Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/42VDtF9LMj3RUZlBTr5Tpxb7XhY.roa
File: 42VDtF9LMj3RUZlBTr5Tpxb7XhY.roa (raw, json)
Hash identifier: 06Fp4iuAbTOsazThfCr6hEmyN81BPyfi3nXeyKKT6d0=
Subject key identifier: E3:65:43:B4:5F:4B:32:3D:D1:51:99:41:4E:BE:53:A7:16:FB:5E:16
Certificate issuer: /CN=4df92658601094ed64985c64c6952be3416301ce
Certificate serial: 0194236A2999FE268DF47F2724F7ACAB9CDB
Authority key identifier: 4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/42VDtF9LMj3RUZlBTr5Tpxb7XhY.roa
Signing time: Wed 01 Jan 2025 19:49:07 +0000
ROA not before: Wed 01 Jan 2025 19:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56376
IP address blocks: 185.139.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:29:99:fe:26:8d:f4:7f:27:24:f7:ac:ab:9c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df92658601094ed64985c64c6952be3416301ce
Validity
Not Before: Jan 1 19:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e36543b45f4b323dd15199414ebe53a716fb5e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:87:60:08:0e:5a:9d:93:3d:7e:9e:3e:8e:e7:
40:d0:d4:72:12:8a:d0:76:0e:17:51:3e:33:25:0a:
cd:db:3d:17:86:9b:f7:e3:e6:ad:a0:0c:21:01:19:
2e:a2:fd:80:32:3f:e8:c9:02:ea:33:df:fe:2d:c2:
3f:28:b9:c2:99:9c:03:c6:0f:ae:91:af:9b:11:cb:
ab:41:34:e7:47:aa:5a:b6:84:33:be:fe:54:d7:af:
9e:e3:58:e6:05:4f:d3:41:ea:e5:3b:64:4a:8d:17:
eb:cd:e1:18:ba:0b:60:58:f7:b8:02:c6:72:45:62:
29:94:80:a7:cc:25:23:6c:7d:8b:bf:6e:c9:21:4c:
16:da:03:3c:c6:cc:ec:34:3f:a8:74:9c:19:85:c4:
ec:fc:7c:e1:f6:6a:a8:fc:0d:9a:35:82:44:72:67:
7d:fa:33:40:9f:fc:cf:ae:5f:6c:fe:76:a7:6e:2a:
07:36:84:93:be:c9:47:8e:cc:93:8c:05:c9:79:f5:
a8:84:69:e7:13:05:4f:b6:e1:9d:76:55:18:fa:a9:
b2:7f:7c:08:2d:38:2b:a2:a9:55:18:d5:35:b9:62:
42:c0:bd:81:ba:74:05:24:ad:70:f7:32:19:4f:c2:
42:ac:31:13:d7:a8:c7:6a:fe:12:13:a4:4f:31:e8:
2b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:65:43:B4:5F:4B:32:3D:D1:51:99:41:4E:BE:53:A7:16:FB:5E:16
X509v3 Authority Key Identifier:
keyid:4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/42VDtF9LMj3RUZlBTr5Tpxb7XhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.183.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:7c:02:a1:41:21:43:b4:cf:7a:e2:f4:af:e4:a8:06:91:b6:
87:2d:05:55:c2:21:4c:10:32:76:42:ff:34:3f:94:a3:f4:6a:
2d:42:cb:84:2a:8d:ae:dc:cf:03:41:cf:77:ee:7e:e5:3e:86:
74:ea:e4:32:c0:45:55:63:fe:de:fc:d3:6b:a2:26:42:79:e0:
89:59:cc:77:58:a3:2e:9c:39:6b:5e:5e:58:27:ea:cd:18:77:
53:cb:a5:f1:65:42:3e:66:7c:ef:d2:00:e1:77:5b:f4:85:68:
37:5c:f6:78:c1:d7:94:c6:d5:a1:29:9f:14:78:33:e1:9e:e4:
14:26:2e:c8:e5:72:7f:c5:40:df:21:8b:9f:c7:d2:0f:b2:29:
f7:ba:af:78:63:67:3c:5a:5b:c3:dd:b3:d9:6d:39:33:9b:23:
33:aa:71:19:6c:99:d3:03:ef:2c:f9:cd:0a:4e:67:6c:5d:37:
6d:38:0c:4d:c2:ce:23:9a:69:a7:a3:d7:ed:70:77:58:a3:0a:
7e:b8:28:af:e4:0c:4f:29:72:3e:8c:ef:fb:18:4d:33:4b:1e:
5d:07:21:64:f7:2b:f8:40:d3:e7:38:be:5a:31:e3:9c:87:0d:
a2:f9:b8:3d:c8:9c:7b:ff:e7:a6:a7:6a:3d:67:6e:b8:78:56:
f0:4b:56:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaimZ/iaN9H8nJPesq5zbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZjkyNjU4NjAxMDk0ZWQ2NDk4NWM2NGM2OTUyYmUzNDE2
MzAxY2UwHhcNMjUwMTAxMTk0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzY1NDNiNDVmNGIzMjNkZDE1MTk5NDE0ZWJlNTNhNzE2ZmI1ZTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2odgCA5anZM9fp4+judA0NRyEorQ
dg4XUT4zJQrN2z0Xhpv34+atoAwhARkuov2AMj/oyQLqM9/+LcI/KLnCmZwDxg+u
ka+bEcurQTTnR6patoQzvv5U16+e41jmBU/TQerlO2RKjRfrzeEYugtgWPe4AsZy
RWIplICnzCUjbH2Lv27JIUwW2gM8xszsND+odJwZhcTs/Hzh9mqo/A2aNYJEcmd9
+jNAn/zPrl9s/nanbioHNoSTvslHjsyTjAXJefWohGnnEwVPtuGddlUY+qmyf3wI
LTgroqlVGNU1uWJCwL2BunQFJK1w9zIZT8JCrDET16jHav4SE6RPMegrewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFONlQ7RfSzI90VGZQU6+U6cW+14WMB8GA1UdIwQY
MBaAFE35JlhgEJTtZJhcZMaVK+NBYwHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGZrbVdHQVFsTzFrbUZ4a3hwVXI0MEZqQWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9hOWU1N2UtMjQ3OS00NTc2LWIyNzUt
ODc0MzMxNTdhMjViLzEvNDJWRHRGOUxNajNSVVpsQlRyNVRweGI3WGhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9hOWU1N2UtMjQ3OS00NTc2LWIyNzUtODc0MzMxNTdhMjVi
LzEvVGZrbVdHQVFsTzFrbUZ4a3hwVXI0MEZqQWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYu3MA0G
CSqGSIb3DQEBCwUAA4IBAQBefAKhQSFDtM964vSv5KgGkbaHLQVVwiFMEDJ2Qv80
P5Sj9GotQsuEKo2u3M8DQc937n7lPoZ06uQywEVVY/7e/NNroiZCeeCJWcx3WKMu
nDlrXl5YJ+rNGHdTy6XxZUI+Znzv0gDhd1v0hWg3XPZ4wdeUxtWhKZ8UeDPhnuQU
Ji7I5XJ/xUDfIYufx9IPsin3uq94Y2c8WlvD3bPZbTkzmyMzqnEZbJnTA+8s+c0K
TmdsXTdtOAxNws4jmmmno9ftcHdYowp+uCiv5AxPKXI+jO/7GE0zSx5dByFk9yv4
QNPnOL5aMeOchw2i+bg9yJx7/+emp2o9Z264eFbwS1b/
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:05:11 2025 by rpki-client