Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/4oSUfALBScT_4AFnv82zOuuKCBw.roa
File: 4oSUfALBScT_4AFnv82zOuuKCBw.roa (raw, json)
Hash identifier: YBkdETXrElzFmrSv2N2iP4r9l5B9rfuknXPTKkXXos8=
Subject key identifier: E2:84:94:7C:02:C1:49:C4:FF:E0:01:67:BF:CD:B3:3A:EB:8A:08:1C
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 019421443D3C05FAC76EA96E5911971A6E53
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/4oSUfALBScT_4AFnv82zOuuKCBw.roa
Signing time: Wed 01 Jan 2025 09:48:27 +0000
ROA not before: Wed 01 Jan 2025 09:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31638
IP address blocks: 185.77.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3d:3c:05:fa:c7:6e:a9:6e:59:11:97:1a:6e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Jan 1 09:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e284947c02c149c4ffe00167bfcdb33aeb8a081c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:3b:6c:f6:54:c5:45:9f:f2:08:f0:87:cc:
c6:e6:37:97:48:6f:b5:28:5c:62:26:a9:f5:26:37:
e2:08:2e:b2:bc:6e:42:af:c3:75:64:a0:9e:ad:1b:
34:30:44:95:41:44:27:af:42:e4:b0:e0:3a:02:32:
e9:35:d1:3b:c5:6e:7b:7f:52:a1:87:aa:7c:ca:51:
bd:23:55:7f:a6:4d:7d:18:fd:37:a4:5d:82:b4:1a:
2b:5e:ef:1b:c8:73:4f:47:0a:ea:ab:0a:c3:7c:5c:
bd:ea:81:80:f4:53:1c:bb:86:6b:0f:4b:24:e0:9c:
5a:3c:7c:28:3d:ac:8c:93:f2:23:7b:f8:74:37:f4:
d0:53:c3:bd:4b:4c:eb:7f:9d:0d:5a:0a:58:7b:e5:
e3:2e:d2:9c:60:83:cd:d2:a5:51:a6:69:2b:33:28:
de:14:9d:48:35:2e:ed:e3:6d:9d:ff:c8:82:3c:26:
60:4a:45:0f:b8:fe:be:93:3d:cf:0b:8b:d0:5f:7a:
08:fb:51:be:de:6a:53:e6:44:d4:92:52:1b:5d:97:
45:3b:a7:d3:98:44:66:7f:11:7e:b6:7c:f3:18:19:
3b:34:02:13:46:f9:d8:f6:b2:7d:de:e6:4b:2a:e7:
a0:20:42:55:0d:e3:9c:57:6d:80:0d:25:95:62:d7:
71:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:84:94:7C:02:C1:49:C4:FF:E0:01:67:BF:CD:B3:3A:EB:8A:08:1C
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/4oSUfALBScT_4AFnv82zOuuKCBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.161.0/24
Signature Algorithm: sha256WithRSAEncryption
51:84:dd:ea:f7:2e:a8:72:b4:99:7c:b5:c4:7e:77:af:d0:2c:
6d:99:19:83:8e:82:d8:ce:d4:22:75:e4:d8:6f:8e:ae:35:78:
da:0b:7e:f8:0f:06:53:96:56:c1:09:a5:74:1b:f6:9c:41:f9:
ba:4a:9a:03:81:7b:32:a9:de:54:57:a6:a3:ce:f4:ff:87:28:
a6:f8:b8:97:ce:3b:02:db:3f:f0:eb:8b:4e:b1:e6:c7:28:bf:
50:4e:29:6c:44:5b:16:5e:df:22:6f:bb:04:d2:10:3c:34:5e:
c9:ec:95:d2:7a:1c:18:a0:8e:ea:02:15:5b:1a:55:41:01:4c:
6b:6f:bb:10:be:b7:9c:2c:de:55:79:bc:48:0a:0b:cc:35:44:
ae:b6:b9:48:10:da:2f:e1:71:c6:54:ec:de:93:66:fb:c2:f4:
29:53:8f:82:e1:8f:8b:c0:46:f6:87:e8:8b:10:10:77:46:e3:
9d:bd:03:fe:a2:1a:43:c0:22:33:02:d0:05:48:14:d5:2e:c1:
f9:13:3d:e7:5b:ee:36:2d:fa:72:e0:bc:5c:13:04:21:ad:1c:
1c:0f:7f:88:f6:0b:11:c5:67:f3:a7:6e:4b:95:da:db:72:8e:
07:4a:c7:04:f5:11:b8:ac:0d:80:c6:f8:9b:eb:ad:cb:2c:f9:
15:fd:37:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRD08BfrHbqluWRGXGm5TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzOTNhYjkzZTg1NzAxYTczZWY0ZDVlMDBlZDZlYjk4OTM5
MzczOTQwHhcNMjUwMTAxMDk0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjg0OTQ3YzAyYzE0OWM0ZmZlMDAxNjdiZmNkYjMzYWViOGEwODFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu587bPZUxUWf8gjwh8zG5jeXSG+1
KFxiJqn1JjfiCC6yvG5Cr8N1ZKCerRs0MESVQUQnr0LksOA6AjLpNdE7xW57f1Kh
h6p8ylG9I1V/pk19GP03pF2CtBorXu8byHNPRwrqqwrDfFy96oGA9FMcu4ZrD0sk
4JxaPHwoPayMk/Ije/h0N/TQU8O9S0zrf50NWgpYe+XjLtKcYIPN0qVRpmkrMyje
FJ1INS7t422d/8iCPCZgSkUPuP6+kz3PC4vQX3oI+1G+3mpT5kTUklIbXZdFO6fT
mERmfxF+tnzzGBk7NAITRvnY9rJ93uZLKuegIEJVDeOcV22ADSWVYtdxCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOKElHwCwUnE/+ABZ7/NszrriggcMB8GA1UdIwQY
MBaAFFOTq5PoVwGnPvTV4A7W65iTk3OUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAt
NTlhN2VmZDM4NGMwLzEvNG9TVWZBTEJTY1RfNEFGbnY4MnpPdXVLQ0J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAtNTlhN2VmZDM4NGMw
LzEvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuU2hMA0G
CSqGSIb3DQEBCwUAA4IBAQBRhN3q9y6ocrSZfLXEfnev0CxtmRmDjoLYztQideTY
b46uNXjaC374DwZTllbBCaV0G/acQfm6SpoDgXsyqd5UV6ajzvT/hyim+LiXzjsC
2z/w64tOsebHKL9QTilsRFsWXt8ib7sE0hA8NF7J7JXSehwYoI7qAhVbGlVBAUxr
b7sQvrecLN5VebxICgvMNUSutrlIENov4XHGVOzek2b7wvQpU4+C4Y+LwEb2h+iL
EBB3RuOdvQP+ohpDwCIzAtAFSBTVLsH5Ez3nW+42Lfpy4LxcEwQhrRwcD3+I9gsR
xWfzp25Lldrbco4HSscE9RG4rA2Axvib663LLPkV/Tdk
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:50 2025 by rpki-client