Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/_4XBnUgfkXLCDNw3CzmT18WUZVM.roa
File: _4XBnUgfkXLCDNw3CzmT18WUZVM.roa (raw, json)
Hash identifier: giU+x9zSm/fPNyU8L4h9ehUNb3Bz8rg57NNz6941FeU=
Subject key identifier: FF:85:C1:9D:48:1F:91:72:C2:0C:DC:37:0B:39:93:D7:C5:94:65:53
Certificate issuer: /CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Certificate serial: 019427B5A8DD1766E0B2B46BAD5243ABC9DB
Authority key identifier: 04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/_4XBnUgfkXLCDNw3CzmT18WUZVM.roa
Signing time: Thu 02 Jan 2025 15:50:04 +0000
ROA not before: Thu 02 Jan 2025 15:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35805
IP address blocks: 5.152.0.0/17 maxlen: 24
31.146.0.0/16 maxlen: 24
37.110.160.0/19 maxlen: 24
37.232.0.0/17 maxlen: 24
77.92.224.0/19 maxlen: 24
79.99.248.0/21 maxlen: 24
87.253.32.0/19 maxlen: 24
92.54.192.0/18 maxlen: 24
94.43.0.0/16 maxlen: 24
146.255.224.0/19 maxlen: 24
149.3.0.0/17 maxlen: 24
176.221.128.0/17 maxlen: 24
178.134.0.0/16 maxlen: 24
188.123.128.0/19 maxlen: 24
188.123.150.0/24 maxlen: 24
188.169.0.0/16 maxlen: 24
213.217.16.0/22 maxlen: 24
2a01:9c80::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a8:dd:17:66:e0:b2:b4:6b:ad:52:43:ab:c9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Validity
Not Before: Jan 2 15:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff85c19d481f9172c20cdc370b3993d7c5946553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:01:4e:30:4f:b6:e3:ed:61:ca:35:9b:36:01:
ef:cf:2a:25:b0:4b:62:96:78:e7:ca:2f:a2:d2:15:
1e:37:77:ea:18:1a:4f:ef:b4:44:b3:a3:8b:de:2d:
8c:37:95:37:8b:ab:79:5b:e0:20:70:d9:16:af:a9:
0c:90:de:b7:cf:4e:fb:1f:12:19:00:b8:27:54:4d:
c9:34:00:f3:ae:2f:ac:3c:ff:4a:e4:23:88:17:dd:
e1:88:9a:90:6b:75:28:05:e7:08:08:00:07:8f:17:
53:74:ee:2e:bb:5b:14:35:ba:5e:24:33:3c:00:59:
02:df:8c:d0:08:b5:40:a7:be:0a:e0:aa:90:86:51:
2d:eb:da:3f:d6:9d:05:58:99:38:9e:b9:a7:e6:c3:
74:36:81:5a:96:91:d9:92:c0:9a:c7:c1:52:c1:0d:
2c:f9:00:47:4d:3c:29:d8:d6:f3:a0:be:28:51:0f:
10:68:11:78:9a:13:54:53:a6:52:4f:6d:b3:0c:1c:
98:f7:d7:75:59:04:62:76:e3:c1:27:65:71:39:42:
d0:2c:c1:4e:7c:0f:2d:2b:c9:5a:77:42:42:6d:e8:
cd:2d:dd:68:1c:37:ee:12:27:11:91:a2:30:61:47:
3d:0c:d3:54:8d:d3:1a:30:56:86:c0:fb:74:ac:a7:
66:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:85:C1:9D:48:1F:91:72:C2:0C:DC:37:0B:39:93:D7:C5:94:65:53
X509v3 Authority Key Identifier:
keyid:04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/_4XBnUgfkXLCDNw3CzmT18WUZVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.152.0.0/17
31.146.0.0/16
37.110.160.0/19
37.232.0.0/17
77.92.224.0/19
79.99.248.0/21
87.253.32.0/19
92.54.192.0/18
94.43.0.0/16
146.255.224.0/19
149.3.0.0/17
176.221.128.0/17
178.134.0.0/16
188.123.128.0/19
188.169.0.0/16
213.217.16.0/22
IPv6:
2a01:9c80::/29
Signature Algorithm: sha256WithRSAEncryption
09:38:72:d0:43:dd:78:04:03:11:35:df:23:fc:4a:3a:b1:04:
d1:fb:78:df:1c:e3:c6:a5:d9:86:df:4f:86:db:a3:1a:01:0e:
70:65:6f:1e:e4:0a:d7:b6:b3:9d:fa:da:16:f5:48:44:8f:50:
42:ae:e2:9c:c2:3e:bb:04:e2:0f:31:c0:87:71:d6:6a:c6:49:
66:1c:bf:82:d7:47:e2:75:6c:74:de:80:67:94:a0:73:79:7d:
d0:4d:cc:b0:3c:18:bb:9e:ea:73:b5:fa:62:69:14:b7:4b:72:
99:d7:04:9c:9d:ac:12:79:a0:22:56:a9:b6:f5:07:1b:13:cd:
9a:61:03:ca:1b:9f:38:7c:d4:3a:81:bc:58:9e:38:38:8b:1c:
00:a2:1d:cc:be:3a:7a:33:15:88:ae:99:e0:e5:b3:14:e2:0c:
04:af:c2:48:3e:86:09:2c:ae:31:a7:61:a4:16:3b:1d:64:7a:
87:03:07:55:cd:09:04:55:69:0d:b9:66:87:a1:1d:bb:7b:47:
99:4e:94:79:17:26:fb:cc:ac:9b:d8:98:a4:8a:19:d3:54:5c:
2f:17:86:15:55:f6:31:ab:cd:08:73:d6:61:3b:e0:1d:ed:71:
36:2f:f4:b3:f4:74:b2:8d:44:6e:13:f1:fd:f8:9e:e2:1b:05:
80:6b:30:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:14 2025 by rpki-client