Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/4nVbm_9mW8-MAn0I_kGjdBfxhVw.roa
File: 4nVbm_9mW8-MAn0I_kGjdBfxhVw.roa (raw, json)
Hash identifier: pTL9FLQm2ArdSOx4IvTJl5dYC4wcCTYCswuw3GEGHMQ=
Subject key identifier: E2:75:5B:9B:FF:66:5B:CF:8C:02:7D:08:FE:41:A3:74:17:F1:85:5C
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 019423D767AC33832092EC887D03A89958D8
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/4nVbm_9mW8-MAn0I_kGjdBfxhVw.roa
Signing time: Wed 01 Jan 2025 21:48:26 +0000
ROA not before: Wed 01 Jan 2025 21:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41959
IP address blocks: 185.125.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:67:ac:33:83:20:92:ec:88:7d:03:a8:99:58:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: Jan 1 21:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2755b9bff665bcf8c027d08fe41a37417f1855c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:66:95:6a:a3:b9:5e:e3:66:7b:29:e1:f1:4f:
ec:4b:10:8c:6e:c6:42:ad:73:42:6b:17:96:ad:6b:
e6:03:b3:61:86:3a:c4:bb:7c:67:b7:21:8f:2d:82:
c0:0b:d5:77:44:cb:47:2d:9c:48:0f:75:b0:52:7d:
39:f5:bf:a5:80:ae:90:42:c5:a1:4f:75:a6:83:0f:
6a:35:fd:fa:2d:e5:2b:d2:33:12:4e:73:19:7c:1c:
28:e7:41:2d:10:f3:a1:20:41:99:e5:83:45:f7:0f:
ba:3d:6e:ee:df:39:8b:f7:56:83:d0:15:6f:4a:b0:
b8:06:a3:6c:03:fb:9b:0c:79:f3:6f:89:de:db:41:
99:d4:14:a1:7f:ae:b7:08:ce:1a:28:77:7e:7d:9c:
cc:cb:76:3f:ad:5b:4e:b2:db:74:e6:4b:d0:83:c1:
6f:4a:06:00:2e:e3:47:9e:8d:49:cc:ff:ce:df:83:
60:49:4a:3a:fe:4f:8b:20:e8:2e:8d:87:bf:04:2d:
fb:b2:17:36:e2:27:86:f6:cb:e9:ff:11:f9:5a:20:
25:9a:b5:63:85:3c:7a:32:e9:c7:06:89:cd:13:2d:
2f:0a:7c:f3:d3:f0:18:54:4d:c4:13:10:ab:7f:5d:
8f:08:5f:cc:7b:a6:9e:7c:53:3f:96:96:dc:8f:b8:
51:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:75:5B:9B:FF:66:5B:CF:8C:02:7D:08:FE:41:A3:74:17:F1:85:5C
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/4nVbm_9mW8-MAn0I_kGjdBfxhVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.6.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:78:76:4c:49:e6:96:19:4e:f5:cd:59:d7:29:1d:d3:2b:b7:
a7:1d:b0:a6:90:d4:a8:1d:44:39:1f:19:96:8b:b8:73:e2:6f:
a7:e9:3a:ae:9d:75:23:bf:3c:6a:4e:27:be:1b:68:4f:40:36:
a4:76:d3:84:eb:a1:10:79:58:de:0f:66:b7:3b:26:ec:74:53:
5c:4d:99:34:15:25:e7:06:19:2e:f6:68:06:28:77:36:34:4b:
25:8e:2c:2e:55:74:68:5f:a3:55:4c:ed:b1:a2:ca:88:9f:20:
88:8c:e3:e4:73:92:12:e7:65:7c:ca:05:ee:54:d1:16:71:36:
57:21:17:f2:98:2f:64:cc:b3:54:fa:81:71:b4:f7:c4:35:8d:
2f:89:4c:51:17:b6:8e:25:3e:fc:64:1c:1e:b5:f5:90:c7:a0:
dc:61:e8:05:bd:25:16:0d:2c:5f:4c:8b:b1:7e:ff:e1:71:bb:
51:bc:42:ba:08:36:a2:c2:91:0b:6c:24:a6:97:1d:6f:92:6d:
34:5d:30:50:da:7a:d8:a6:76:c9:ea:56:93:e3:5c:02:9c:18:
9c:92:ff:d3:d5:29:7a:48:e1:63:4a:f6:85:fa:de:19:7b:b0:
47:34:f5:a6:5d:b7:0d:fc:60:ed:ac:b3:f2:f9:43:5e:64:69:
16:52:f2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:53:02 2025 by rpki-client