Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/F4LyibxUyKDWiTWokbR8Nu9dwFg.roa
File: F4LyibxUyKDWiTWokbR8Nu9dwFg.roa (raw, json)
Hash identifier: ls3OOX8CUo2Fe8GCCqRqasL5CwSJNwzKwm1rIE9s2yA=
Subject key identifier: 17:82:F2:89:BC:54:C8:A0:D6:89:35:A8:91:B4:7C:36:EF:5D:C0:58
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01942747A26BB48D37A9FA1E0959E2765FD6
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/F4LyibxUyKDWiTWokbR8Nu9dwFg.roa
Signing time: Thu 02 Jan 2025 13:49:53 +0000
ROA not before: Thu 02 Jan 2025 13:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197343
IP address blocks: 2.189.128.0/20 maxlen: 24
2.189.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a2:6b:b4:8d:37:a9:fa:1e:09:59:e2:76:5f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 2 13:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1782f289bc54c8a0d68935a891b47c36ef5dc058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b5:a5:7a:a5:86:5c:e3:de:a6:fe:d1:86:d3:
63:e8:89:25:49:a5:c9:4f:e6:f1:51:49:69:2c:07:
bb:94:e2:56:12:c0:b7:1f:28:0c:b0:a5:31:e3:e2:
7e:cb:1b:dd:fb:87:15:24:a3:59:93:3c:54:a4:fb:
5b:7d:4d:ee:01:82:8b:3c:8d:9a:d1:49:85:e2:e5:
1f:17:3f:60:c7:eb:e2:d5:eb:bb:b8:71:d9:34:d8:
8f:47:dc:0e:83:a2:fb:d6:79:75:87:47:43:40:dd:
6a:61:eb:d2:dd:98:61:47:3f:ca:9c:8e:24:85:f9:
9b:a5:c0:1e:af:f1:2a:12:90:80:3c:43:f2:73:b7:
ee:53:5b:ed:92:1f:48:cb:0b:1c:35:aa:29:df:42:
6e:7d:5a:8a:41:b8:52:9f:4f:ce:2f:14:29:00:cf:
7f:6f:0c:5f:74:61:a0:0a:eb:b7:f1:1b:5a:4e:33:
85:0c:66:63:0f:7c:fb:86:49:be:05:6b:45:46:85:
04:73:40:03:15:04:d4:47:0f:61:f0:33:35:58:fe:
bb:49:80:d1:da:cc:9d:db:56:84:db:07:98:40:9c:
db:3a:8e:fe:23:98:40:67:da:cf:8f:a2:f2:fc:37:
9f:e3:d3:0d:03:0e:a9:f1:3e:3c:fe:cf:9e:d5:ae:
a3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:82:F2:89:BC:54:C8:A0:D6:89:35:A8:91:B4:7C:36:EF:5D:C0:58
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/F4LyibxUyKDWiTWokbR8Nu9dwFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.189.128.0/19
Signature Algorithm: sha256WithRSAEncryption
6f:ab:be:e6:07:a5:dc:83:67:1e:5b:79:16:72:91:2a:31:a7:
50:0d:b1:fd:14:22:1f:ad:58:0b:7e:bd:71:71:b3:55:ea:00:
8d:27:e2:8d:ee:6a:2e:c3:ba:bb:ff:3f:12:09:94:36:f8:b5:
a8:17:d8:5f:d0:f7:37:74:b3:57:94:4e:0c:c4:d1:e9:21:22:
34:b0:bf:aa:64:20:29:7d:03:3c:4b:e7:63:c2:aa:3a:e9:90:
3e:e3:f2:05:40:e6:75:c8:75:48:df:99:42:5d:8f:07:b3:4b:
34:00:01:8b:80:02:58:b2:60:ea:b0:2b:76:63:a3:15:2f:03:
c6:a2:af:9d:aa:f2:3f:dd:fc:9b:8c:90:e1:e4:0c:6f:ba:e1:
30:2b:84:4a:48:c8:5b:62:99:05:24:ff:ab:43:3d:15:0c:69:
01:70:ad:d0:6b:0f:45:f1:46:6b:e7:7a:57:25:b7:00:2b:07:
21:ed:be:d4:72:89:42:a3:8d:aa:b6:81:43:57:6b:f2:80:f8:
6b:73:90:1c:13:a3:c2:05:2d:aa:a0:97:83:fd:c9:53:1d:19:
ff:08:6d:9a:34:7b:27:a8:81:d3:fe:d4:a7:73:67:d8:2a:bc:
e1:8b:0e:1a:78:98:50:37:be:a5:c2:17:84:dd:fe:46:33:53:
bb:9b:6c:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR6JrtI03qfoeCVnidl/WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy
NjBhZTUwHhcNMjUwMTAyMTM0OTUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzgyZjI4OWJjNTRjOGEwZDY4OTM1YTg5MWI0N2MzNmVmNWRjMDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbWleqWGXOPepv7RhtNj6IklSaXJ
T+bxUUlpLAe7lOJWEsC3HygMsKUx4+J+yxvd+4cVJKNZkzxUpPtbfU3uAYKLPI2a
0UmF4uUfFz9gx+vi1eu7uHHZNNiPR9wOg6L71nl1h0dDQN1qYevS3ZhhRz/KnI4k
hfmbpcAer/EqEpCAPEPyc7fuU1vtkh9IywscNaop30JufVqKQbhSn0/OLxQpAM9/
bwxfdGGgCuu38RtaTjOFDGZjD3z7hkm+BWtFRoUEc0ADFQTURw9h8DM1WP67SYDR
2syd21aE2weYQJzbOo7+I5hAZ9rPj6Ly/Def49MNAw6p8T48/s+e1a6jMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBeC8om8VMig1ok1qJG0fDbvXcBYMB8GA1UdIwQY
MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt
Zjc0ZDk1MTg1NzZjLzEvRjRMeWlieFV5S0RXaVRXb2tiUjhOdTlkd0ZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj
LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFAr2AMA0G
CSqGSIb3DQEBCwUAA4IBAQBvq77mB6Xcg2ceW3kWcpEqMadQDbH9FCIfrVgLfr1x
cbNV6gCNJ+KN7mouw7q7/z8SCZQ2+LWoF9hf0Pc3dLNXlE4MxNHpISI0sL+qZCAp
fQM8S+djwqo66ZA+4/IFQOZ1yHVI35lCXY8Hs0s0AAGLgAJYsmDqsCt2Y6MVLwPG
oq+dqvI/3fybjJDh5AxvuuEwK4RKSMhbYpkFJP+rQz0VDGkBcK3Qaw9F8UZr53pX
JbcAKwch7b7UcolCo42qtoFDV2vygPhrc5AcE6PCBS2qoJeD/clTHRn/CG2aNHsn
qIHT/tSnc2fYKrzhiw4aeJhQN76lwheE3f5GM1O7m2wn
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:21:31 2025 by rpki-client