Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/E_g8JEJGx2RzSEjGgXwsnLzhYuY.roa
File: E_g8JEJGx2RzSEjGgXwsnLzhYuY.roa (raw, json)
Hash identifier: 1/I3aoM+yKdAzYPZU70IJvPWqKBQF4IK2mBQQ0GVymw=
Subject key identifier: 13:F8:3C:24:42:46:C7:64:73:48:48:C6:81:7C:2C:9C:BC:E1:62:E6
Certificate issuer: /CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Certificate serial: 01942144403F1288C7DF3C85FDCDC8DD9210
Authority key identifier: 85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/E_g8JEJGx2RzSEjGgXwsnLzhYuY.roa
Signing time: Wed 01 Jan 2025 09:48:28 +0000
ROA not before: Wed 01 Jan 2025 09:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202746
IP address blocks: 185.43.52.0/22 maxlen: 24
2a04:94c0::/30 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:40:3f:12:88:c7:df:3c:85:fd:cd:c8:dd:92:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Validity
Not Before: Jan 1 09:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13f83c244246c764734848c6817c2c9cbce162e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b0:ac:1c:68:b8:81:94:0b:22:40:3e:27:fe:
36:06:5c:c7:21:cc:27:9d:d2:31:70:69:99:b5:8d:
03:e6:20:f4:e8:a6:77:ed:93:0d:4f:8b:91:6a:11:
82:e8:28:b3:b0:fc:d8:03:e0:16:af:b6:e3:2b:a7:
55:75:59:84:cd:18:3d:9a:76:1e:f2:d2:4a:83:86:
b5:34:7c:82:71:62:e6:79:ad:28:d5:94:56:20:ba:
f6:d3:2f:3e:7d:2b:20:40:8e:81:7f:7b:00:76:f4:
9f:ee:5f:b7:4f:73:6e:9f:fa:fc:5d:1d:98:7e:a4:
ed:19:05:f3:20:ad:f1:5e:bc:b6:ea:aa:b2:5f:60:
53:03:6a:51:27:f4:d4:90:f8:02:9c:a1:e4:fd:79:
43:01:19:f7:a4:2d:ad:0d:c6:36:4b:a5:c0:11:38:
61:48:78:5e:fd:a2:bc:07:eb:9a:f5:ce:ef:f1:0f:
3a:78:34:f9:7a:fa:63:1e:cc:d0:97:b2:87:fc:db:
8e:af:4d:23:e9:e9:7e:5c:b2:e4:e0:65:f2:61:c3:
62:a7:4a:58:1c:07:38:3c:53:b5:20:16:cd:4c:7b:
b4:06:25:64:f0:27:c7:32:f9:d6:c4:1b:e3:84:8d:
61:95:cd:e9:3d:78:be:ef:1c:9f:51:8e:de:d6:7d:
ac:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F8:3C:24:42:46:C7:64:73:48:48:C6:81:7C:2C:9C:BC:E1:62:E6
X509v3 Authority Key Identifier:
keyid:85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/E_g8JEJGx2RzSEjGgXwsnLzhYuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.52.0/22
IPv6:
2a04:94c0::/30
Signature Algorithm: sha256WithRSAEncryption
31:34:1c:e0:8f:d3:12:ff:fc:b1:23:64:bc:45:47:0a:37:f0:
79:ba:1f:93:ca:65:34:4c:d4:a5:ee:e4:f4:71:ad:06:8c:60:
40:5d:c9:59:7c:1a:ec:3d:5c:d9:4c:eb:f3:d6:0d:a1:21:2d:
f7:b8:18:23:37:e3:16:52:90:9f:1f:8f:66:72:22:71:0f:6e:
da:dc:3d:2d:53:06:5e:6e:29:09:11:fc:f7:cd:4f:24:45:d6:
c1:aa:45:e7:14:08:91:fc:21:7d:a4:85:1d:99:f7:65:de:ad:
0d:2b:9a:c4:50:aa:2f:ed:ca:d6:5c:d7:9b:c7:86:95:79:b7:
48:85:bd:3e:55:59:1f:c6:d5:83:f4:fa:f6:0e:b8:be:27:6e:
c2:98:a8:77:fb:71:a7:c1:ad:d5:85:9e:0c:ea:5c:11:93:4b:
43:c1:5a:6f:17:ca:c5:13:4f:9f:7b:6e:44:93:40:42:48:7b:
14:a5:ec:d6:ba:2c:c0:09:cf:f2:77:77:7e:5a:78:d4:6b:d1:
33:26:aa:72:72:be:4f:ec:46:32:ca:be:3e:4e:4f:29:32:44:
c5:e9:8f:0e:99:7a:95:c2:c6:94:3b:dd:39:0a:fb:9e:32:6f:
f6:a3:ef:b1:c8:da:43:f4:2b:60:d9:3f:20:16:6c:c8:75:3d:
37:e4:38:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:41 2025 by rpki-client