Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/3vNWcma8J3Yvm292bxcQMk9IMAg.roa
File: 3vNWcma8J3Yvm292bxcQMk9IMAg.roa (raw, json)
Hash identifier: 9vjWGwLIurMfDLhl3LmcOyaHZd6c7cfwMEUeIRekeL8=
Subject key identifier: DE:F3:56:72:66:BC:27:76:2F:9B:6F:76:6F:17:10:32:4F:48:30:08
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 019423D747D8E652C7EC34F0C348617A1C00
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/3vNWcma8J3Yvm292bxcQMk9IMAg.roa
Signing time: Wed 01 Jan 2025 21:48:18 +0000
ROA not before: Wed 01 Jan 2025 21:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135377
IP address blocks: 23.90.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:47:d8:e6:52:c7:ec:34:f0:c3:48:61:7a:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Jan 1 21:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=def3567266bc27762f9b6f766f1710324f483008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:94:62:75:2f:df:d1:5e:2e:98:47:b7:24:
3e:3a:3e:7f:96:91:9f:4b:35:88:67:71:72:32:e2:
2a:de:b7:3d:9c:87:89:44:98:39:da:98:7f:3a:8b:
2b:ec:e7:c2:17:33:55:27:d8:1a:55:5a:57:28:76:
b0:d8:14:52:24:2f:83:2a:44:b0:9c:3c:36:ef:22:
d2:30:dd:70:70:a5:3a:94:09:56:e4:ae:c8:1f:b1:
85:1d:58:a3:14:4d:0b:27:28:3b:9e:bd:c5:8b:34:
d6:f3:4b:85:a5:1d:a5:3d:de:f0:44:c1:0e:f5:0f:
8b:34:01:5d:31:b4:8c:bc:81:a4:1f:0c:f7:3f:5e:
7e:09:c2:ef:88:5c:a9:b7:18:16:0c:cc:4c:0c:3b:
23:9c:8a:34:e6:ac:80:e3:c9:1c:2a:25:0b:47:6f:
1b:b8:6f:ba:46:b9:0d:a7:2e:fc:50:87:de:ee:fa:
62:57:61:d3:a4:23:c0:82:71:1a:f8:d0:bb:20:92:
0e:23:fe:f5:98:0e:32:da:7b:97:2b:1b:b7:f6:3c:
53:57:06:3c:54:78:9f:87:05:a5:0e:ef:90:69:74:
49:86:7c:97:79:d4:3b:a9:3e:53:7f:6e:90:d1:a2:
53:6e:a4:a1:29:24:34:03:da:47:f9:4d:a9:31:12:
6e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F3:56:72:66:BC:27:76:2F:9B:6F:76:6F:17:10:32:4F:48:30:08
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/3vNWcma8J3Yvm292bxcQMk9IMAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.90.156.0/24
Signature Algorithm: sha256WithRSAEncryption
03:69:6f:80:e7:54:7c:8a:a6:2f:47:41:0a:8c:cd:92:9e:9a:
8f:3e:7d:90:be:c3:39:c8:6e:5b:53:d6:ef:17:59:34:68:09:
3c:e0:7d:c9:47:a7:c4:e1:ee:80:4c:a5:1f:16:a5:c9:6f:bd:
78:1b:9b:8e:80:ef:52:89:41:aa:cc:6a:25:93:3d:3d:c8:0d:
b1:7f:85:8f:61:f8:3a:d5:b6:81:73:d8:27:a1:36:a0:f9:9e:
d5:d6:63:ee:50:f1:c3:2b:9f:73:a4:e2:84:94:c2:ee:f8:9a:
7b:e0:a0:1c:98:47:be:5f:44:aa:bd:0d:72:0d:35:69:43:02:
d3:de:df:be:ee:cf:a0:7a:fb:7a:f6:74:30:77:7a:71:8d:cd:
dd:1d:6c:c8:55:35:4c:41:dc:49:3c:8a:59:57:03:7e:c5:da:
25:7c:05:84:c1:b5:c2:c7:1d:5d:50:01:b8:ee:93:84:1d:66:
7e:5a:c0:8d:da:c8:5f:9a:82:f2:a8:31:18:f4:09:ff:43:b7:
60:e5:79:09:92:8e:87:b7:3f:e5:16:81:94:b2:32:ea:e9:28:
cb:14:e6:2e:43:b4:a3:f3:88:01:b9:e8:d1:9c:ec:80:97:c5:
07:aa:82:87:fc:7a:73:34:ba:44:74:24:2f:b0:b9:40:d4:92:
76:da:2b:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj10fY5lLH7DTww0hhehwAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy
YjNhZWMwHhcNMjUwMTAxMjE0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWYzNTY3MjY2YmMyNzc2MmY5YjZmNzY2ZjE3MTAzMjRmNDgzMDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9eUYnUv39FeLphHtyQ+Oj5/lpGf
SzWIZ3FyMuIq3rc9nIeJRJg52ph/Oosr7OfCFzNVJ9gaVVpXKHaw2BRSJC+DKkSw
nDw27yLSMN1wcKU6lAlW5K7IH7GFHVijFE0LJyg7nr3FizTW80uFpR2lPd7wRMEO
9Q+LNAFdMbSMvIGkHwz3P15+CcLviFyptxgWDMxMDDsjnIo05qyA48kcKiULR28b
uG+6RrkNpy78UIfe7vpiV2HTpCPAgnEa+NC7IJIOI/71mA4y2nuXKxu39jxTVwY8
VHifhwWlDu+QaXRJhnyXedQ7qT5Tf26Q0aJTbqShKSQ0A9pH+U2pMRJuIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN7zVnJmvCd2L5tvdm8XEDJPSDAIMB8GA1UdIwQY
MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt
ZTdkYWVjMTk0YTY5LzEvM3ZOV2NtYThKM1l2bTI5MmJ4Y1FNazlJTUFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5
LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1qcMA0G
CSqGSIb3DQEBCwUAA4IBAQADaW+A51R8iqYvR0EKjM2SnpqPPn2QvsM5yG5bU9bv
F1k0aAk84H3JR6fE4e6ATKUfFqXJb714G5uOgO9SiUGqzGolkz09yA2xf4WPYfg6
1baBc9gnoTag+Z7V1mPuUPHDK59zpOKElMLu+Jp74KAcmEe+X0SqvQ1yDTVpQwLT
3t++7s+gevt69nQwd3pxjc3dHWzIVTVMQdxJPIpZVwN+xdolfAWEwbXCxx1dUAG4
7pOEHWZ+WsCN2shfmoLyqDEY9An/Q7dg5XkJko6Htz/lFoGUsjLq6SjLFOYuQ7Sj
84gBuejRnOyAl8UHqoKH/HpzNLpEdCQvsLlA1JJ22iu/
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:25:00 2025 by rpki-client