Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/g4EaozYmC9YQ0a7L9CYiQ4ogRAk.roa
File: g4EaozYmC9YQ0a7L9CYiQ4ogRAk.roa (raw, json)
Hash identifier: xmryesaevMInujVcjkZCiYepzaYX2LiaZCMbhmPgvyw=
Subject key identifier: 83:81:1A:A3:36:26:0B:D6:10:D1:AE:CB:F4:26:22:43:8A:20:44:09
Certificate issuer: /CN=6c09ab0751fea4b292a9afd14dbec3b83a077870
Certificate serial: 019423D739F4DE3B41620AF889FDCDAC6B40
Authority key identifier: 6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/g4EaozYmC9YQ0a7L9CYiQ4ogRAk.roa
Signing time: Wed 01 Jan 2025 21:48:15 +0000
ROA not before: Wed 01 Jan 2025 21:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44536
IP address blocks: 66.132.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:39:f4:de:3b:41:62:0a:f8:89:fd:cd:ac:6b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c09ab0751fea4b292a9afd14dbec3b83a077870
Validity
Not Before: Jan 1 21:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83811aa336260bd610d1aecbf42622438a204409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:bf:18:86:7a:4c:7e:74:bf:b2:93:ee:b2:
0e:9d:10:2d:14:79:00:f9:d2:bf:28:c5:72:a6:e4:
44:f7:c2:43:e3:d5:0b:89:64:ea:db:b6:23:12:5a:
07:52:c9:45:81:4a:9d:d8:1f:7a:fd:30:05:3d:cd:
18:3c:b3:22:81:ad:6b:6b:d5:28:ff:5a:73:f8:38:
5b:8e:ae:e6:19:08:37:3f:ac:4a:1b:ec:ec:c1:4d:
34:5f:5d:b1:e1:f3:03:40:e2:9e:e9:2c:72:06:98:
aa:4b:44:39:ee:09:aa:d7:ba:f9:e3:fb:cb:2a:5a:
c1:e1:16:2f:4f:05:da:05:40:ce:57:50:6c:2e:93:
41:4e:2f:7d:a0:57:e8:c2:b1:31:71:81:3f:43:93:
8b:6e:d9:5c:9d:eb:fe:7f:f5:26:96:5b:ac:29:d6:
3b:9d:3d:eb:b9:25:87:43:80:b6:67:03:99:d2:dc:
ad:49:02:c1:ee:0f:2b:b0:5e:cc:81:0b:33:75:8c:
a4:86:1a:6b:4e:ca:ab:50:b4:60:e4:e5:98:ea:54:
67:23:f7:17:d2:3e:e3:fb:32:a0:a5:99:a3:e6:57:
ab:97:55:d0:b3:6d:93:60:94:56:7e:db:f4:a7:41:
7b:e4:9c:de:8b:03:ba:71:10:0d:4f:09:a7:67:a8:
a4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:81:1A:A3:36:26:0B:D6:10:D1:AE:CB:F4:26:22:43:8A:20:44:09
X509v3 Authority Key Identifier:
keyid:6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/g4EaozYmC9YQ0a7L9CYiQ4ogRAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.132.134.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:38:cf:2e:29:f9:0d:0c:f6:7f:f0:9c:7e:d2:02:06:6e:f3:
9d:f4:42:12:d3:30:ea:fa:65:43:ba:fd:aa:2f:ee:00:40:2d:
26:38:dd:fc:93:a4:7b:39:07:30:84:63:a3:3c:ff:74:7c:64:
03:d0:07:9c:74:2f:43:7b:58:14:5a:1f:4a:98:38:8f:ad:c1:
35:ef:a0:b1:ba:f2:2e:da:77:60:7b:e1:7e:37:ae:71:0f:9e:
8a:51:35:6c:79:7a:2b:e4:d5:e1:de:39:92:a9:67:1e:2d:9d:
71:34:7b:85:24:c3:af:c6:30:96:8a:bc:80:20:80:61:b9:65:
fc:ac:06:59:ec:31:d9:3a:4a:c4:61:33:f5:26:93:b7:03:64:
d6:bb:5b:ff:69:f7:2e:ee:3f:52:08:ad:ff:57:12:19:e6:3b:
55:30:a5:14:aa:e0:88:57:44:96:8e:a8:38:b8:40:9b:1c:38:
8f:34:d0:ff:5a:ec:9c:c2:e1:6e:4c:d7:1c:ff:06:5c:d7:9f:
12:02:6d:08:b8:de:86:85:aa:d7:c9:92:97:b8:91:27:ea:19:
52:8c:66:34:f3:de:f4:02:6f:c5:9f:9c:82:83:b8:9c:90:3e:
d4:35:4e:80:6a:7b:f1:f1:a8:0c:eb:67:21:b8:6a:00:a1:8a:
f0:8a:a9:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1zn03jtBYgr4if3NrGtAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMDlhYjA3NTFmZWE0YjI5MmE5YWZkMTRkYmVjM2I4M2Ew
Nzc4NzAwHhcNMjUwMTAxMjE0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzgxMWFhMzM2MjYwYmQ2MTBkMWFlY2JmNDI2MjI0MzhhMjA0NDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGe/GIZ6TH50v7KT7rIOnRAtFHkA
+dK/KMVypuRE98JD49ULiWTq27YjEloHUslFgUqd2B96/TAFPc0YPLMiga1ra9Uo
/1pz+Dhbjq7mGQg3P6xKG+zswU00X12x4fMDQOKe6SxyBpiqS0Q57gmq17r54/vL
KlrB4RYvTwXaBUDOV1BsLpNBTi99oFfowrExcYE/Q5OLbtlcnev+f/UmllusKdY7
nT3ruSWHQ4C2ZwOZ0tytSQLB7g8rsF7MgQszdYykhhprTsqrULRg5OWY6lRnI/cX
0j7j+zKgpZmj5lerl1XQs22TYJRWftv0p0F75JzeiwO6cRANTwmnZ6ikewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIOBGqM2JgvWENGuy/QmIkOKIEQJMB8GA1UdIwQY
MBaAFGwJqwdR/qSykqmv0U2+w7g6B3hwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkFtckIxSC1wTEtTcWFfUlRiN0R1RG9IZUhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wNzYyNzItMjk2ZC00NmFmLTg1ZDEt
NDQ5NzNhNjAyZDlmLzEvZzRFYW96WW1DOVlRMGE3TDlDWWlRNG9nUkFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wNzYyNzItMjk2ZC00NmFmLTg1ZDEtNDQ5NzNhNjAyZDlm
LzEvYkFtckIxSC1wTEtTcWFfUlRiN0R1RG9IZUhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoSGMA0G
CSqGSIb3DQEBCwUAA4IBAQA7OM8uKfkNDPZ/8Jx+0gIGbvOd9EIS0zDq+mVDuv2q
L+4AQC0mON38k6R7OQcwhGOjPP90fGQD0AecdC9De1gUWh9KmDiPrcE176CxuvIu
2ndge+F+N65xD56KUTVseXor5NXh3jmSqWceLZ1xNHuFJMOvxjCWiryAIIBhuWX8
rAZZ7DHZOkrEYTP1JpO3A2TWu1v/afcu7j9SCK3/VxIZ5jtVMKUUquCIV0SWjqg4
uECbHDiPNND/WuycwuFuTNcc/wZc158SAm0IuN6GharXyZKXuJEn6hlSjGY08970
Am/Fn5yCg7ickD7UNU6Aanvx8agM62chuGoAoYrwiqk5
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:54 2025 by rpki-client