Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/4Daq3sRA17ZdprqbzGRyjmXgl1E.roa
File: 4Daq3sRA17ZdprqbzGRyjmXgl1E.roa (raw, json)
Hash identifier: VSeTV1A+yIJMWw7g87Rk+9SxMblNEgNbsAxn9i/toOI=
Subject key identifier: E0:36:AA:DE:C4:40:D7:B6:5D:A6:BA:9B:CC:64:72:8E:65:E0:97:51
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 0194236A2A71CDA4C04D982C51CD926BFBC5
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/4Daq3sRA17ZdprqbzGRyjmXgl1E.roa
Signing time: Wed 01 Jan 2025 19:49:07 +0000
ROA not before: Wed 01 Jan 2025 19:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49792
IP address blocks: 185.103.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2a:71:cd:a4:c0:4d:98:2c:51:cd:92:6b:fb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jan 1 19:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e036aadec440d7b65da6ba9bcc64728e65e09751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e3:c2:30:f6:ff:d6:83:41:f2:e1:a0:4b:be:
fb:62:0b:94:07:d4:02:7b:e0:7a:4f:a7:5a:41:c3:
85:a8:cc:ad:ec:4f:8a:85:02:ba:03:d9:ad:82:74:
6d:64:01:25:63:85:14:e6:95:88:2e:77:2b:99:a2:
db:34:9c:2e:32:42:82:42:d2:70:7e:85:52:36:de:
29:2b:f4:40:01:6c:c9:37:a6:61:f4:46:cc:3e:af:
d4:88:33:b5:e3:3d:ac:b2:f5:78:de:91:05:73:96:
1d:ab:94:3b:2c:72:7d:64:9f:88:81:67:52:f5:e7:
ed:01:04:2e:0f:3f:5a:18:02:0f:f3:20:48:0f:18:
14:f6:ae:c5:03:d7:e1:d3:5f:d4:39:83:66:b4:81:
5f:98:6a:d0:6a:27:85:93:61:ee:2c:0d:fd:d9:83:
da:26:a7:d9:a3:47:43:29:bb:aa:b8:fb:e8:e7:01:
15:02:93:87:8e:91:40:a5:53:35:63:0c:0e:08:b8:
67:00:89:90:8d:c1:4c:c6:fd:e5:20:5b:b5:5e:c2:
27:56:9f:69:79:0d:90:0b:cc:ba:a9:83:d2:c3:5d:
85:d3:27:58:22:83:6e:26:5f:f8:99:34:2c:74:5e:
5c:2a:42:a3:55:2d:90:c5:85:c5:ca:3e:97:cc:a9:
34:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:36:AA:DE:C4:40:D7:B6:5D:A6:BA:9B:CC:64:72:8E:65:E0:97:51
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/4Daq3sRA17ZdprqbzGRyjmXgl1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.84.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:8a:5b:5e:c6:d7:1f:e8:9e:fd:c2:75:51:ed:27:4b:5f:c1:
74:ab:83:2c:51:92:1a:f4:e1:c4:d7:fc:fb:e9:28:0e:be:7f:
f7:e6:9b:b5:33:f9:a8:d8:52:7f:b2:a0:aa:c3:b4:a1:d5:42:
ff:98:e2:10:ad:5a:16:93:dc:3a:c6:5d:82:48:bd:8a:24:79:
84:b0:cf:8c:55:ed:81:44:6b:56:a1:78:5a:0a:dd:ae:d1:85:
8c:9b:b2:8a:ed:3d:61:30:e8:38:e0:88:3c:6e:c9:8c:66:7b:
39:29:a2:e6:ed:63:3d:37:36:dd:c3:61:ec:dd:fd:2c:b1:dd:
5f:c4:eb:5b:bf:f3:32:06:92:bd:9e:a2:e6:83:8f:21:60:00:
35:b1:9c:b6:4e:a1:0a:6f:9b:86:9a:f3:0e:37:56:71:d0:20:
9b:0f:97:46:1c:ce:e9:c7:13:59:28:52:32:8b:ab:3c:68:45:
a1:3d:b9:7c:6b:47:a3:83:dd:9a:66:e9:77:7c:ea:34:08:6e:
90:54:1f:d4:b9:e2:8c:30:a4:ae:6c:ad:e1:0f:7f:29:31:a6:
7f:3f:74:90:db:34:c4:a1:09:3f:f7:05:1e:bd:55:1d:d3:65:
fe:44:19:2c:84:a8:95:9d:9d:e5:b4:97:80:a1:f4:ae:a7:4f:
75:98:4d:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaipxzaTATZgsUc2Sa/vFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4
OTk1YWIwHhcNMjUwMTAxMTk0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDM2YWFkZWM0NDBkN2I2NWRhNmJhOWJjYzY0NzI4ZTY1ZTA5NzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+PCMPb/1oNB8uGgS777YguUB9QC
e+B6T6daQcOFqMyt7E+KhQK6A9mtgnRtZAElY4UU5pWILncrmaLbNJwuMkKCQtJw
foVSNt4pK/RAAWzJN6Zh9EbMPq/UiDO14z2ssvV43pEFc5Ydq5Q7LHJ9ZJ+IgWdS
9eftAQQuDz9aGAIP8yBIDxgU9q7FA9fh01/UOYNmtIFfmGrQaieFk2HuLA392YPa
JqfZo0dDKbuquPvo5wEVApOHjpFApVM1YwwOCLhnAImQjcFMxv3lIFu1XsInVp9p
eQ2QC8y6qYPSw12F0ydYIoNuJl/4mTQsdF5cKkKjVS2QxYXFyj6XzKk0swIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOA2qt7EQNe2Xaa6m8xkco5l4JdRMB8GA1UdIwQY
MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt
NDBiNmQ2N2ZjZDk0LzEvNERhcTNzUkExN1pkcHJxYnpHUnlqbVhnbDFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0
LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWdUMA0G
CSqGSIb3DQEBCwUAA4IBAQBdiltextcf6J79wnVR7SdLX8F0q4MsUZIa9OHE1/z7
6SgOvn/35pu1M/mo2FJ/sqCqw7Sh1UL/mOIQrVoWk9w6xl2CSL2KJHmEsM+MVe2B
RGtWoXhaCt2u0YWMm7KK7T1hMOg44Ig8bsmMZns5KaLm7WM9Nzbdw2Hs3f0ssd1f
xOtbv/MyBpK9nqLmg48hYAA1sZy2TqEKb5uGmvMON1Zx0CCbD5dGHM7pxxNZKFIy
i6s8aEWhPbl8a0ejg92aZul3fOo0CG6QVB/UueKMMKSubK3hD38pMaZ/P3SQ2zTE
oQk/9wUevVUd02X+RBkshKiVnZ3ltJeAofSup091mE0W
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:04:11 2025 by rpki-client