Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/4kc-K4lXqDQWlQ1acwGiIbcvZCM.roa
File: 4kc-K4lXqDQWlQ1acwGiIbcvZCM.roa (raw, json)
Hash identifier: iwJ60t6RgAb6kap7YpqbSewI5ktaDdebMpnk8DNCEn8=
Subject key identifier: E2:47:3E:2B:89:57:A8:34:16:95:0D:5A:73:01:A2:21:B7:2F:64:23
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01942827F0F73318109A482CCBEF3D99AB58
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/4kc-K4lXqDQWlQ1acwGiIbcvZCM.roa
Signing time: Thu 02 Jan 2025 17:54:53 +0000
ROA not before: Thu 02 Jan 2025 17:54:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211432
IP address blocks: 185.232.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:f0:f7:33:18:10:9a:48:2c:cb:ef:3d:99:ab:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 17:54:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2473e2b8957a83416950d5a7301a221b72f6423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:7b:0c:bb:b4:f1:2b:eb:c6:12:e5:c6:92:
7f:75:2a:ef:e0:89:c7:0b:1b:6f:5e:e5:61:79:c4:
29:13:7d:9b:98:0e:1d:0b:89:39:d8:0f:f4:06:44:
5f:c5:d3:35:bd:ef:f3:dc:52:e6:28:95:53:4f:ec:
ca:3a:28:98:f0:ab:42:c1:c6:1e:9b:3d:75:50:64:
b9:62:86:13:50:fc:42:d6:90:f9:1b:fc:4c:05:50:
2d:27:53:cf:f8:86:fb:b0:61:ba:76:05:97:cb:7f:
c7:d9:7c:ff:f4:8b:6f:4c:ab:72:48:b0:7a:05:6e:
d3:ef:13:a4:c3:ba:ac:63:34:8f:11:11:0c:bf:c9:
d2:35:19:ef:de:f2:52:ce:8c:7d:a1:c1:db:ca:3d:
63:2d:e2:21:81:cc:9a:b5:6e:73:29:5b:5b:f5:53:
63:e9:e9:36:99:cb:63:f7:50:45:d6:49:3b:f7:91:
1a:e1:1e:fb:d5:c3:85:64:b6:0e:7a:57:ad:14:eb:
16:06:f6:a1:11:d7:f4:c9:41:54:13:25:a7:f1:bf:
30:de:aa:fb:fc:ed:23:8c:21:2f:3a:2a:14:92:47:
20:c3:2e:1f:56:69:f1:39:bf:2f:5b:e0:f7:b5:eb:
88:6e:f1:fa:f7:ce:1b:af:23:51:78:ca:2c:e3:8a:
5c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:47:3E:2B:89:57:A8:34:16:95:0D:5A:73:01:A2:21:B7:2F:64:23
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/4kc-K4lXqDQWlQ1acwGiIbcvZCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.167.0/24
Signature Algorithm: sha256WithRSAEncryption
03:7e:ed:dd:5a:f8:56:f6:38:23:e0:c1:e9:d6:75:66:70:79:
27:ce:8e:e2:c8:9b:8a:3b:c1:1a:ec:cd:e4:b0:71:d7:e1:9c:
cb:64:0a:c3:82:dc:0b:90:f4:60:c5:1e:e8:b8:cf:e7:69:23:
93:cc:0a:42:db:43:6d:ba:80:15:cf:43:6a:29:6e:55:61:29:
b6:b5:b8:08:c9:bb:15:11:12:54:94:34:f6:b6:19:b8:19:87:
76:d8:c2:7b:dd:1f:7c:a4:e2:79:c3:53:93:4e:b7:95:bf:94:
1f:c0:41:e8:d3:84:5d:62:fe:8d:28:37:c8:14:70:3c:f7:41:
c9:7f:c0:eb:7b:27:b2:a8:f9:15:ef:da:53:38:06:bf:9a:d3:
53:19:f9:a9:66:7b:54:b8:9b:91:2f:09:d3:e4:07:0c:bb:02:
c5:f2:89:45:ab:b0:15:39:84:62:7a:7c:6e:ef:af:e1:9b:8d:
f7:82:db:ec:f4:a6:d1:59:2a:aa:22:6a:25:f5:47:ca:40:00:
4b:23:68:d1:92:0d:f8:86:d2:f3:af:fa:8e:14:b6:01:ae:d5:
d6:2f:9c:a9:e1:cb:21:f4:55:b3:c3:63:e4:b0:72:a6:b2:f3:
ff:6b:4a:27:5f:11:74:45:ec:c5:a0:67:87:05:6d:bc:a4:9f:
f0:7a:80:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJ/D3MxgQmkgsy+89matYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjUwMTAyMTc1NDUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjQ3M2UyYjg5NTdhODM0MTY5NTBkNWE3MzAxYTIyMWI3MmY2NDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgN7DLu08SvrxhLlxpJ/dSrv4InH
CxtvXuVhecQpE32bmA4dC4k52A/0BkRfxdM1ve/z3FLmKJVTT+zKOiiY8KtCwcYe
mz11UGS5YoYTUPxC1pD5G/xMBVAtJ1PP+Ib7sGG6dgWXy3/H2Xz/9ItvTKtySLB6
BW7T7xOkw7qsYzSPEREMv8nSNRnv3vJSzox9ocHbyj1jLeIhgcyatW5zKVtb9VNj
6ek2mctj91BF1kk795Ea4R771cOFZLYOeletFOsWBvahEdf0yUFUEyWn8b8w3qr7
/O0jjCEvOioUkkcgwy4fVmnxOb8vW+D3teuIbvH6984bryNReMos44pcwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOJHPiuJV6g0FpUNWnMBoiG3L2QjMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvNGtjLUs0bFhxRFFXbFExYWN3R2lJYmN2WkNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueinMA0G
CSqGSIb3DQEBCwUAA4IBAQADfu3dWvhW9jgj4MHp1nVmcHknzo7iyJuKO8Ea7M3k
sHHX4ZzLZArDgtwLkPRgxR7ouM/naSOTzApC20NtuoAVz0NqKW5VYSm2tbgIybsV
ERJUlDT2thm4GYd22MJ73R98pOJ5w1OTTreVv5QfwEHo04RdYv6NKDfIFHA890HJ
f8DreyeyqPkV79pTOAa/mtNTGfmpZntUuJuRLwnT5AcMuwLF8olFq7AVOYRienxu
76/hm433gtvs9KbRWSqqImol9UfKQABLI2jRkg34htLzr/qOFLYBrtXWL5yp4csh
9FWzw2PksHKmsvP/a0onXxF0RezFoGeHBW28pJ/weoCA
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:00:41 2025 by rpki-client