Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/s9EuqX5b9zt_Znw1hEoBNVzx0co.roa
File: s9EuqX5b9zt_Znw1hEoBNVzx0co.roa (raw, json)
Hash identifier: MS1QUNemj9oOGEXp2GgN/ppihkcGaOAMbcG5uVtKAdE=
Subject key identifier: B3:D1:2E:A9:7E:5B:F7:3B:7F:66:7C:35:84:4A:01:35:5C:F1:D1:CA
Certificate issuer: /CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
Certificate serial: 019424B2AC3CE81A60FB2A8609582BBA97B2
Authority key identifier: CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/s9EuqX5b9zt_Znw1hEoBNVzx0co.roa
Signing time: Thu 02 Jan 2025 01:47:56 +0000
ROA not before: Thu 02 Jan 2025 01:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39923
IP address blocks: 85.159.114.0/24 maxlen: 24
161.199.31.0/24 maxlen: 24
2a0f:efc0::/32 maxlen: 32
2a0f:efc1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:ac:3c:e8:1a:60:fb:2a:86:09:58:2b:ba:97:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
Validity
Not Before: Jan 2 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3d12ea97e5bf73b7f667c35844a01355cf1d1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:a2:84:a9:26:cd:ca:05:ef:d8:06:e3:c3:
c1:50:f5:73:15:f0:86:9e:10:bd:aa:59:9a:fb:03:
c4:40:1e:0c:68:fa:e9:eb:2b:2f:c8:5f:bb:77:60:
65:a7:49:b3:3f:5a:50:e9:1b:70:69:45:54:65:a6:
15:a9:e2:e2:8a:30:20:8f:d8:bd:d2:04:ac:17:1e:
53:43:2b:01:7f:a2:3f:4b:02:cd:ff:06:37:5c:74:
6d:b3:77:3a:5d:b1:d0:16:d6:78:92:c0:c3:9b:eb:
80:b6:ab:35:63:e2:35:19:9a:b9:09:28:91:f6:ab:
c5:7f:00:3e:ba:0d:b9:d4:1d:b1:3b:b8:c9:71:6c:
d2:da:79:5b:63:0f:3e:69:a1:1d:c4:63:32:97:78:
63:d6:99:ab:b5:63:1b:a4:3c:78:03:5d:ed:90:c8:
ab:c5:94:2e:6a:46:85:02:e6:dd:0b:0a:cd:cf:fe:
6d:ec:33:8e:a9:b0:8d:ce:53:2c:db:e4:6f:5d:e5:
2d:c0:6f:ac:f1:84:d2:70:5f:fa:ed:53:45:9a:bf:
f8:a2:a8:8a:48:01:a8:89:29:63:a6:03:e3:0f:9e:
57:3d:d0:80:95:19:db:69:22:83:88:99:4d:4a:42:
11:45:3f:aa:dc:13:cc:9b:c4:d1:db:f6:a0:9c:6f:
5b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D1:2E:A9:7E:5B:F7:3B:7F:66:7C:35:84:4A:01:35:5C:F1:D1:CA
X509v3 Authority Key Identifier:
keyid:CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/s9EuqX5b9zt_Znw1hEoBNVzx0co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.159.114.0/24
161.199.31.0/24
IPv6:
2a0f:efc0::/31
Signature Algorithm: sha256WithRSAEncryption
03:69:c6:e6:99:d8:32:3c:2b:99:88:00:ed:63:47:cd:83:44:
3e:80:ba:f9:32:e2:55:b9:cd:ff:8e:fe:2d:c5:fd:3e:7b:74:
41:a2:bc:75:24:d0:08:0f:ab:27:f6:49:f2:c0:4c:49:12:71:
6a:55:59:83:49:3c:d1:21:e6:ec:c9:fc:77:bf:01:8c:ac:e4:
11:7b:8e:3e:43:97:b1:8b:57:56:58:c2:33:f8:7f:5b:31:13:
2d:c3:3b:d9:85:28:c4:d2:4d:5e:42:9a:c6:6e:0d:97:9d:ef:
02:8a:09:bb:82:17:75:df:c8:77:43:04:94:1f:2c:bf:f8:a3:
20:12:9c:72:2f:32:a5:94:79:5b:48:d9:4b:bb:91:3b:b4:21:
f4:15:25:1d:ce:1e:19:7c:b6:ee:78:dd:6d:0f:a8:e1:73:08:
f3:03:de:c8:7d:51:e0:54:0d:a9:d6:3a:1b:3a:cf:e7:a6:02:
62:23:fa:16:2e:bc:4c:7a:55:be:9b:ab:37:5d:c4:40:09:e8:
9f:b3:a4:41:52:49:db:9c:63:f9:c0:01:88:0d:ee:23:8a:9f:
ba:eb:e5:82:87:fd:46:1b:d2:57:05:57:db:d2:0a:24:02:7f:
b9:ef:fe:0c:fe:06:4c:1d:4f:5c:c6:50:25:7c:9e:23:84:59:
a1:1f:b8:27
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQksqw86Bpg+yqGCVgrupeyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNzQ4Y2QwMGNkN2ZlNmEyMTc1NWFmNjQyZDg4MWI4ZGQ5
YTM5ZjcwHhcNMjUwMTAyMDE0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2QxMmVhOTdlNWJmNzNiN2Y2NjdjMzU4NDRhMDEzNTVjZjFkMWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKCihKkmzcoF79gG48PBUPVzFfCG
nhC9qlma+wPEQB4MaPrp6ysvyF+7d2Blp0mzP1pQ6RtwaUVUZaYVqeLiijAgj9i9
0gSsFx5TQysBf6I/SwLN/wY3XHRts3c6XbHQFtZ4ksDDm+uAtqs1Y+I1GZq5CSiR
9qvFfwA+ug251B2xO7jJcWzS2nlbYw8+aaEdxGMyl3hj1pmrtWMbpDx4A13tkMir
xZQuakaFAubdCwrNz/5t7DOOqbCNzlMs2+RvXeUtwG+s8YTScF/67VNFmr/4oqiK
SAGoiSljpgPjD55XPdCAlRnbaSKDiJlNSkIRRT+q3BPMm8TR2/agnG9bpQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFLPRLql+W/c7f2Z8NYRKATVc8dHKMB8GA1UdIwQY
MBaAFMp0jNAM1/5qIXVa9kLYgbjdmjn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xNmVlYjItYzgyNy00MmM5LThlNDgt
MmEzZGY5YjMzMzEzLzEvczlFdXFYNWI5enRfWm53MWhFb0JOVnp4MGNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8xNmVlYjItYzgyNy00MmM5LThlNDgtMmEzZGY5YjMzMzEz
LzEveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAVZ9yAwQA
occfMA0EAgACMAcDBQEqD+/AMA0GCSqGSIb3DQEBCwUAA4IBAQADacbmmdgyPCuZ
iADtY0fNg0Q+gLr5MuJVuc3/jv4txf0+e3RBorx1JNAID6sn9knywExJEnFqVVmD
STzRIebsyfx3vwGMrOQRe44+Q5exi1dWWMIz+H9bMRMtwzvZhSjE0k1eQprGbg2X
ne8Cigm7ghd138h3QwSUHyy/+KMgEpxyLzKllHlbSNlLu5E7tCH0FSUdzh4ZfLbu
eN1tD6jhcwjzA97IfVHgVA2p1jobOs/npgJiI/oWLrxMelW+m6s3XcRACeifs6RB
UknbnGP5wAGIDe4jip+66+WCh/1GG9JXBVfb0gokAn+57/4M/gZMHU9cxlAlfJ4j
hFmhH7gn
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:09:46 2025 by rpki-client