:85:6a:b4:ab:0b:52:01:93:fe:
7e:cd:1b:c3:a7:2b:07:4e:1d:ee:88:a8:a5:fc:9e:8a:68:81:
43:05:fb:f3:57:13:64:db:a7:7b:03:c8:72:c1:44:a0:14:48:
ae:75:b2:67:40:b6:08:2f:bf:92:4d:9f:68:d5:0a:cc:ec:1b:
9b:30:84:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0xMjsDvA2HdRIIFiOGMbTSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjQwMTIyMTI0MzExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMThhMTNhY2M2MmMxOWEzMTgxZjE0NjcxMmE4MWM4M2Y3MGM1NTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFYMByL7eEDpwZ1L3QZW2vQgI9OE
MTX2LUvHThdTW17+WD44n4y5wM5glJz1ganENi+P7kdwuT3/SIvYpFyPYDEMu7Jt
3F/NTb1cro+5wqVU3YiTMQis677r1lrmqtpHKhJO+1YPSrF3/hVZgpL0xvjIqwVd
5atTsmawJvgVGIWFVYfm4yv6p9HNnxxawOu3ZfOeffvptIGG3S/5mONyhRXy6IHL
j7qCvNTebDdE/vlca8wKchbDMAS3gwz+SViWrYC6DkUHu0tdZS/N9d/thZDt4fB9
PAiIEf9b0PnD4PnVBmYZhxmAFCr9MM+qU1bLX3/6OO1bKm9zhn5K64WKtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOGKE6zGLBmjGB8UZxKoHIP3DFVOMB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvNFlvVHJNWXNHYU1ZSHhSbkVxZ2NnX2NNVlU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhrSMA0G
CSqGSIb3DQEBCwUAA4IBAQBknb44O+uWciIbBqHsksmx6fyLuN0WHBPQgqmuX7TS
U1QCEzBrwpu5xaSS8JQMX8m2YrQhnAMt9DYdMJ9m7NzsmFXIUtwAqvZp/iAaIpoU
jgFQYhr3rmOwJWN7eRSc1W9m7Uc69uxs+H472j0AswF4o6lMGTOA13isJWKETJqJ
JTyEzSYexJMNcFKNGURqCo6hfdAREcNYIXOBxXtmLn/VXQmmBx68xzzQMN4CHUPg
cis3esr0NOa2iJB29haFarSrC1IBk/5+zRvDpysHTh3uiKil/J6KaIFDBfvzVxNk
26d7A8hywUSgFEiudbJnQLYIL7+STZ9o1QrM7BubMITF
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:35:53 2025 by rpki-client