Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/PInwxeRmXqybON5cwge4vSvBGWA.roa
File: PInwxeRmXqybON5cwge4vSvBGWA.roa (raw, json)
Hash identifier: 4bCieqFiMwnJv0UAlZvP326qQk+j/iel0eeDXFzOp5s=
Subject key identifier: 3C:89:F0:C5:E4:66:5E:AC:9B:38:DE:5C:C2:07:B8:BD:2B:C1:19:60
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 019441BA58F56277D5FE0760B888B69AB6DC
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/PInwxeRmXqybON5cwge4vSvBGWA.roa
Signing time: Tue 07 Jan 2025 17:05:19 +0000
ROA not before: Tue 07 Jan 2025 17:05:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216192
IP address blocks: 188.125.174.0/24 maxlen: 24
194.177.14.0/24 maxlen: 24
2a13:f6c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:41:ba:58:f5:62:77:d5:fe:07:60:b8:88:b6:9a:b6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Jan 7 17:05:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c89f0c5e4665eac9b38de5cc207b8bd2bc11960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:91:d3:0b:36:64:ad:b6:74:a8:ba:6a:78:08:
6e:5d:bc:71:f5:b3:6b:5c:f0:d6:ab:1f:44:5d:00:
1d:01:ec:55:9c:3b:75:c8:f6:04:b0:73:e5:e2:af:
6c:d3:95:94:bc:38:ef:6f:8a:55:ba:6f:7e:91:b8:
9b:db:85:e9:f7:2f:f9:da:c4:8a:53:e6:86:3b:0f:
e4:27:6a:85:76:2b:0a:98:c1:db:6e:a2:17:a9:8b:
1f:82:60:32:f3:6c:8f:1b:87:08:a4:a0:f9:13:63:
27:de:cc:eb:50:58:e2:1a:1f:ca:3a:fb:f5:a6:47:
7e:23:68:62:0f:10:2d:5b:11:75:12:93:16:97:2c:
8b:2b:ba:f9:bd:82:67:e9:46:7e:89:43:12:f8:94:
0a:55:ec:d6:95:e6:ba:aa:11:4b:61:84:af:cd:4b:
a8:6f:1d:4e:5b:20:94:60:8c:a8:1c:fa:a5:33:24:
f4:87:9f:c6:33:6e:f9:61:27:b4:f1:08:0c:2a:d2:
12:af:3b:76:c5:f3:3e:47:05:eb:07:1b:de:6f:e1:
df:aa:fb:5f:bc:d8:4e:ae:25:09:ed:08:2a:52:76:
89:a7:78:e8:93:6e:37:ec:ad:63:9c:6a:ee:d5:5f:
29:17:3a:1e:b0:78:77:d6:48:d5:5c:ec:54:af:e6:
87:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:89:F0:C5:E4:66:5E:AC:9B:38:DE:5C:C2:07:B8:BD:2B:C1:19:60
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/PInwxeRmXqybON5cwge4vSvBGWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.174.0/24
194.177.14.0/24
IPv6:
2a13:f6c0::/29
Signature Algorithm: sha256WithRSAEncryption
3b:5c:64:5a:29:2b:b7:29:15:c7:5b:b3:32:ba:8b:8c:8e:81:
6c:fb:e4:cc:72:ab:94:34:4a:c7:48:e4:d7:7d:24:51:58:21:
84:38:a7:78:de:4e:15:0d:d7:4d:8b:bd:93:87:ff:ba:4e:59:
bc:51:60:09:ea:c0:4b:4a:c3:ed:3d:8c:0f:aa:5e:a5:02:81:
ef:ab:b0:c8:05:4a:c6:b2:00:b2:c2:85:ab:3c:ba:25:c4:c2:
06:45:95:93:cf:24:34:22:08:39:ee:2d:a2:34:4d:66:b1:32:
41:66:c8:58:0e:a0:5e:11:1f:f7:ef:b6:b0:a1:b3:cb:2b:54:
94:15:bf:29:af:a5:b0:2e:39:53:c5:5c:1a:39:01:ae:b3:9e:
8a:0d:a5:33:ad:27:8b:49:3e:59:8f:95:27:c1:e2:7d:4e:6b:
6f:d6:67:bc:58:c2:b4:5c:44:99:df:e7:5e:b4:65:d2:0a:ac:
21:cf:09:25:eb:35:fb:d1:43:c1:e9:c4:15:ee:05:43:c9:7d:
d5:a1:d2:4e:f2:69:4f:3d:62:c5:6a:21:a3:73:46:3c:f9:33:
3e:27:81:57:c0:f6:35:3e:f0:ed:83:59:19:30:fe:18:5b:a5:
1a:b5:17:53:f7:d6:d4:1d:3d:e0:74:bd:45:35:9b:33:e8:f6:
c5:7c:0e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:59:19 2025 by rpki-client