Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/P1en3sohe2DbyNzA71GiPNHyPMA.roa
File: P1en3sohe2DbyNzA71GiPNHyPMA.roa (raw, json)
Hash identifier: V8PIuABmlXR/9zmJ4CmVSW6y4BQ+AXThzkLiJ6dRREE=
Subject key identifier: 3F:57:A7:DE:CA:21:7B:60:DB:C8:DC:C0:EF:51:A2:3C:D1:F2:3C:C0
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 019427B6220E15B678721489E8DFBA03E89C
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/P1en3sohe2DbyNzA71GiPNHyPMA.roa
Signing time: Thu 02 Jan 2025 15:50:35 +0000
ROA not before: Thu 02 Jan 2025 15:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34611
IP address blocks: 185.242.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:22:0e:15:b6:78:72:14:89:e8:df:ba:03:e8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Jan 2 15:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f57a7deca217b60dbc8dcc0ef51a23cd1f23cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:47:df:e7:47:ad:ce:87:8e:e8:16:a4:9d:c4:
40:23:ef:dc:96:f8:d8:48:76:65:79:3b:79:b6:85:
79:c9:c0:b6:cf:37:73:8d:5c:c8:08:49:9d:60:7d:
50:8a:2a:26:77:a0:f1:1f:16:91:b5:ab:b0:3f:1a:
21:b2:92:db:49:27:a1:a9:50:5a:95:9f:44:7d:99:
8e:35:08:a9:e0:33:2a:7d:9b:4e:de:3f:bf:98:98:
73:3f:05:38:bb:46:f6:52:1d:ba:5f:32:f1:a1:7f:
6d:97:fa:f9:db:21:4a:0c:3d:91:47:71:cd:42:bc:
8f:2d:ce:9d:7c:21:56:32:59:34:a4:1c:9a:b3:a3:
21:ab:45:b6:d9:86:34:2f:3e:4b:72:76:86:04:16:
5d:9a:07:e1:b3:43:42:4b:d5:4d:eb:d8:92:b9:ed:
e8:cf:9f:e3:15:de:4b:c5:a4:5d:48:fb:8f:cc:c3:
23:ab:03:69:a2:67:85:8c:b4:2f:6b:f2:bf:69:b3:
cd:e3:bf:85:5b:cf:5c:87:2c:b6:6d:87:67:84:28:
8a:97:31:d7:01:ed:be:45:15:6a:bb:1a:fe:80:99:
8d:86:d0:d3:a7:1c:a2:d1:d8:d6:b3:b7:4b:fe:77:
a6:0d:75:e1:bf:f2:15:ad:1e:56:04:ca:a4:47:57:
72:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:57:A7:DE:CA:21:7B:60:DB:C8:DC:C0:EF:51:A2:3C:D1:F2:3C:C0
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/P1en3sohe2DbyNzA71GiPNHyPMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.44.0/24
Signature Algorithm: sha256WithRSAEncryption
02:f3:72:48:79:81:31:ae:89:d5:19:95:a9:04:3b:5b:f8:c5:
e8:92:d1:ab:5a:be:45:30:66:26:25:fc:d3:65:d1:f9:9a:24:
bc:47:f1:10:67:8a:84:8c:ee:27:1e:88:17:b2:ef:3f:6d:08:
99:07:64:c0:1b:ba:b5:c9:20:ce:34:e3:79:ff:07:00:b5:63:
93:28:f2:0a:ea:59:7b:10:fd:00:9b:a3:28:23:83:f1:90:1b:
b3:bc:0f:90:64:0a:40:35:39:94:9c:c8:a1:37:43:19:56:2f:
51:87:20:6f:84:51:a4:e1:4d:a4:96:f2:9c:a3:8f:7a:c8:f4:
df:92:08:83:e6:32:81:49:1d:4e:ef:2a:81:b5:8a:39:51:33:
4f:b3:29:db:2e:5a:cc:41:f2:03:ef:44:92:52:3d:e2:d9:89:
29:c2:a0:ad:4d:da:ba:42:1d:dc:9c:64:52:dc:16:66:04:e2:
d9:23:f6:fa:5f:bc:4f:22:b2:7e:84:35:48:4e:88:da:9f:3d:
e8:1a:38:87:3d:60:bb:cd:f7:7e:83:2a:05:f3:06:2c:dd:8f:
30:aa:9a:cf:e8:f0:87:ea:bc:08:c2:82:87:34:81:20:c5:60:
de:c8:14:98:90:0f:22:a0:f6:3f:51:f0:29:49:2c:fe:89:3e:
72:7f:4f:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntiIOFbZ4chSJ6N+6A+icMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NjIyYTFhYWRmNzllNzExZDFlN2U0MzE5ZjczMmMwYjJk
YTgwMWUwHhcNMjUwMTAyMTU1MDM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjU3YTdkZWNhMjE3YjYwZGJjOGRjYzBlZjUxYTIzY2QxZjIzY2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80ff50etzoeO6BakncRAI+/clvjY
SHZleTt5toV5ycC2zzdzjVzICEmdYH1Qiiomd6DxHxaRtauwPxohspLbSSehqVBa
lZ9EfZmONQip4DMqfZtO3j+/mJhzPwU4u0b2Uh26XzLxoX9tl/r52yFKDD2RR3HN
QryPLc6dfCFWMlk0pByas6Mhq0W22YY0Lz5LcnaGBBZdmgfhs0NCS9VN69iSue3o
z5/jFd5LxaRdSPuPzMMjqwNpomeFjLQva/K/abPN47+FW89chyy2bYdnhCiKlzHX
Ae2+RRVquxr+gJmNhtDTpxyi0djWs7dL/nemDXXhv/IVrR5WBMqkR1dyIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD9Xp97KIXtg28jcwO9RojzR8jzAMB8GA1UdIwQY
MBaAFGliKhqt955xHR5+Qxn3MsCy2oAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTc2MTUtZDIwMi00OGYyLWJiOTMt
Y2MyMGY0MTcyY2VkLzEvUDFlbjNzb2hlMkRieU56QTcxR2lQTkh5UE1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MTc2MTUtZDIwMi00OGYyLWJiOTMtY2MyMGY0MTcyY2Vk
LzEvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufIsMA0G
CSqGSIb3DQEBCwUAA4IBAQAC83JIeYExronVGZWpBDtb+MXoktGrWr5FMGYmJfzT
ZdH5miS8R/EQZ4qEjO4nHogXsu8/bQiZB2TAG7q1ySDONON5/wcAtWOTKPIK6ll7
EP0Am6MoI4PxkBuzvA+QZApANTmUnMihN0MZVi9RhyBvhFGk4U2klvKco496yPTf
kgiD5jKBSR1O7yqBtYo5UTNPsynbLlrMQfID70SSUj3i2YkpwqCtTdq6Qh3cnGRS
3BZmBOLZI/b6X7xPIrJ+hDVITojanz3oGjiHPWC7zfd+gyoF8wYs3Y8wqprP6PCH
6rwIwoKHNIEgxWDeyBSYkA8ioPY/UfApSSz+iT5yf09x
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:14:27 2025 by rpki-client