Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/rn4UsQKFONDrhbfdRgO5Q_HMQVg.roa
File: rn4UsQKFONDrhbfdRgO5Q_HMQVg.roa (raw, json)
Hash identifier: 0rn5CfRZ9637V1a47H6mo/mDuKM6BXRkzS1ZqPHB7jc=
Subject key identifier: AE:7E:14:B1:02:85:38:D0:EB:85:B7:DD:46:03:B9:43:F1:CC:41:58
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0194266BAC9415DB9F5B786EDE4CC3EBBF81
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/rn4UsQKFONDrhbfdRgO5Q_HMQVg.roa
Signing time: Thu 02 Jan 2025 09:49:37 +0000
ROA not before: Thu 02 Jan 2025 09:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197537
IP address blocks: 45.141.130.0/24 maxlen: 24
185.240.85.0/24 maxlen: 24
193.56.21.0/24 maxlen: 24
212.87.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ac:94:15:db:9f:5b:78:6e:de:4c:c3:eb:bf:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 09:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae7e14b1028538d0eb85b7dd4603b943f1cc4158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:05:d1:2b:20:0a:56:31:f2:f3:c7:ed:a3:
19:6c:aa:a4:60:f8:e3:92:80:d3:3a:2c:ad:16:a8:
e9:1f:67:cb:b8:4e:3f:5c:54:73:c0:fd:5a:89:3a:
21:84:59:c6:e5:61:53:3a:86:ca:d9:cc:7d:4e:de:
a7:95:1d:35:b4:eb:30:a1:ce:ba:c7:e7:69:7d:02:
be:5e:7d:3f:4e:a6:da:fb:ed:7e:8e:9c:e2:0e:09:
0b:5b:4f:f2:8b:7a:79:c5:e2:ad:9f:85:03:7f:84:
62:b3:b7:fa:3a:72:c7:85:ca:5f:88:f5:05:04:b1:
c8:bb:5e:17:14:7d:51:c9:db:9d:0e:73:f1:d1:bc:
d5:60:7a:d1:b5:5b:a1:b2:29:7f:b9:ca:0c:8a:8c:
8f:7d:f9:9c:8a:32:0b:53:40:75:fc:62:b3:51:c0:
54:da:0b:26:f9:ad:05:4e:fa:4d:7e:63:27:e9:ad:
0f:ba:5a:26:f6:b6:01:e3:76:8d:ab:01:1b:65:09:
64:9c:6a:91:b8:8d:49:fd:de:22:c3:d0:a0:ed:63:
9d:49:dd:f4:3b:e8:eb:0c:b5:d2:31:f2:61:c4:d6:
20:9c:c6:6a:a7:91:7a:4b:80:60:3b:82:c7:dd:e2:
77:ec:ed:fc:39:d1:c7:7b:f0:54:51:58:ff:f7:49:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7E:14:B1:02:85:38:D0:EB:85:B7:DD:46:03:B9:43:F1:CC:41:58
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/rn4UsQKFONDrhbfdRgO5Q_HMQVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.130.0/24
185.240.85.0/24
193.56.21.0/24
212.87.217.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:19:1f:8e:4a:ad:1f:f1:a7:a5:07:b4:85:92:00:e3:3a:7e:
12:c9:eb:e2:67:1a:9c:6a:e3:97:a7:8f:a0:a4:f9:93:7d:6a:
a0:5e:77:e4:70:a6:71:1b:fa:f9:9b:a7:11:5b:9c:63:f4:f7:
b0:40:55:5c:f3:b0:3a:34:ca:41:c4:21:17:75:dc:03:ce:f5:
4c:30:e7:76:81:35:78:e9:0a:6c:f0:7c:06:4e:3c:54:3f:5b:
dc:77:6a:35:1d:fe:a4:68:9c:88:e7:39:75:8d:b6:4d:f6:ee:
00:e8:fc:9d:f1:86:14:56:61:09:d0:6e:29:c8:fd:0d:41:07:
95:dc:25:3e:a1:e8:37:1b:8e:76:97:91:e3:11:8e:5e:a4:6c:
b8:dc:9b:42:63:ca:d0:26:d1:94:96:4c:9f:70:a1:7a:07:2f:
13:d1:0f:e7:6d:c6:23:e1:c5:09:6e:7c:b8:02:e8:14:8d:d4:
7a:c4:6d:03:b9:0b:ca:b8:64:83:82:90:98:b0:cc:22:c5:0a:
f8:4b:9c:6a:46:18:2a:a1:2d:99:61:fd:dc:e4:ad:42:6c:0c:
0f:8c:01:f9:f7:19:2b:f3:6c:b9:8e:60:45:a9:af:02:b6:36:
1d:17:40:18:a8:60:8a:f7:6c:37:02:06:e0:43:bf:06:c3:a6:
f6:b6:f5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:39 2025 by rpki-client