Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/4ylLEVDeXKrfF8Se5wkM9llLd1w.roa
File: 4ylLEVDeXKrfF8Se5wkM9llLd1w.roa (raw, json)
Hash identifier: 4hQQfVDyFUxXBSnxIrSQDsLfslrlkzzZ+2tzn4mkErM=
Subject key identifier: E3:29:4B:11:50:DE:5C:AA:DF:17:C4:9E:E7:09:0C:F6:59:4B:77:5C
Certificate issuer: /CN=4148cbad1748205b4f4334bba638c64c2b21fc0e
Certificate serial: 0194258FC962C256211D27F64AC36A884BD7
Authority key identifier: 41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/4ylLEVDeXKrfF8Se5wkM9llLd1w.roa
Signing time: Thu 02 Jan 2025 05:49:27 +0000
ROA not before: Thu 02 Jan 2025 05:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196936
IP address blocks: 178.217.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c9:62:c2:56:21:1d:27:f6:4a:c3:6a:88:4b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4148cbad1748205b4f4334bba638c64c2b21fc0e
Validity
Not Before: Jan 2 05:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3294b1150de5caadf17c49ee7090cf6594b775c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:82:21:da:75:33:0b:6f:96:12:c4:6d:71:
44:d6:11:82:bd:61:7d:fb:82:1c:69:0b:a4:54:23:
fe:5c:55:38:2c:28:70:60:8f:5e:e0:e4:f8:dd:59:
7d:2a:4c:e1:00:c7:68:f5:4a:0f:67:3d:55:dd:83:
7e:ec:1f:cc:6f:4d:ad:14:bd:3a:e4:37:56:71:ec:
85:3f:23:05:62:da:24:87:00:f7:76:40:f6:1a:43:
cd:44:47:94:67:06:8f:4d:20:e2:cc:5d:6f:fa:0f:
d6:72:f2:bf:b8:f9:af:d2:1b:fe:c7:f0:29:74:72:
c1:7e:61:e8:b7:8b:a5:20:f8:f9:0b:88:40:98:c2:
2e:ba:05:9c:ed:37:fa:8b:f7:c7:ee:90:35:3a:05:
e2:db:29:1f:d3:36:05:d8:f3:6a:92:d0:f5:cd:c4:
61:0c:39:33:e4:6c:9e:cd:17:7f:9d:8c:e8:e9:af:
62:a4:82:a7:d2:85:f7:ca:92:76:72:54:ca:c2:0e:
80:b3:ad:e7:d5:58:42:fa:cd:10:b6:1d:8a:06:f6:
ed:c6:88:e6:27:32:52:84:41:bd:89:d5:fb:da:07:
3f:e9:9d:88:70:43:49:2b:8d:2b:7f:d6:1a:fa:e9:
9b:0c:a7:26:b0:23:bf:b6:cd:ab:0a:94:22:5a:15:
d5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:29:4B:11:50:DE:5C:AA:DF:17:C4:9E:E7:09:0C:F6:59:4B:77:5C
X509v3 Authority Key Identifier:
keyid:41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/4ylLEVDeXKrfF8Se5wkM9llLd1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.96.0/23
Signature Algorithm: sha256WithRSAEncryption
47:ee:c9:79:05:90:1a:81:cc:ab:3c:61:c2:ba:03:c7:fa:05:
59:32:f2:27:b7:38:54:bf:0e:8a:37:d5:d0:c2:d6:c0:1f:37:
0b:44:3c:13:61:94:a3:d6:c7:c0:02:97:b4:da:94:59:d9:7f:
95:55:98:36:5c:99:d6:55:43:69:4f:b9:e1:e6:7d:50:b6:ed:
da:3b:de:31:07:24:d3:68:73:90:b2:b2:e6:bd:13:c5:8f:21:
a8:a3:e1:0c:ff:3a:ea:56:be:3d:87:59:10:d5:d5:0f:eb:c7:
a3:0e:c3:88:cc:c1:00:fe:92:70:0c:ae:cb:ef:75:42:41:dc:
2e:4d:41:b1:82:50:01:58:1b:22:9d:37:b7:ff:fb:13:ab:68:
64:ff:ac:09:19:6f:01:99:04:49:c1:cb:53:ff:2b:fc:41:c2:
87:41:af:5e:44:25:a2:e6:d6:a9:35:63:57:31:fa:fa:15:f4:
62:e4:b1:26:60:37:a1:d9:b2:60:c8:69:b4:4f:64:c7:13:b4:
83:23:a8:ca:2f:95:62:7b:fb:d6:5d:35:56:3c:42:29:d3:91:
cb:7e:ca:b7:7e:e2:de:9b:c7:10:1b:5c:c2:c2:29:77:a9:48:
94:08:6e:1d:71:0b:c7:ff:53:c1:b1:a3:9c:ca:12:ad:29:6c:
9f:cd:65:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj8liwlYhHSf2SsNqiEvXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNDhjYmFkMTc0ODIwNWI0ZjQzMzRiYmE2MzhjNjRjMmIy
MWZjMGUwHhcNMjUwMTAyMDU0OTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzI5NGIxMTUwZGU1Y2FhZGYxN2M0OWVlNzA5MGNmNjU5NGI3NzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+6CIdp1MwtvlhLEbXFE1hGCvWF9
+4IcaQukVCP+XFU4LChwYI9e4OT43Vl9KkzhAMdo9UoPZz1V3YN+7B/Mb02tFL06
5DdWceyFPyMFYtokhwD3dkD2GkPNREeUZwaPTSDizF1v+g/WcvK/uPmv0hv+x/Ap
dHLBfmHot4ulIPj5C4hAmMIuugWc7Tf6i/fH7pA1OgXi2ykf0zYF2PNqktD1zcRh
DDkz5GyezRd/nYzo6a9ipIKn0oX3ypJ2clTKwg6As63n1VhC+s0Qth2KBvbtxojm
JzJShEG9idX72gc/6Z2IcENJK40rf9Ya+umbDKcmsCO/ts2rCpQiWhXVnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOMpSxFQ3lyq3xfEnucJDPZZS3dcMB8GA1UdIwQY
MBaAFEFIy60XSCBbT0M0u6Y4xkwrIfwOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVVqTHJSZElJRnRQUXpTN3BqakdUQ3NoX0E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jZTIxYjMtYzRkZS00NTZkLWI1Mzgt
OTc5NzVkMzRmYzZjLzEvNHlsTEVWRGVYS3JmRjhTZTV3a005bGxMZDF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9jZTIxYjMtYzRkZS00NTZkLWI1MzgtOTc5NzVkMzRmYzZj
LzEvUVVqTHJSZElJRnRQUXpTN3BqakdUQ3NoX0E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBstlgMA0G
CSqGSIb3DQEBCwUAA4IBAQBH7sl5BZAagcyrPGHCugPH+gVZMvIntzhUvw6KN9XQ
wtbAHzcLRDwTYZSj1sfAApe02pRZ2X+VVZg2XJnWVUNpT7nh5n1Qtu3aO94xByTT
aHOQsrLmvRPFjyGoo+EM/zrqVr49h1kQ1dUP68ejDsOIzMEA/pJwDK7L73VCQdwu
TUGxglABWBsinTe3//sTq2hk/6wJGW8BmQRJwctT/yv8QcKHQa9eRCWi5tapNWNX
Mfr6FfRi5LEmYDeh2bJgyGm0T2THE7SDI6jKL5Vie/vWXTVWPEIp05HLfsq3fuLe
m8cQG1zCwil3qUiUCG4dcQvH/1PBsaOcyhKtKWyfzWWW
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:47 2025 by rpki-client