Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/Ss43uKVk12glj7GND1Q0DQOfOOI.roa
File: Ss43uKVk12glj7GND1Q0DQOfOOI.roa (raw, json)
Hash identifier: afk/nkdp+pPj29GdfzUTdj7jJFKdBQ7g7Tl5QgpoC38=
Subject key identifier: 4A:CE:37:B8:A5:64:D7:68:25:8F:B1:8D:0F:54:34:0D:03:9F:38:E2
Certificate issuer: /CN=4a755a6de5c167809f819c85f8c8e5a6e4ce127d
Certificate serial: 0194258F167CA10BD04BF39228572038C955
Authority key identifier: 4A:75:5A:6D:E5:C1:67:80:9F:81:9C:85:F8:C8:E5:A6:E4:CE:12:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/Ss43uKVk12glj7GND1Q0DQOfOOI.roa
Signing time: Thu 02 Jan 2025 05:48:41 +0000
ROA not before: Thu 02 Jan 2025 05:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199452
IP address blocks: 185.2.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:16:7c:a1:0b:d0:4b:f3:92:28:57:20:38:c9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a755a6de5c167809f819c85f8c8e5a6e4ce127d
Validity
Not Before: Jan 2 05:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ace37b8a564d768258fb18d0f54340d039f38e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:7d:ee:df:51:5f:23:6e:94:90:cd:7b:4d:
78:69:8e:b8:8b:47:67:4b:54:48:98:46:bb:ac:48:
54:1b:d4:d6:af:f5:fb:94:d8:7b:ca:6a:a4:bc:2f:
4f:ff:31:53:8e:a5:b0:9f:35:a7:64:56:73:40:0d:
0c:e5:ae:1a:69:e4:0d:99:a4:c9:19:3f:40:89:09:
54:b4:8c:89:5d:a2:fd:e2:3e:6b:50:54:e8:69:10:
40:69:33:52:99:02:f7:ea:bb:63:19:12:89:19:e4:
cf:3e:d5:0b:eb:7b:75:24:4c:5d:9c:f5:4b:25:87:
e9:b0:86:5e:0a:41:2a:04:32:bc:59:83:38:22:60:
cd:32:16:7a:7a:41:69:3a:33:5d:23:c0:4d:6c:70:
33:bd:a4:ff:cf:b8:06:9e:13:df:36:b8:7d:53:66:
26:12:6a:00:27:d8:e1:a2:aa:51:04:37:85:e7:6c:
f3:73:6f:6b:bf:5b:b2:47:5e:cf:03:5b:c1:67:b5:
40:c6:a1:5f:cd:fb:f1:8c:30:b5:a9:7d:85:14:2b:
c3:8e:65:49:24:20:0d:f5:03:e6:25:98:95:b8:f3:
dd:25:ac:ef:d5:de:7f:dd:06:f1:9d:c5:62:b6:c1:
71:7a:46:28:e8:f8:36:0d:07:84:93:e8:ee:48:8e:
22:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CE:37:B8:A5:64:D7:68:25:8F:B1:8D:0F:54:34:0D:03:9F:38:E2
X509v3 Authority Key Identifier:
keyid:4A:75:5A:6D:E5:C1:67:80:9F:81:9C:85:F8:C8:E5:A6:E4:CE:12:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/Ss43uKVk12glj7GND1Q0DQOfOOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.192.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:95:cf:c1:b0:bc:13:57:a5:f7:e1:08:12:82:74:c6:b7:96:
76:39:a7:f6:e8:3b:a3:48:ba:14:85:3c:e0:11:c4:83:98:0d:
30:64:5f:e0:ed:4a:a0:f0:49:0c:9f:b5:bd:2d:72:51:e4:4a:
17:35:77:e7:27:8a:42:b2:f0:2e:47:6c:8f:5f:79:0e:23:8f:
8a:93:e8:1f:f0:56:ec:98:35:85:76:46:d3:ca:48:3a:cc:e2:
c1:2c:c5:b3:b3:fe:02:5d:58:de:32:a5:15:5c:56:98:11:a0:
dc:98:f0:d4:51:70:09:5f:7a:34:63:3e:7d:9f:7c:b4:e6:74:
b2:46:8c:32:f1:e9:98:56:d5:29:fe:bb:e5:79:a6:07:94:4f:
69:35:a8:fa:37:e5:2b:eb:f5:ec:b4:90:56:3d:9b:f6:a7:69:
da:7d:a5:98:85:7f:22:c2:34:e4:8f:b1:5c:ea:98:7e:c4:fb:
db:8c:fd:6e:65:b1:a0:98:47:d5:3e:41:00:ea:8e:22:da:7d:
17:ee:5c:68:9f:b4:58:c6:9a:03:b0:5a:0b:6b:a3:87:a4:e8:
97:b1:29:8f:b3:72:95:e3:43:18:b9:b1:29:17:4f:3d:72:18:
12:5b:8d:01:2a:12:8b:73:99:45:a9:53:c6:f3:02:43:a5:db:
1b:71:b3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:57:56 2025 by rpki-client