Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/RVGHcxZqqdFTa9mgJIZ4F-usrMw.roa
File: RVGHcxZqqdFTa9mgJIZ4F-usrMw.roa (raw, json)
Hash identifier: boTPZs0RRS/x6E00qU+d0VKsbRO9VZxFEtJFGTyTt+4=
Subject key identifier: 45:51:87:73:16:6A:A9:D1:53:6B:D9:A0:24:86:78:17:EB:AC:AC:CC
Certificate issuer: /CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Certificate serial: 019427479968A991481C457BEB8CCC401576
Authority key identifier: 4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/RVGHcxZqqdFTa9mgJIZ4F-usrMw.roa
Signing time: Thu 02 Jan 2025 13:49:51 +0000
ROA not before: Thu 02 Jan 2025 13:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2116
IP address blocks: 185.3.4.0/24 maxlen: 24
185.3.5.0/24 maxlen: 24
185.3.6.0/24 maxlen: 24
185.3.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:99:68:a9:91:48:1c:45:7b:eb:8c:cc:40:15:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Validity
Not Before: Jan 2 13:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45518773166aa9d1536bd9a024867817ebacaccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:db:4e:7d:26:9c:45:31:49:b2:5a:94:a9:
15:14:15:ed:5c:24:ad:22:fe:bc:96:6c:fb:7f:17:
85:d5:4b:01:70:81:52:08:b0:9f:4b:ab:2c:5f:2c:
f3:ad:ec:94:83:8f:72:c7:0f:15:e7:b4:d0:cf:e4:
ab:d3:91:62:f6:5a:d4:fe:c3:ed:8a:1d:c5:a5:8b:
8d:c4:53:08:11:d9:69:b8:59:54:00:d1:41:ee:c1:
bf:94:bc:a8:5c:15:62:e1:6d:c3:cf:83:3c:b2:2a:
53:5b:ef:2a:5b:6a:58:50:36:9e:bb:80:4c:8e:3d:
1a:ba:ca:8d:1b:59:c6:d4:9a:3c:25:e0:22:42:e8:
45:ed:75:7a:23:bb:10:48:62:53:3b:72:cc:23:b1:
fb:e0:05:b2:4c:c1:41:b3:2a:46:f7:9d:de:70:d3:
e6:fc:f9:b9:39:2f:a3:58:6c:59:37:e8:9d:b0:00:
16:d7:0b:f4:70:84:4a:90:b5:0c:e5:02:40:95:86:
8e:5c:26:37:bd:cc:f4:4a:91:71:61:e9:d5:73:11:
c4:c0:ef:15:56:5b:8c:af:c5:1a:4e:e0:ed:b6:25:
b6:ec:e9:77:dd:33:6f:b7:9a:1f:3f:1e:e3:5e:f3:
b8:93:75:89:3a:f9:df:52:73:8c:33:e9:e7:03:c0:
c6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:51:87:73:16:6A:A9:D1:53:6B:D9:A0:24:86:78:17:EB:AC:AC:CC
X509v3 Authority Key Identifier:
keyid:4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/RVGHcxZqqdFTa9mgJIZ4F-usrMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.4.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:93:e3:33:d1:17:9c:9b:c7:cc:6c:d5:c5:36:c0:a4:ea:2b:
b5:c9:03:42:dc:6c:23:73:79:b6:10:f7:92:c4:f0:50:e7:85:
32:24:a4:d8:7c:b5:43:1a:81:aa:43:38:d4:b8:ea:50:44:19:
63:4a:72:53:30:64:cd:d4:b8:e8:e7:81:c7:7b:59:9e:2f:97:
11:87:5e:25:29:ed:ad:3b:60:9a:c1:df:f6:dd:a1:8a:79:87:
d5:83:7d:be:af:d1:a3:bb:a1:75:c4:ad:1f:29:2b:2a:87:c5:
ee:13:b8:ef:fa:68:db:10:c0:8a:78:ce:94:97:99:ec:1e:44:
f0:4c:6c:51:7b:9a:47:f2:7d:93:bb:ce:e3:53:8c:9c:97:a1:
e6:0c:da:cb:5c:5e:bd:1d:54:10:3b:f2:0f:cb:b8:5a:54:a7:
33:c9:ad:00:36:84:a3:b7:2d:8c:71:ea:4a:cc:83:54:b6:34:
e5:5f:a9:cc:6c:c1:6f:e5:4d:0b:ed:43:7f:31:a8:19:95:f1:
ba:ec:9c:20:27:a0:e1:d0:28:11:73:7b:60:06:19:b1:de:79:
9a:3e:ad:5c:76:86:c6:4a:9d:38:93:b2:33:9d:ac:6d:26:5d:
0d:ea:72:15:8b:3c:a3:f5:46:ab:20:ef:c9:b4:f0:79:54:ab:
f6:20:ca:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:45:17 2025 by rpki-client