Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/valOsPAluNa3RG5X659q6dsU_FA.roa
File: valOsPAluNa3RG5X659q6dsU_FA.roa (raw, json)
Hash identifier: fkBC+Rvf3Gv+oy6BC36LsnU6WeruMquhW06fi/seA5s=
Subject key identifier: BD:A9:4E:B0:F0:25:B8:D6:B7:44:6E:57:EB:9F:6A:E9:DB:14:FC:50
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 0194266B2DFA90656AD5CEE2A4769D6FF001
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/valOsPAluNa3RG5X659q6dsU_FA.roa
Signing time: Thu 02 Jan 2025 09:49:05 +0000
ROA not before: Thu 02 Jan 2025 09:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12541
IP address blocks: 158.172.140.0/23 maxlen: 23
158.172.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:2d:fa:90:65:6a:d5:ce:e2:a4:76:9d:6f:f0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Jan 2 09:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bda94eb0f025b8d6b7446e57eb9f6ae9db14fc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:01:ac:20:a9:d2:56:2f:21:21:9d:65:ab:
0d:ab:5d:eb:04:4a:43:e1:73:f8:7d:e1:59:8d:82:
e0:1f:b6:31:e7:a5:33:d3:2b:5f:1d:31:56:69:68:
91:f9:4d:54:a1:ff:75:9d:c2:23:4d:6f:ee:47:74:
e3:b6:1a:51:0b:42:62:e5:b3:13:26:92:84:3b:c1:
0d:ec:40:2f:19:30:02:d6:70:db:4f:1a:0d:42:d5:
30:19:7e:9f:3b:8a:79:4b:c6:45:db:0e:04:6a:74:
b1:b0:85:2d:3a:53:9e:2a:45:88:a5:41:9d:6b:f7:
7d:c3:25:95:a5:1c:4c:8b:a8:62:e2:6f:c8:09:53:
c7:ee:be:f3:28:07:99:98:4e:b6:4c:47:6d:94:26:
96:81:1d:8f:b2:85:33:a5:07:7b:02:72:54:53:ef:
57:d1:d0:41:00:fa:e4:c7:91:30:a7:c8:e4:a5:88:
33:3f:83:db:cc:e6:f0:15:99:4c:0c:ec:1c:9c:2c:
24:ec:c3:b5:67:20:0f:d3:5d:5c:be:5a:6d:8a:28:
aa:b9:49:d7:ca:b9:ec:97:c7:14:c7:d3:8f:90:5c:
82:81:10:fb:0d:8b:ab:0c:38:63:2d:0a:67:99:42:
4a:48:fb:69:d2:0b:b5:44:34:44:c1:94:e6:25:88:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A9:4E:B0:F0:25:B8:D6:B7:44:6E:57:EB:9F:6A:E9:DB:14:FC:50
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/valOsPAluNa3RG5X659q6dsU_FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.140.0-158.172.142.255
Signature Algorithm: sha256WithRSAEncryption
49:57:2b:74:df:a3:ed:29:3f:6e:a0:aa:df:20:3a:a4:e8:20:
69:d2:89:1e:3d:ac:fc:28:13:23:8c:28:c7:a2:36:79:6d:a9:
30:5a:5f:ec:3a:7a:7d:1f:73:84:05:ed:31:ed:ea:45:c4:5c:
5f:72:a1:e7:cf:09:07:2d:0d:e9:3c:dc:e6:b6:4c:12:69:75:
68:c6:96:26:0d:7b:ca:39:f4:1d:4b:51:10:f7:91:ea:60:16:
32:9f:60:fe:d4:9d:fe:89:28:51:21:c5:1e:25:bd:56:f9:db:
df:df:e9:b8:33:a8:17:25:e1:31:9e:2b:55:3c:8b:99:e6:a1:
1f:0d:60:78:2d:de:27:b2:ad:de:5f:b6:31:3d:f2:b0:9a:82:
b9:87:9c:22:84:31:e4:47:ed:69:35:c3:4f:33:f5:e9:6a:08:
2a:21:b9:ad:a3:93:d4:c5:78:d2:11:c8:cf:0f:cc:56:7f:26:
f6:a7:68:c1:68:d8:dd:cf:e4:4e:e0:83:78:60:d2:0a:04:d1:
d6:2f:bc:36:a1:f6:c7:e5:73:f3:b2:37:6b:45:a4:7b:df:23:
f1:06:07:e8:70:39:78:4b:b4:6c:fa:c8:86:9e:13:ad:d7:8b:
10:35:e7:72:0d:62:f0:9d:f6:19:4b:24:0c:9e:81:5c:00:c1:
64:6c:8b:f8
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQmay36kGVq1c7ipHadb/ABMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1
MzhkNDcwHhcNMjUwMTAyMDk0OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGE5NGViMGYwMjViOGQ2Yjc0NDZlNTdlYjlmNmFlOWRiMTRmYzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzkBrCCp0lYvISGdZasNq13rBEpD
4XP4feFZjYLgH7Yx56Uz0ytfHTFWaWiR+U1Uof91ncIjTW/uR3TjthpRC0Ji5bMT
JpKEO8EN7EAvGTAC1nDbTxoNQtUwGX6fO4p5S8ZF2w4EanSxsIUtOlOeKkWIpUGd
a/d9wyWVpRxMi6hi4m/ICVPH7r7zKAeZmE62TEdtlCaWgR2PsoUzpQd7AnJUU+9X
0dBBAPrkx5Ewp8jkpYgzP4PbzObwFZlMDOwcnCwk7MO1ZyAP011cvlptiiiquUnX
yrnsl8cUx9OPkFyCgRD7DYurDDhjLQpnmUJKSPtp0gu1RDREwZTmJYhdcQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFL2pTrDwJbjWt0RuV+ufaunbFPxQMB8GA1UdIwQY
MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It
MWVkMTA5NTRiZDk2LzEvdmFsT3NQQWx1TmEzUkc1WDY1OXE2ZHNVX0ZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2
LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKerIwD
BACerI4wDQYJKoZIhvcNAQELBQADggEBAElXK3Tfo+0pP26gqt8gOqToIGnSiR49
rPwoEyOMKMeiNnltqTBaX+w6en0fc4QF7THt6kXEXF9yoefPCQctDek83Oa2TBJp
dWjGliYNe8o59B1LURD3kepgFjKfYP7Unf6JKFEhxR4lvVb529/f6bgzqBcl4TGe
K1U8i5nmoR8NYHgt3ieyrd5ftjE98rCagrmHnCKEMeRH7Wk1w08z9elqCCohua2j
k9TFeNIRyM8PzFZ/JvanaMFo2N3P5E7gg3hg0goE0dYvvDah9sflc/OyN2tFpHvf
I/EGB+hwOXhLtGz6yIaeE63XixA153INYvCd9hlLJAyegVwAwWRsi/g=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:34 2025 by rpki-client