Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/IxvoZc4F3Qaa5ur1q1XhsdbIwYI.roa
File: IxvoZc4F3Qaa5ur1q1XhsdbIwYI.roa (raw, json)
Hash identifier: uBXV07kX7Q7HlXXY9czyil+ZyCPUWCh5XY0q2xGQk9E=
Subject key identifier: 23:1B:E8:65:CE:05:DD:06:9A:E6:EA:F5:AB:55:E1:B1:D6:C8:C1:82
Certificate issuer: /CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Certificate serial: 01942369C39557FC6A23C75726F0A4E04DA4
Authority key identifier: 5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/IxvoZc4F3Qaa5ur1q1XhsdbIwYI.roa
Signing time: Wed 01 Jan 2025 19:48:41 +0000
ROA not before: Wed 01 Jan 2025 19:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57702
IP address blocks: 192.58.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c3:95:57:fc:6a:23:c7:57:26:f0:a4:e0:4d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Validity
Not Before: Jan 1 19:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=231be865ce05dd069ae6eaf5ab55e1b1d6c8c182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:4c:d5:d2:46:e4:25:7a:31:95:be:0a:e6:
c7:46:bd:04:ab:cc:98:e7:16:8e:52:80:6a:75:4a:
dd:3c:eb:fe:f4:ff:fa:31:6b:1d:2a:ba:f0:3f:18:
26:0d:3f:21:a1:19:4d:c9:3c:56:6d:d5:1d:90:28:
46:16:cc:05:71:a1:68:26:38:1e:27:2b:68:4b:5b:
2b:b9:ff:da:27:16:2a:73:f7:d9:97:0c:e6:ec:b3:
1d:8d:1b:83:e4:ec:b9:e8:ef:4e:dd:42:7f:b4:53:
f5:4d:49:f9:15:af:29:c8:36:7f:35:1a:d9:6b:12:
45:09:24:35:ae:2e:0b:28:2c:69:f9:7a:47:99:ba:
f0:51:51:d8:ba:a6:d2:ac:34:2d:df:6c:81:c4:c9:
e1:cb:47:de:1b:46:65:79:73:c4:f3:65:d2:7e:c0:
f4:e4:56:e4:62:fa:25:be:64:74:5c:2a:24:70:09:
28:9d:32:00:75:9e:25:29:b6:4b:3b:88:53:2a:e6:
2d:58:5a:1a:a2:c9:0c:91:4c:fe:c6:69:77:11:21:
1d:9d:c0:7d:b6:88:e6:77:fd:d7:10:c9:00:c6:20:
47:0f:e0:57:39:1c:06:b4:61:a0:02:9a:2c:f8:5c:
96:7b:20:79:15:e8:33:30:fd:2d:4d:12:43:56:af:
00:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1B:E8:65:CE:05:DD:06:9A:E6:EA:F5:AB:55:E1:B1:D6:C8:C1:82
X509v3 Authority Key Identifier:
keyid:5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/IxvoZc4F3Qaa5ur1q1XhsdbIwYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.58.29.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:f5:bf:34:28:53:23:0a:42:40:86:b3:c4:99:dc:19:88:c6:
b0:63:38:1e:b8:94:a0:a8:c0:4d:68:13:86:11:a3:82:42:81:
46:7b:cc:f1:75:fa:84:c0:c9:2d:db:1e:e8:49:7e:67:e5:98:
a6:05:06:15:33:fd:17:a0:b2:f6:bb:52:d1:35:8a:dd:86:3e:
e1:2c:ab:fa:82:ce:0a:8d:5e:29:27:bc:d1:f1:04:ed:62:a6:
f9:be:c3:9d:0e:21:83:fb:ab:20:ee:b4:dd:5b:87:6b:c2:fe:
0b:a5:9f:48:94:8a:5e:48:96:0f:71:76:ec:7a:44:b1:1d:6c:
11:e3:84:e9:88:10:ba:80:71:74:0b:0f:b7:20:89:1d:3d:4c:
ce:62:df:b9:93:2f:64:95:85:60:04:f5:5d:30:80:85:7e:c6:
3d:83:0e:2f:1b:d1:48:2e:90:76:15:27:df:26:d0:29:6c:69:
a2:1f:74:82:ed:96:7c:c6:2e:3a:c9:1c:8d:08:21:9d:f3:72:
7e:59:dc:c4:0a:32:6b:92:a6:e1:bc:1e:6e:4b:2c:bc:4a:44:
6a:3e:d8:4e:b5:7a:bb:ad:d0:fe:8d:d9:c3:c6:83:17:20:23:
55:b7:fc:22:f0:a4:b6:ab:7d:1c:e0:9c:a5:ba:25:fb:60:6e:
c1:ee:93:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjacOVV/xqI8dXJvCk4E2kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNGE0N2Q1ODJiYjBlOTY4MGY4OTI1OGFiOTZkMDU4Njdk
MzUyZWYwHhcNMjUwMTAxMTk0ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzFiZTg2NWNlMDVkZDA2OWFlNmVhZjVhYjU1ZTFiMWQ2YzhjMTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/9M1dJG5CV6MZW+CubHRr0Eq8yY
5xaOUoBqdUrdPOv+9P/6MWsdKrrwPxgmDT8hoRlNyTxWbdUdkChGFswFcaFoJjge
JytoS1sruf/aJxYqc/fZlwzm7LMdjRuD5Oy56O9O3UJ/tFP1TUn5Fa8pyDZ/NRrZ
axJFCSQ1ri4LKCxp+XpHmbrwUVHYuqbSrDQt32yBxMnhy0feG0ZleXPE82XSfsD0
5FbkYvolvmR0XCokcAkonTIAdZ4lKbZLO4hTKuYtWFoaoskMkUz+xml3ESEdncB9
tojmd/3XEMkAxiBHD+BXORwGtGGgApos+FyWeyB5FegzMP0tTRJDVq8AjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCMb6GXOBd0Gmubq9atV4bHWyMGCMB8GA1UdIwQY
MBaAFFpKR9WCuw6WgPiSWKuW0Fhn01LvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2twSDFZSzdEcGFBLUpKWXE1YlFXR2ZUVXU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS80Yjc1NzYtMmI5Yy00M2FmLTg4MTct
NmIwMDY1NTA4OTk2LzEvSXh2b1pjNEYzUWFhNXVyMXExWGhzZGJJd1lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS80Yjc1NzYtMmI5Yy00M2FmLTg4MTctNmIwMDY1NTA4OTk2
LzEvV2twSDFZSzdEcGFBLUpKWXE1YlFXR2ZUVXU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDodMA0G
CSqGSIb3DQEBCwUAA4IBAQC99b80KFMjCkJAhrPEmdwZiMawYzgeuJSgqMBNaBOG
EaOCQoFGe8zxdfqEwMkt2x7oSX5n5ZimBQYVM/0XoLL2u1LRNYrdhj7hLKv6gs4K
jV4pJ7zR8QTtYqb5vsOdDiGD+6sg7rTdW4drwv4LpZ9IlIpeSJYPcXbsekSxHWwR
44TpiBC6gHF0Cw+3IIkdPUzOYt+5ky9klYVgBPVdMICFfsY9gw4vG9FILpB2FSff
JtApbGmiH3SC7ZZ8xi46yRyNCCGd83J+WdzECjJrkqbhvB5uSyy8SkRqPthOtXq7
rdD+jdnDxoMXICNVt/wi8KS2q30c4JyluiX7YG7B7pPI
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:42:07 2025 by rpki-client