Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/4PwJxAwKax5Reljdgs0YL3qX31Q.roa
File: 4PwJxAwKax5Reljdgs0YL3qX31Q.roa (raw, json)
Hash identifier: UYp5AvhZKwwfeYa3iRTnePJRJNovfCx7buPjdCyUR7I=
Subject key identifier: E0:FC:09:C4:0C:0A:6B:1E:51:7A:58:DD:82:CD:18:2F:7A:97:DF:54
Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial: 019423691084CF5BCBB011993659EE41478D
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/4PwJxAwKax5Reljdgs0YL3qX31Q.roa
Signing time: Wed 01 Jan 2025 19:47:55 +0000
ROA not before: Wed 01 Jan 2025 19:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15470
IP address blocks: 193.239.60.0/22 maxlen: 22
195.225.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:10:84:cf:5b:cb:b0:11:99:36:59:ee:41:47:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Validity
Not Before: Jan 1 19:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0fc09c40c0a6b1e517a58dd82cd182f7a97df54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a2:4b:6c:29:01:fb:fe:a0:c2:ca:b8:da:e8:
d2:d6:c4:16:03:46:3c:ad:00:7b:af:28:f4:4d:60:
45:9f:d0:06:4a:af:84:7c:63:38:62:2e:9e:c7:2c:
a2:b2:74:d1:e0:f5:ff:8c:4b:f5:fa:e7:c2:7c:6b:
d6:33:a1:d2:e0:7d:58:b0:77:50:6f:a4:84:90:c5:
dc:1e:ff:52:fc:a3:6b:58:e7:5f:83:65:69:ad:18:
ca:b5:3e:9b:63:52:f1:a5:f1:3d:77:f7:5f:c0:07:
73:55:bd:da:85:06:b0:e8:cf:d3:fd:83:e0:8b:e8:
0b:a4:26:14:2b:1a:58:37:4f:94:94:4f:30:02:fa:
4d:55:1c:18:7a:b8:1c:c1:95:ed:83:e7:cf:14:79:
8f:43:a7:d6:6e:ea:17:74:0c:d7:c9:9a:53:55:af:
3c:73:f0:7e:b5:9d:3c:c3:66:bc:93:02:3a:82:94:
34:03:c1:02:96:51:c9:a9:39:8e:9e:48:30:84:3f:
58:79:54:67:76:a2:a4:ec:e8:69:12:c6:a3:9d:aa:
4e:42:7d:42:08:80:56:c1:2c:b5:32:16:6d:c6:d4:
52:e5:31:4e:0c:2d:f9:26:52:22:84:d9:e3:97:ab:
30:6f:44:7f:dc:5e:1f:85:9d:85:c1:8c:3c:20:77:
d0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FC:09:C4:0C:0A:6B:1E:51:7A:58:DD:82:CD:18:2F:7A:97:DF:54
X509v3 Authority Key Identifier:
keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/4PwJxAwKax5Reljdgs0YL3qX31Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.60.0/22
195.225.212.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:04:0d:20:36:ae:30:ba:ad:14:7a:6e:b2:52:e3:eb:1f:c6:
84:8f:66:ac:71:a8:c2:66:ee:d5:e5:fc:38:aa:ed:ef:9d:95:
d2:08:3b:b1:7d:a9:e1:71:61:35:93:3b:2f:12:41:fb:e9:10:
e5:0e:93:a9:a7:3c:8d:cf:df:c6:66:c7:4a:9b:c7:7b:5f:fc:
96:df:d8:7e:9d:31:65:51:34:c9:56:e9:ef:64:f8:d2:5d:e8:
4a:a5:ab:8d:8c:a7:9f:10:23:98:9b:65:06:bd:22:f4:99:a4:
90:b0:bb:9a:36:50:d7:c5:6b:b9:f1:09:08:28:dc:ac:62:26:
bd:28:85:c2:4f:9d:70:49:33:fa:39:40:67:05:99:c5:4c:16:
9b:c3:20:39:94:c9:98:28:84:a9:e6:a4:b7:2e:42:43:b1:c2:
db:00:30:c8:1f:d4:d6:23:fa:74:71:24:41:93:55:f5:92:df:
b6:2f:be:e5:97:80:ce:05:e7:cc:f2:0b:13:90:23:42:71:b0:
8b:72:9c:94:bf:45:cd:0d:2e:c7:67:47:83:b5:ba:c1:6c:df:
76:71:6c:b8:3a:cd:34:98:1a:c7:ce:1e:0c:f7:b1:4e:f9:0e:
65:33:8a:74:14:37:29:93:0f:22:ce:d6:66:64:0d:69:0b:08:
a8:ab:0d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:54 2025 by rpki-client