Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/pM8VKNSiqXyxvrYM2CF2U0Iw0pw.roa
File: pM8VKNSiqXyxvrYM2CF2U0Iw0pw.roa (raw, json)
Hash identifier: fs4sKC29dVzpn86XWfZbe24a1J4GrvjTCH4XsQbkw6c=
Subject key identifier: A4:CF:15:28:D4:A2:A9:7C:B1:BE:B6:0C:D8:21:76:53:42:30:D2:9C
Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial: 0194282567C2D5CB2B6919DCB83FD02A9763
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/pM8VKNSiqXyxvrYM2CF2U0Iw0pw.roa
Signing time: Thu 02 Jan 2025 17:52:07 +0000
ROA not before: Thu 02 Jan 2025 17:52:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52045
IP address blocks: 185.41.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:67:c2:d5:cb:2b:69:19:dc:b8:3f:d0:2a:97:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
Validity
Not Before: Jan 2 17:52:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4cf1528d4a2a97cb1beb60cd82176534230d29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f8:ee:fb:5a:04:21:b1:02:ed:81:63:d5:ae:
bf:e0:c3:51:f9:cc:02:ae:cf:0b:49:57:79:45:58:
2a:4e:62:fd:47:f8:43:07:06:5c:78:7f:87:2a:e5:
1f:ec:3f:3a:a8:1d:61:d2:69:cc:61:d8:5b:ff:c7:
34:1f:a8:80:cb:ef:72:31:9c:30:33:42:ad:18:46:
5c:67:e2:0f:69:56:97:3b:b3:b9:c8:01:a0:94:19:
6e:99:da:4d:4f:6c:fc:05:8e:76:f2:10:75:87:1b:
02:90:41:0b:dd:7d:8d:4b:13:35:05:a8:9a:fe:07:
19:09:33:87:b6:ce:72:ed:5e:5b:e2:fb:7f:56:df:
ff:cd:3b:78:59:de:ad:63:ee:90:ac:14:64:19:00:
07:22:be:a2:de:b5:3f:74:ef:3c:1d:3c:19:16:aa:
96:b2:e3:a5:48:c8:e0:13:6e:4b:c0:64:7e:a0:d6:
cc:9f:a5:3c:03:e7:5b:38:67:97:d6:2f:f8:e2:0c:
96:24:24:b7:89:bb:97:d1:17:7a:7b:7b:09:e5:20:
08:18:3e:bc:b0:97:57:8c:34:db:9a:dd:46:91:14:
d6:54:1e:23:84:90:16:23:ef:35:c4:b8:03:d4:65:
28:33:dc:9d:7e:9b:dd:8c:ef:2b:20:61:cd:99:bc:
f9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CF:15:28:D4:A2:A9:7C:B1:BE:B6:0C:D8:21:76:53:42:30:D2:9C
X509v3 Authority Key Identifier:
keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/pM8VKNSiqXyxvrYM2CF2U0Iw0pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.21.0/24
Signature Algorithm: sha256WithRSAEncryption
62:59:4d:2d:d0:5c:48:a7:f5:f4:b4:d2:8c:86:d3:15:a5:31:
cc:56:45:a7:35:50:68:d4:67:55:29:a9:7a:3f:f6:d1:b2:79:
df:a0:aa:d1:64:90:dc:21:77:d4:3d:24:56:27:e8:bd:4d:8e:
3f:67:5e:46:57:41:e4:bd:df:cc:f6:49:87:32:7e:25:1b:2d:
60:70:95:26:98:eb:f4:a4:2a:fb:5a:c0:2b:6f:6f:a1:0c:44:
44:ec:69:84:3b:9a:63:0f:1d:18:77:6c:61:ab:3f:8b:5a:44:
68:63:0d:e8:04:13:27:de:40:7e:c3:51:e0:a7:f5:66:bc:fc:
9e:a5:47:d6:1c:65:ca:e1:80:df:00:4f:da:cd:26:60:99:cf:
3b:63:45:9b:b5:8a:d9:ce:aa:9d:7c:db:c4:ff:2a:bc:12:63:
07:dc:30:f5:6a:85:06:5d:c1:a7:43:ea:f6:87:97:77:b4:b3:
a5:fd:99:a8:f9:60:4a:0f:e7:3b:d6:88:91:6a:0d:7a:4d:ce:
be:3c:81:df:81:8e:c0:79:60:f9:9d:f0:b3:cc:fd:d1:4f:20:
6e:f3:6b:61:b4:52:0b:cc:c5:17:e8:df:ef:02:34:92:a6:42:
ed:7e:b3:f4:7f:a2:2d:e3:07:f6:1e:b9:e8:d2:75:74:8b:7f:
d6:5c:33:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJWfC1csraRncuD/QKpdjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz
NGRiYWQwHhcNMjUwMTAyMTc1MjA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGNmMTUyOGQ0YTJhOTdjYjFiZWI2MGNkODIxNzY1MzQyMzBkMjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvju+1oEIbEC7YFj1a6/4MNR+cwC
rs8LSVd5RVgqTmL9R/hDBwZceH+HKuUf7D86qB1h0mnMYdhb/8c0H6iAy+9yMZww
M0KtGEZcZ+IPaVaXO7O5yAGglBlumdpNT2z8BY528hB1hxsCkEEL3X2NSxM1Baia
/gcZCTOHts5y7V5b4vt/Vt//zTt4Wd6tY+6QrBRkGQAHIr6i3rU/dO88HTwZFqqW
suOlSMjgE25LwGR+oNbMn6U8A+dbOGeX1i/44gyWJCS3ibuX0Rd6e3sJ5SAIGD68
sJdXjDTbmt1GkRTWVB4jhJAWI+81xLgD1GUoM9ydfpvdjO8rIGHNmbz5lwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKTPFSjUoql8sb62DNghdlNCMNKcMB8GA1UdIwQY
MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt
NTYxMjliN2RjMDE4LzEvcE04VktOU2lxWHl4dnJZTTJDRjJVMEl3MHB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4
LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSkVMA0G
CSqGSIb3DQEBCwUAA4IBAQBiWU0t0FxIp/X0tNKMhtMVpTHMVkWnNVBo1GdVKal6
P/bRsnnfoKrRZJDcIXfUPSRWJ+i9TY4/Z15GV0Hkvd/M9kmHMn4lGy1gcJUmmOv0
pCr7WsArb2+hDERE7GmEO5pjDx0Yd2xhqz+LWkRoYw3oBBMn3kB+w1Hgp/VmvPye
pUfWHGXK4YDfAE/azSZgmc87Y0WbtYrZzqqdfNvE/yq8EmMH3DD1aoUGXcGnQ+r2
h5d3tLOl/Zmo+WBKD+c71oiRag16Tc6+PIHfgY7AeWD5nfCzzP3RTyBu82thtFIL
zMUX6N/vAjSSpkLtfrP0f6It4wf2Hrno0nV0i3/WXDM7
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:11 2025 by rpki-client