Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/9YNXt3yQQqC0sVShhssVk4vWd94.roa
File: 9YNXt3yQQqC0sVShhssVk4vWd94.roa (raw, json)
Hash identifier: yctTbfDXnKqt6WUe7CbUwKgzc4xUGWWCc6SxcKiS1ZU=
Subject key identifier: F5:83:57:B7:7C:90:42:A0:B4:B1:54:A1:86:CB:15:93:8B:D6:77:DE
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019427B571A9E908E2245061C3D86A8A17E5
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/9YNXt3yQQqC0sVShhssVk4vWd94.roa
Signing time: Thu 02 Jan 2025 15:49:50 +0000
ROA not before: Thu 02 Jan 2025 15:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12184
IP address blocks: 94.31.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:71:a9:e9:08:e2:24:50:61:c3:d8:6a:8a:17:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 2 15:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f58357b77c9042a0b4b154a186cb15938bd677de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:34:b8:58:55:0a:35:d2:b8:b3:0b:4d:e6:
21:cc:a0:51:40:36:3d:e6:15:4e:6f:7e:36:87:e6:
ba:14:04:83:9f:8c:6e:4f:aa:bd:f3:35:85:4f:ac:
c9:38:58:04:d3:e1:97:bb:63:82:6d:69:f2:50:3e:
7b:1d:53:cb:aa:e7:ad:a7:46:47:0a:c2:e4:d6:de:
11:de:56:45:86:7d:d8:b7:0a:9f:b0:b7:62:5d:0c:
a1:46:ff:bb:5f:c5:c2:70:61:cf:4d:fe:52:45:f2:
17:13:57:93:2e:74:a6:dc:84:df:22:96:8e:d7:23:
46:2b:87:70:3a:ac:f8:b0:75:f5:f2:62:69:c0:0a:
2b:38:63:2f:a0:99:ce:ec:f5:3c:5b:37:1d:fd:86:
5b:55:77:fb:ee:17:bd:72:f9:04:0b:64:4d:07:db:
74:20:e9:e4:8a:18:26:91:ab:d7:3b:3b:3c:00:c8:
64:ec:c0:94:2f:ea:cf:fb:e9:06:01:e1:71:d5:1b:
f1:52:ab:e5:9c:4f:98:f2:98:fc:54:02:69:ac:9c:
0a:6f:23:99:87:fd:66:2b:3e:b1:eb:1d:44:75:9a:
d1:31:1d:48:e5:5a:70:2f:70:f9:3e:f6:19:d4:3a:
68:b3:8e:a6:70:47:61:93:9d:86:5d:38:d5:9c:81:
14:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:83:57:B7:7C:90:42:A0:B4:B1:54:A1:86:CB:15:93:8B:D6:77:DE
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/9YNXt3yQQqC0sVShhssVk4vWd94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.31.8.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:34:d0:1c:c1:1e:3e:86:d4:35:87:19:e1:d8:9e:56:14:b5:
30:3d:86:9b:d0:fe:80:49:3b:eb:5c:69:80:56:36:8b:5a:99:
9b:9e:1f:06:38:d3:d6:86:ef:5e:9a:58:a8:fd:5e:f2:0e:6f:
65:64:77:47:5a:e5:b9:45:ed:bd:5d:ac:6d:b7:65:55:23:cd:
e2:55:81:cf:4d:25:55:b1:86:05:95:6f:68:90:c4:47:b3:ca:
a0:65:d1:b1:56:93:18:f4:28:bc:c8:06:0c:67:73:82:6c:e7:
ba:fd:96:d1:03:8b:20:a1:29:fa:11:49:0a:da:1d:f0:f0:cf:
ea:37:64:1c:18:ce:39:08:20:68:98:ce:c3:06:b5:ba:3b:48:
a4:1d:1a:97:35:e0:31:d1:9b:e4:7d:92:ff:48:86:41:9f:f6:
7d:3a:7c:7f:4f:19:96:04:e4:13:59:c1:b5:1c:d5:27:64:46:
d4:a4:68:a3:dc:29:dc:d4:7a:06:86:7b:65:2a:37:8b:e2:3f:
89:68:50:53:3e:58:1e:97:02:f8:6a:da:68:4e:e8:65:b9:d2:
2c:b7:a1:18:56:f4:54:8a:09:40:34:b1:67:3e:8d:d2:6b:af:
38:f4:e2:bc:8c:a2:e4:bc:15:a7:1b:cc:b8:d8:ef:45:f6:34:
92:87:22:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntXGp6QjiJFBhw9hqihflMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMGNjOTQyOWI2MzM4MmU5YjE3MTRkMjFiM2M5NmQyZTVl
YmUyNTcwHhcNMjUwMTAyMTU0OTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTgzNTdiNzdjOTA0MmEwYjRiMTU0YTE4NmNiMTU5MzhiZDY3N2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj00uFhVCjXSuLMLTeYhzKBRQDY9
5hVOb342h+a6FASDn4xuT6q98zWFT6zJOFgE0+GXu2OCbWnyUD57HVPLquetp0ZH
CsLk1t4R3lZFhn3YtwqfsLdiXQyhRv+7X8XCcGHPTf5SRfIXE1eTLnSm3ITfIpaO
1yNGK4dwOqz4sHX18mJpwAorOGMvoJnO7PU8Wzcd/YZbVXf77he9cvkEC2RNB9t0
IOnkihgmkavXOzs8AMhk7MCUL+rP++kGAeFx1RvxUqvlnE+Y8pj8VAJprJwKbyOZ
h/1mKz6x6x1EdZrRMR1I5VpwL3D5PvYZ1Dpos46mcEdhk52GXTjVnIEU7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPWDV7d8kEKgtLFUoYbLFZOL1nfeMB8GA1UdIwQY
MBaAFOMMyUKbYzgumxcU0hs8ltLl6+JXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUt
ZGI0ZjM1MmU5YWQzLzEvOVlOWHQzeVFRcUMwc1ZTaGhzc1ZrNHZXZDk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUtZGI0ZjM1MmU5YWQz
LzEvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXh8IMA0G
CSqGSIb3DQEBCwUAA4IBAQC0NNAcwR4+htQ1hxnh2J5WFLUwPYab0P6ASTvrXGmA
VjaLWpmbnh8GONPWhu9emlio/V7yDm9lZHdHWuW5Re29Xaxtt2VVI83iVYHPTSVV
sYYFlW9okMRHs8qgZdGxVpMY9Ci8yAYMZ3OCbOe6/ZbRA4sgoSn6EUkK2h3w8M/q
N2QcGM45CCBomM7DBrW6O0ikHRqXNeAx0ZvkfZL/SIZBn/Z9Onx/TxmWBOQTWcG1
HNUnZEbUpGij3Cnc1HoGhntlKjeL4j+JaFBTPlgelwL4atpoTuhludIst6EYVvRU
iglANLFnPo3Sa6849OK8jKLkvBWnG8y42O9F9jSShyIb
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:16:49 2025 by rpki-client