Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/4m_ZlqWE1YEBP4kWtbELic7ECzg.roa
File: 4m_ZlqWE1YEBP4kWtbELic7ECzg.roa (raw, json)
Hash identifier: t8PO7dqvDfBV4dwcfBXHsLynSbU2oXoJqnNbzqZG81g=
Subject key identifier: E2:6F:D9:96:A5:84:D5:81:01:3F:89:16:B5:B1:0B:89:CE:C4:0B:38
Certificate issuer: /CN=4df1811f3997b950ac89e410ea3ef018a673d5fc
Certificate serial: 0194274796644D7A550A0C9530D948AF2A90
Authority key identifier: 4D:F1:81:1F:39:97:B9:50:AC:89:E4:10:EA:3E:F0:18:A6:73:D5:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/4m_ZlqWE1YEBP4kWtbELic7ECzg.roa
Signing time: Thu 02 Jan 2025 13:49:50 +0000
ROA not before: Thu 02 Jan 2025 13:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200985
IP address blocks: 94.199.96.0/22 maxlen: 24
2a06:d6c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:96:64:4d:7a:55:0a:0c:95:30:d9:48:af:2a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df1811f3997b950ac89e410ea3ef018a673d5fc
Validity
Not Before: Jan 2 13:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e26fd996a584d581013f8916b5b10b89cec40b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:a9:ea:2d:ed:64:51:b2:bd:c6:9d:52:75:
7c:e8:7e:a4:ae:66:1a:c7:79:c4:d7:33:58:ec:f3:
7d:3b:4e:75:99:8b:55:36:48:9e:26:1d:1c:90:f9:
3c:a7:04:c0:00:12:0f:ea:63:b9:7d:41:6f:ff:9d:
86:d4:38:00:e3:77:69:bc:d4:99:51:94:1e:cb:28:
be:d5:11:5b:0c:02:0e:b0:b8:aa:92:e5:99:ed:83:
de:a8:f5:1a:ab:d4:96:9a:2c:60:45:42:a0:ee:64:
f7:65:4a:35:f7:45:1d:62:e8:c3:b6:97:2c:88:58:
87:4f:b3:25:c8:f6:6a:4c:9b:29:92:26:0a:7d:70:
05:17:26:91:20:17:41:c7:a1:6c:e1:66:73:24:44:
18:0f:61:7a:0b:5c:3e:e3:1b:e0:d7:c5:9b:f8:04:
a7:f4:9d:fc:77:27:02:ae:3f:93:5d:02:25:56:b6:
db:b4:f0:b7:de:bf:03:1a:07:72:18:8a:f6:c5:6a:
0f:9c:85:10:d2:14:e4:f3:39:ef:e0:06:ca:d8:7b:
1d:ed:ca:4c:6a:2a:8b:f1:22:2c:6d:e3:cd:4e:eb:
3d:68:9f:b1:10:6a:45:3e:83:71:94:3c:6e:f0:05:
eb:77:b9:f8:91:c1:4d:25:88:34:2e:ec:a9:26:20:
3b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6F:D9:96:A5:84:D5:81:01:3F:89:16:B5:B1:0B:89:CE:C4:0B:38
X509v3 Authority Key Identifier:
keyid:4D:F1:81:1F:39:97:B9:50:AC:89:E4:10:EA:3E:F0:18:A6:73:D5:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/4m_ZlqWE1YEBP4kWtbELic7ECzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.96.0/22
IPv6:
2a06:d6c0::/32
Signature Algorithm: sha256WithRSAEncryption
7d:c7:5e:90:93:68:9c:e7:5e:50:f2:55:7e:5d:18:0a:9b:5b:
1a:76:f8:45:9c:3e:32:16:1a:32:07:c2:9b:5a:95:3f:f7:5d:
d1:dc:6d:14:db:cc:59:16:f2:a3:e5:ee:76:1d:ab:2b:47:a5:
64:f9:53:4a:6a:5c:34:ad:5d:72:65:d6:dd:b1:d7:1e:b7:16:
6d:5a:ee:92:4d:98:8f:25:bc:f7:56:9c:2f:4a:7d:fe:93:ef:
b0:31:49:a4:25:74:8a:de:dd:b4:e8:e1:78:d3:57:3b:16:2c:
26:d0:45:97:b9:6e:84:d5:3a:28:9e:14:40:ff:a5:98:18:57:
85:44:83:e6:34:e8:ce:58:c7:63:ad:6d:81:ab:85:8e:87:87:
28:b5:89:1e:e4:c2:36:bb:b2:b8:e3:cd:13:57:d2:25:5b:1c:
df:18:c7:d0:a1:6c:5b:e2:f2:02:a0:d3:b7:c9:19:ed:34:4e:
94:68:0b:85:5d:3d:1e:9c:f2:ec:63:6f:db:19:90:e9:ae:80:
b1:d0:89:f4:8c:82:5c:91:17:fb:ff:8f:ea:c7:a6:5f:08:fa:
8e:88:9d:f2:61:63:02:0f:3d:88:0f:41:d3:68:cb:42:6e:61:
30:af:20:28:bf:72:cd:99:a7:c9:f8:b5:e1:ac:fe:f2:68:7e:
ba:64:46:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:30 2025 by rpki-client