Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/3qTzEcW6UJi2N2jS10ksOP0jGPg.roa
File: 3qTzEcW6UJi2N2jS10ksOP0jGPg.roa (raw, json)
Hash identifier: bi68C3NI8kVP+jK95/ZZuCFpomCw8AVgobu4v38Zwn4=
Subject key identifier: DE:A4:F3:11:C5:BA:50:98:B6:37:68:D2:D7:49:2C:38:FD:23:18:F8
Certificate issuer: /CN=778d759248bd945c6ce3842e8d642dcd2731334d
Certificate serial: 01941F8CA44214B88AD4F568A712CAD939C5
Authority key identifier: 77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/3qTzEcW6UJi2N2jS10ksOP0jGPg.roa
Signing time: Wed 01 Jan 2025 01:48:18 +0000
ROA not before: Wed 01 Jan 2025 01:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29203
IP address blocks: 192.162.76.0/22 maxlen: 22
2001:67c:1370::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a4:42:14:b8:8a:d4:f5:68:a7:12:ca:d9:39:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778d759248bd945c6ce3842e8d642dcd2731334d
Validity
Not Before: Jan 1 01:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dea4f311c5ba5098b63768d2d7492c38fd2318f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:99:4b:b4:f8:8c:1f:17:8d:05:ea:6f:cd:0a:
e0:97:4f:89:df:37:4d:39:4b:24:e6:96:84:c6:54:
f6:d5:05:eb:3b:db:b0:eb:17:90:00:89:90:c5:da:
8d:04:d9:81:f5:63:01:0a:74:ca:50:25:3d:74:62:
0c:be:61:3f:a2:7d:51:ec:e9:eb:4f:b9:c9:cf:7d:
33:ce:27:b1:6e:8a:bc:e4:8c:82:c0:72:49:fd:74:
02:47:b7:9f:72:3a:87:6b:d1:e5:4f:74:c3:d1:c2:
dc:40:44:46:d9:16:0b:3e:ed:30:6e:61:3b:b8:28:
0d:d9:5b:41:eb:fe:27:e5:ab:ef:bb:2b:f8:2e:f2:
e4:69:37:41:95:c4:c4:81:70:ee:ad:7a:59:3c:94:
6c:4b:c1:6c:aa:2f:73:bf:09:2c:02:d7:b6:57:c8:
dc:95:9e:c1:38:15:a3:42:b9:3a:c6:34:95:2e:2a:
62:c4:89:ac:ba:6c:71:8c:9f:f3:81:ce:f4:f5:22:
d4:db:68:d2:09:5f:55:5d:e1:0e:a9:6a:e8:55:13:
43:da:ab:9c:16:2e:b9:6b:7d:02:1d:ac:36:ee:5d:
5a:33:9f:6e:34:24:fc:86:8d:82:9f:3b:bf:64:69:
e7:5d:d5:32:94:4a:22:c9:f2:bc:74:28:83:1e:41:
ec:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A4:F3:11:C5:BA:50:98:B6:37:68:D2:D7:49:2C:38:FD:23:18:F8
X509v3 Authority Key Identifier:
keyid:77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/3qTzEcW6UJi2N2jS10ksOP0jGPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.76.0/22
IPv6:
2001:67c:1370::/48
Signature Algorithm: sha256WithRSAEncryption
7f:91:33:3d:75:8d:20:0a:87:b5:2c:60:e0:8b:dd:62:fe:fb:
64:33:87:9e:8b:eb:86:6d:69:78:a4:54:ac:24:6b:7b:75:71:
90:a6:9c:84:f1:38:fe:7e:15:a0:37:f8:e0:c0:79:96:4a:a1:
60:79:06:52:9a:ad:51:e5:c6:6a:2f:d2:35:82:28:52:10:29:
fc:83:71:d8:b4:c5:e9:f5:bd:32:0e:4c:23:0c:62:ca:bf:a5:
08:38:9a:1d:d0:5f:01:7c:20:c5:4d:b4:75:16:ca:55:ba:ff:
fb:e5:64:bd:c5:a5:44:50:cb:2b:34:47:4a:fa:7e:0a:a6:d4:
8a:86:53:eb:d8:9e:3b:a4:b6:8e:6e:78:32:26:9b:54:a1:cc:
38:d8:f5:de:b6:15:c1:b4:cf:c4:5a:7d:57:f4:44:42:7b:3e:
59:be:99:6d:df:4e:37:d5:35:91:5c:ab:20:bc:4e:fd:41:ed:
cf:9b:1f:fa:c7:33:45:e2:23:b4:a0:37:8e:d0:40:08:86:4c:
45:75:70:25:b3:c2:19:97:46:f7:62:29:1f:aa:00:8a:bd:c6:
03:e6:b6:15:b3:fb:83:75:28:7f:6d:60:b0:cf:a0:ac:17:09:
f7:6e:86:cd:e9:d2:ba:27:2b:4c:a0:76:b8:b5:42:28:b3:94:
65:6c:26:35
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQfjKRCFLiK1PVopxLK2TnFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OGQ3NTkyNDhiZDk0NWM2Y2UzODQyZThkNjQyZGNkMjcz
MTMzNGQwHhcNMjUwMTAxMDE0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWE0ZjMxMWM1YmE1MDk4YjYzNzY4ZDJkNzQ5MmMzOGZkMjMxOGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0plLtPiMHxeNBepvzQrgl0+J3zdN
OUsk5paExlT21QXrO9uw6xeQAImQxdqNBNmB9WMBCnTKUCU9dGIMvmE/on1R7Onr
T7nJz30zziexboq85IyCwHJJ/XQCR7efcjqHa9HlT3TD0cLcQERG2RYLPu0wbmE7
uCgN2VtB6/4n5avvuyv4LvLkaTdBlcTEgXDurXpZPJRsS8Fsqi9zvwksAte2V8jc
lZ7BOBWjQrk6xjSVLipixImsumxxjJ/zgc709SLU22jSCV9VXeEOqWroVRND2quc
Fi65a30CHaw27l1aM59uNCT8ho2Cnzu/ZGnnXdUylEoiyfK8dCiDHkHscQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN6k8xHFulCYtjdo0tdJLDj9Ixj4MB8GA1UdIwQY
MBaAFHeNdZJIvZRcbOOELo1kLc0nMTNNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDQxMWtraTlsRnhzNDRRdWpXUXR6U2N4TTAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81ODIyNDItMDA5OC00YjNmLTgwYjAt
ZGZhMWM5YjNmZDFmLzEvM3FUekVjVzZVSmkyTjJqUzEwa3NPUDBqR1BnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81ODIyNDItMDA5OC00YjNmLTgwYjAtZGZhMWM5YjNmZDFm
LzEvZDQxMWtraTlsRnhzNDRRdWpXUXR6U2N4TTAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwKJMMA8E
AgACMAkDBwAgAQZ8E3AwDQYJKoZIhvcNAQELBQADggEBAH+RMz11jSAKh7UsYOCL
3WL++2Qzh56L64ZtaXikVKwka3t1cZCmnITxOP5+FaA3+ODAeZZKoWB5BlKarVHl
xmov0jWCKFIQKfyDcdi0xen1vTIOTCMMYsq/pQg4mh3QXwF8IMVNtHUWylW6//vl
ZL3FpURQyys0R0r6fgqm1IqGU+vYnjukto5ueDImm1ShzDjY9d62FcG0z8RafVf0
REJ7Plm+mW3fTjfVNZFcqyC8Tv1B7c+bH/rHM0XiI7SgN47QQAiGTEV1cCWzwhmX
RvdiKR+qAIq9xgPmthWz+4N1KH9tYLDPoKwXCfduhs3p0ronK0ygdri1QiizlGVs
JjU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:39 2025 by rpki-client