Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/_Rwv4lbUJs8Qf1QGuOxJ2FBF-c4.roa
File: _Rwv4lbUJs8Qf1QGuOxJ2FBF-c4.roa (raw, json)
Hash identifier: 3ZyAz71Zk7+/HMhaF+5MnrlGpcuPtXopbpfn+/PpDpY=
Subject key identifier: FD:1C:2F:E2:56:D4:26:CF:10:7F:54:06:B8:EC:49:D8:50:45:F9:CE
Certificate issuer: /CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Certificate serial: 0194B14CC71F062C818CC0A82E38703EF79F
Authority key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/_Rwv4lbUJs8Qf1QGuOxJ2FBF-c4.roa
Signing time: Wed 29 Jan 2025 09:03:06 +0000
ROA not before: Wed 29 Jan 2025 09:03:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44078
IP address blocks: 46.37.192.0/19 maxlen: 19
79.135.192.0/19 maxlen: 19
79.135.216.0/22 maxlen: 22
79.135.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b1:4c:c7:1f:06:2c:81:8c:c0:a8:2e:38:70:3e:f7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Validity
Not Before: Jan 29 09:03:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd1c2fe256d426cf107f5406b8ec49d85045f9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:50:af:d8:4d:5e:9f:12:a6:de:4b:98:89:66:
3b:f3:b6:63:83:c5:3f:40:34:c2:88:15:36:00:aa:
64:23:22:d5:79:ad:5e:3a:64:24:cb:0b:ee:89:f5:
8d:d1:0d:de:03:b7:fd:f1:93:94:05:44:4e:8c:37:
df:30:87:21:95:0c:40:83:89:3a:5d:9e:b1:3d:11:
61:76:18:5e:a6:6e:e2:7f:5e:7f:bb:11:d7:38:dd:
3d:d2:cf:20:14:dc:a7:48:c9:81:d8:0a:0a:88:95:
30:24:cf:5f:99:5d:f9:88:46:13:ea:1c:9f:80:67:
2d:1c:dd:8a:a8:8f:12:5c:3c:09:85:f2:04:2f:d6:
52:84:d2:0d:9a:f8:42:15:e1:e8:b0:64:99:3d:6b:
dc:b4:7f:30:2e:48:8b:6c:20:e5:b5:47:f7:16:6c:
40:5b:70:36:c5:ac:d0:97:5d:be:c6:a3:d3:13:16:
b2:52:ab:43:f2:d9:9b:3d:77:5f:34:c3:97:c2:06:
28:85:cd:66:3d:34:ec:85:d2:19:ec:61:b4:66:46:
53:62:d7:df:2c:be:71:10:03:01:9f:76:c9:6b:7b:
d3:86:d8:a0:ed:99:3e:90:85:36:59:59:67:f7:ab:
a2:a9:b2:50:a9:30:0b:a8:2a:94:94:cf:72:9a:e1:
da:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1C:2F:E2:56:D4:26:CF:10:7F:54:06:B8:EC:49:D8:50:45:F9:CE
X509v3 Authority Key Identifier:
keyid:90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/_Rwv4lbUJs8Qf1QGuOxJ2FBF-c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.192.0/19
79.135.192.0/19
Signature Algorithm: sha256WithRSAEncryption
93:bf:a4:31:ee:e6:05:7c:e2:71:4c:9a:17:60:b4:1e:f1:93:
e8:4b:38:6a:65:95:86:78:5c:0e:87:bc:3d:5c:1f:80:61:ca:
d3:1e:8d:d8:d1:71:7e:73:df:21:f1:59:47:7d:9a:6d:43:56:
a2:f6:1b:25:ae:fb:f3:46:4f:70:76:49:bb:ea:b2:47:2c:c6:
0d:ef:2a:9e:7b:3d:4f:a2:89:cd:78:52:f5:92:c9:74:b6:dc:
e3:21:34:b3:91:4f:23:65:f4:c9:03:6b:6c:03:8e:82:02:1d:
a1:73:8f:a3:73:e7:0f:8e:78:39:3a:49:9b:23:f8:71:ad:ef:
37:60:16:14:f1:3b:ea:8d:4d:30:b5:73:c4:08:50:b4:fd:16:
a6:37:57:64:65:e2:8d:d4:bd:54:7a:40:17:c6:5e:07:4f:b4:
dc:51:46:ab:15:11:f8:e4:80:f8:97:da:2c:ad:94:39:69:3c:
ed:88:6a:0e:b2:a8:90:75:2b:18:94:17:8c:1b:e9:88:19:e1:
a9:87:19:8a:f5:55:2f:c3:fc:60:ac:3b:1e:1c:96:a7:27:b5:
3a:b7:a3:85:04:8e:d3:bf:ad:cc:17:d4:3e:e8:68:0f:61:cd:
c9:2a:d8:8f:fb:c7:38:d1:f6:57:5e:4d:1a:a4:9d:61:5b:d3:
ed:23:83:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:17:16 2025 by rpki-client