Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/Tp0auhJCmeeWmWKmCzIKG_vEZP4.roa
File: Tp0auhJCmeeWmWKmCzIKG_vEZP4.roa (raw, json)
Hash identifier: 90pnLgqjS54drkkCBOnFNNLX5/NGGoYmxkCs4EGSwIc=
Subject key identifier: 4E:9D:1A:BA:12:42:99:E7:96:99:62:A6:0B:32:0A:1B:FB:C4:64:FE
Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial: 019426D9DEC6EC494A7216E0F982A4825755
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/Tp0auhJCmeeWmWKmCzIKG_vEZP4.roa
Signing time: Thu 02 Jan 2025 11:49:59 +0000
ROA not before: Thu 02 Jan 2025 11:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214920
IP address blocks: 185.7.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:de:c6:ec:49:4a:72:16:e0:f9:82:a4:82:57:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
Validity
Not Before: Jan 2 11:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e9d1aba124299e7969962a60b320a1bfbc464fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:68:6a:56:3f:4e:56:09:b5:81:a7:4a:e9:
10:39:8c:1a:96:c2:dc:ff:00:4e:c4:d4:bf:16:13:
bc:05:03:d5:3a:23:24:32:90:20:4d:b1:a7:08:67:
d7:2a:b2:c5:e3:fc:e6:9d:54:ba:58:98:de:e7:7d:
c0:47:5d:63:99:af:81:29:2b:f9:ae:52:9e:45:46:
04:18:23:3c:9e:49:14:ea:ae:d9:67:32:88:05:d0:
f2:7b:8c:64:88:1b:a0:79:40:dc:45:5f:a5:50:85:
27:ec:d2:bb:e9:4c:4e:e3:d8:fa:1d:42:c4:28:16:
a1:29:3a:55:f1:a6:5b:86:89:9c:5e:88:c3:51:cb:
02:da:28:74:71:38:23:d9:40:b7:38:a9:22:51:df:
76:e8:f7:d4:8a:2b:b7:11:a7:f6:85:da:6c:2a:75:
35:8f:b1:46:e1:04:84:0e:8c:d8:5f:61:c5:5f:c8:
43:ca:e5:c7:09:f1:12:c7:fa:b7:91:0b:84:0f:08:
ef:e5:54:9a:e9:7d:db:3b:31:76:da:14:32:17:38:
36:b2:19:94:62:6a:eb:dc:09:76:d6:92:9b:f1:bc:
4e:09:52:eb:94:84:23:47:07:98:58:2a:82:77:35:
5d:35:dc:81:04:08:c7:39:31:0c:35:3f:90:2c:3b:
51:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9D:1A:BA:12:42:99:E7:96:99:62:A6:0B:32:0A:1B:FB:C4:64:FE
X509v3 Authority Key Identifier:
keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/Tp0auhJCmeeWmWKmCzIKG_vEZP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.123.0/24
Signature Algorithm: sha256WithRSAEncryption
37:95:a3:9a:fa:b7:c7:e3:ed:e4:ab:bb:50:ae:a0:78:a1:a9:
74:40:7f:e3:3a:b9:bd:4f:6b:3d:a7:42:4e:11:0d:ee:2f:a6:
81:ed:11:1e:fb:92:2a:77:d9:78:3e:d1:3f:8e:b9:ea:70:3e:
7e:8a:de:53:15:f5:88:e7:ce:0e:6c:b0:49:89:85:0c:85:c8:
03:23:b5:96:5b:0c:bf:04:34:9a:dd:f3:8b:3e:22:df:a6:a2:
31:ff:0c:69:1a:99:52:42:52:66:50:de:c2:81:f9:6f:d1:cf:
4e:a6:39:66:6c:b6:16:83:39:6d:af:eb:d1:7e:5e:cf:55:d8:
49:f8:9c:1f:aa:f6:23:ba:56:45:7f:1c:ca:ff:94:89:66:22:
60:d9:20:6a:02:81:03:60:f5:84:b3:7e:bf:74:35:57:9c:04:
75:2a:72:ec:1c:f6:0b:c0:a5:c1:a2:93:04:3b:7d:dc:d2:2e:
04:67:a9:54:ee:09:91:e8:ba:e7:10:7d:30:9a:e8:fb:3b:fb:
17:a0:fb:1b:e2:20:2b:24:07:02:fb:f5:71:57:f9:f6:03:21:
cb:e0:63:a5:2c:48:74:15:d0:b3:82:ee:24:4b:5e:20:1b:2b:
1b:6f:c6:90:3b:ff:e5:49:d5:40:6b:60:8e:00:3c:99:73:eb:
db:5e:c6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:24:52 2025 by rpki-client