Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4NCuw4wCZwuxqlSacCkc9yVYlu8.roa
File: 4NCuw4wCZwuxqlSacCkc9yVYlu8.roa (raw, json)
Hash identifier: ixVcCTSOGnw41Yoe+8BhjpKhA5JVaM3zgGIJOewRpRA=
Subject key identifier: E0:D0:AE:C3:8C:02:67:0B:B1:AA:54:9A:70:29:1C:F7:25:58:96:EF
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019584A82494FE6DBA18F3DB99790A974894
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4NCuw4wCZwuxqlSacCkc9yVYlu8.roa
Signing time: Tue 11 Mar 2025 10:02:46 +0000
ROA not before: Tue 11 Mar 2025 10:02:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 85.122.232.0/24 maxlen: 24
85.122.233.0/24 maxlen: 24
85.122.234.0/24 maxlen: 24
85.122.235.0/24 maxlen: 24
85.122.236.0/24 maxlen: 24
85.122.237.0/24 maxlen: 24
85.122.238.0/24 maxlen: 24
85.122.239.0/24 maxlen: 24
85.122.240.0/24 maxlen: 24
85.122.241.0/24 maxlen: 24
85.122.242.0/24 maxlen: 24
85.122.243.0/24 maxlen: 24
85.122.244.0/24 maxlen: 24
85.122.245.0/24 maxlen: 24
85.122.246.0/24 maxlen: 24
85.122.247.0/24 maxlen: 24
85.122.248.0/24 maxlen: 24
85.122.249.0/24 maxlen: 24
85.122.250.0/24 maxlen: 24
85.122.251.0/24 maxlen: 24
85.122.252.0/24 maxlen: 24
85.122.254.0/24 maxlen: 24
85.122.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:a8:24:94:fe:6d:ba:18:f3:db:99:79:0a:97:48:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 11 10:02:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0d0aec38c02670bb1aa549a70291cf7255896ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c3:6f:3d:8f:d8:e3:da:fb:38:df:b5:3f:9f:
49:3d:32:55:d1:4b:2e:9e:52:b3:43:29:2d:3f:ae:
e9:15:c7:12:88:ab:2a:d1:c1:1a:b2:c5:5e:6d:68:
72:e7:64:62:98:c6:4c:71:68:21:f8:8a:d0:7a:42:
3a:21:97:bf:33:6e:55:2b:7a:6d:e2:d9:e8:64:6f:
28:0b:60:cc:f9:3b:b1:75:04:ad:d4:8e:59:25:ab:
ad:03:6a:19:fa:ce:2d:b9:b9:2e:c6:b9:b1:e8:6d:
4d:3f:24:e1:9c:f8:20:ba:2b:2a:33:8b:07:3b:7e:
37:a6:c8:00:ba:ed:2e:84:d9:db:da:34:c9:1c:bb:
18:5b:08:bf:3e:24:68:02:f5:c9:9e:4d:31:97:12:
09:20:12:1a:80:b1:6d:a5:33:b5:1f:5a:67:0d:d0:
f6:91:b8:55:05:39:1d:60:fd:06:f5:f3:56:b9:10:
12:bb:96:03:3b:ec:b1:6d:3d:cb:d0:8d:97:c6:08:
97:03:2d:62:56:f7:ea:24:ae:33:d4:49:f2:bb:23:
cb:1d:70:08:99:34:2b:c7:b6:31:20:c9:c5:2e:53:
ff:e8:a4:32:74:5d:a4:4c:9e:28:e5:ca:54:95:6c:
a4:0f:70:a5:3b:7a:b2:a2:7b:be:f7:98:3d:a3:a5:
ab:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D0:AE:C3:8C:02:67:0B:B1:AA:54:9A:70:29:1C:F7:25:58:96:EF
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4NCuw4wCZwuxqlSacCkc9yVYlu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.122.232.0-85.122.252.255
85.122.254.0/23
Signature Algorithm: sha256WithRSAEncryption
40:ed:85:7d:98:ad:a3:01:9a:fe:40:8f:13:8d:16:d4:a1:42:
80:e5:72:a6:86:7b:06:1d:e7:dc:9f:91:bd:5a:a9:b8:cf:13:
cc:44:4a:78:4f:c1:ea:4b:90:94:b7:53:61:db:98:75:6c:ba:
ab:72:b7:5b:0c:e5:c7:05:e7:88:1b:34:29:5f:0f:2d:51:36:
ae:06:53:6f:b8:c6:22:31:94:a0:6d:22:10:6d:cb:db:b3:a5:
2f:14:b8:21:2b:8b:bf:1d:f2:da:ed:ab:55:a2:6b:c2:35:49:
b9:9d:65:a9:69:cd:b3:e2:27:eb:14:89:f3:b4:fd:d9:94:7a:
b1:53:69:b1:1a:04:0b:4b:c3:52:a7:07:01:39:82:01:40:63:
ec:e1:04:17:ca:c6:72:b5:de:7c:cc:09:e2:e3:48:37:c6:cb:
e9:99:cf:63:88:18:55:ea:cb:4a:7a:4f:fd:5d:e4:67:0e:99:
a8:11:72:8d:6c:1b:da:08:b1:47:e4:95:b9:3f:96:c1:3e:43:
92:c0:03:c4:1e:be:0d:fe:9b:db:36:fc:60:5b:28:0d:01:f9:
17:0c:ef:0b:49:48:1a:e4:b2:5d:85:ea:d8:a2:00:45:f3:c6:
c9:fe:f6:81:b7:07:aa:0a:ee:10:84:bf:fb:da:0f:69:26:10:
89:74:97:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:28 2025 by rpki-client