Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/4QTZEEeUUfJUNwHXx4zOsvEU6yM.roa
File: 4QTZEEeUUfJUNwHXx4zOsvEU6yM.roa (raw, json)
Hash identifier: evvo6uHGq7kJP+ZPZuimN/U9/7Mem374PjQw1Zrl8z0=
Subject key identifier: E1:04:D9:10:47:94:51:F2:54:37:01:D7:C7:8C:CE:B2:F1:14:EB:23
Certificate issuer: /CN=1323be6d548145867863b7b2fa464bdf8518a0c9
Certificate serial: 0194ABDC42B46B721ABCD13C816E16F33D7A
Authority key identifier: 13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/4QTZEEeUUfJUNwHXx4zOsvEU6yM.roa
Signing time: Tue 28 Jan 2025 07:42:06 +0000
ROA not before: Tue 28 Jan 2025 07:42:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3242
IP address blocks: 5.134.120.0/21 maxlen: 21
185.56.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ab:dc:42:b4:6b:72:1a:bc:d1:3c:81:6e:16:f3:3d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1323be6d548145867863b7b2fa464bdf8518a0c9
Validity
Not Before: Jan 28 07:42:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e104d910479451f2543701d7c78cceb2f114eb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ad:04:0b:da:f2:13:8c:e5:94:87:46:b6:95:
1f:5b:4d:d4:9f:24:cc:15:08:64:aa:18:e3:67:3c:
c5:f6:9e:0e:33:77:9e:40:c7:f9:b3:47:12:22:3f:
dc:94:78:ca:09:e3:bb:99:25:48:4c:8a:6b:b6:94:
48:38:8a:21:f5:aa:79:85:a3:e6:dc:42:5e:8d:11:
11:45:d1:c1:ab:b7:fd:a3:27:c4:a7:d5:24:0f:f3:
20:4f:39:49:fd:ae:01:0b:73:06:ff:c6:ea:1c:3c:
14:6c:f8:6e:af:ec:62:39:7e:7b:97:64:3a:96:73:
eb:0c:b7:be:5e:db:cf:03:1f:1d:30:c4:e4:35:39:
97:ea:0c:b5:2b:9f:9e:16:d2:17:47:3f:b5:f5:28:
4b:10:62:09:b0:ff:7e:16:72:bb:54:40:17:0a:d5:
15:7d:14:be:cb:53:be:e9:9d:f3:e2:d0:32:59:2e:
7b:dd:f2:f3:be:d0:b6:02:bc:6e:a4:c3:69:df:b3:
dc:cb:73:bf:e1:f3:50:50:1f:d2:46:8f:d5:e7:87:
ab:9b:ae:08:58:bb:f6:53:9c:6c:ce:f9:50:6a:28:
f4:00:8e:b3:ce:db:cc:b5:7e:ae:96:e8:e0:d3:8f:
a1:61:11:3f:17:56:e0:d2:52:5e:1b:94:b0:5e:be:
b9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:04:D9:10:47:94:51:F2:54:37:01:D7:C7:8C:CE:B2:F1:14:EB:23
X509v3 Authority Key Identifier:
keyid:13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/4QTZEEeUUfJUNwHXx4zOsvEU6yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.120.0/21
185.56.168.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:3b:07:14:0c:b8:96:95:dd:8a:fb:b9:03:df:ca:6d:98:a4:
b3:b1:ee:31:c2:6c:f4:9e:19:0a:6b:fa:1c:1e:84:a6:3e:14:
b9:98:ec:15:1f:64:8f:41:0a:fd:07:49:e7:04:50:88:65:f3:
a9:36:31:5b:3e:d8:df:41:0e:b3:85:71:bf:30:e3:19:c6:cc:
4b:13:cd:7c:ae:68:ab:45:69:6e:21:be:d5:02:d7:9b:93:af:
56:de:4c:e6:8f:8b:4f:95:f5:39:ee:d8:67:1a:ac:d6:bb:a0:
87:6b:1e:5f:5e:ba:90:29:db:a3:2b:6b:46:b7:e2:a2:93:1e:
1c:7e:0c:58:fe:ce:39:cb:84:8f:a6:53:c2:ec:03:b7:29:55:
04:53:29:6f:77:3d:f9:01:a3:a2:04:29:6b:4d:2e:fe:ba:06:
de:cf:3b:34:ac:f5:db:98:27:13:90:43:e9:bb:39:3e:09:31:
c7:5e:6f:1a:88:1d:6b:fd:45:86:0d:8f:bf:2d:e3:07:98:ee:
97:20:d2:b7:4e:44:00:20:88:ac:e5:29:8a:4e:eb:ec:9a:55:
6a:bc:cd:96:d0:fa:91:58:ce:8a:33:f1:e5:21:eb:41:80:d5:
45:8e:f3:cb:31:54:93:b2:44:f7:a3:48:1b:b2:7a:0a:d0:ea:
bd:56:8b:3e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZSr3EK0a3IavNE8gW4W8z16MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMjNiZTZkNTQ4MTQ1ODY3ODYzYjdiMmZhNDY0YmRmODUx
OGEwYzkwHhcNMjUwMTI4MDc0MjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTA0ZDkxMDQ3OTQ1MWYyNTQzNzAxZDdjNzhjY2ViMmYxMTRlYjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1a0EC9ryE4zllIdGtpUfW03UnyTM
FQhkqhjjZzzF9p4OM3eeQMf5s0cSIj/clHjKCeO7mSVITIprtpRIOIoh9ap5haPm
3EJejRERRdHBq7f9oyfEp9UkD/MgTzlJ/a4BC3MG/8bqHDwUbPhur+xiOX57l2Q6
lnPrDLe+XtvPAx8dMMTkNTmX6gy1K5+eFtIXRz+19ShLEGIJsP9+FnK7VEAXCtUV
fRS+y1O+6Z3z4tAyWS573fLzvtC2ArxupMNp37Pcy3O/4fNQUB/SRo/V54erm64I
WLv2U5xszvlQaij0AI6zztvMtX6ulujg04+hYRE/F1bg0lJeG5SwXr65MQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOEE2RBHlFHyVDcB18eMzrLxFOsjMB8GA1UdIwQY
MBaAFBMjvm1UgUWGeGO3svpGS9+FGKDJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8yYTFmZWYtMjIxZC00MDU1LThjNTgt
NWRlMzJiNjZkYjBhLzEvNFFUWkVFZVVVZkpVTndIWHg0ek9zdkVVNnlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8yYTFmZWYtMjIxZC00MDU1LThjNTgtNWRlMzJiNjZkYjBh
LzEvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDBYZ4AwQC
uTioMA0GCSqGSIb3DQEBCwUAA4IBAQDHOwcUDLiWld2K+7kD38ptmKSzse4xwmz0
nhkKa/ocHoSmPhS5mOwVH2SPQQr9B0nnBFCIZfOpNjFbPtjfQQ6zhXG/MOMZxsxL
E818rmirRWluIb7VAtebk69W3kzmj4tPlfU57thnGqzWu6CHax5fXrqQKdujK2tG
t+Kikx4cfgxY/s45y4SPplPC7AO3KVUEUylvdz35AaOiBClrTS7+ugbezzs0rPXb
mCcTkEPpuzk+CTHHXm8aiB1r/UWGDY+/LeMHmO6XINK3TkQAIIis5SmKTuvsmlVq
vM2W0PqRWM6KM/HlIetBgNVFjvPLMVSTskT3o0gbsnoK0Oq9Vos+
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net