Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/4C1hs3Awu1pUWnx11isTd7urO8g.roa
File: 4C1hs3Awu1pUWnx11isTd7urO8g.roa (raw, json)
Hash identifier: NHlupIJQHDTwRScv0dlfz2lFTerJ3fgzUZ9KeBTbFHo=
Subject key identifier: E0:2D:61:B3:70:30:BB:5A:54:5A:7C:75:D6:2B:13:77:BB:AB:3B:C8
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 0194228DEA1CA707604219ABC78D3BDC150C
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/4C1hs3Awu1pUWnx11isTd7urO8g.roa
Signing time: Wed 01 Jan 2025 15:48:33 +0000
ROA not before: Wed 01 Jan 2025 15:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 185.113.64.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ea:1c:a7:07:60:42:19:ab:c7:8d:3b:dc:15:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jan 1 15:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e02d61b37030bb5a545a7c75d62b1377bbab3bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:60:45:1b:07:ca:d4:57:37:57:27:b8:17:91:
90:de:1e:88:d6:f4:b2:bd:4b:34:45:19:31:38:1d:
60:9e:6c:e7:d1:ce:05:95:54:ed:f3:41:f5:e1:c7:
fc:d6:77:b5:78:58:4f:77:4d:72:de:7f:79:33:e2:
72:4b:77:4d:37:f1:17:9f:0c:40:c0:50:09:c6:a3:
49:2d:e1:26:5a:4b:7b:78:f9:7b:6d:c2:78:6f:37:
ee:fa:74:0b:9c:ae:e3:4d:d3:f2:a8:94:30:16:9c:
cd:ca:98:33:32:15:73:dd:cc:3b:d6:f7:80:49:b7:
6f:e4:e0:33:22:9f:c2:d7:dc:37:3d:66:0a:4a:dc:
07:09:fd:48:61:8c:5d:85:ca:76:05:f7:47:bf:e5:
4d:00:27:24:a4:8d:92:50:6d:90:b4:24:01:7d:25:
c2:0d:03:78:7e:e3:92:95:ed:74:f6:b6:50:b2:2c:
e3:27:ba:c2:c2:ce:32:b6:17:15:0a:f0:bd:10:6e:
a2:bb:de:1e:8d:31:d4:2a:72:dc:20:55:d7:5b:07:
0c:2a:51:2b:fc:f7:4e:72:d0:30:da:ab:8e:09:a1:
cd:76:a8:dc:03:e6:ee:3a:f7:6a:3f:63:3d:90:f5:
db:be:6c:83:54:b8:8c:b1:94:61:e0:c2:b3:cc:e7:
68:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2D:61:B3:70:30:BB:5A:54:5A:7C:75:D6:2B:13:77:BB:AB:3B:C8
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/4C1hs3Awu1pUWnx11isTd7urO8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.64.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:f3:1c:95:a3:24:53:94:51:ec:87:7d:93:49:46:18:72:9e:
b2:64:4b:1f:14:4e:92:d1:58:d9:f1:c1:09:05:48:df:8f:da:
b0:5c:c1:16:2c:9c:f3:c5:3a:91:f1:9a:2e:67:2b:d9:db:27:
a2:e0:01:fb:dc:1e:49:e7:d1:20:98:df:a5:94:85:3b:72:1f:
ab:15:79:92:67:ed:dd:83:8d:55:d2:34:7a:f1:b7:c7:91:69:
3d:f1:87:55:5f:68:cc:9e:03:14:1c:27:db:39:c6:04:5b:ab:
5e:7f:6e:89:c8:bb:43:8f:f7:9c:2f:fb:58:04:5a:20:5c:b3:
dd:45:c6:44:bd:0a:8a:55:c5:a3:ea:f8:e4:f3:e3:e6:d2:25:
60:c6:c5:54:34:17:20:64:c8:97:91:f8:86:10:fc:67:b2:7c:
05:7d:d6:1d:7d:6d:8e:1e:ab:02:df:f7:7e:d1:18:97:86:d9:
64:88:83:97:36:dc:34:76:f5:f3:2c:7f:bc:4e:ee:95:0e:ed:
eb:9f:4b:19:29:2f:ce:b4:ea:dd:83:ae:6f:ca:90:5d:48:86:
fe:e0:92:d2:47:cd:30:f0:a4:4b:22:63:e4:86:d2:3d:1d:fb:
e9:bb:10:e3:bd:27:68:61:c7:52:84:4f:72:fb:a6:e6:e7:70:
ed:64:23:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijeocpwdgQhmrx4073BUMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTRmY2M2YmY2YTg3NDBmYTc4MTQ2NDFmZDlkNmVjOGQ4
NjJlNWYwHhcNMjUwMTAxMTU0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDJkNjFiMzcwMzBiYjVhNTQ1YTdjNzVkNjJiMTM3N2JiYWIzYmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mBFGwfK1Fc3Vye4F5GQ3h6I1vSy
vUs0RRkxOB1gnmzn0c4FlVTt80H14cf81ne1eFhPd01y3n95M+JyS3dNN/EXnwxA
wFAJxqNJLeEmWkt7ePl7bcJ4bzfu+nQLnK7jTdPyqJQwFpzNypgzMhVz3cw71veA
Sbdv5OAzIp/C19w3PWYKStwHCf1IYYxdhcp2BfdHv+VNACckpI2SUG2QtCQBfSXC
DQN4fuOSle109rZQsizjJ7rCws4ythcVCvC9EG6iu94ejTHUKnLcIFXXWwcMKlEr
/PdOctAw2quOCaHNdqjcA+buOvdqP2M9kPXbvmyDVLiMsZRh4MKzzOdoxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOAtYbNwMLtaVFp8ddYrE3e7qzvIMB8GA1UdIwQY
MBaAFDaU/Ma/aodA+ngUZB/Z1uyNhi5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUt
MGQzZmNlNDI5YmRlLzEvNEMxaHMzQXd1MXBVV254MTFpc1RkN3VyTzhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUtMGQzZmNlNDI5YmRl
LzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXFAMA0G
CSqGSIb3DQEBCwUAA4IBAQAe8xyVoyRTlFHsh32TSUYYcp6yZEsfFE6S0VjZ8cEJ
BUjfj9qwXMEWLJzzxTqR8ZouZyvZ2yei4AH73B5J59EgmN+llIU7ch+rFXmSZ+3d
g41V0jR68bfHkWk98YdVX2jMngMUHCfbOcYEW6tef26JyLtDj/ecL/tYBFogXLPd
RcZEvQqKVcWj6vjk8+Pm0iVgxsVUNBcgZMiXkfiGEPxnsnwFfdYdfW2OHqsC3/d+
0RiXhtlkiIOXNtw0dvXzLH+8Tu6VDu3rn0sZKS/OtOrdg65vypBdSIb+4JLSR80w
8KRLImPkhtI9HfvpuxDjvSdoYcdShE9y+6bm53DtZCNB
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:30 2025 by rpki-client