Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/S4AYf34wbJr686FuAfXvLLFVW90.roa
File: S4AYf34wbJr686FuAfXvLLFVW90.roa (raw, json)
Hash identifier: QoZkIggV0Rak9NY5B7MD5kJpzqBlOZcHQ7nSTP7ujCU=
Subject key identifier: 4B:80:18:7F:7E:30:6C:9A:FA:F3:A1:6E:01:F5:EF:2C:B1:55:5B:DD
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 01942826D7710802B7BEA1CFB4179477AAC7
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/S4AYf34wbJr686FuAfXvLLFVW90.roa
Signing time: Thu 02 Jan 2025 17:53:41 +0000
ROA not before: Thu 02 Jan 2025 17:53:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50629
IP address blocks: 185.226.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:d7:71:08:02:b7:be:a1:cf:b4:17:94:77:aa:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Jan 2 17:53:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b80187f7e306c9afaf3a16e01f5ef2cb1555bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:ba:0d:ca:92:a3:c6:c5:12:71:37:2d:a8:
52:a5:95:fd:32:f2:7b:22:7b:e5:9c:28:f5:c2:7c:
d1:f1:28:19:03:3c:1a:dd:65:91:44:1e:e5:f6:2d:
ca:64:85:f0:8f:2d:4f:8f:52:92:84:b0:b2:3a:2c:
3d:64:ce:37:21:6d:b4:b6:5d:db:a2:c4:7f:1d:e5:
7b:9f:d0:fc:eb:ab:c2:07:a3:70:66:04:25:a9:30:
e8:f7:02:bc:9a:b5:ca:5e:82:52:27:5f:0a:6e:7a:
bb:fd:86:8f:11:66:e8:49:65:4f:b2:b9:57:be:ea:
a9:9c:90:4c:c2:a8:5f:22:ff:ed:9b:32:59:47:08:
aa:fa:44:07:f3:38:a0:a6:63:86:14:24:9f:c6:af:
cc:bb:e3:bd:c4:31:22:6e:ad:df:2c:88:39:01:54:
8c:f2:2b:b7:66:d3:ab:f9:f3:ff:ba:0b:36:bf:ad:
4f:b2:fd:f8:31:0d:be:50:e9:1c:37:52:0a:e9:01:
d9:fc:6e:f4:d1:33:a6:22:c5:fe:12:75:4b:89:c7:
e9:09:67:c0:2c:69:45:1d:66:e4:b3:63:56:d8:0e:
7a:86:b3:47:aa:69:8e:92:d8:38:e0:89:57:db:be:
cf:cc:ab:d8:1f:04:80:86:7d:a7:a5:ed:a2:e9:9a:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:80:18:7F:7E:30:6C:9A:FA:F3:A1:6E:01:F5:EF:2C:B1:55:5B:DD
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/S4AYf34wbJr686FuAfXvLLFVW90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.243.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:0f:46:b2:49:22:5b:05:b0:0a:ed:a0:3e:8f:49:e5:3f:45:
27:7e:e9:25:70:8a:5b:be:41:08:83:b0:10:5f:34:a4:f1:b0:
0e:c8:0f:a4:c2:53:41:21:b7:dd:bf:4e:7e:71:0b:ca:76:42:
c6:64:95:9b:aa:61:3a:b0:a8:01:9b:68:1b:ad:db:72:da:ac:
58:5c:7d:c2:3b:41:25:7d:b4:60:5f:3c:de:2a:e4:d3:23:8e:
f8:bc:ff:d6:cd:09:dd:93:ce:fa:1e:b0:b1:8c:07:eb:7e:cc:
68:b8:46:b0:d0:83:60:22:db:7d:43:ca:91:5e:6a:2e:0e:7f:
52:30:4b:62:c6:4f:2a:c7:e4:19:71:79:60:96:90:c1:c6:90:
3f:d3:09:79:7f:3e:de:d9:81:3a:52:32:79:34:b4:27:5f:55:
50:8d:36:a8:09:f3:6f:f5:ed:fe:09:b6:0a:d0:21:aa:d6:ed:
17:9d:2b:af:28:20:4d:f5:69:a6:d7:4b:c7:ff:69:92:6d:84:
6b:30:15:78:f9:e7:c7:95:39:dd:38:67:34:eb:d2:73:95:70:
50:0a:65:82:5c:1b:7d:d0:aa:eb:bd:06:2f:b1:a5:fd:17:3c:
95:88:3c:d5:f1:d5:9a:31:ce:bc:24:d3:7b:c2:21:61:5d:fc:
10:41:2d:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJtdxCAK3vqHPtBeUd6rHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZGFlNzY3OGEzOTY5NjllNjM0MGM5ZGNiNjVjZGU5ZTMy
OTU1NGEwHhcNMjUwMTAyMTc1MzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjgwMTg3ZjdlMzA2YzlhZmFmM2ExNmUwMWY1ZWYyY2IxNTU1YmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/i6DcqSo8bFEnE3LahSpZX9MvJ7
InvlnCj1wnzR8SgZAzwa3WWRRB7l9i3KZIXwjy1Pj1KShLCyOiw9ZM43IW20tl3b
osR/HeV7n9D866vCB6NwZgQlqTDo9wK8mrXKXoJSJ18Kbnq7/YaPEWboSWVPsrlX
vuqpnJBMwqhfIv/tmzJZRwiq+kQH8zigpmOGFCSfxq/Mu+O9xDEibq3fLIg5AVSM
8iu3ZtOr+fP/ugs2v61Psv34MQ2+UOkcN1IK6QHZ/G700TOmIsX+EnVLicfpCWfA
LGlFHWbks2NW2A56hrNHqmmOktg44IlX277PzKvYHwSAhn2npe2i6Zqn6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEuAGH9+MGya+vOhbgH17yyxVVvdMB8GA1UdIwQY
MBaAFKDa52eKOWlp5jQMnctlzenjKVVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80NjM1OGUtNTRmNy00ZjRiLWE3NDct
ZjczNWUzZGFmZDUzLzEvUzRBWWYzNHdiSnI2ODZGdUFmWHZMTEZWVzkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy80NjM1OGUtNTRmNy00ZjRiLWE3NDctZjczNWUzZGFmZDUz
LzEvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueLzMA0G
CSqGSIb3DQEBCwUAA4IBAQA9D0aySSJbBbAK7aA+j0nlP0UnfuklcIpbvkEIg7AQ
XzSk8bAOyA+kwlNBIbfdv05+cQvKdkLGZJWbqmE6sKgBm2gbrdty2qxYXH3CO0El
fbRgXzzeKuTTI474vP/WzQndk876HrCxjAfrfsxouEaw0INgItt9Q8qRXmouDn9S
MEtixk8qx+QZcXlglpDBxpA/0wl5fz7e2YE6UjJ5NLQnX1VQjTaoCfNv9e3+CbYK
0CGq1u0XnSuvKCBN9Wmm10vH/2mSbYRrMBV4+efHlTndOGc069JzlXBQCmWCXBt9
0KrrvQYvsaX9FzyViDzV8dWaMc68JNN7wiFhXfwQQS0K
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:44:56 2025 by rpki-client