Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/4-CZuqs_wfNDujIuGX70xVA6tSA.roa
File: 4-CZuqs_wfNDujIuGX70xVA6tSA.roa (raw, json)
Hash identifier: MXhdMCQ4Vga0B8DAzQj3qWrB3c94byRufzhSguRvTxI=
Subject key identifier: E3:E0:99:BA:AB:3F:C1:F3:43:BA:32:2E:19:7E:F4:C5:50:3A:B5:20
Certificate issuer: /CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Certificate serial: 01940771FFE2DF867AD5C2B8CD3DF4EDD247
Authority key identifier: 11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/4-CZuqs_wfNDujIuGX70xVA6tSA.roa
Signing time: Fri 27 Dec 2024 09:28:18 +0000
ROA not before: Fri 27 Dec 2024 09:28:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49600
IP address blocks: 185.232.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:71:ff:e2:df:86:7a:d5:c2:b8:cd:3d:f4:ed:d2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Validity
Not Before: Dec 27 09:28:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3e099baab3fc1f343ba322e197ef4c5503ab520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:12:06:72:1e:98:65:f6:2b:1e:85:b1:54:cf:
ef:65:83:aa:c5:31:04:73:e8:1d:b5:97:3b:8b:bf:
45:f8:ce:a3:52:76:1d:41:5b:f6:09:52:da:da:d8:
f9:4e:66:51:ce:e7:a9:6c:87:9f:78:ac:40:50:10:
6c:72:c5:78:5f:bd:07:7c:29:ed:93:6e:af:4c:95:
c0:ea:fb:26:49:a9:fb:3f:b8:ef:bc:c5:56:a0:8d:
77:64:2a:26:09:8e:63:54:da:35:a6:27:f5:4c:b9:
37:df:e9:5d:4c:bd:6a:e9:89:b6:d8:a7:16:6a:e9:
dc:ab:2f:6a:25:75:34:b0:e7:5b:b1:70:f9:a0:11:
8b:6d:56:56:ca:e7:1b:ca:36:21:08:7b:f8:06:d7:
a3:6e:ce:6d:da:5d:4b:8f:86:12:b1:97:b8:33:37:
11:5a:58:7e:0a:4c:e5:3f:b8:9d:fe:34:72:45:bc:
d7:8e:9b:c2:49:32:47:68:35:50:36:97:e1:d0:b4:
4f:5b:67:ca:5e:f6:5c:70:44:89:73:1a:23:bf:cc:
1f:4a:75:17:97:42:18:d5:a6:00:1a:77:43:b0:26:
8a:58:db:72:51:6d:60:9a:af:17:95:f0:e1:50:84:
d0:13:5c:d3:a9:ad:39:d7:f7:bc:7f:49:e0:9b:32:
f2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E0:99:BA:AB:3F:C1:F3:43:BA:32:2E:19:7E:F4:C5:50:3A:B5:20
X509v3 Authority Key Identifier:
keyid:11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/4-CZuqs_wfNDujIuGX70xVA6tSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.205.0/24
Signature Algorithm: sha256WithRSAEncryption
45:7e:e2:25:41:fd:24:5e:01:29:6b:62:21:bc:05:6d:56:36:
02:3b:c5:9f:53:fb:02:59:47:61:6a:8d:36:09:b8:18:6c:8f:
d2:b5:10:17:04:89:ee:c9:15:3a:aa:b9:85:e7:d2:56:b7:e2:
ff:fa:72:91:1f:0c:20:6a:e0:2b:59:01:95:8d:18:7e:c3:cf:
81:57:a4:7d:97:d9:64:6a:20:b0:28:cd:45:3e:51:a9:73:81:
9f:19:98:1a:d1:62:3f:2c:a9:8b:88:90:eb:d5:21:c8:a3:48:
75:14:e9:e9:4d:10:e8:6a:89:83:9f:60:d8:3a:6a:40:58:2b:
d9:cd:d3:67:59:aa:eb:db:7b:d8:c0:27:c6:7f:2a:a9:38:09:
31:a0:2e:47:2c:b1:9d:da:18:18:de:04:43:6c:9b:ed:b3:65:
cb:42:a8:dd:3a:ae:c4:7f:ca:50:2f:41:83:64:9d:59:30:42:
79:4c:5b:bf:71:02:9d:38:d5:e4:d8:8b:12:3d:81:6f:d5:2c:
68:36:04:a8:5f:a4:f0:54:a5:61:e0:80:89:8d:11:a7:ad:20:
9d:ef:b9:5d:81:a4:c5:fb:80:77:9e:15:a5:cb:ac:4e:a6:38:
df:50:53:e1:03:6f:96:ca:34:ad:59:43:35:65:0d:8f:c3:70:
cf:b4:4c:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQHcf/i34Z61cK4zT307dJHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZWVjZDcxYzE5M2U0YWMzMGVkMDNkMGI5ZjA1ZGExMDFj
NjAzZDIwHhcNMjQxMjI3MDkyODE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2UwOTliYWFiM2ZjMWYzNDNiYTMyMmUxOTdlZjRjNTUwM2FiNTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBIGch6YZfYrHoWxVM/vZYOqxTEE
c+gdtZc7i79F+M6jUnYdQVv2CVLa2tj5TmZRzuepbIefeKxAUBBscsV4X70HfCnt
k26vTJXA6vsmSan7P7jvvMVWoI13ZComCY5jVNo1pif1TLk33+ldTL1q6Ym22KcW
auncqy9qJXU0sOdbsXD5oBGLbVZWyucbyjYhCHv4Btejbs5t2l1Lj4YSsZe4MzcR
Wlh+CkzlP7id/jRyRbzXjpvCSTJHaDVQNpfh0LRPW2fKXvZccESJcxojv8wfSnUX
l0IY1aYAGndDsCaKWNtyUW1gmq8XlfDhUITQE1zTqa051/e8f0ngmzLyMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOPgmbqrP8HzQ7oyLhl+9MVQOrUgMB8GA1UdIwQY
MBaAFBHuzXHBk+SsMO0D0LnwXaEBxgPSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWU3TmNjR1Q1S3d3N1FQUXVmQmRvUUhHQTlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80ZmQ5NWEtNTE1Ny00YTFiLWI4Njgt
MTM4OTk1Yzk5Yjk3LzEvNC1DWnVxc193Zk5EdWpJdUdYNzB4VkE2dFNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80ZmQ5NWEtNTE1Ny00YTFiLWI4NjgtMTM4OTk1Yzk5Yjk3
LzEvRWU3TmNjR1Q1S3d3N1FQUXVmQmRvUUhHQTlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuejNMA0G
CSqGSIb3DQEBCwUAA4IBAQBFfuIlQf0kXgEpa2IhvAVtVjYCO8WfU/sCWUdhao02
CbgYbI/StRAXBInuyRU6qrmF59JWt+L/+nKRHwwgauArWQGVjRh+w8+BV6R9l9lk
aiCwKM1FPlGpc4GfGZga0WI/LKmLiJDr1SHIo0h1FOnpTRDoaomDn2DYOmpAWCvZ
zdNnWarr23vYwCfGfyqpOAkxoC5HLLGd2hgY3gRDbJvts2XLQqjdOq7Ef8pQL0GD
ZJ1ZMEJ5TFu/cQKdONXk2IsSPYFv1SxoNgSoX6TwVKVh4ICJjRGnrSCd77ldgaTF
+4B3nhWly6xOpjjfUFPhA2+WyjStWUM1ZQ2Pw3DPtEzg
-----END CERTIFICATE-----
Generated at Thu Apr 17 08:09:00 2025 by rpki-client