Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/ClZdr1wg9-gyvQ2UI0rc36Tkqn8.roa
File: ClZdr1wg9-gyvQ2UI0rc36Tkqn8.roa (raw, json)
Hash identifier: kpxqL73T43lKVSu7/H7qyZ0Ta1r2r6Ekr0F6N2fIhsk=
Subject key identifier: 0A:56:5D:AF:5C:20:F7:E8:32:BD:0D:94:23:4A:DC:DF:A4:E4:AA:7F
Certificate issuer: /CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
Certificate serial: 01941F8C74E9C61047EF1D94236792A50CE1
Authority key identifier: E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/ClZdr1wg9-gyvQ2UI0rc36Tkqn8.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48903
IP address blocks: 185.92.4.0/22 maxlen: 22
185.140.4.0/22 maxlen: 22
185.140.4.0/24 maxlen: 24
185.140.5.0/24 maxlen: 24
185.140.6.0/24 maxlen: 24
185.140.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:74:e9:c6:10:47:ef:1d:94:23:67:92:a5:0c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a565daf5c20f7e832bd0d94234adcdfa4e4aa7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:5b:cf:bb:b9:c9:43:b4:73:a6:69:79:7f:
68:c2:79:de:ff:88:ae:aa:9f:81:4c:c5:0c:e7:4e:
ad:5a:c2:67:24:f0:2b:3e:37:e5:94:84:99:f3:fb:
46:25:b2:4f:00:01:44:ff:04:2f:c0:ac:18:8e:59:
fc:5e:fa:c8:82:de:e7:a1:98:45:15:81:a4:a1:af:
be:35:a9:c1:cd:ca:b5:5f:d8:96:b3:3f:42:70:d1:
61:91:b2:93:59:23:a1:da:3a:65:b1:d7:bd:a0:13:
3a:85:b8:b4:a9:53:f3:a2:da:3b:ec:e7:69:2b:a4:
ea:cc:64:49:c4:26:ae:98:c3:50:11:2c:b2:ad:b9:
e9:1e:28:b1:e1:97:f7:17:37:d1:08:94:35:06:25:
c5:8e:4f:51:48:cd:73:c4:51:1d:9d:1e:02:e2:5a:
9e:58:d6:e1:43:aa:83:23:84:04:95:2b:58:1c:39:
c8:79:c8:64:1e:7f:33:fd:2f:a2:b4:09:7a:e3:9b:
89:c9:01:20:47:fd:79:cf:73:7a:e7:4c:a4:53:5f:
59:a4:10:8d:fe:91:20:f0:c2:67:8c:cc:f7:43:cb:
d3:e3:3c:05:50:5d:24:b7:01:b2:cf:8c:0d:d7:42:
2d:7b:6c:48:b9:a1:f1:bf:16:2d:48:bf:3a:d5:8a:
ca:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:56:5D:AF:5C:20:F7:E8:32:BD:0D:94:23:4A:DC:DF:A4:E4:AA:7F
X509v3 Authority Key Identifier:
keyid:E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/ClZdr1wg9-gyvQ2UI0rc36Tkqn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.4.0/22
185.140.4.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:9f:ea:ef:3c:33:a5:5f:ba:eb:2a:4f:35:52:e1:61:83:a3:
34:68:bc:13:9a:1c:ec:2d:53:94:b7:1b:87:e9:b3:f2:be:e3:
86:31:12:fe:64:d6:c7:fd:56:86:ce:eb:73:85:fb:40:dd:37:
4b:73:a9:16:c6:59:25:c4:64:41:ff:eb:cf:5c:d5:bf:b1:66:
2a:4a:52:91:5b:6a:4a:3f:6f:1c:bc:b1:f9:8e:2f:3b:0d:ce:
db:8f:7f:53:a4:53:49:80:47:0c:f9:b5:49:9d:e8:d4:3f:5d:
db:1b:da:89:30:1c:ac:2c:d2:28:0b:80:e5:80:13:81:09:de:
d9:b2:09:7f:f9:d9:84:31:a0:ef:aa:c6:48:43:1d:7f:18:e2:
b7:40:94:38:3e:92:42:fb:b3:b5:7d:c4:a7:46:c0:6c:7f:a0:
9b:41:ad:ec:30:a2:8c:3d:b1:d3:21:0e:22:53:5c:e3:16:e8:
86:24:fc:f4:ba:29:05:a4:d5:be:a8:2b:07:f7:30:2c:28:f1:
0d:08:75:92:05:9b:c8:bb:25:00:51:a8:4e:03:52:b5:20:31:
c9:06:c8:d7:bc:2b:e9:d4:c8:3a:f5:71:70:00:b4:f8:4d:cd:
ca:1a:1d:46:07:48:ab:f6:f0:62:40:f8:50:b1:eb:0d:e0:c7:
99:ee:72:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:52:37 2025 by rpki-client