Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/4PVveBGxN8n2WuGPtmITlLn0GtI.roa
File: 4PVveBGxN8n2WuGPtmITlLn0GtI.roa (raw, json)
Hash identifier: cfEtfn0zg7NHGmh50mHK7LzfG79rGcilgz9AnPpzS50=
Subject key identifier: E0:F5:6F:78:11:B1:37:C9:F6:5A:E1:8F:B6:62:13:94:B9:F4:1A:D2
Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial: 019423D7E1F929F2ECAD2F26266B8F164EA1
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/4PVveBGxN8n2WuGPtmITlLn0GtI.roa
Signing time: Wed 01 Jan 2025 21:48:57 +0000
ROA not before: Wed 01 Jan 2025 21:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46652
IP address blocks: 141.0.168.0/24 maxlen: 24
141.0.171.0/24 maxlen: 24
141.0.172.0/22 maxlen: 22
141.0.174.0/24 maxlen: 24
185.88.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:e1:f9:29:f2:ec:ad:2f:26:26:6b:8f:16:4e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Validity
Not Before: Jan 1 21:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0f56f7811b137c9f65ae18fb6621394b9f41ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:41:6d:5e:0a:10:20:d8:83:36:5e:bc:7b:c2:
64:0c:5e:4c:1f:c4:42:cf:95:80:6b:15:7a:b0:19:
b7:bd:43:56:cc:d3:14:4d:ae:0e:37:32:d9:f3:5b:
a0:77:85:ea:7a:25:37:c1:60:17:06:c1:56:cb:83:
82:b3:e1:f5:21:19:a9:3c:2a:e9:9d:fd:3c:bf:6b:
f3:13:a3:89:53:ca:c3:32:7e:07:cc:10:dc:32:ae:
d9:82:e9:a3:90:9a:04:90:8b:7f:1d:c9:d5:0c:3c:
82:7e:1f:68:85:a4:24:c6:01:6a:f7:16:79:79:57:
57:12:68:8c:a4:0c:9e:90:d6:9e:65:7a:66:4e:16:
f1:88:d5:62:0a:4b:fc:c5:10:bb:01:dd:e0:64:83:
65:a4:91:b0:52:17:ac:86:a4:1c:19:8a:b9:c2:4d:
6c:bc:57:b8:fd:f4:99:30:22:56:c5:6f:13:0d:55:
02:e1:be:3c:4b:35:ca:56:24:6c:38:75:db:37:cb:
5d:2c:8d:df:fd:60:72:e8:20:17:8c:d2:26:56:22:
4a:7a:63:68:5c:ea:6c:a1:9f:a2:67:37:d0:2a:a2:
7e:9c:4f:47:34:9b:24:7f:c9:83:cb:b0:b9:85:66:
90:08:7c:60:9b:a9:ad:8c:4c:64:d3:c6:df:2d:9d:
de:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F5:6F:78:11:B1:37:C9:F6:5A:E1:8F:B6:62:13:94:B9:F4:1A:D2
X509v3 Authority Key Identifier:
keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/4PVveBGxN8n2WuGPtmITlLn0GtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.0.168.0/24
141.0.171.0-141.0.175.255
185.88.180.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:5b:e2:7c:61:27:94:ef:96:f5:5f:2e:22:81:70:45:1e:16:
d4:ec:6d:e1:81:2b:c6:e8:67:b2:50:2e:cf:b9:ba:fd:f9:14:
5f:3c:5c:03:06:f9:69:fa:f7:96:d0:3c:f9:13:bb:92:30:2e:
2f:79:f9:88:7b:9d:c9:2a:6f:88:74:40:36:88:a5:64:b2:19:
0f:7c:a0:e5:f4:1d:f6:84:1d:36:a2:ee:06:1c:97:49:b8:76:
43:dc:84:7b:af:44:22:8c:b5:6c:d6:a3:56:18:55:36:78:31:
2f:83:52:91:17:ae:5a:e1:89:61:c7:e7:67:54:f7:93:a3:e2:
bb:70:71:01:47:ec:fb:f9:dc:5e:b6:d8:99:d7:a9:b2:77:48:
4d:54:76:6b:39:a6:00:68:da:9c:60:a1:1b:e6:86:e3:e0:9f:
5d:f6:8f:d1:9c:83:75:13:b9:4a:3a:5d:a2:e1:58:e3:28:1c:
29:7a:ca:d8:db:8a:82:6e:96:ac:f8:be:5d:46:5c:8e:3e:64:
9e:f6:a8:4c:ae:8f:13:b5:ab:ff:08:5d:fe:31:bd:1d:28:88:
df:38:ff:b5:99:b0:76:08:d5:28:1f:7c:1d:fd:54:eb:7f:7e:
c7:89:44:fc:db:29:89:88:79:6b:8f:f9:6e:5b:f1:c7:38:a5:
7b:94:8b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:33:04 2025 by rpki-client