Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/4ZFII5c609csszaMHNq6jhBoFRo.roa
File: 4ZFII5c609csszaMHNq6jhBoFRo.roa (raw, json)
Hash identifier: pyQ/SEzC2Sk5tb7Z3BNDW4O2mEDe4VqfOm/kuVxquBQ=
Subject key identifier: E1:91:48:23:97:3A:D3:D7:2C:B3:36:8C:1C:DA:BA:8E:10:68:15:1A
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 0194214457D202C52D7FF6AA03ABBF0E7E03
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/4ZFII5c609csszaMHNq6jhBoFRo.roa
Signing time: Wed 01 Jan 2025 09:48:34 +0000
ROA not before: Wed 01 Jan 2025 09:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198335
IP address blocks: 176.241.248.0/21 maxlen: 24
185.194.184.0/22 maxlen: 22
185.194.186.0/24 maxlen: 24
185.194.187.0/24 maxlen: 24
2a00:5a40::/29 maxlen: 29
2a00:5a40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:57:d2:02:c5:2d:7f:f6:aa:03:ab:bf:0e:7e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Jan 1 09:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1914823973ad3d72cb3368c1cdaba8e1068151a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:31:68:87:5e:9d:97:0b:1d:a5:1a:bd:2d:
cd:8d:87:2c:1b:06:57:b2:a6:b0:b0:e6:61:11:ef:
09:a9:50:50:24:ba:95:d1:de:14:28:a8:91:e2:60:
7d:e8:bd:fb:11:79:26:cf:65:7b:94:02:3e:a2:6b:
9b:35:c0:31:fe:3e:2b:38:0f:08:2e:be:95:22:d9:
1d:9c:86:dd:21:d9:ad:08:dd:87:57:1b:50:71:f2:
4b:25:e2:6d:dd:17:f1:3e:fc:d0:55:2b:94:b2:d7:
27:2e:1f:69:fa:cb:af:5c:0a:2a:6d:48:14:02:a2:
e9:46:97:64:04:74:9e:54:f8:95:0a:1d:55:be:70:
3e:d5:a2:c5:34:44:c1:f6:b6:55:4c:ef:26:b1:dd:
81:97:9a:1d:5d:98:c0:44:ab:bc:99:8d:d0:7c:94:
ef:c9:c0:36:42:0c:6f:ca:15:05:a5:72:b5:c3:f2:
4d:8f:50:a3:10:53:8e:34:78:73:8f:11:fe:27:2e:
a2:f6:9b:b4:25:93:d3:6d:c0:a8:70:ce:b0:88:aa:
66:74:99:8f:52:17:24:d2:8d:1d:55:2f:c6:6e:e9:
43:90:d8:e7:40:c2:78:3f:fd:a0:a5:05:bf:63:50:
76:2d:4a:3a:87:76:ef:82:e0:57:22:df:b7:6a:5b:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:91:48:23:97:3A:D3:D7:2C:B3:36:8C:1C:DA:BA:8E:10:68:15:1A
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/4ZFII5c609csszaMHNq6jhBoFRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.241.248.0/21
185.194.184.0/22
IPv6:
2a00:5a40::/29
Signature Algorithm: sha256WithRSAEncryption
0d:cd:c9:de:56:72:0f:13:7d:44:ef:e2:04:03:7f:1c:f7:98:
66:97:89:46:63:2c:93:d6:56:27:6f:72:fc:18:28:31:9e:96:
af:f2:17:af:03:c1:8a:8a:a2:78:a7:94:52:0f:fd:88:f3:11:
80:55:07:4f:51:8e:af:e8:1a:90:02:a2:46:53:f2:db:ba:57:
ba:58:d8:9e:22:09:12:02:e1:fc:82:af:d3:d5:9a:16:1e:4f:
84:6d:cb:75:f3:d8:12:ff:1d:4f:e2:43:d9:77:07:9f:50:0f:
79:d8:ff:6f:43:cc:5b:90:88:eb:2c:2a:c8:5c:95:4a:c7:4e:
cc:fd:07:61:8b:0f:a2:cb:11:1c:de:69:19:ab:eb:2f:41:d6:
5d:8f:aa:ed:8d:3f:d3:a4:41:f5:4c:53:3a:07:73:03:c4:0c:
83:aa:33:7a:a3:23:e6:95:85:c3:0c:b8:ca:75:14:d3:31:29:
2c:4e:e6:ba:7a:78:26:cb:ad:ec:82:c0:fd:c1:98:5c:c2:d8:
3c:2c:65:2f:fc:a6:51:15:69:07:c8:8e:b3:d6:b5:fe:a9:b0:
17:6f:c5:2e:e5:95:8f:d2:81:cf:a0:f7:82:b4:87:00:e5:b7:
4e:09:c0:02:19:bb:57:2f:84:d3:4f:12:42:4a:8f:e8:1b:dd:
0b:8d:e9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:12:09 2025 by rpki-client