Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/N4NMmlfe9DF5a3SAVtfSEbM2wfQ.roa
File: N4NMmlfe9DF5a3SAVtfSEbM2wfQ.roa (raw, json)
Hash identifier: 8UZlWmjB6Dnz8NNshRUlMhAJBpkzaL1ZPtLOI64Gvsw=
Subject key identifier: 37:83:4C:9A:57:DE:F4:31:79:6B:74:80:56:D7:D2:11:B3:36:C1:F4
Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial: 019427B57A23E3871DA6CB9F658D04258D9A
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/N4NMmlfe9DF5a3SAVtfSEbM2wfQ.roa
Signing time: Thu 02 Jan 2025 15:49:52 +0000
ROA not before: Thu 02 Jan 2025 15:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21232
IP address blocks: 185.193.224.0/22 maxlen: 22
2a14:5300::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:7a:23:e3:87:1d:a6:cb:9f:65:8d:04:25:8d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Validity
Not Before: Jan 2 15:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37834c9a57def431796b748056d7d211b336c1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:17:ee:2d:51:d1:ed:e7:a9:71:c1:3d:10:
3a:29:17:0e:60:e1:42:f8:4a:1d:74:6b:3a:25:44:
13:8c:86:c4:24:9b:ab:b4:dd:72:24:92:8e:1c:09:
66:f3:01:e8:39:ad:31:d3:6c:9d:7d:7a:82:53:2a:
4c:9e:3d:8a:1f:ef:6c:ff:90:0d:77:01:fd:c0:80:
fc:92:c4:c4:47:0c:ab:c5:51:39:f6:80:b7:f6:31:
a2:23:bd:ac:35:10:51:ff:f2:91:de:55:07:11:25:
e2:0b:de:23:70:f4:28:e8:28:b9:33:07:dc:c9:39:
d0:cd:80:f1:75:be:2a:6e:60:bb:5b:da:fc:c5:b9:
0d:ad:0c:aa:3e:53:fb:e1:b6:c7:9a:bf:a7:2b:95:
52:24:c8:1d:24:3f:85:32:30:20:25:97:8a:a9:af:
b6:71:5d:fc:b8:c6:5f:2d:5f:44:24:58:00:a5:80:
12:a6:bf:0d:ee:79:99:84:95:d4:12:11:2e:cf:f6:
79:f6:ab:09:a5:d2:b9:5e:7f:b0:e1:6d:a8:27:23:
d7:8c:23:a5:02:65:53:ad:8d:1c:40:a1:82:de:0a:
a6:e8:66:7f:f0:ad:b1:b4:c3:6d:8f:63:d9:0f:6f:
a5:12:85:da:ed:33:45:e3:5f:26:d6:3f:84:08:fc:
ec:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:83:4C:9A:57:DE:F4:31:79:6B:74:80:56:D7:D2:11:B3:36:C1:F4
X509v3 Authority Key Identifier:
keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/N4NMmlfe9DF5a3SAVtfSEbM2wfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.224.0/22
IPv6:
2a14:5300::/32
Signature Algorithm: sha256WithRSAEncryption
0f:8e:21:e8:0b:6d:74:a4:46:92:f8:1f:a0:20:af:09:d0:f8:
ab:d6:39:19:8a:4e:68:b4:d6:43:f3:74:9a:4d:7f:bf:96:25:
18:c4:df:af:0e:a6:09:79:90:96:14:97:db:5d:09:28:7d:87:
d6:fc:4d:59:4f:df:64:a4:22:e7:89:f4:2c:1d:cd:1f:b6:7b:
13:f7:e3:2c:0a:9c:06:3d:f1:d7:4e:99:f9:57:17:84:d3:05:
81:5e:e3:72:12:8c:c9:dd:0f:81:89:c5:82:67:eb:4e:0c:1e:
3e:0a:81:7c:72:9a:96:b4:58:5b:e9:a9:80:76:b9:af:e6:34:
fb:d8:61:4f:70:a7:d2:63:73:4b:c2:cd:37:b1:d0:31:6c:7f:
68:45:72:e8:d2:f5:5c:eb:17:b8:71:5f:52:b5:bd:4d:c4:6d:
53:76:f0:c3:bb:cd:ff:36:5e:6a:10:0a:87:97:9e:a3:17:f5:
32:61:44:17:50:41:51:eb:6f:c1:76:29:2e:ad:c5:5b:7a:ed:
46:8f:42:00:88:cb:fa:10:6a:a4:cd:a6:d1:78:61:0f:91:84:
19:a7:66:46:a2:5b:e5:e4:be:a4:14:6f:1f:10:16:d8:7c:1a:
c0:dc:1a:38:b5:02:51:be:f8:31:2a:67:27:65:26:2d:64:55:
00:2b:25:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:30 2025 by rpki-client