Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/4Ji8DRavs3meQw5qrkJFZHXPeDw.roa
File: 4Ji8DRavs3meQw5qrkJFZHXPeDw.roa (raw, json)
Hash identifier: rtTItDBA55d0Kg0FoHNSV2Z7809Glolr/J3tN0PwSW0=
Subject key identifier: E0:98:BC:0D:16:AF:B3:79:9E:43:0E:6A:AE:42:45:64:75:CF:78:3C
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D61D41EFE48E418B583CD75FD4F365
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/4Ji8DRavs3meQw5qrkJFZHXPeDw.roa
Signing time: Wed 01 Jan 2025 07:48:10 +0000
ROA not before: Wed 01 Jan 2025 07:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 85.204.78.0/24 maxlen: 24
93.113.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:1d:41:ef:e4:8e:41:8b:58:3c:d7:5f:d4:f3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e098bc0d16afb3799e430e6aae42456475cf783c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:97:c5:ea:88:61:9c:0f:e6:5c:b6:90:e0:14:
f9:88:75:fa:f1:6e:2a:9c:78:99:c5:0f:7d:9c:ed:
d8:ab:3b:f4:dd:f6:fa:ba:ea:dd:b4:fd:6b:61:60:
c4:df:1d:b7:45:e3:77:b4:e1:d9:4a:15:bd:4f:b7:
16:95:cf:5c:39:5f:ce:12:f6:c3:ec:8e:22:f9:81:
e0:8b:b5:f7:2f:f4:c2:98:fd:82:a4:a8:74:1d:41:
3c:c5:c2:08:96:59:4b:23:b0:2c:b4:e8:23:10:bc:
ca:3b:8f:ac:34:a7:a3:aa:a0:23:74:36:c7:ca:7b:
98:18:1a:3d:3e:77:e3:72:19:49:7e:3f:cb:ef:23:
5f:f9:9a:a8:86:1b:b4:f9:15:3d:82:af:39:ac:9a:
80:a1:01:d5:6a:8a:49:12:04:7d:10:2e:a6:49:d9:
e3:74:f1:7e:74:93:07:68:ef:a5:4a:bf:eb:fa:54:
9d:23:09:0a:a7:2e:8f:3d:1d:ea:80:56:71:86:4a:
c6:98:97:51:19:38:58:b6:13:e1:72:62:69:63:1d:
10:a2:4d:b9:b8:b9:3e:57:9f:1e:aa:9a:f9:99:55:
f1:0d:00:c2:fc:14:f3:96:98:29:ef:6a:a1:12:e7:
a1:f6:00:a2:03:7d:e3:cf:2a:26:3c:9a:ef:ef:c8:
7e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:98:BC:0D:16:AF:B3:79:9E:43:0E:6A:AE:42:45:64:75:CF:78:3C
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/4Ji8DRavs3meQw5qrkJFZHXPeDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.78.0/24
93.113.202.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:25:6d:f6:5b:3c:1d:99:d1:71:c2:d0:39:61:ed:b9:62:13:
78:65:ef:b0:0e:2e:a2:63:fa:29:f8:77:7d:49:5b:9a:6e:d9:
90:11:9b:e4:5a:69:6a:1c:4a:74:a6:7f:70:5b:e3:51:b1:2f:
2d:7c:72:03:1c:f4:52:51:6c:3d:a1:5c:ea:29:f5:05:d1:2d:
82:1a:ca:9f:e4:b0:a5:1d:c3:75:d1:ab:b1:8b:17:77:f3:b6:
71:51:35:54:fd:0e:cd:6b:f0:eb:1b:49:e6:be:69:65:06:25:
a7:df:9f:c9:69:35:8a:c1:4f:ce:7e:a7:36:da:dc:d4:d5:17:
b3:09:0b:44:ce:cb:e5:df:25:31:e5:57:36:5b:64:48:c7:a5:
fd:31:ce:7f:d5:b8:d0:8a:56:0d:d4:21:b0:81:db:26:0c:a1:
63:17:b2:d4:3d:8a:07:eb:75:4e:d5:42:f4:2a:28:8c:13:77:
e8:3b:a6:25:c6:1d:bb:8f:dd:ab:90:49:8c:9f:e7:f1:3e:4a:
73:89:0c:3a:fa:23:0a:21:1e:bc:a6:59:9b:6e:29:00:f2:39:
92:02:83:e3:d9:a2:49:d5:d2:0f:6e:bd:67:d8:42:40:20:8e:
77:9e:16:79:75:5e:6b:63:e6:c9:a5:09:1a:10:8b:9b:50:6d:
46:0e:fc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:14:56 2025 by rpki-client