Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/4KBWrJSRLSTWgJmrtXh24O8ptm0.roa
File: 4KBWrJSRLSTWgJmrtXh24O8ptm0.roa (raw, json)
Hash identifier: YEBy8eNEfToaA32gL8iYc9FiTV97Xzm5KfvwgQ0Wt0w=
Subject key identifier: E0:A0:56:AC:94:91:2D:24:D6:80:99:AB:B5:78:76:E0:EF:29:B6:6D
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 019423D6A5385C3BDBE2B27A432F9E87B313
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/4KBWrJSRLSTWgJmrtXh24O8ptm0.roa
Signing time: Wed 01 Jan 2025 21:47:37 +0000
ROA not before: Wed 01 Jan 2025 21:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52468
IP address blocks: 185.213.220.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a5:38:5c:3b:db:e2:b2:7a:43:2f:9e:87:b3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Jan 1 21:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0a056ac94912d24d68099abb57876e0ef29b66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a6:46:2a:a9:bf:b2:29:f1:18:f6:43:b7:f0:
17:76:5f:28:38:a0:06:84:10:56:17:1f:38:3b:19:
3e:30:a1:a5:10:c7:bc:db:5e:47:8e:03:9f:b9:6a:
b0:eb:1c:5a:db:6d:25:3f:b1:98:9d:05:77:45:76:
8e:41:5a:98:e7:50:49:45:8f:77:db:7c:83:58:96:
86:cb:fc:0f:66:1f:e2:8d:c3:e2:bc:39:c5:f6:a3:
12:75:0e:7c:0d:f1:82:ac:a9:88:42:f7:24:c6:da:
ed:38:88:e6:33:df:79:1b:58:fb:29:40:7c:71:1f:
4c:10:2a:9f:5b:80:62:68:7d:7e:b9:1a:84:c8:85:
a3:92:99:f2:86:c2:eb:fb:3c:6c:c3:66:31:cd:2a:
b5:dc:cc:91:78:4e:41:b0:d6:81:8f:c9:95:b0:9f:
8d:0c:ca:3b:72:d4:a6:15:94:42:45:d5:4f:55:19:
a7:4d:e4:0d:cf:40:ee:04:47:8c:c3:93:9e:e9:9b:
0b:52:06:6a:28:41:63:86:e6:80:32:e4:32:ef:42:
4c:7d:53:ca:ce:67:49:26:5e:76:78:98:24:d9:50:
00:dd:3e:e7:40:2b:7f:f1:16:b6:a8:4a:73:21:3e:
12:44:68:ca:73:6e:c7:9a:9f:37:6a:dd:80:fb:9d:
f6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A0:56:AC:94:91:2D:24:D6:80:99:AB:B5:78:76:E0:EF:29:B6:6D
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/4KBWrJSRLSTWgJmrtXh24O8ptm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.220.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:0f:ba:87:cd:bb:e3:b9:25:2e:29:9c:cb:02:3a:48:06:6b:
b3:a7:c2:0d:d4:be:e1:bb:10:6b:9b:e9:3e:d3:bb:4d:6d:09:
92:34:d9:ef:c7:83:69:e0:a0:ea:fc:89:4f:44:68:db:7d:35:
4d:1b:8f:75:37:61:4d:2d:40:6c:4e:ca:40:1c:44:a4:c6:6b:
60:99:74:81:9b:e6:4e:30:5c:75:67:e8:90:76:3e:89:3d:9e:
21:f1:c8:50:d4:2d:75:bf:0d:0e:ef:f9:34:92:aa:e3:36:b5:
81:cb:36:3b:a0:1c:cd:9a:40:2d:5a:e6:1a:12:5c:d9:cf:09:
da:fb:6a:5d:4d:40:03:a1:f6:2f:74:86:0b:45:18:a3:83:58:
ac:bb:20:d1:89:06:ee:32:a0:4f:4a:27:29:95:2d:a2:d8:17:
85:29:0e:41:a0:2c:57:ea:b5:18:14:46:b8:f0:26:a3:86:99:
63:70:9a:52:e2:b2:96:f7:4e:23:c8:b8:ff:8e:5b:0e:07:e8:
f8:b1:a8:c4:8d:b6:e2:f1:2f:48:1a:01:28:73:64:ff:97:d2:
5d:1a:6d:ac:35:17:14:b1:3f:91:37:f6:51:81:17:18:8f:c0:
de:e6:ae:03:1e:62:52:57:bd:8c:83:a1:30:65:3f:be:8a:b8:
bf:4f:9d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:04 2025 by rpki-client