Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/19136e-429f-43ad-94ef-8361a8303522/1/4qpQBDv8fvyFwoTLCSN1PhjQh_4.roa
File: 4qpQBDv8fvyFwoTLCSN1PhjQh_4.roa (raw, json)
Hash identifier: 9y8CVZ7/VR/v56B8xxdaqFbv2TR895XBm6T9GhQIiD8=
Subject key identifier: E2:AA:50:04:3B:FC:7E:FC:85:C2:84:CB:09:23:75:3E:18:D0:87:FE
Certificate issuer: /CN=e47521e7b6b38abfb88bf71e9bc5a02b2eccd3b3
Certificate serial: 01941F8CA357912E3155F85B813D90DAF34F
Authority key identifier: E4:75:21:E7:B6:B3:8A:BF:B8:8B:F7:1E:9B:C5:A0:2B:2E:CC:D3:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HUh57azir-4i_cem8WgKy7M07M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/19136e-429f-43ad-94ef-8361a8303522/1/4qpQBDv8fvyFwoTLCSN1PhjQh_4.roa
Signing time: Wed 01 Jan 2025 01:48:18 +0000
ROA not before: Wed 01 Jan 2025 01:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204248
IP address blocks: 185.109.240.0/23 maxlen: 23
185.109.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a3:57:91:2e:31:55:f8:5b:81:3d:90:da:f3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47521e7b6b38abfb88bf71e9bc5a02b2eccd3b3
Validity
Not Before: Jan 1 01:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2aa50043bfc7efc85c284cb0923753e18d087fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:3d:86:8a:09:0b:e3:fa:06:96:07:54:50:
68:cb:65:56:d2:b4:95:55:ca:5b:60:a4:c7:db:5b:
62:48:8e:7e:a9:18:17:67:c7:3e:15:0f:65:4a:c4:
1a:b2:8e:62:17:bd:aa:4e:68:9e:fd:33:c2:06:34:
d6:09:fe:a4:c5:e7:a9:ab:72:45:0d:f6:84:11:c9:
e4:eb:30:72:76:ce:f3:ef:02:63:09:54:0b:29:27:
36:cf:9e:4e:8a:61:9c:c1:e5:f7:86:4e:14:48:3a:
9e:89:92:11:55:11:1b:d9:da:bc:1c:ea:3c:d3:f3:
a8:72:fd:98:e5:0c:a4:c3:fe:2d:81:e3:00:d4:4a:
e0:f1:c3:f3:16:e2:40:e2:06:00:e2:a4:8d:b0:d7:
7e:fa:9b:8d:c9:cf:56:d9:07:3a:09:41:28:39:8c:
8e:09:58:9b:21:c4:e2:50:27:67:32:cb:7c:32:6f:
12:e2:b4:71:53:c4:cd:29:9b:3d:76:d7:f6:d3:e5:
5f:6d:ef:67:fb:98:ed:65:e9:62:5e:18:aa:4f:53:
f7:15:1c:e8:41:0c:86:51:75:7a:7e:c9:47:9a:56:
3d:7a:d2:4a:7e:93:b1:8b:b0:b5:64:0f:b7:0a:e1:
ba:8f:fc:24:7c:b0:02:20:10:4b:0a:8a:20:df:24:
48:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AA:50:04:3B:FC:7E:FC:85:C2:84:CB:09:23:75:3E:18:D0:87:FE
X509v3 Authority Key Identifier:
keyid:E4:75:21:E7:B6:B3:8A:BF:B8:8B:F7:1E:9B:C5:A0:2B:2E:CC:D3:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HUh57azir-4i_cem8WgKy7M07M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/19136e-429f-43ad-94ef-8361a8303522/1/4qpQBDv8fvyFwoTLCSN1PhjQh_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/19136e-429f-43ad-94ef-8361a8303522/1/5HUh57azir-4i_cem8WgKy7M07M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.240.0-185.109.242.255
Signature Algorithm: sha256WithRSAEncryption
c6:8b:f0:b3:73:6c:b2:c9:71:64:07:2b:33:52:f9:37:84:d2:
8c:5e:85:e2:29:d8:af:1b:94:d5:3a:07:3a:80:9e:0e:d4:0a:
ca:d3:78:cc:76:7d:f7:11:bf:f3:27:ee:7d:2c:c3:29:d0:7c:
1b:f0:5b:c0:8c:11:69:0f:4d:09:50:85:e4:76:12:8a:58:c8:
b9:c2:4e:e0:c5:a2:c8:d5:6e:61:55:6d:e5:f0:2e:ce:7f:f1:
cd:5f:bc:aa:5d:48:c0:33:06:ad:48:48:6b:c4:17:b6:8e:97:
42:30:3e:3d:28:0c:f4:ff:ca:af:c0:4e:9d:16:7e:80:70:6a:
17:d1:da:11:63:89:a2:20:ba:ed:f2:2b:c3:b0:f3:59:35:d4:
94:5f:9d:14:dd:2a:74:e0:6b:7f:7d:d8:ff:1d:d8:c9:20:91:
9f:55:63:44:42:73:d4:cf:b7:2e:55:9e:fc:96:55:05:34:2e:
dd:92:b4:48:d6:b3:b7:78:cf:74:0f:2e:af:1b:65:88:06:30:
38:bc:83:20:53:59:9f:7a:d3:9d:46:ac:9e:2f:42:98:e5:32:
25:0e:f7:86:bc:6d:47:8a:a3:9a:e3:9c:6d:64:78:61:90:d3:
64:5c:d5:75:ef:87:4e:e6:39:ff:f3:e6:22:fe:54:f5:39:60:
11:a1:de:e9
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQfjKNXkS4xVfhbgT2Q2vNPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NzUyMWU3YjZiMzhhYmZiODhiZjcxZTliYzVhMDJiMmVj
Y2QzYjMwHhcNMjUwMTAxMDE0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmFhNTAwNDNiZmM3ZWZjODVjMjg0Y2IwOTIzNzUzZTE4ZDA4N2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlM9hooJC+P6BpYHVFBoy2VW0rSV
VcpbYKTH21tiSI5+qRgXZ8c+FQ9lSsQaso5iF72qTmie/TPCBjTWCf6kxeepq3JF
DfaEEcnk6zByds7z7wJjCVQLKSc2z55OimGcweX3hk4USDqeiZIRVREb2dq8HOo8
0/Oocv2Y5Qykw/4tgeMA1Erg8cPzFuJA4gYA4qSNsNd++puNyc9W2Qc6CUEoOYyO
CVibIcTiUCdnMst8Mm8S4rRxU8TNKZs9dtf20+Vfbe9n+5jtZeliXhiqT1P3FRzo
QQyGUXV6fslHmlY9etJKfpOxi7C1ZA+3CuG6j/wkfLACIBBLCoog3yRIGQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOKqUAQ7/H78hcKEywkjdT4Y0If+MB8GA1UdIwQY
MBaAFOR1Iee2s4q/uIv3HpvFoCsuzNOzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUhVaDU3YXppci00aV9jZW04V2dLeTdNMDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xOTEzNmUtNDI5Zi00M2FkLTk0ZWYt
ODM2MWE4MzAzNTIyLzEvNHFwUUJEdjhmdnlGd29UTENTTjFQaGpRaF80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8xOTEzNmUtNDI5Zi00M2FkLTk0ZWYtODM2MWE4MzAzNTIy
LzEvNUhVaDU3YXppci00aV9jZW04V2dLeTdNMDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAS5bfAD
BAC5bfIwDQYJKoZIhvcNAQELBQADggEBAMaL8LNzbLLJcWQHKzNS+TeE0oxeheIp
2K8blNU6BzqAng7UCsrTeMx2ffcRv/Mn7n0swynQfBvwW8CMEWkPTQlQheR2EopY
yLnCTuDFosjVbmFVbeXwLs5/8c1fvKpdSMAzBq1ISGvEF7aOl0IwPj0oDPT/yq/A
Tp0WfoBwahfR2hFjiaIguu3yK8Ow81k11JRfnRTdKnTga3992P8d2MkgkZ9VY0RC
c9TPty5VnvyWVQU0Lt2StEjWs7d4z3QPLq8bZYgGMDi8gyBTWZ96051GrJ4vQpjl
MiUO94a8bUeKo5rjnG1keGGQ02Rc1XXvh07mOf/z5iL+VPU5YBGh3uk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:20 2025 by rpki-client