Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/Te1smkaZFoPIXpDeDnkA_3SYuF4.roa
File: Te1smkaZFoPIXpDeDnkA_3SYuF4.roa (raw, json)
Hash identifier: fsg7fcR1+A1zfqsZoPgI6UandEUlSTg2/PWpSOpOTeg=
Subject key identifier: 4D:ED:6C:9A:46:99:16:83:C8:5E:90:DE:0E:79:00:FF:74:98:B8:5E
Certificate issuer: /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial: 019425FC48181D50032CD83D43B1B3E369C6
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/Te1smkaZFoPIXpDeDnkA_3SYuF4.roa
Signing time: Thu 02 Jan 2025 07:47:57 +0000
ROA not before: Thu 02 Jan 2025 07:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 94.143.105.0/24 maxlen: 24
94.143.106.0/24 maxlen: 24
94.143.107.0/24 maxlen: 24
94.143.108.0/24 maxlen: 24
185.236.124.0/24 maxlen: 24
185.236.125.0/24 maxlen: 24
185.236.126.0/24 maxlen: 24
185.236.127.0/24 maxlen: 24
212.1.218.0/24 maxlen: 24
212.1.219.0/24 maxlen: 24
212.1.222.0/24 maxlen: 24
212.1.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:48:18:1d:50:03:2c:d8:3d:43:b1:b3:e3:69:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Validity
Not Before: Jan 2 07:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ded6c9a46991683c85e90de0e7900ff7498b85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:79:f8:4d:1f:ec:2a:f3:d4:e6:e9:80:94:
7e:f1:9d:8e:de:8b:aa:65:fd:b1:84:fc:f3:47:dc:
e9:52:c3:b2:86:c3:8e:29:99:f2:aa:1d:52:32:8e:
08:31:15:30:dc:8b:ae:2b:c4:48:49:ec:5a:94:1c:
d2:ab:06:52:54:d2:50:cc:95:14:ef:32:27:77:0d:
19:97:8a:45:75:e7:40:50:a8:be:63:9e:1e:a8:42:
f7:69:6b:df:5d:82:7c:af:d8:5a:94:8b:ac:ce:f5:
4e:be:c4:d4:0f:54:51:b2:79:24:58:ed:e0:c7:bf:
fb:9e:85:9f:e4:9a:f6:e4:45:44:9f:33:40:19:7a:
ad:de:48:e0:d0:b2:a5:1d:fe:2a:0c:0c:b7:e5:16:
7d:9c:2c:86:95:6a:12:61:5f:68:c2:ef:ba:ea:34:
b4:47:02:ec:27:b1:88:62:1e:83:c8:9a:8f:b4:62:
c8:de:f2:ac:24:13:9d:5f:26:34:d8:36:19:5a:5d:
3e:9b:95:e0:bc:ab:6f:97:ee:8c:a3:54:e2:04:cc:
55:e9:05:83:cb:36:0e:1d:4b:0f:9e:46:c6:76:bf:
55:89:f0:f5:ab:70:8a:e2:84:c4:55:b6:09:2c:54:
e8:3e:69:f0:54:a6:3a:c5:81:7b:0e:b0:59:9f:34:
86:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:ED:6C:9A:46:99:16:83:C8:5E:90:DE:0E:79:00:FF:74:98:B8:5E
X509v3 Authority Key Identifier:
keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/Te1smkaZFoPIXpDeDnkA_3SYuF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.105.0-94.143.108.255
185.236.124.0/22
212.1.218.0/23
212.1.222.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:01:c0:61:a2:bd:22:d6:ec:5a:16:f0:d5:b1:06:52:87:85:
62:23:84:2b:37:4e:b5:33:d1:4e:6e:5e:9f:11:98:ab:7a:1e:
65:6c:80:5f:4f:eb:a9:58:1c:b7:d3:39:2f:fd:31:8c:a5:30:
07:fc:c0:e3:cb:c7:3f:31:b4:c8:ef:e1:e1:41:ea:55:31:de:
35:59:98:30:2f:8d:38:5e:a5:1f:2b:af:28:cf:22:5f:6d:f4:
67:0d:fd:40:7a:45:c7:bd:b4:69:f9:10:7b:bb:a5:5b:39:78:
33:15:e7:d7:0e:f0:dc:00:99:9f:18:3a:a9:34:bd:51:bf:cb:
2c:de:f6:a0:68:e7:99:2b:03:a6:a1:fc:ce:b3:83:b4:46:ea:
44:b2:6b:4f:8f:09:89:c9:75:b3:9c:b6:fd:bf:4d:66:30:27:
99:72:46:52:63:e9:45:c3:d4:a9:a3:49:13:92:e5:33:4b:80:
0d:aa:ab:be:52:d7:2c:0f:9b:12:62:2d:5b:5f:9d:07:11:6e:
32:2c:a3:67:d4:53:17:a7:d8:b4:58:65:24:9e:1d:00:d0:a1:
43:5b:90:29:f7:15:ef:8f:32:e7:eb:21:b2:39:da:3f:99:3f:
f5:92:56:21:2f:88:e5:31:ac:7b:7a:ae:52:4d:26:14:4f:57:
6c:1b:20:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:42:24 2025 by rpki-client