Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/2ThSREv_WIoD2G2ZXnXTglHuGxQ.roa
File: 2ThSREv_WIoD2G2ZXnXTglHuGxQ.roa (raw, json)
Hash identifier: s1DwOtOnPcZDQ1RwreTVQg44ZJzwzwNbU2JFNCOH/jY=
Subject key identifier: D9:38:52:44:4B:FF:58:8A:03:D8:6D:99:5E:75:D3:82:51:EE:1B:14
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 019427B546DA521189CCE29C4664EF22F8EB
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/2ThSREv_WIoD2G2ZXnXTglHuGxQ.roa
Signing time: Thu 02 Jan 2025 15:49:39 +0000
ROA not before: Thu 02 Jan 2025 15:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8851
IP address blocks: 163.119.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:46:da:52:11:89:cc:e2:9c:46:64:ef:22:f8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Jan 2 15:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d93852444bff588a03d86d995e75d38251ee1b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:49:a4:2c:60:ce:ff:32:55:4f:fa:2f:ac:
93:60:ec:43:9f:95:0b:c1:4f:db:48:b1:03:16:54:
f1:82:7e:cd:6d:03:aa:cc:82:ec:1e:f5:8f:66:09:
2d:ca:55:bf:d9:45:88:50:76:66:42:6e:de:5a:ff:
d2:4c:db:d2:c3:65:15:d7:65:de:84:bf:45:11:63:
2a:d6:1d:e8:2a:a9:81:e3:8f:0f:44:ff:93:75:04:
7a:ab:8e:66:4c:2f:9b:26:f6:44:d3:a9:17:84:45:
3f:e7:75:a8:1a:4c:a6:83:f4:ea:f1:b1:24:7a:e6:
e6:06:48:68:de:8d:8f:12:ff:72:fd:bc:3d:6f:51:
b8:9d:1f:4e:f6:42:64:f7:69:70:5d:a2:42:b0:2b:
38:64:d3:9f:4b:29:ad:a2:62:17:94:93:ea:52:89:
93:92:e9:0b:41:7e:15:ea:70:65:9f:d5:e8:93:db:
29:fe:84:58:93:55:8e:4d:ab:d5:af:dc:ff:16:a6:
62:18:30:95:36:b5:65:a9:c4:7f:17:01:9d:c1:d6:
a2:46:36:61:1a:ee:dc:50:73:d4:00:de:ea:6c:2a:
a9:68:b0:31:d4:f4:42:e0:22:6d:09:b6:55:3c:cc:
82:e8:a8:70:24:53:0b:57:80:ef:37:85:1f:2b:9a:
3a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:38:52:44:4B:FF:58:8A:03:D8:6D:99:5E:75:D3:82:51:EE:1B:14
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/2ThSREv_WIoD2G2ZXnXTglHuGxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.119.4.0/24
Signature Algorithm: sha256WithRSAEncryption
86:00:af:b0:29:d8:31:d0:64:44:b4:60:e5:6f:7a:a3:d2:05:
85:d7:5a:c0:46:33:a5:27:d4:8d:c3:22:f6:bb:0c:db:1a:d9:
25:05:9d:c6:dd:0d:1b:cc:79:c1:3c:c0:83:65:3d:3d:65:43:
cb:8a:e3:73:59:fa:3c:39:5c:6a:a7:49:1b:38:7d:c4:fa:9a:
6a:37:61:f8:dc:f7:c1:2f:4c:3b:59:11:65:52:c6:ea:24:54:
c6:08:2f:79:fc:e1:75:4c:72:56:e7:71:2a:7d:ac:b1:1d:6f:
88:66:f8:8a:40:9f:62:14:7b:30:1a:69:22:9f:73:f1:ef:2b:
53:0b:ff:d7:9b:a7:8c:cc:f0:6c:54:b9:79:66:89:8a:76:4a:
44:7b:be:f0:a9:83:9f:b9:15:f5:c3:ab:67:eb:3a:ee:ee:90:
55:72:ca:7c:5e:6f:e4:05:24:7d:d5:68:9b:41:32:ee:ee:50:
58:06:2a:22:4d:61:86:30:ae:cf:f2:61:b5:37:f7:bf:c9:ba:
9b:98:be:5a:8c:0c:51:a2:22:18:52:2b:b3:92:62:33:ca:65:
bf:a1:87:90:98:c5:6d:4b:1f:c6:d9:d1:73:bc:d0:a0:8e:b9:
7f:bc:70:e6:db:66:93:04:b3:de:3a:f0:f7:8b:bb:43:00:ef:
93:fa:ed:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:34 2025 by rpki-client