Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/4arp5xjuob6C5UBrX89QHFOyWrU.roa
File: 4arp5xjuob6C5UBrX89QHFOyWrU.roa (raw, json)
Hash identifier: WKYhukOSlSsk1FgmwIjDifbtjtExOtlxFjMT/1DTGrQ=
Subject key identifier: E1:AA:E9:E7:18:EE:A1:BE:82:E5:40:6B:5F:CF:50:1C:53:B2:5A:B5
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427483D910AC5CC58E4A60F53A8715746
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/4arp5xjuob6C5UBrX89QHFOyWrU.roa
Signing time: Thu 02 Jan 2025 13:50:33 +0000
ROA not before: Thu 02 Jan 2025 13:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 192.71.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3d:91:0a:c5:cc:58:e4:a6:0f:53:a8:71:57:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1aae9e718eea1be82e5406b5fcf501c53b25ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:23:27:6d:a9:5b:3c:de:ae:d8:42:13:41:
80:36:6b:95:cd:f2:3f:a5:db:48:c8:e7:98:f7:09:
b7:cb:6a:11:98:65:6f:82:31:72:9e:35:fd:22:63:
58:b9:85:70:1e:40:5b:c3:08:32:e0:2b:40:e5:ac:
96:78:61:7b:7a:a8:00:90:b1:9d:48:17:8e:7d:99:
88:69:e9:66:14:f7:a3:76:f5:4f:53:19:3c:ef:b0:
64:85:f3:c0:db:95:ce:0a:83:3b:2d:9d:47:36:06:
b3:22:6c:9d:94:d9:eb:31:9a:3e:8b:69:77:70:0a:
21:85:0c:49:d1:ce:11:8b:dd:36:1c:4c:d2:ad:03:
8c:db:79:30:88:24:b4:27:39:3a:96:dd:df:b7:a1:
8f:01:15:be:a8:98:8d:46:98:85:52:c9:1a:f2:ce:
cf:13:af:97:7b:4b:7a:21:11:a6:14:cf:48:4c:99:
95:e2:0a:85:ec:41:d5:b4:8b:95:26:87:be:86:e6:
ed:6d:b7:26:e6:11:d7:04:68:58:c0:0a:bd:22:4f:
c8:55:2e:4a:9b:74:d0:91:71:1c:85:6d:b9:9f:18:
ea:6a:64:14:e8:b0:cf:b8:a6:7a:3d:0e:1a:8a:f1:
dd:c3:de:6d:57:b4:b3:e4:7c:cb:44:2e:f7:21:8b:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AA:E9:E7:18:EE:A1:BE:82:E5:40:6B:5F:CF:50:1C:53:B2:5A:B5
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/4arp5xjuob6C5UBrX89QHFOyWrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.41.0/24
Signature Algorithm: sha256WithRSAEncryption
24:11:4a:6a:02:07:01:e2:3f:0e:af:4f:8d:f6:11:0b:58:0c:
7c:bd:b8:85:7a:ca:04:dd:d1:bc:8b:de:1a:1c:3f:0f:ea:95:
38:7d:a1:07:90:98:44:a9:ca:16:51:9f:f6:fe:47:27:bf:bc:
e6:21:f5:c4:71:0c:ae:0d:f2:71:cd:d8:01:1f:c7:84:9b:7c:
c0:2b:ad:55:f6:60:91:4b:ad:51:74:b1:ab:fc:20:88:fa:b5:
33:1c:f7:a0:f4:a8:68:39:0a:98:74:19:ef:50:31:70:13:63:
6d:22:dc:be:85:8e:76:d2:65:27:6f:b5:66:bb:b5:93:41:6f:
01:1c:b6:4c:ec:e2:d3:73:37:40:1f:b1:4e:3d:cb:cd:6d:c6:
56:f4:26:58:0a:d8:4b:4c:5c:b9:4e:2f:a2:2f:f9:8d:de:37:
c5:98:95:99:6b:7e:ff:83:77:7d:a6:08:28:75:f5:66:d9:47:
6f:67:ae:c6:3e:01:5d:1e:bd:0c:bc:e8:1c:b9:0f:4d:5b:b7:
1c:0e:bc:b9:ce:59:16:a2:ae:3d:d0:58:d5:fb:a8:2b:59:81:
24:35:20:83:97:d8:6e:6b:01:6f:71:5a:f1:41:49:9b:ab:5d:
02:7c:d7:c2:11:5d:f5:86:60:5c:95:26:b9:1c:f5:52:02:69:
a3:78:a2:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSD2RCsXMWOSmD1OocVdGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMTAyMTM1MDMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWFhZTllNzE4ZWVhMWJlODJlNTQwNmI1ZmNmNTAxYzUzYjI1YWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlgjJ22pWzzerthCE0GANmuVzfI/
pdtIyOeY9wm3y2oRmGVvgjFynjX9ImNYuYVwHkBbwwgy4CtA5ayWeGF7eqgAkLGd
SBeOfZmIaelmFPejdvVPUxk877BkhfPA25XOCoM7LZ1HNgazImydlNnrMZo+i2l3
cAohhQxJ0c4Ri902HEzSrQOM23kwiCS0Jzk6lt3ft6GPARW+qJiNRpiFUska8s7P
E6+Xe0t6IRGmFM9ITJmV4gqF7EHVtIuVJoe+hubtbbcm5hHXBGhYwAq9Ik/IVS5K
m3TQkXEchW25nxjqamQU6LDPuKZ6PQ4aivHdw95tV7Sz5HzLRC73IYv8LQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOGq6ecY7qG+guVAa1/PUBxTslq1MB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvNGFycDV4anVvYjZDNVVCclg4OVFIRk95V3JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEcpMA0G
CSqGSIb3DQEBCwUAA4IBAQAkEUpqAgcB4j8Or0+N9hELWAx8vbiFesoE3dG8i94a
HD8P6pU4faEHkJhEqcoWUZ/2/kcnv7zmIfXEcQyuDfJxzdgBH8eEm3zAK61V9mCR
S61RdLGr/CCI+rUzHPeg9KhoOQqYdBnvUDFwE2NtIty+hY520mUnb7Vmu7WTQW8B
HLZM7OLTczdAH7FOPcvNbcZW9CZYCthLTFy5Ti+iL/mN3jfFmJWZa37/g3d9pggo
dfVm2UdvZ67GPgFdHr0MvOgcuQ9NW7ccDry5zlkWoq490FjV+6grWYEkNSCDl9hu
awFvcVrxQUmbq10CfNfCEV31hmBclSa5HPVSAmmjeKIo
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:46 2025 by rpki-client