Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/4LcYhh5VaoxzE7_TrJsxLDfGQFw.roa
File: 4LcYhh5VaoxzE7_TrJsxLDfGQFw.roa (raw, json)
Hash identifier: Cn7+k3SprfzaNho3028EBV81uHShItHvR2vBO+BWN4A=
Subject key identifier: E0:B7:18:86:1E:55:6A:8C:73:13:BF:D3:AC:9B:31:2C:37:C6:40:5C
Certificate issuer: /CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Certificate serial: 01944B574A0D5F7DA161144759FA852E17A1
Authority key identifier: 40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/4LcYhh5VaoxzE7_TrJsxLDfGQFw.roa
Signing time: Thu 09 Jan 2025 13:53:19 +0000
ROA not before: Thu 09 Jan 2025 13:53:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62365
IP address blocks: 80.249.116.0/22 maxlen: 22
139.28.0.0/22 maxlen: 22
141.98.144.0/22 maxlen: 22
155.133.200.0/21 maxlen: 21
155.133.208.0/20 maxlen: 20
185.38.48.0/22 maxlen: 22
185.202.180.0/22 maxlen: 22
185.206.240.0/22 maxlen: 22
2a00:fda0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:57:4a:0d:5f:7d:a1:61:14:47:59:fa:85:2e:17:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Validity
Not Before: Jan 9 13:53:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0b718861e556a8c7313bfd3ac9b312c37c6405c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:af:28:18:97:20:19:bc:f2:2f:7f:9e:1b:
05:40:e8:59:6a:11:4b:4a:7b:df:e6:e9:a0:81:bb:
43:c4:47:b7:f1:26:05:2b:17:d4:34:5a:55:79:dd:
c8:ed:a2:48:4e:63:b6:53:4e:39:55:97:dc:d8:75:
cb:af:65:1d:55:c7:5e:45:d3:09:01:3e:f3:e3:2c:
7d:a7:cc:b2:a5:a5:f3:9f:6e:0e:4e:31:e6:33:ae:
0e:03:17:48:63:78:85:29:28:04:aa:fd:8f:c8:7c:
bb:70:f2:28:59:58:6d:13:41:18:57:b8:ec:db:2a:
b6:22:a4:be:d5:4a:ec:fe:a3:9e:fe:41:ab:ef:43:
12:59:b5:6f:4d:9a:25:53:80:0c:e6:f4:0e:e3:04:
3b:c3:ec:59:e8:68:b7:c9:f0:f8:5a:01:5e:ee:4d:
b7:6c:51:12:28:99:9c:93:2e:67:be:c0:d7:04:39:
ef:89:3a:26:dc:83:fd:25:9a:68:cd:f8:ee:93:47:
5b:18:c0:9d:0a:89:88:f7:bf:37:3c:85:39:6b:36:
55:20:f1:c2:67:a6:48:7c:b6:ab:a3:37:9c:84:e4:
48:50:00:3d:53:24:25:8e:59:69:e9:94:bd:91:da:
91:62:90:c7:40:87:53:a4:c1:fe:26:79:6e:15:cb:
10:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B7:18:86:1E:55:6A:8C:73:13:BF:D3:AC:9B:31:2C:37:C6:40:5C
X509v3 Authority Key Identifier:
keyid:40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/4LcYhh5VaoxzE7_TrJsxLDfGQFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.116.0/22
139.28.0.0/22
141.98.144.0/22
155.133.200.0-155.133.223.255
185.38.48.0/22
185.202.180.0/22
185.206.240.0/22
IPv6:
2a00:fda0::/32
Signature Algorithm: sha256WithRSAEncryption
32:29:17:34:52:eb:51:2e:33:5f:02:b5:d9:8c:fb:ea:3b:6b:
aa:5a:22:fe:ec:2c:c5:7f:04:1b:ec:99:00:41:0c:ba:e8:71:
15:e4:2c:18:7c:06:c8:d7:32:ba:7f:f2:d2:71:a4:e4:cb:62:
bd:f7:c9:f6:43:a7:1d:94:fc:7b:92:de:82:35:e3:66:78:a2:
71:4f:41:b9:3d:33:cc:ff:34:1b:ad:79:dd:45:f5:10:af:88:
1b:9b:d3:5a:bc:0b:ef:99:a4:87:15:91:f1:e2:fc:70:1e:ae:
53:6e:ee:9a:82:c9:35:cd:8e:e5:76:b4:0d:54:90:65:47:52:
77:90:0f:63:a9:fc:ea:76:98:aa:9f:4f:70:23:54:a1:32:aa:
74:b8:cc:c6:b7:bf:15:26:02:3a:02:f5:cb:e4:79:6e:34:1a:
52:2a:6a:79:99:ab:0d:0e:d6:01:05:31:ec:09:ca:83:b2:8b:
0e:f6:29:5d:94:08:a6:15:f4:20:e3:83:95:fb:29:e7:51:72:
a9:a2:a0:5d:ee:bc:87:a3:bd:c3:36:f9:17:db:36:74:a8:6a:
83:4e:ba:1e:6c:30:2e:90:53:d9:f9:df:90:44:7c:a1:b8:51:
fa:07:3b:18:45:64:eb:9a:ae:6d:21:75:e2:c5:f6:71:05:59:
e1:f0:57:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:45 2025 by rpki-client