Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/E_7EA8UJkxlGETtzRt_qHmFJYsI.roa
File: E_7EA8UJkxlGETtzRt_qHmFJYsI.roa (raw, json)
Hash identifier: 407g7UlI6CqSY6AOA+kHrysQofaOwh0+lRwTxsDvEPM=
Subject key identifier: 13:FE:C4:03:C5:09:93:19:46:11:3B:73:46:DF:EA:1E:61:49:62:C2
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01942067B9EE9C48A2F5FA524BA51BCA1429
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/E_7EA8UJkxlGETtzRt_qHmFJYsI.roa
Signing time: Wed 01 Jan 2025 05:47:36 +0000
ROA not before: Wed 01 Jan 2025 05:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215027
IP address blocks: 185.255.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:b9:ee:9c:48:a2:f5:fa:52:4b:a5:1b:ca:14:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jan 1 05:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13fec403c509931946113b7346dfea1e614962c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ca:fd:6a:e8:b7:5e:f9:4a:9b:71:7e:68:ff:
23:05:b2:e0:96:1e:00:b4:2f:d4:08:60:a0:b8:84:
31:27:3c:49:c3:25:49:db:9a:16:88:cf:7b:0f:4d:
e2:85:91:1f:2e:4c:b8:28:cc:ba:f3:86:8e:3d:7c:
09:31:23:bd:f9:1d:d9:75:30:93:fe:f5:e8:c0:ff:
05:ff:52:02:da:e2:2f:ee:d3:ca:18:16:d6:87:fb:
5f:3d:71:0c:46:c4:22:84:b4:ee:18:aa:f3:fa:02:
c2:89:87:94:1e:66:73:5e:99:cc:a3:21:5c:90:62:
8a:30:96:fb:6f:3c:3c:5a:76:97:b9:1c:3c:89:a7:
5e:22:e3:fb:45:b6:e9:e0:27:ab:97:08:7c:71:7a:
62:86:11:8b:11:44:31:1b:3a:2f:a2:9c:e6:f3:0b:
f8:34:2a:5a:6a:87:05:fb:21:ab:0a:d7:09:6e:0c:
28:1a:df:dd:51:7d:55:97:94:9c:84:16:82:5b:93:
dc:4c:a3:8a:cf:3e:6f:0b:12:3b:46:ca:e9:04:37:
e7:92:50:a8:eb:ec:9a:fa:99:de:70:2e:da:54:a8:
2e:b7:8c:5b:82:25:c8:03:f4:5c:a3:a8:61:f4:3a:
c9:7f:fd:ad:ec:94:14:74:15:d1:aa:1b:8c:13:57:
4a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FE:C4:03:C5:09:93:19:46:11:3B:73:46:DF:EA:1E:61:49:62:C2
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/E_7EA8UJkxlGETtzRt_qHmFJYsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.4.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b4:6b:4b:90:c9:57:be:0b:c3:84:36:dc:d0:34:94:72:a6:
d6:a8:21:40:22:8b:4b:95:57:a9:b8:84:88:6d:ea:27:94:93:
1c:f4:c8:b0:0d:d4:13:0e:dd:3d:2c:2e:e7:64:4e:1a:70:2d:
af:90:ec:ca:90:16:d5:68:48:8f:00:eb:68:01:32:8d:4c:75:
fb:c3:4c:8f:de:06:83:9a:b4:17:6b:68:af:33:5b:3f:03:58:
af:89:25:c0:d6:a9:b0:7c:77:d8:8c:a3:01:72:44:c4:24:2e:
61:09:b6:54:be:5a:4f:ec:41:0c:38:14:96:e7:2f:0e:28:c1:
b0:36:87:a7:e2:82:da:0d:75:59:fc:a7:95:8b:b1:ad:6e:b8:
46:0c:9b:b5:68:71:da:55:2a:af:68:48:46:c2:43:30:b1:f9:
95:f9:6e:6a:93:4b:17:6b:58:ae:d9:74:52:05:42:2b:b4:04:
6c:09:62:a6:15:68:27:6b:33:75:a7:29:09:b1:1e:ba:3b:91:
1d:8e:81:e6:9e:c5:73:6a:3d:ee:51:6e:41:9b:fb:c6:30:80:
fd:0c:92:d9:8d:38:0a:f8:bb:4f:a3:95:6e:e6:6e:78:0d:9e:
b9:c3:fa:c4:cd:7d:fc:75:fe:92:74:56:dd:b5:28:9d:e5:71:
69:63:5f:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ7nunEii9fpSS6UbyhQpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl
ZWFmMzgwHhcNMjUwMTAxMDU0NzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2ZlYzQwM2M1MDk5MzE5NDYxMTNiNzM0NmRmZWExZTYxNDk2MmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsr9aui3XvlKm3F+aP8jBbLglh4A
tC/UCGCguIQxJzxJwyVJ25oWiM97D03ihZEfLky4KMy684aOPXwJMSO9+R3ZdTCT
/vXowP8F/1IC2uIv7tPKGBbWh/tfPXEMRsQihLTuGKrz+gLCiYeUHmZzXpnMoyFc
kGKKMJb7bzw8WnaXuRw8iadeIuP7Rbbp4Cerlwh8cXpihhGLEUQxGzovopzm8wv4
NCpaaocF+yGrCtcJbgwoGt/dUX1Vl5SchBaCW5PcTKOKzz5vCxI7RsrpBDfnklCo
6+ya+pnecC7aVKgut4xbgiXIA/Rco6hh9DrJf/2t7JQUdBXRqhuME1dKDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBP+xAPFCZMZRhE7c0bf6h5hSWLCMB8GA1UdIwQY
MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct
NjJiYjZkNjNlNTlkLzEvRV83RUE4VUpreGxHRVR0elJ0X3FIbUZKWXNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk
LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf8EMA0G
CSqGSIb3DQEBCwUAA4IBAQButGtLkMlXvgvDhDbc0DSUcqbWqCFAIotLlVepuISI
beonlJMc9MiwDdQTDt09LC7nZE4acC2vkOzKkBbVaEiPAOtoATKNTHX7w0yP3gaD
mrQXa2ivM1s/A1iviSXA1qmwfHfYjKMBckTEJC5hCbZUvlpP7EEMOBSW5y8OKMGw
Noen4oLaDXVZ/KeVi7GtbrhGDJu1aHHaVSqvaEhGwkMwsfmV+W5qk0sXa1iu2XRS
BUIrtARsCWKmFWgnazN1pykJsR66O5EdjoHmnsVzaj3uUW5Bm/vGMID9DJLZjTgK
+LtPo5Vu5m54DZ65w/rEzX38df6SdFbdtSid5XFpY19z
-----END CERTIFICATE-----
Generated at Sat Apr 12 10:22:31 2025 by rpki-client