Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/1X9xFK5JsqTeyade1aBsNXK2jqM.roa
File: 1X9xFK5JsqTeyade1aBsNXK2jqM.roa (raw, json)
Hash identifier: ch4xBMsoiK3FTWlpXULNfZSQTt2yA75MNr9CkIVKekw=
Subject key identifier: D5:7F:71:14:AE:49:B2:A4:DE:C9:A7:5E:D5:A0:6C:35:72:B6:8E:A3
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019427B5788DBD4D7EF68A2EDD929ED9FBF3
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/1X9xFK5JsqTeyade1aBsNXK2jqM.roa
Signing time: Thu 02 Jan 2025 15:49:51 +0000
ROA not before: Thu 02 Jan 2025 15:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62021
IP address blocks: 79.141.37.0/24 maxlen: 24
94.31.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:78:8d:bd:4d:7e:f6:8a:2e:dd:92:9e:d9:fb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 2 15:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d57f7114ae49b2a4dec9a75ed5a06c3572b68ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:17:e6:b0:ca:9f:f5:95:f8:e5:55:8f:a2:f3:
74:a8:60:9a:06:1b:56:f3:9a:4b:73:bd:dd:4a:15:
83:20:6e:48:59:10:a1:92:5d:d9:cc:9b:85:9a:91:
95:9d:99:f6:50:17:09:53:b7:43:c2:02:a6:7f:3b:
fe:2d:fd:01:d8:62:ef:4a:50:06:34:7b:83:42:dd:
e4:9e:fe:0c:73:c6:4e:fa:75:34:ec:0e:59:39:d9:
97:91:c4:cb:66:68:c0:06:e7:ee:bd:6b:7c:a6:b6:
ba:8a:09:c7:81:28:40:77:34:af:91:cb:db:03:c2:
cd:65:4f:fd:4a:d5:63:7b:c9:4e:c0:c3:64:0d:ac:
0f:46:02:84:9f:1e:00:ca:a7:e8:f7:8d:cf:d8:20:
d2:84:44:ae:03:d9:07:64:ff:e4:6c:58:e8:cd:ef:
cf:61:cd:97:49:0f:41:95:2b:b3:1e:71:03:92:d9:
19:6a:76:d7:dc:06:6d:50:94:bb:82:2d:f5:4b:3b:
f3:fb:68:40:9d:c6:a7:3d:c7:a0:7a:44:3a:dd:d7:
f6:60:62:c2:ce:f1:77:92:d7:27:1e:39:c1:32:da:
fa:e0:42:46:c0:e1:fe:3a:40:86:02:da:5b:9f:98:
98:a6:17:5d:1f:eb:10:f9:ec:93:9b:98:11:bb:5d:
e1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7F:71:14:AE:49:B2:A4:DE:C9:A7:5E:D5:A0:6C:35:72:B6:8E:A3
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/1X9xFK5JsqTeyade1aBsNXK2jqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.37.0/24
94.31.28.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:97:22:27:3f:f3:e9:bc:e9:c0:8b:8f:52:e5:c8:79:8c:0f:
35:aa:19:25:e8:c8:5f:e3:4e:59:3c:88:49:d1:c6:c6:ca:1e:
9c:f0:fa:32:d0:8a:89:75:46:c8:7b:24:84:ec:9c:08:eb:76:
dc:13:03:4b:04:96:36:03:2e:34:59:2a:13:3f:22:50:30:ce:
6a:e4:b7:b7:98:73:1d:66:e2:69:de:e0:3c:9b:16:e0:4e:56:
da:72:1a:c9:31:bc:f7:bc:20:2a:16:dc:dd:04:a8:46:4e:34:
fd:2c:7f:6e:a1:3e:06:74:e2:94:2e:7a:17:d1:3d:87:0d:2a:
04:33:e5:24:1c:8b:5f:4a:0c:12:fb:a1:61:42:68:e9:58:a1:
29:f7:6a:bc:f5:0e:8d:0b:bc:38:26:ab:61:fb:62:08:1e:e0:
dc:84:82:62:01:35:5f:91:3b:da:de:e2:87:0d:3a:68:9b:18:
7d:20:2c:4f:6f:1d:75:07:63:b0:5e:dc:41:1e:27:2d:c5:5e:
53:bc:4d:c1:10:11:73:7d:d9:56:c9:e9:12:f9:b9:eb:4e:7b:
a1:1c:8b:63:9b:14:96:e3:b5:5b:1e:7e:9f:0b:99:95:b9:7e:
81:30:5d:34:76:17:5b:8c:5a:31:f8:a8:44:12:c4:1e:ab:af:
8d:b6:85:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:47 2025 by rpki-client