Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/4aD_diZcqz66cb-gRuWxY7oFFaE.roa
File: 4aD_diZcqz66cb-gRuWxY7oFFaE.roa (raw, json)
Hash identifier: QK/zRnnVk7Mczgmmt/LmV82yLkcxUeWcSJEu6zoorXU=
Subject key identifier: E1:A0:FF:76:26:5C:AB:3E:BA:71:BF:A0:46:E5:B1:63:BA:05:15:A1
Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Certificate serial: 01941FFA2C4F53CA632CF5BDF9AF73204C4A
Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/4aD_diZcqz66cb-gRuWxY7oFFaE.roa
Signing time: Wed 01 Jan 2025 03:47:56 +0000
ROA not before: Wed 01 Jan 2025 03:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202024
IP address blocks: 46.31.70.0/24 maxlen: 24
79.98.127.0/24 maxlen: 24
185.54.16.0/22 maxlen: 22
185.54.16.0/23 maxlen: 23
185.54.16.0/24 maxlen: 24
185.54.17.0/24 maxlen: 24
185.54.18.0/23 maxlen: 23
185.54.18.0/24 maxlen: 24
185.54.19.0/24 maxlen: 24
185.141.12.0/22 maxlen: 22
185.141.12.0/23 maxlen: 23
185.141.12.0/24 maxlen: 24
185.141.13.0/24 maxlen: 24
185.141.14.0/23 maxlen: 23
185.141.14.0/24 maxlen: 24
185.141.15.0/24 maxlen: 24
2a00:d30:16::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2c:4f:53:ca:63:2c:f5:bd:f9:af:73:20:4c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Validity
Not Before: Jan 1 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1a0ff76265cab3eba71bfa046e5b163ba0515a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:11:f4:f2:08:2e:28:e4:44:c2:81:70:60:ea:
d3:d4:de:a4:e9:02:2b:8f:bd:11:b9:4c:c7:f4:6b:
cd:a9:bc:71:ed:5e:11:4c:df:f0:fe:b0:96:93:58:
66:ad:d4:10:50:53:71:23:2f:96:d8:51:ef:d7:b6:
82:6f:42:9a:93:6d:39:d1:10:ed:2a:a5:55:44:05:
f9:ba:6d:dd:95:2e:89:96:b0:11:b7:85:21:16:a6:
0a:79:86:0b:e0:e3:bd:a3:ac:86:70:c5:fe:0d:69:
c9:d6:a1:91:03:d7:91:21:8d:7d:38:8f:41:fe:f3:
b4:39:53:bc:f9:8d:78:37:7c:49:94:04:79:9c:6e:
de:4d:66:a6:eb:1f:f3:a4:a7:6a:1a:d3:a8:be:cd:
6f:c9:2d:15:b5:7e:f2:ab:e9:79:8e:46:30:d6:18:
85:b2:87:32:a4:58:ba:44:30:0b:e3:d7:14:a6:8c:
ea:52:27:20:eb:23:cb:38:aa:d8:d0:ab:49:d0:a4:
4f:32:53:ae:aa:1f:88:e5:0a:12:35:2d:8a:da:b6:
3f:04:7c:80:7c:74:32:7f:40:96:dd:33:8f:13:85:
99:c1:46:93:81:bc:4f:48:ac:58:83:fb:df:db:cb:
ca:a0:da:d3:05:ad:83:21:49:cf:37:bb:0e:cc:ee:
22:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A0:FF:76:26:5C:AB:3E:BA:71:BF:A0:46:E5:B1:63:BA:05:15:A1
X509v3 Authority Key Identifier:
keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/4aD_diZcqz66cb-gRuWxY7oFFaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.70.0/24
79.98.127.0/24
185.54.16.0/22
185.141.12.0/22
IPv6:
2a00:d30:16::/48
Signature Algorithm: sha256WithRSAEncryption
2c:3e:db:58:34:40:e7:a5:51:8a:8b:37:f1:53:72:a4:6e:1c:
1c:70:be:30:93:ab:4f:c6:99:28:d7:f2:94:15:6f:70:8f:ee:
9e:08:19:6d:46:42:15:2e:1c:f7:26:13:86:a7:11:ef:e1:93:
81:37:f2:fa:bc:bb:76:34:ec:0d:87:e9:bf:a7:61:ab:26:fe:
1e:93:e4:c6:32:50:ac:72:a8:8c:29:a6:ce:79:42:3b:b9:0f:
6d:bb:d9:5c:65:35:4e:02:57:5b:92:24:f8:54:7e:9a:2b:18:
bc:69:54:7b:ae:0b:34:f9:7e:c5:6b:82:0f:48:66:25:2f:1a:
c2:54:c9:fd:d8:16:bd:6b:de:e8:09:5c:75:6e:ed:53:86:3b:
a4:f6:e2:bf:ee:42:fa:b6:12:15:3c:35:2d:1b:00:aa:fe:5e:
75:6e:3c:5b:f5:c7:4f:b5:af:42:6a:e7:70:78:52:60:97:f3:
d5:8c:1e:97:10:c3:e6:8d:2c:da:ac:9a:66:67:f9:db:89:91:
93:9c:2a:28:9e:11:93:67:78:1f:5e:40:d5:46:a3:4f:ec:16:
5d:fa:65:6e:fd:3d:33:b8:7a:10:c4:e0:66:84:bd:6a:ae:73:
23:98:81:e9:32:9d:94:10:07:e3:df:e2:32:a7:03:67:9b:2d:
9e:09:12:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:01 2025 by rpki-client