Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/Sl8BbPDt6kdls_K1R2Dh5Z2l9ss.roa
File: Sl8BbPDt6kdls_K1R2Dh5Z2l9ss.roa (raw, json)
Hash identifier: FohmZC9RjfkLWGSkIiIa2VtU1w5u6RfcN+tDaynMZcc=
Subject key identifier: 4A:5F:01:6C:F0:ED:EA:47:65:B3:F2:B5:47:60:E1:E5:9D:A5:F6:CB
Certificate issuer: /CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
Certificate serial: 019422FC1A8F730A1A6F3809BFFA7D31DAD5
Authority key identifier: E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/Sl8BbPDt6kdls_K1R2Dh5Z2l9ss.roa
Signing time: Wed 01 Jan 2025 17:48:54 +0000
ROA not before: Wed 01 Jan 2025 17:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31712
IP address blocks: 83.142.32.0/21 maxlen: 21
95.128.8.0/21 maxlen: 21
185.108.56.0/22 maxlen: 22
2a04:4100::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1a:8f:73:0a:1a:6f:38:09:bf:fa:7d:31:da:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
Validity
Not Before: Jan 1 17:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a5f016cf0edea4765b3f2b54760e1e59da5f6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:04:1d:59:f9:d7:ef:f0:25:39:e0:9f:08:36:
1b:43:5f:60:ab:29:27:59:33:09:57:db:df:71:14:
0a:aa:48:5f:36:a3:24:88:8e:c9:23:52:6d:ad:e8:
0f:67:ca:3e:5c:4b:95:47:2d:66:40:7d:e1:35:9e:
03:19:cb:be:17:2c:4a:1f:8c:e7:5c:02:08:75:6f:
21:9c:b4:a4:28:f5:da:84:53:c4:be:61:2b:d9:77:
44:43:f2:30:c7:69:d5:dc:69:68:45:fc:c4:04:2c:
5c:3e:9f:c8:5f:7c:4c:5e:fc:c6:66:e1:b1:20:68:
c6:6c:9a:f4:f1:0d:65:1a:3c:06:d3:0e:c8:75:fd:
ea:e4:70:5a:4d:36:4a:56:2f:bd:9e:9e:5b:4c:36:
a5:ef:ad:c0:c1:25:90:7e:ac:4c:36:65:32:96:62:
d5:16:16:cc:ce:62:3b:54:6c:7f:05:da:51:f5:f9:
24:78:32:c4:bd:5c:ae:02:23:da:e2:8b:ed:f6:e0:
1b:ec:d4:8b:9d:e5:c7:f8:41:23:0d:53:bf:fd:cd:
47:99:75:91:47:e9:79:18:f1:49:1b:18:18:4e:f7:
9e:04:94:e3:6e:7e:8e:69:f8:5b:14:97:b7:cd:f2:
50:1d:78:63:34:99:76:62:55:d2:6d:7d:3e:83:79:
ad:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5F:01:6C:F0:ED:EA:47:65:B3:F2:B5:47:60:E1:E5:9D:A5:F6:CB
X509v3 Authority Key Identifier:
keyid:E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/Sl8BbPDt6kdls_K1R2Dh5Z2l9ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.32.0/21
95.128.8.0/21
185.108.56.0/22
IPv6:
2a04:4100::/29
Signature Algorithm: sha256WithRSAEncryption
7e:80:86:08:c3:cd:70:01:66:d4:58:7d:d1:78:90:38:85:c9:
1a:e6:07:3e:b4:7e:6b:31:0a:9a:5d:85:d9:70:7c:a0:36:d7:
f5:c7:8d:8e:a0:2e:ce:54:e4:4f:08:67:f2:7c:a2:1d:1d:72:
a2:e8:3f:c4:6b:b6:9a:70:82:75:89:39:16:fc:44:51:b5:ac:
3c:12:18:5b:e0:15:ba:d2:c2:ed:e4:5f:e7:78:1b:ec:01:98:
34:38:b1:b1:9b:68:4d:8e:5c:96:76:65:9e:bb:1a:8e:04:45:
22:60:b2:82:e8:76:58:d0:ac:73:cb:c9:32:85:84:97:b3:b9:
a2:b9:24:df:5d:61:0b:56:21:e7:8c:c6:03:6d:8a:ed:1f:b1:
bb:08:f1:51:80:55:7b:2d:68:b7:ac:27:eb:3d:9b:54:65:c6:
f2:10:da:21:3d:5f:71:6d:58:5f:db:50:11:81:8f:8f:46:89:
4f:91:2d:ec:a0:c0:07:e8:48:e3:57:a0:26:c1:f7:58:9d:3b:
23:c2:12:79:88:a9:93:a5:cd:db:7f:a4:1d:73:d5:53:90:55:
a9:d2:90:7e:c7:00:28:3c:6a:74:cc:b0:a3:93:62:7c:62:da:
30:da:be:8c:d2:dc:a0:f3:c7:7f:48:cd:c4:35:46:6c:b3:87:
b8:fb:12:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:49 2025 by rpki-client