Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/V4HzyqT3UdFuM-GyIseILy4xTfQ.roa
File: V4HzyqT3UdFuM-GyIseILy4xTfQ.roa (raw, json)
Hash identifier: 1TwXBA5f5XgP5uZG5yeFX6kZqTX4W9t72jbcfsBpAgw=
Subject key identifier: 57:81:F3:CA:A4:F7:51:D1:6E:33:E1:B2:22:C7:88:2F:2E:31:4D:F4
Certificate issuer: /CN=8402924861cbc088c655a872535a903108a07bf1
Certificate serial: 019423D72AE57E4B22017ED725095A0C127B
Authority key identifier: 84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/V4HzyqT3UdFuM-GyIseILy4xTfQ.roa
Signing time: Wed 01 Jan 2025 21:48:11 +0000
ROA not before: Wed 01 Jan 2025 21:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50673
IP address blocks: 185.233.66.0/24 maxlen: 24
217.65.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:2a:e5:7e:4b:22:01:7e:d7:25:09:5a:0c:12:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8402924861cbc088c655a872535a903108a07bf1
Validity
Not Before: Jan 1 21:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5781f3caa4f751d16e33e1b222c7882f2e314df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:bf:45:26:6b:44:d7:e0:2b:78:9d:98:d2:
a5:cb:3f:b3:5c:fc:cf:49:0d:b6:21:f5:17:01:ca:
fa:d5:23:fa:83:15:1b:17:54:2f:21:f8:91:52:30:
1f:1f:05:b7:af:df:32:12:8c:39:cc:d3:d1:54:64:
88:b7:92:22:82:a2:21:27:0e:32:29:67:3d:24:18:
78:a7:4e:aa:3d:2e:a3:b8:9d:df:54:4d:15:3b:e2:
7d:85:1c:23:54:a1:c5:99:e2:4c:b8:f7:35:74:ca:
60:1f:f4:05:1e:36:88:0d:0b:63:28:27:c5:e0:b0:
01:b5:b0:8f:56:f0:97:27:7d:0d:60:0e:ea:59:3c:
06:f1:9f:1b:05:c7:23:af:01:7f:b8:e0:25:83:78:
bb:2f:cb:1a:f5:39:69:40:0d:bb:ad:dc:e6:30:36:
c9:a0:39:b6:41:4b:11:7d:6d:6d:8b:f8:ad:3a:38:
5a:d0:96:6f:ad:56:e0:c1:b6:f2:92:85:e7:23:7c:
4b:56:dc:5a:1a:e1:a9:c0:e7:e3:ad:31:52:9f:37:
90:34:35:20:a4:fa:00:db:d7:e8:18:5e:7b:08:79:
5b:80:86:ce:95:45:fa:37:41:97:8f:b2:51:16:ce:
f0:bd:37:3d:ed:5f:ba:3b:de:7d:7c:1a:fe:15:33:
9e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:81:F3:CA:A4:F7:51:D1:6E:33:E1:B2:22:C7:88:2F:2E:31:4D:F4
X509v3 Authority Key Identifier:
keyid:84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/V4HzyqT3UdFuM-GyIseILy4xTfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.66.0/24
217.65.131.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:89:35:9d:80:01:42:b1:75:3d:fb:6e:e8:24:ad:5c:72:0a:
06:f3:00:00:33:63:aa:c4:62:f1:9f:ff:59:44:80:51:e5:d7:
0d:d2:ce:17:35:dd:9f:14:c8:42:8b:64:cd:f5:45:a1:2b:5c:
bd:7f:b1:37:d2:d7:e2:84:a4:31:f2:6b:36:96:05:00:dd:49:
c0:93:36:a2:56:fb:f8:94:5b:98:e3:bb:91:ee:28:ad:5a:90:
e9:e9:8c:77:21:42:fc:47:24:5a:5e:ef:28:73:3f:13:e2:ca:
6b:a2:b2:39:14:c9:84:d5:5c:8c:56:a8:4a:ff:d9:5f:92:bf:
05:2c:10:27:6e:c6:14:4b:26:e2:bc:a0:0f:df:bf:40:4a:71:
16:3d:84:28:21:10:76:c9:72:ec:ac:d8:75:6f:50:b2:e5:9e:
42:f4:e0:f9:fb:6d:3f:e0:14:ee:4c:c3:fd:da:55:7f:a5:a9:
b9:e5:fb:19:6c:77:c9:7e:9d:af:bc:6f:44:a4:74:f0:d6:1f:
d8:5c:d2:0d:ee:62:f2:a7:b9:b0:f9:60:b1:2d:d4:69:75:fb:
e2:25:dd:8f:04:a4:3b:fe:3b:88:90:d4:63:e8:cb:7f:67:20:
58:1f:f5:53:68:b0:9a:6d:d0:8c:7b:a1:a8:14:6e:99:69:d9:
45:e7:dc:2e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj1yrlfksiAX7XJQlaDBJ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MDI5MjQ4NjFjYmMwODhjNjU1YTg3MjUzNWE5MDMxMDhh
MDdiZjEwHhcNMjUwMTAxMjE0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzgxZjNjYWE0Zjc1MWQxNmUzM2UxYjIyMmM3ODgyZjJlMzE0ZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/O/RSZrRNfgK3idmNKlyz+zXPzP
SQ22IfUXAcr61SP6gxUbF1QvIfiRUjAfHwW3r98yEow5zNPRVGSIt5IigqIhJw4y
KWc9JBh4p06qPS6juJ3fVE0VO+J9hRwjVKHFmeJMuPc1dMpgH/QFHjaIDQtjKCfF
4LABtbCPVvCXJ30NYA7qWTwG8Z8bBccjrwF/uOAlg3i7L8sa9TlpQA27rdzmMDbJ
oDm2QUsRfW1ti/itOjha0JZvrVbgwbbykoXnI3xLVtxaGuGpwOfjrTFSnzeQNDUg
pPoA29foGF57CHlbgIbOlUX6N0GXj7JRFs7wvTc97V+6O959fBr+FTOehQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFeB88qk91HRbjPhsiLHiC8uMU30MB8GA1UdIwQY
MBaAFIQCkkhhy8CIxlWoclNakDEIoHvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEFLU1NHSEx3SWpHVmFoeVUxcVFNUWlnZV9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wOTI0ZmEtNTRmYi00MjU0LWI2NGUt
MGFjOWIzYmFlNmY1LzEvVjRIenlxVDNVZEZ1TS1HeUlzZUlMeTR4VGZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8wOTI0ZmEtNTRmYi00MjU0LWI2NGUtMGFjOWIzYmFlNmY1
LzEvaEFLU1NHSEx3SWpHVmFoeVUxcVFNUWlnZV9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuelCAwQA
2UGDMA0GCSqGSIb3DQEBCwUAA4IBAQChiTWdgAFCsXU9+27oJK1ccgoG8wAAM2Oq
xGLxn/9ZRIBR5dcN0s4XNd2fFMhCi2TN9UWhK1y9f7E30tfihKQx8ms2lgUA3UnA
kzaiVvv4lFuY47uR7iitWpDp6Yx3IUL8RyRaXu8ocz8T4sprorI5FMmE1VyMVqhK
/9lfkr8FLBAnbsYUSybivKAP379ASnEWPYQoIRB2yXLsrNh1b1Cy5Z5C9OD5+20/
4BTuTMP92lV/pam55fsZbHfJfp2vvG9EpHTw1h/YXNIN7mLyp7mw+WCxLdRpdfvi
Jd2PBKQ7/juIkNRj6Mt/ZyBYH/VTaLCabdCMe6GoFG6ZadlF59wu
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:49:47 2025 by rpki-client