Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4_7sRuq98WRIO_2082bkYSLPktU.roa
File: 4_7sRuq98WRIO_2082bkYSLPktU.roa (raw, json)
Hash identifier: DXRVdF3Tn+4RAWTt35Zu9T0LBaA3JleP/BLRadJ7RT0=
Subject key identifier: E3:FE:EC:46:EA:BD:F1:64:48:3B:FD:B4:F3:66:E4:61:22:CF:92:D5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0195CDB86B6B087F21C80E4D515849B1B775
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4_7sRuq98WRIO_2082bkYSLPktU.roa
Signing time: Tue 25 Mar 2025 14:32:50 +0000
ROA not before: Tue 25 Mar 2025 14:32:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198981
IP address blocks: 212.192.250.0/24 maxlen: 24
212.192.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:b8:6b:6b:08:7f:21:c8:0e:4d:51:58:49:b1:b7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 25 14:32:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3feec46eabdf164483bfdb4f366e46122cf92d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f5:f5:cc:09:df:26:1e:01:06:fd:c8:ae:de:
c3:2c:06:b5:92:c0:cb:45:b3:e5:64:47:6d:15:c2:
fb:b8:b6:f2:6a:36:10:2f:ca:cb:ff:3e:4a:2c:18:
98:db:b8:e3:f3:45:c5:91:e7:42:7b:26:89:65:da:
31:95:bb:7d:8f:b0:95:c8:9a:88:86:ad:e5:ad:8b:
a1:d7:14:dd:58:87:43:49:4a:29:2d:d5:a6:90:4c:
e7:b2:42:6c:0d:7f:a4:b5:22:7d:a0:82:5f:87:af:
3d:cc:3f:7b:8b:97:02:f3:cb:21:b4:c6:db:b3:3f:
15:ec:31:d5:11:5e:74:c4:bd:6b:f7:47:b4:ee:5e:
46:63:47:80:d7:9c:25:2d:01:2b:94:2d:c6:e7:c9:
15:32:84:01:f7:96:ca:ca:8e:89:31:3a:93:53:e2:
53:d1:f2:a2:e2:2c:20:29:cd:2e:b9:12:87:28:ef:
c2:05:2b:0e:71:8d:3b:de:5d:be:4b:ec:3e:8e:1d:
88:a8:6d:cb:0e:85:15:6c:d0:06:b2:79:72:09:da:
72:4f:3c:40:d9:a9:07:5d:c3:41:d2:43:07:8b:25:
f9:43:90:e8:94:8c:e4:98:fc:2e:89:ea:59:b0:52:
c1:d8:9d:30:73:af:00:9e:b7:d0:84:73:01:e0:dc:
d0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FE:EC:46:EA:BD:F1:64:48:3B:FD:B4:F3:66:E4:61:22:CF:92:D5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4_7sRuq98WRIO_2082bkYSLPktU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.250.0/24
212.192.255.0/24
Signature Algorithm: sha256WithRSAEncryption
78:3c:1c:b9:41:75:59:ea:af:ed:4d:2b:1e:13:e5:4d:26:43:
8c:a1:5e:42:27:45:9e:95:e7:62:27:2d:87:a5:8d:2d:90:03:
2c:f0:0b:94:c7:79:b6:fc:1b:be:2b:01:61:a8:3f:cd:94:b1:
e9:78:07:4e:3a:04:a0:a4:4e:7d:49:95:c4:fa:59:29:2a:c4:
23:28:cc:a7:57:c3:e3:4e:4a:25:0d:90:8d:e7:7d:cd:a3:c4:
7e:4b:5b:af:32:ab:c5:77:90:80:fb:d7:73:e5:4a:6e:85:e3:
33:e3:41:6f:18:95:49:aa:f5:f7:3a:5c:4e:a4:ff:37:9f:9a:
ca:7d:18:4e:d1:93:df:55:20:ee:1b:b8:87:f3:d8:c5:5f:ee:
c6:13:6c:10:a5:f0:43:6b:f6:be:ac:78:6f:bc:36:ca:85:7b:
ae:7c:39:92:2b:48:52:af:cb:b6:06:1d:96:9c:45:ee:11:e5:
01:1d:74:29:5a:70:66:b9:de:fb:16:46:84:54:ab:cb:c9:6c:
ea:80:36:f0:34:49:5a:00:ec:d2:ae:eb:29:03:b7:38:9e:80:
47:f3:15:b9:bf:a2:af:10:ea:a2:7b:4f:a9:93:04:ea:fa:6c:
ea:13:df:77:50:8c:80:3f:9e:5e:03:10:d7:df:00:b1:8c:4d:
17:9a:47:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:55 2025 by rpki-client