Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/4pIrmmCZWAO8NuTmun2AQKQETQo.roa
File: 4pIrmmCZWAO8NuTmun2AQKQETQo.roa (raw, json)
Hash identifier: Pf6nhAI8L5UL8XOlhvccLv1CzKTIGW/DapLLMv9479I=
Subject key identifier: E2:92:2B:9A:60:99:58:03:BC:36:E4:E6:BA:7D:80:40:A4:04:4D:0A
Certificate issuer: /CN=46aa60676c130c6438e45b5a607210e9566b6832
Certificate serial: 01941FFAB54720A1C8BF824F2C8DF774DB6B
Authority key identifier: 46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/4pIrmmCZWAO8NuTmun2AQKQETQo.roa
Signing time: Wed 01 Jan 2025 03:48:31 +0000
ROA not before: Wed 01 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50346
IP address blocks: 193.104.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b5:47:20:a1:c8:bf:82:4f:2c:8d:f7:74:db:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46aa60676c130c6438e45b5a607210e9566b6832
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2922b9a60995803bc36e4e6ba7d8040a4044d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:ac:eb:06:ee:b1:a8:3c:6a:f5:10:5c:03:
43:84:19:63:a9:55:e4:5e:9e:67:d2:68:56:90:a0:
d4:d5:54:51:60:06:44:de:eb:1b:9a:88:c9:40:a7:
85:6c:f4:29:31:0b:cb:67:ff:f2:9b:b7:c5:10:65:
9e:1f:15:d5:d5:9d:1d:6c:eb:df:0e:b2:29:8b:0c:
13:41:ea:24:e8:85:7f:09:8e:12:16:b8:22:07:5c:
ba:ca:f5:eb:a8:0c:c5:26:13:c2:3b:ec:26:2a:bc:
44:67:0e:ee:4a:a8:cf:40:6a:5e:1b:ee:49:7c:a1:
53:0c:9e:48:e8:4d:79:5c:40:21:0b:3a:b7:2d:ca:
28:30:12:50:5c:92:11:e9:43:61:98:d1:6b:c6:06:
68:77:19:f9:f3:e7:ca:98:33:95:00:9f:85:9f:3b:
da:1b:64:b5:e3:ec:1b:3c:62:01:e8:65:eb:fd:2a:
26:1f:dd:68:d6:c5:23:3c:b8:81:34:27:7e:01:ea:
2a:75:b7:a3:ac:ec:15:a5:e0:30:e6:f9:f3:9e:38:
82:dd:47:a2:fa:1d:a5:02:7d:4e:99:45:1a:e7:68:
8c:26:3b:64:58:35:21:34:32:0a:e2:05:e4:0e:bc:
b2:85:bf:eb:cc:07:e9:e1:44:67:09:fd:89:f7:0c:
5f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:92:2B:9A:60:99:58:03:BC:36:E4:E6:BA:7D:80:40:A4:04:4D:0A
X509v3 Authority Key Identifier:
keyid:46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/4pIrmmCZWAO8NuTmun2AQKQETQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.202.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:cd:13:15:dd:f1:32:14:4b:99:2e:d8:b5:59:2e:51:bd:e0:
6b:19:5d:b6:86:3d:86:3e:dd:01:96:c9:dd:21:24:0b:cc:b1:
ed:15:50:18:81:6d:5f:4a:ec:35:36:81:aa:3a:26:22:09:51:
8f:c7:2f:73:81:be:67:ad:a7:d3:5b:30:d5:38:27:9b:f5:f6:
69:a8:71:c8:d2:1a:a8:b0:ee:b2:24:16:70:9f:ed:b4:e4:c2:
54:d5:3a:dc:a6:f2:6e:d0:a8:2f:38:fb:ba:62:87:7f:6d:9c:
97:9e:5a:78:b2:09:07:e7:22:51:58:18:75:fb:c0:59:cd:d8:
a0:c8:a9:08:b6:90:d4:77:2d:74:9a:10:0d:08:f0:39:34:7a:
6c:37:67:e6:e5:59:9d:9a:37:1c:45:fa:f5:ab:73:35:4d:6a:
15:42:d4:ad:d9:68:96:e2:2e:01:f8:25:43:25:4e:c1:a9:62:
25:9d:a8:75:9d:f1:ea:20:19:e7:e7:43:3d:5a:b9:7b:92:fe:
47:41:80:ce:e6:09:a1:d9:ac:58:d6:6d:f4:b0:f9:bb:87:30:
5e:a1:74:ef:e3:7a:d7:e3:70:af:62:24:f0:7f:00:06:69:49:
20:78:6f:20:25:ac:60:34:8c:ac:cf:7d:fd:68:b4:30:61:99:
60:c2:b9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:18 2025 by rpki-client