Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/03q4E8PTSbDY5gw_4iBQ0uiOyjA.roa
File: 03q4E8PTSbDY5gw_4iBQ0uiOyjA.roa (raw, json)
Hash identifier: 7N2cPIFu6Fp1YpeSZVe/2ZgxdTzFrywbJgz/fHEYq48=
Subject key identifier: D3:7A:B8:13:C3:D3:49:B0:D8:E6:0C:3F:E2:20:50:D2:E8:8E:CA:30
Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial: 0193CEA0273D0B907FB5F6CC911E62D44041
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/03q4E8PTSbDY5gw_4iBQ0uiOyjA.roa
Signing time: Mon 16 Dec 2024 08:40:22 +0000
ROA not before: Mon 16 Dec 2024 08:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44789
IP address blocks: 31.24.184.0/21 maxlen: 21
45.10.94.0/23 maxlen: 23
92.63.240.0/20 maxlen: 20
185.143.202.0/23 maxlen: 23
2a00:9860::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:a0:27:3d:0b:90:7f:b5:f6:cc:91:1e:62:d4:40:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Validity
Not Before: Dec 16 08:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d37ab813c3d349b0d8e60c3fe22050d2e88eca30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:90:5a:22:69:1d:f8:a3:9a:b7:3d:0e:0e:
f9:16:19:b3:91:87:3f:28:7c:fd:26:d0:9b:1c:4c:
9f:e6:f1:87:a3:91:81:3e:52:b4:fd:50:86:b6:31:
e9:f9:bb:c0:bf:9e:4d:81:c2:4b:69:87:e9:6c:0f:
74:df:77:8e:b8:dd:1d:57:da:f6:9c:43:ce:ad:47:
16:d2:5e:b0:db:a0:4a:27:ea:07:ea:fa:cb:b8:dc:
ec:ef:cf:40:64:a5:25:8f:e7:82:e1:cc:d6:c6:26:
6a:eb:01:4c:d2:e3:a0:b2:c1:c4:45:90:fc:1d:7f:
36:22:5f:e9:a3:b8:55:4e:7e:09:d4:70:4b:b5:09:
56:71:8e:35:39:d3:e7:21:2e:dd:98:f7:38:7c:49:
39:3a:5a:f4:e2:ad:99:a2:db:25:28:3b:7b:a4:33:
3b:84:8f:2a:6a:e3:83:17:f0:e2:bd:d9:06:30:26:
6e:e5:74:4f:03:a2:65:27:3f:b9:b4:ca:91:25:4a:
e2:a9:ba:92:79:fe:d8:5b:65:18:2e:94:62:69:5f:
eb:50:29:5f:6c:e3:2c:33:4b:3d:49:1c:34:24:c2:
71:67:bd:d8:a9:91:8b:df:37:0c:a9:57:91:15:eb:
e3:28:17:81:a6:4c:ad:05:99:fe:ec:39:8a:c8:8a:
2f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7A:B8:13:C3:D3:49:B0:D8:E6:0C:3F:E2:20:50:D2:E8:8E:CA:30
X509v3 Authority Key Identifier:
keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/03q4E8PTSbDY5gw_4iBQ0uiOyjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.184.0/21
45.10.94.0/23
92.63.240.0/20
185.143.202.0/23
IPv6:
2a00:9860::/37
Signature Algorithm: sha256WithRSAEncryption
d2:48:03:8c:04:b2:85:c4:37:e8:f0:e5:1c:d3:9b:73:71:8f:
f1:3d:eb:bf:d9:4a:c7:b0:cc:3c:a1:8e:b2:d9:09:e7:5b:ae:
ca:9f:5e:39:d8:94:e7:7d:24:61:3b:27:0e:86:3a:5f:57:12:
7d:b0:a7:06:32:a8:ee:21:0f:0d:32:93:45:69:c2:f2:ae:72:
7c:28:90:a0:13:c3:88:27:9a:6a:cf:22:5f:0e:b9:12:b1:25:
db:bf:8a:d3:32:2c:37:9c:9b:53:a5:70:f5:d8:89:0f:c6:8d:
ae:57:91:d1:71:52:0a:7f:9b:70:0b:3f:60:99:13:7c:77:0d:
6a:a1:10:63:93:1e:6e:d3:5a:2d:8b:84:af:ba:a1:3d:fe:80:
7b:8b:99:75:d8:b8:36:a7:1f:5f:c2:cf:5e:1b:50:d1:24:af:
2a:71:c5:9e:28:a7:52:49:79:97:b8:bb:df:5b:c5:52:65:15:
47:46:bb:9d:4c:ae:22:41:f7:3a:f4:da:c7:9d:45:ce:8d:89:
b5:79:54:e2:a1:12:cd:01:a0:ae:2b:b1:c2:e5:6f:1e:bf:66:
12:5c:c5:bd:70:a4:b7:35:82:af:f6:f8:d7:42:3e:12:fe:4e:
c3:42:ba:e0:08:23:9b:18:db:74:c2:70:4b:87:f4:2b:f9:8e:
71:5d:c0:f2
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZPOoCc9C5B/tfbMkR5i1EBBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlY2ExMDVjZTRhZjZjMjFjZDQyOWU5OTJkMDZlYTdkMDZk
OGE1NmQwHhcNMjQxMjE2MDg0MDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzdhYjgxM2MzZDM0OWIwZDhlNjBjM2ZlMjIwNTBkMmU4OGVjYTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplSQWiJpHfijmrc9Dg75FhmzkYc/
KHz9JtCbHEyf5vGHo5GBPlK0/VCGtjHp+bvAv55NgcJLaYfpbA9033eOuN0dV9r2
nEPOrUcW0l6w26BKJ+oH6vrLuNzs789AZKUlj+eC4czWxiZq6wFM0uOgssHERZD8
HX82Il/po7hVTn4J1HBLtQlWcY41OdPnIS7dmPc4fEk5Olr04q2ZotslKDt7pDM7
hI8qauODF/DivdkGMCZu5XRPA6JlJz+5tMqRJUriqbqSef7YW2UYLpRiaV/rUClf
bOMsM0s9SRw0JMJxZ73YqZGL3zcMqVeRFevjKBeBpkytBZn+7DmKyIovzQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFNN6uBPD00mw2OYMP+IgUNLojsowMB8GA1UdIwQY
MBaAFE7KEFzkr2whzUKemS0G6n0G2KVtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgt
NDZlZTBjZDdmY2JhLzEvMDNxNEU4UFRTYkRZNWd3XzRpQlEwdWlPeWpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgtNDZlZTBjZDdmY2Jh
LzEvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQDHxi4AwQB
LQpeAwQEXD/wAwQBuY/KMA4EAgACMAgDBgMqAJhgADANBgkqhkiG9w0BAQsFAAOC
AQEA0kgDjASyhcQ36PDlHNObc3GP8T3rv9lKx7DMPKGOstkJ51uuyp9eOdiU530k
YTsnDoY6X1cSfbCnBjKo7iEPDTKTRWnC8q5yfCiQoBPDiCeaas8iXw65ErEl27+K
0zIsN5ybU6Vw9diJD8aNrleR0XFSCn+bcAs/YJkTfHcNaqEQY5MebtNaLYuEr7qh
Pf6Ae4uZddi4NqcfX8LPXhtQ0SSvKnHFniinUkl5l7i731vFUmUVR0a7nUyuIkH3
OvTax51Fzo2JtXlU4qESzQGgriuxwuVvHr9mElzFvXCktzWCr/b410I+Ev5Ow0K6
4AgjmxjbdMJwS4f0K/mOcV3A8g==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:59 2024 by rpki-client on console.sobornost.net