Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/C4ktMElPH_Y9hantOtDslxS5_ps.roa
File: C4ktMElPH_Y9hantOtDslxS5_ps.roa (raw, json)
Hash identifier: taGnemnzByTODEvwUDuDFxekEx3bxhbaSwujT2jyj3I=
Subject key identifier: 0B:89:2D:30:49:4F:1F:F6:3D:85:A9:ED:3A:D0:EC:97:14:B9:FE:9B
Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial: 0194206862EFD7E4773F8C591E879529887C
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/C4ktMElPH_Y9hantOtDslxS5_ps.roa
Signing time: Wed 01 Jan 2025 05:48:19 +0000
ROA not before: Wed 01 Jan 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2850
IP address blocks: 137.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:62:ef:d7:e4:77:3f:8c:59:1e:87:95:29:88:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Validity
Not Before: Jan 1 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b892d30494f1ff63d85a9ed3ad0ec9714b9fe9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:68:c1:85:6d:4e:4c:3c:9b:1e:fe:d3:ed:ac:
f4:7c:99:67:da:c1:64:58:40:02:d7:a8:11:2c:32:
a0:95:d3:16:bc:4f:d5:c7:9d:7e:5e:5b:ea:9f:f8:
f1:22:8e:6f:52:8f:3e:52:fa:5e:c5:d4:17:b6:ca:
36:ce:81:aa:74:99:8b:84:a8:cf:4b:d7:46:95:ff:
09:93:c8:63:b1:94:2c:a9:be:ee:f4:b2:5e:15:31:
9a:1b:23:c9:b1:2b:cd:bf:e0:d4:18:aa:24:f1:49:
fb:de:d1:1d:eb:2b:f0:62:b5:a0:ad:8b:54:86:1c:
70:c9:08:fe:1d:14:f9:42:86:a7:61:15:3a:1a:0d:
b8:eb:c4:59:21:21:26:f8:25:d0:c5:9f:99:2a:50:
6e:79:4f:8c:86:a5:68:8b:f4:82:73:b6:3a:b9:6b:
5d:98:6f:e4:82:ac:30:57:1d:d5:21:57:a7:e0:53:
36:03:16:ee:34:f2:d5:9a:1d:50:58:dd:0c:b1:82:
9c:54:ce:4d:5e:d1:8f:10:e9:d1:09:be:0b:f4:91:
b0:be:0d:de:d9:9a:1a:bc:98:2a:5b:41:ab:6b:a3:
87:ec:87:d1:d3:61:49:1c:fd:ab:0b:8e:87:37:da:
db:12:3c:6a:1e:dd:d0:5d:ed:d7:da:68:df:47:52:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:89:2D:30:49:4F:1F:F6:3D:85:A9:ED:3A:D0:EC:97:14:B9:FE:9B
X509v3 Authority Key Identifier:
keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/C4ktMElPH_Y9hantOtDslxS5_ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b5:41:bd:9e:a5:35:49:12:8c:c8:3f:67:e5:1d:d5:2e:78:d3:
b0:ca:98:f1:ef:2c:7a:a1:80:8c:88:dd:ad:57:83:40:51:2c:
53:e9:07:f3:80:92:50:ba:80:c1:e6:b0:83:6e:df:6a:50:2a:
f0:2e:b4:cb:26:0a:11:dc:18:f2:d3:95:bd:02:dd:0b:7a:e2:
3e:ca:b3:70:29:53:b6:ce:63:cc:47:54:dd:56:7a:36:aa:02:
2c:9e:32:bd:9b:43:bd:64:77:3f:c6:20:6b:59:86:10:f4:cf:
6f:67:80:a9:e4:3b:6a:a0:dd:15:f2:ec:57:44:43:df:91:4f:
eb:ee:bb:23:65:57:65:74:c1:23:47:0d:67:b2:00:7b:eb:2b:
9a:30:33:3f:ba:6d:ef:40:df:9b:f0:fa:11:8f:89:cf:7a:77:
88:47:ca:49:45:c9:ef:0f:ab:e1:9b:72:be:2e:1f:af:d0:5d:
2c:06:42:30:dd:eb:d9:84:57:6b:36:3d:62:b9:44:fc:6b:dd:
53:14:d6:da:8f:ae:de:29:bd:42:10:09:90:08:28:c7:e3:ea:
af:92:6a:1d:21:ef:d9:72:1b:47:5f:cf:5a:d9:8b:1e:f1:cd:
86:d5:3b:fa:92:da:46:49:32:20:5d:2a:8c:54:8f:5a:c2:3e:
d5:a2:a4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:50:15 2025 by rpki-client