Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/7cUCY2EysYK09Y_F1tsMsp_B8MU.roa
File: 7cUCY2EysYK09Y_F1tsMsp_B8MU.roa (raw, json)
Hash identifier: el4sZWuoJZOOcj14KO5Yq16IPPIz+c0KckgEteIx4YM=
Subject key identifier: ED:C5:02:63:61:32:B1:82:B4:F5:8F:C5:D6:DB:0C:B2:9F:C1:F0:C5
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 0194221F3D964A5544ED67348AA623407F0C
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/7cUCY2EysYK09Y_F1tsMsp_B8MU.roa
Signing time: Wed 01 Jan 2025 13:47:40 +0000
ROA not before: Wed 01 Jan 2025 13:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198548
IP address blocks: 141.138.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:3d:96:4a:55:44:ed:67:34:8a:a6:23:40:7f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Jan 1 13:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edc502636132b182b4f58fc5d6db0cb29fc1f0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9d:b6:cc:0f:ee:2d:11:ba:e4:60:22:3e:10:
c0:c4:d5:f7:a7:51:68:7e:b0:73:e8:4b:87:37:8f:
ad:e0:11:75:d7:6f:0b:10:33:91:d0:83:53:8d:0c:
2e:87:ed:db:d8:e6:c1:78:42:cc:1b:c8:3f:23:2a:
07:14:90:cb:d6:b2:cc:38:68:fe:c0:03:80:f0:b9:
5c:08:aa:94:7f:e6:6c:a8:ab:ff:f3:88:59:00:60:
cd:ae:df:bd:d9:d5:ab:dc:6e:d1:e6:cd:9b:96:a5:
c0:1e:8a:4e:73:0e:50:e9:be:9d:ff:51:b4:9d:0a:
b8:cf:5d:e7:71:cf:e9:a7:ba:5c:fd:e6:56:95:b3:
52:3e:2b:b5:05:ea:57:e2:c3:19:b6:85:6d:ae:ed:
5a:ee:00:ac:45:b9:68:0c:05:1e:2a:0b:7b:c8:df:
ed:a3:20:40:0b:be:1f:08:9f:09:57:31:9e:50:16:
da:27:35:de:bf:7c:aa:ca:f4:1b:cb:f0:80:5b:7f:
c6:d6:fc:70:a6:6d:41:d9:38:cf:17:75:77:5e:d7:
b5:c9:fb:60:c7:9a:41:24:cc:d3:00:04:52:bf:05:
6b:3d:08:7a:8c:a4:c6:b7:31:ec:08:0b:6c:b2:2a:
0a:ec:4d:ec:6a:27:35:36:94:dd:6e:b2:bf:a6:8d:
7a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C5:02:63:61:32:B1:82:B4:F5:8F:C5:D6:DB:0C:B2:9F:C1:F0:C5
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/7cUCY2EysYK09Y_F1tsMsp_B8MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.138.4.0/24
Signature Algorithm: sha256WithRSAEncryption
23:a3:45:d7:c8:1f:2d:88:23:f1:98:9a:99:a2:3e:db:47:fa:
bf:33:c9:91:16:46:9d:26:11:61:a4:21:c9:15:d6:db:9c:e0:
4e:df:b6:1a:91:51:54:a1:8d:84:6b:cc:1a:02:a4:8b:d1:e0:
94:65:a5:c9:83:43:3d:f6:3c:4c:4f:96:e2:3c:60:f4:b0:b4:
bc:74:3c:e6:a4:e8:a2:44:29:44:fc:eb:c8:f0:e9:cd:e5:f1:
a1:d8:0f:99:29:ae:a9:9b:c1:74:d0:df:e3:2e:66:c0:5d:b3:
5b:b8:33:6d:35:1b:e0:47:4b:14:d0:c6:0e:32:4e:6f:6d:54:
7b:84:69:bc:26:d6:74:3b:54:0b:22:ae:ac:1d:e0:0e:de:e6:
33:ee:40:04:46:b5:19:83:77:8c:09:88:3d:23:d5:58:b0:5f:
89:a0:71:07:6b:1b:92:46:1f:8c:69:e6:08:eb:c0:f2:0a:15:
99:3c:95:75:cf:9f:aa:f1:0e:9f:15:c1:03:78:b3:be:16:d8:
5b:20:b2:0c:23:4a:a1:da:7e:cc:e7:e0:c2:70:53:27:b4:18:
d3:ed:41:c8:53:63:e8:a5:cb:3a:5d:73:f0:6c:a2:e7:8d:77:
14:3d:ec:1b:69:0f:2f:d7:46:b5:1f:7f:ab:e1:a1:b2:55:0b:
ac:b8:da:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiHz2WSlVE7Wc0iqYjQH8MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm
MDIwMjAwHhcNMjUwMTAxMTM0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGM1MDI2MzYxMzJiMTgyYjRmNThmYzVkNmRiMGNiMjlmYzFmMGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz522zA/uLRG65GAiPhDAxNX3p1Fo
frBz6EuHN4+t4BF1128LEDOR0INTjQwuh+3b2ObBeELMG8g/IyoHFJDL1rLMOGj+
wAOA8LlcCKqUf+ZsqKv/84hZAGDNrt+92dWr3G7R5s2blqXAHopOcw5Q6b6d/1G0
nQq4z13ncc/pp7pc/eZWlbNSPiu1BepX4sMZtoVtru1a7gCsRbloDAUeKgt7yN/t
oyBAC74fCJ8JVzGeUBbaJzXev3yqyvQby/CAW3/G1vxwpm1B2TjPF3V3Xte1yftg
x5pBJMzTAARSvwVrPQh6jKTGtzHsCAtssioK7E3saic1NpTdbrK/po16eQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO3FAmNhMrGCtPWPxdbbDLKfwfDFMB8GA1UdIwQY
MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt
NGI2YzFjZjlmZTRmLzEvN2NVQ1kyRXlzWUswOVlfRjF0c01zcF9COE1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm
LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYoEMA0G
CSqGSIb3DQEBCwUAA4IBAQAjo0XXyB8tiCPxmJqZoj7bR/q/M8mRFkadJhFhpCHJ
FdbbnOBO37YakVFUoY2Ea8waAqSL0eCUZaXJg0M99jxMT5biPGD0sLS8dDzmpOii
RClE/OvI8OnN5fGh2A+ZKa6pm8F00N/jLmbAXbNbuDNtNRvgR0sU0MYOMk5vbVR7
hGm8JtZ0O1QLIq6sHeAO3uYz7kAERrUZg3eMCYg9I9VYsF+JoHEHaxuSRh+MaeYI
68DyChWZPJV1z5+q8Q6fFcEDeLO+FthbILIMI0qh2n7M5+DCcFMntBjT7UHIU2Po
pcs6XXPwbKLnjXcUPewbaQ8v10a1H3+r4aGyVQusuNo6
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:14 2025 by rpki-client