Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/3IVLaXtyhVPu-Ygj6BYz9hV43Vo.roa
File: 3IVLaXtyhVPu-Ygj6BYz9hV43Vo.roa (raw, json)
Hash identifier: jzEetkD7u7Di7WUSSo5TyY0LVNqzXYAHmKiyILCGTnI=
Subject key identifier: DC:85:4B:69:7B:72:85:53:EE:F9:88:23:E8:16:33:F6:15:78:DD:5A
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747EB18B7FE48798D182E4869B90E15
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/3IVLaXtyhVPu-Ygj6BYz9hV43Vo.roa
Signing time: Thu 02 Jan 2025 13:50:12 +0000
ROA not before: Thu 02 Jan 2025 13:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39401
IP address blocks: 94.236.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:eb:18:b7:fe:48:79:8d:18:2e:48:69:b9:0e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc854b697b728553eef98823e81633f61578dd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:24:8f:45:47:d4:f1:32:cf:69:41:0a:81:ce:
a4:17:7a:5c:dd:1f:ed:f8:a2:8d:e3:f9:64:25:d1:
42:25:34:04:1b:2b:ef:1c:c9:9c:e4:79:d1:09:ff:
ae:43:92:99:39:3b:1d:2e:f6:46:fd:42:7e:7b:3a:
0e:d1:76:d6:58:d3:ee:d7:ee:45:29:e9:a1:10:8c:
71:ac:a2:33:1f:6c:2f:6b:11:30:ce:07:6c:5a:99:
64:53:02:c7:bc:27:e3:27:0d:2c:ae:84:11:de:b8:
4b:af:82:8a:c9:3d:e8:c7:47:60:02:e3:ea:47:e9:
79:0f:6b:04:63:6e:bf:30:be:41:42:af:26:b1:9a:
7e:7e:8d:f0:c9:71:6b:3f:6d:3c:0c:aa:49:b9:cd:
c4:be:b2:e1:72:77:55:40:a5:17:73:99:f7:a4:1e:
e9:2f:c9:ae:67:58:69:f8:ad:47:71:b2:0d:51:1e:
5f:79:c8:1c:91:5e:3e:e3:bb:7c:1d:70:17:f7:36:
bb:3b:a1:e2:8a:09:18:30:a1:ec:00:b1:b1:50:a3:
59:58:d0:ef:77:c2:e8:c1:eb:37:0a:64:aa:c2:8c:
23:71:91:16:fd:0c:b1:26:c7:cc:e9:33:01:ba:2e:
fa:1c:6a:b9:84:ae:b4:d4:33:3f:34:07:34:08:71:
09:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:85:4B:69:7B:72:85:53:EE:F9:88:23:E8:16:33:F6:15:78:DD:5A
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/3IVLaXtyhVPu-Ygj6BYz9hV43Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.236.168.0/24
Signature Algorithm: sha256WithRSAEncryption
64:7a:22:47:bb:24:21:55:dd:26:c3:fd:60:73:1d:e0:22:d0:
28:00:33:3c:3e:0b:f6:8a:33:03:5f:3f:68:ce:23:54:fd:5b:
2d:fa:1b:d6:a2:01:ec:02:b5:ad:94:ff:9d:33:0e:78:24:2e:
d7:7f:1b:fa:33:3c:7e:f7:8a:48:94:3b:ac:ac:e3:f0:22:82:
db:77:50:a2:37:96:f4:5a:b9:d7:db:98:1c:df:70:2d:0a:ce:
c9:9e:ab:95:1f:35:8b:a5:8e:49:05:e0:f3:44:b3:85:0d:50:
e1:ba:21:19:f0:c6:c0:7f:30:06:04:35:ee:c0:80:ed:60:ab:
a5:e7:90:72:df:9d:e0:27:50:e9:42:ea:0d:8e:7b:71:eb:b5:
ed:3f:9b:23:ad:7e:c3:34:00:93:8d:34:cb:ab:b5:e7:18:70:
63:cf:d7:c9:ec:a7:83:4e:c5:5d:7f:35:9a:bc:55:24:13:d0:
1e:46:81:84:5b:4f:57:d7:5e:6f:93:5b:77:cc:92:dd:b8:86:
1c:e4:82:55:19:af:b2:28:3c:d9:a6:9b:bc:97:c3:84:ab:0b:
22:de:e8:6f:7b:cb:f3:44:93:95:f4:c2:b8:ff:33:07:c4:28:
1b:fb:95:87:9b:7c:05:2b:c2:87:25:83:39:39:f8:45:73:94:
5c:8e:8d:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR+sYt/5IeY0YLkhpuQ4VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjUwMTAyMTM1MDEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzg1NGI2OTdiNzI4NTUzZWVmOTg4MjNlODE2MzNmNjE1NzhkZDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CSPRUfU8TLPaUEKgc6kF3pc3R/t
+KKN4/lkJdFCJTQEGyvvHMmc5HnRCf+uQ5KZOTsdLvZG/UJ+ezoO0XbWWNPu1+5F
KemhEIxxrKIzH2wvaxEwzgdsWplkUwLHvCfjJw0sroQR3rhLr4KKyT3ox0dgAuPq
R+l5D2sEY26/ML5BQq8msZp+fo3wyXFrP208DKpJuc3EvrLhcndVQKUXc5n3pB7p
L8muZ1hp+K1HcbINUR5fecgckV4+47t8HXAX9za7O6HiigkYMKHsALGxUKNZWNDv
d8Lowes3CmSqwowjcZEW/QyxJsfM6TMBui76HGq5hK601DM/NAc0CHEJaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNyFS2l7coVT7vmII+gWM/YVeN1aMB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvM0lWTGFYdHloVlB1LVlnajZCWXo5aFY0M1ZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXuyoMA0G
CSqGSIb3DQEBCwUAA4IBAQBkeiJHuyQhVd0mw/1gcx3gItAoADM8Pgv2ijMDXz9o
ziNU/Vst+hvWogHsArWtlP+dMw54JC7Xfxv6Mzx+94pIlDusrOPwIoLbd1CiN5b0
WrnX25gc33AtCs7JnquVHzWLpY5JBeDzRLOFDVDhuiEZ8MbAfzAGBDXuwIDtYKul
55By353gJ1DpQuoNjntx67XtP5sjrX7DNACTjTTLq7XnGHBjz9fJ7KeDTsVdfzWa
vFUkE9AeRoGEW09X115vk1t3zJLduIYc5IJVGa+yKDzZppu8l8OEqwsi3uhve8vz
RJOV9MK4/zMHxCgb+5WHm3wFK8KHJYM5OfhFc5Rcjo13
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:16 2025 by rpki-client