Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/ldBjKa6qQD6NaVa0xAumkdWo3gI.roa
File: ldBjKa6qQD6NaVa0xAumkdWo3gI.roa (raw, json)
Hash identifier: 2YMpg6Ripbk87w4Re6g4mOYhXFU2yNWWD+lkjoRwRkM=
Subject key identifier: 95:D0:63:29:AE:AA:40:3E:8D:69:56:B4:C4:0B:A6:91:D5:A8:DE:02
Certificate issuer: /CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
Certificate serial: 01942823AF9E563658B758CF355A6A109DFF
Authority key identifier: A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/ldBjKa6qQD6NaVa0xAumkdWo3gI.roa
Signing time: Thu 02 Jan 2025 17:50:14 +0000
ROA not before: Thu 02 Jan 2025 17:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44726
IP address blocks: 195.42.124.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:af:9e:56:36:58:b7:58:cf:35:5a:6a:10:9d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
Validity
Not Before: Jan 2 17:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95d06329aeaa403e8d6956b4c40ba691d5a8de02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:76:e0:e1:7f:55:26:fe:93:df:41:e8:1d:c9:
04:25:ae:ea:de:99:2e:1f:65:35:e9:aa:1f:42:8d:
ce:06:ec:d4:c1:2e:90:c8:ea:d7:52:99:b0:0c:2b:
cc:f0:5d:f3:77:2d:e2:39:84:46:b3:bc:fc:c5:ac:
62:24:98:09:98:d1:e5:e9:04:1c:10:50:f7:d5:09:
cb:6b:58:63:94:43:a0:74:9d:ea:f3:67:27:82:9d:
c7:a0:cf:dd:69:11:0f:d4:9f:6d:c3:10:53:7e:b6:
36:bf:a6:03:d9:ae:94:7b:f0:78:a0:34:e8:10:d3:
d5:39:09:fb:0e:98:e6:38:a3:74:55:a9:72:bc:3f:
6c:24:71:ad:6b:be:84:eb:8c:3e:05:91:a4:68:55:
97:99:f2:f5:a9:47:76:46:0e:62:fd:0a:f5:a7:91:
17:df:54:04:95:52:4a:b2:5d:10:57:3a:3f:e3:e7:
42:e6:37:f8:d0:7d:af:ae:14:4a:8b:23:68:23:5d:
29:03:81:af:92:b4:cd:c0:48:30:68:67:ca:35:1e:
70:b2:cd:32:d3:ac:1b:37:83:24:2e:d9:73:15:e7:
37:17:48:63:1d:d4:ef:c0:ac:6d:8c:85:98:68:e8:
15:3c:d0:45:a7:f0:fd:d2:0f:5f:72:d1:1d:d3:58:
ec:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D0:63:29:AE:AA:40:3E:8D:69:56:B4:C4:0B:A6:91:D5:A8:DE:02
X509v3 Authority Key Identifier:
keyid:A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/ldBjKa6qQD6NaVa0xAumkdWo3gI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.42.124.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:2b:93:c3:b6:1c:ff:6c:7e:de:d0:cf:ab:6b:79:26:6b:77:
07:56:7f:c4:fa:32:e5:c9:38:40:ba:3a:06:c8:77:1f:23:3a:
39:5c:e8:0c:9f:97:d7:3c:5f:67:aa:cb:36:91:a9:22:9c:3f:
da:fc:51:21:c5:c6:0a:df:67:09:b3:6b:c6:d7:60:9b:bb:6d:
65:6a:08:bf:4d:13:20:76:76:9c:ad:7f:77:fd:e4:f5:5f:53:
d3:01:a7:49:03:e2:50:ce:65:14:a3:d5:20:df:87:b5:9c:fc:
88:7b:88:0a:2a:49:52:c8:dd:51:cd:c0:4b:d8:31:49:e8:25:
70:b3:d5:3a:9b:54:05:d5:d3:88:84:78:92:62:df:d9:fe:5c:
c9:fa:bf:81:fe:9b:9d:f4:27:0c:28:4c:31:a0:af:bd:08:42:
09:9b:b3:93:53:04:02:7b:84:ae:9a:f3:f2:44:46:21:69:9a:
ca:8e:13:2e:3f:19:f9:b3:a0:8f:21:30:46:96:a6:b8:35:fb:
1f:d0:a7:3f:2c:85:bf:bb:b4:bb:1b:b3:18:87:9c:ea:7f:7c:
35:1b:a8:66:5f:95:53:2a:15:c7:20:10:5f:b5:fa:c6:a2:ad:
e4:33:66:11:31:97:89:b0:76:08:62:60:4a:e4:8d:4f:a5:62:
67:f7:77:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI6+eVjZYt1jPNVpqEJ3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MTlmZGM3MGQzOWYxM2MzNzg0ZDMyNWFlMmI2MWYwZjNj
OTlmNDgwHhcNMjUwMTAyMTc1MDE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWQwNjMyOWFlYWE0MDNlOGQ2OTU2YjRjNDBiYTY5MWQ1YThkZTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Xbg4X9VJv6T30HoHckEJa7q3pku
H2U16aofQo3OBuzUwS6QyOrXUpmwDCvM8F3zdy3iOYRGs7z8xaxiJJgJmNHl6QQc
EFD31QnLa1hjlEOgdJ3q82cngp3HoM/daREP1J9twxBTfrY2v6YD2a6Ue/B4oDTo
ENPVOQn7DpjmOKN0ValyvD9sJHGta76E64w+BZGkaFWXmfL1qUd2Rg5i/Qr1p5EX
31QElVJKsl0QVzo/4+dC5jf40H2vrhRKiyNoI10pA4GvkrTNwEgwaGfKNR5wss0y
06wbN4MkLtlzFec3F0hjHdTvwKxtjIWYaOgVPNBFp/D90g9fctEd01jsYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJXQYymuqkA+jWlWtMQLppHVqN4CMB8GA1UdIwQY
MBaAFKcZ/ccNOfE8N4TTJa4rYfDzyZ9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHhuOXh3MDU4VHczaE5NbHJpdGg4UFBKbjBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kNzJiZjMtMWNhOS00MDIzLWFjZjUt
ZDVhNDIzNDQyZDM1LzEvbGRCakthNnFRRDZOYVZhMHhBdW1rZFdvM2dJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9kNzJiZjMtMWNhOS00MDIzLWFjZjUtZDVhNDIzNDQyZDM1
LzEvcHhuOXh3MDU4VHczaE5NbHJpdGg4UFBKbjBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwyp8MA0G
CSqGSIb3DQEBCwUAA4IBAQCLK5PDthz/bH7e0M+ra3kma3cHVn/E+jLlyThAujoG
yHcfIzo5XOgMn5fXPF9nqss2kakinD/a/FEhxcYK32cJs2vG12Cbu21lagi/TRMg
dnacrX93/eT1X1PTAadJA+JQzmUUo9Ug34e1nPyIe4gKKklSyN1RzcBL2DFJ6CVw
s9U6m1QF1dOIhHiSYt/Z/lzJ+r+B/pud9CcMKEwxoK+9CEIJm7OTUwQCe4SumvPy
REYhaZrKjhMuPxn5s6CPITBGlqa4Nfsf0Kc/LIW/u7S7G7MYh5zqf3w1G6hmX5VT
KhXHIBBftfrGoq3kM2YRMZeJsHYIYmBK5I1PpWJn93f9
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:34 2025 by rpki-client