Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/4gBDlHfraeJIeTYRGBqyZyvtae8.roa
File: 4gBDlHfraeJIeTYRGBqyZyvtae8.roa (raw, json)
Hash identifier: Qqj1EC36vQFgIkoRX33NjG4dXDa3mcsnpDKk5Y8xJEA=
Subject key identifier: E2:00:43:94:77:EB:69:E2:48:79:36:11:18:1A:B2:67:2B:ED:69:EF
Certificate issuer: /CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Certificate serial: 0194252221FDCAD92239D424E60C9E165B71
Authority key identifier: 57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/4gBDlHfraeJIeTYRGBqyZyvtae8.roa
Signing time: Thu 02 Jan 2025 03:49:41 +0000
ROA not before: Thu 02 Jan 2025 03:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202214
IP address blocks: 185.50.64.0/23 maxlen: 23
185.50.64.0/24 maxlen: 24
185.50.65.0/24 maxlen: 24
185.50.66.0/23 maxlen: 23
185.50.66.0/24 maxlen: 24
185.50.67.0/24 maxlen: 24
2a01:a6a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:21:fd:ca:d9:22:39:d4:24:e6:0c:9e:16:5b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Validity
Not Before: Jan 2 03:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e200439477eb69e248793611181ab2672bed69ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:ca:10:8a:d4:55:f6:50:9d:50:9c:1f:c6:
8d:1c:77:4f:5d:5e:bd:90:d2:84:8f:ab:1c:cc:d9:
d9:7e:19:4d:9f:e3:0f:a0:c3:7e:e5:b7:21:0a:fd:
2f:b4:ad:cc:ed:98:aa:9f:0b:24:2a:eb:33:42:87:
11:48:00:61:2d:12:32:7a:1c:9e:bf:12:22:b7:d8:
41:e5:ab:4b:45:4e:5e:24:fb:77:0d:20:1b:c1:bd:
9a:ec:b4:e8:14:25:2b:a1:26:25:ae:f3:4f:bf:ca:
7b:bb:7b:ca:c5:a2:50:a3:69:b9:2f:59:39:32:5f:
de:69:12:05:1e:b4:3f:b4:6b:92:3a:5f:47:7b:45:
54:3d:e5:99:ad:6c:fa:be:27:70:63:81:c6:62:5e:
dd:ad:1c:bc:47:4e:1e:c8:76:ea:bb:8a:f7:1d:8e:
42:a1:2e:12:13:6f:ce:83:d4:4d:fb:62:95:09:de:
50:66:7c:a3:f3:93:11:39:98:4e:10:9a:56:92:d2:
40:99:d3:62:c6:5c:a2:b9:f9:7f:86:95:25:e8:d0:
0e:5a:48:89:00:67:9c:5c:3f:f2:0b:7b:22:fb:b2:
b2:ff:63:35:b5:c0:d2:67:65:23:77:58:e4:f0:d9:
ac:cf:2d:00:53:44:70:6d:da:9a:e2:3e:86:e5:f4:
28:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:00:43:94:77:EB:69:E2:48:79:36:11:18:1A:B2:67:2B:ED:69:EF
X509v3 Authority Key Identifier:
keyid:57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/4gBDlHfraeJIeTYRGBqyZyvtae8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.64.0/22
IPv6:
2a01:a6a0::/32
Signature Algorithm: sha256WithRSAEncryption
75:e9:70:28:08:f4:7d:e3:64:db:27:fa:f0:eb:b8:68:8e:e7:
48:e5:b3:c5:62:ca:be:3c:ce:34:ae:35:98:90:24:43:f8:09:
c4:df:db:5b:08:cc:48:ca:fe:4c:9f:83:bf:03:fc:18:54:dc:
9a:22:ca:c0:fa:fc:c7:d3:59:af:17:c4:b1:85:ce:63:2f:62:
61:2a:f2:fb:32:c3:c6:7f:f3:dc:70:f4:9f:d4:d8:80:47:38:
5e:7f:83:52:73:16:ed:54:ec:d3:61:65:5f:39:10:55:25:b4:
53:81:28:78:e8:8d:79:a7:09:c7:dc:04:59:86:ee:64:10:2c:
1e:38:a8:b8:26:56:48:c1:4b:6e:56:0e:8b:9f:41:3f:9c:82:
d7:8f:55:bb:c6:40:b2:5d:9a:82:91:f7:13:f1:8f:16:23:d5:
33:8d:4d:07:8f:d0:80:d9:74:28:4e:45:b6:95:6b:88:ad:bf:
a9:50:9d:46:bf:a8:65:b0:5a:ec:32:9c:ab:bc:e7:16:cd:61:
28:4e:8f:e4:0b:fa:11:15:d0:8f:be:d3:a2:cc:6a:a0:4d:43:
7d:e0:b5:ba:54:90:64:87:d2:5d:98:05:9e:ad:54:bd:b8:4b:
ff:39:9a:d2:b0:57:45:f5:56:1c:59:c8:8e:26:69:18:6f:c9:
5e:77:f5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:08:57 2025 by rpki-client