Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/pOMTJTMzSvxdTwpBEEiCIJOdgS4.roa
File: pOMTJTMzSvxdTwpBEEiCIJOdgS4.roa (raw, json)
Hash identifier: N66sR+vsnvfn2vQyEXUghMnGW+xEPargkQo2ZBulpiM=
Subject key identifier: A4:E3:13:25:33:33:4A:FC:5D:4F:0A:41:10:48:82:20:93:9D:81:2E
Certificate issuer: /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Certificate serial: 019422FBDCDE5EA7A298FC66107B61140EEA
Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/pOMTJTMzSvxdTwpBEEiCIJOdgS4.roa
Signing time: Wed 01 Jan 2025 17:48:38 +0000
ROA not before: Wed 01 Jan 2025 17:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51395
IP address blocks: 185.237.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:dc:de:5e:a7:a2:98:fc:66:10:7b:61:14:0e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Validity
Not Before: Jan 1 17:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4e3132533334afc5d4f0a4110488220939d812e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9d:a3:48:a2:0d:73:32:03:5b:ed:b1:0e:7c:
8c:17:4a:41:a4:35:a2:de:63:71:d1:50:b2:48:af:
58:71:d8:dc:2d:2a:c1:cc:b4:a9:f3:c5:da:f8:73:
e8:fd:b3:f6:b8:ed:b2:6b:bc:3a:27:29:01:36:2c:
98:b2:18:59:c4:ff:4a:6b:2c:69:93:40:09:9a:ac:
be:45:9c:40:e2:67:41:30:89:6d:9e:4b:b1:e4:c3:
c4:65:fc:61:7d:f2:c0:8a:fb:b6:f1:dc:28:6b:9b:
2a:de:06:e9:00:84:2d:3b:99:51:9e:29:8e:51:cc:
af:1d:8a:59:cb:9d:3b:27:f8:10:aa:11:91:85:ca:
8b:ff:f2:9e:25:7d:be:c6:e6:6a:41:34:a9:13:9b:
2c:d9:1a:71:37:06:f5:d9:86:c1:8f:b3:ec:d7:be:
a9:9e:69:4b:b7:44:7c:6a:54:7b:0d:58:e1:c9:d6:
1f:e7:66:da:93:86:c2:fd:01:21:a0:c1:b7:58:13:
ec:81:a6:e2:d0:3e:4d:2f:f6:d2:20:05:5a:3f:70:
4e:b7:99:53:b4:82:a0:47:06:cd:99:ba:2c:c3:49:
0d:a0:d3:e0:58:06:9f:e9:17:a6:61:46:47:06:97:
13:2f:89:d3:a4:f6:84:0a:95:55:60:78:69:f2:0e:
6b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E3:13:25:33:33:4A:FC:5D:4F:0A:41:10:48:82:20:93:9D:81:2E
X509v3 Authority Key Identifier:
keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/pOMTJTMzSvxdTwpBEEiCIJOdgS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.100.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ff:4d:9e:57:68:ab:4b:23:a3:7e:1c:41:b7:a0:56:41:8f:
01:3b:62:ad:de:53:ed:d0:ac:90:5c:64:33:4e:1e:2a:5e:5e:
51:54:2f:53:f3:00:66:8a:0e:61:f4:54:bb:41:64:96:35:d4:
23:5b:8c:01:40:6f:60:bd:85:c9:31:74:66:9a:e2:72:21:c8:
0b:60:99:c9:43:45:f9:d3:db:95:0a:7b:f8:09:a4:d2:35:41:
8c:07:78:eb:11:be:18:01:5b:63:cb:68:5b:b1:4b:90:d0:f8:
67:cd:42:a7:3a:60:d4:fd:9c:15:42:1d:e3:13:14:64:c1:1f:
0c:13:6a:16:c9:68:a0:fd:9e:48:93:ac:66:32:ef:c8:59:bb:
f3:e9:b0:2d:de:8d:a1:18:aa:b9:2e:aa:5a:2b:ea:04:05:5f:
71:67:62:c2:7a:c9:49:36:88:fa:6d:09:f7:76:ea:1c:42:62:
e6:7f:ec:b4:29:e5:86:6f:26:5c:34:d7:25:c9:b2:7b:a6:89:
5d:5d:81:12:01:fd:ea:0d:b9:8f:ba:49:ee:00:cb:84:6a:70:
11:4f:65:23:d1:45:1a:bf:6c:8e:a3:da:6b:a1:54:83:65:07:
d0:54:82:d0:c5:23:60:4b:ad:a7:a0:29:72:a7:28:22:8a:06:
c5:97:c6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:20:57 2025 by rpki-client