Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4_9oSR_nPq_zEE7cpnH1WQQOsj0.roa
File: 4_9oSR_nPq_zEE7cpnH1WQQOsj0.roa (raw, json)
Hash identifier: KAp0MDaYwS9GXbZH9O8cCp/RPzjkz/6EPQLiqUA4yCg=
Subject key identifier: E3:FF:68:49:1F:E7:3E:AF:F3:10:4E:DC:A6:71:F5:59:04:0E:B2:3D
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C34DBE7492BD8DF9AA986367EFBEE
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4_9oSR_nPq_zEE7cpnH1WQQOsj0.roa
Signing time: Wed 01 Jan 2025 01:47:49 +0000
ROA not before: Wed 01 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62445
IP address blocks: 85.120.244.0/23 maxlen: 24
85.120.246.0/24 maxlen: 24
194.102.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:34:db:e7:49:2b:d8:df:9a:a9:86:36:7e:fb:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3ff68491fe73eaff3104edca671f559040eb23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:74:38:12:f2:62:25:93:a3:79:92:96:4e:
17:d7:ae:b9:27:2b:a0:33:05:73:28:43:20:7e:99:
e7:75:fc:89:4e:c1:20:3c:e9:0b:3c:9e:44:0e:5d:
46:1b:fd:a3:27:02:f2:16:84:8c:be:93:8e:dc:62:
17:e1:c2:df:ff:c2:39:9d:bd:4f:25:26:61:78:45:
0c:a4:3d:71:ae:c2:3b:e1:42:49:cb:b4:5c:20:3a:
1c:dc:72:bb:00:ee:25:e1:91:ff:0c:f9:cf:40:a2:
d6:81:77:09:72:71:ef:af:a0:45:d9:4a:52:7d:aa:
09:f1:b6:c9:f0:13:33:7e:c5:f6:f4:ac:6c:dc:39:
f4:88:70:8b:30:8c:19:9c:b8:3a:cd:23:6d:f2:b0:
ac:33:e3:d0:1b:a4:64:fc:74:4f:0d:14:26:b0:43:
7b:6b:9b:4f:87:2e:0a:01:69:4f:b6:0d:19:35:f3:
f3:d4:71:53:71:96:22:5a:53:11:42:30:82:c1:64:
88:22:e8:a0:87:78:e0:65:b0:3c:8c:d9:ef:5b:c3:
fa:f3:72:4a:ba:87:5f:2b:0d:68:9b:4a:83:6d:2d:
37:b3:11:2a:32:11:cf:2d:41:cd:66:33:82:62:35:
c0:3e:2d:ef:7e:55:f9:86:c4:0a:e8:e2:c2:1e:3a:
37:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FF:68:49:1F:E7:3E:AF:F3:10:4E:DC:A6:71:F5:59:04:0E:B2:3D
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4_9oSR_nPq_zEE7cpnH1WQQOsj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.244.0-85.120.246.255
194.102.241.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a6:2d:23:b0:b7:06:3c:0c:31:69:b8:b9:23:1a:67:a6:ba:
11:3c:c9:e4:0e:c6:2c:0f:c3:9d:e3:1e:6a:f4:4c:ce:db:ef:
c2:b7:1a:a8:3d:7f:aa:49:45:1d:09:2d:07:b4:35:4f:79:91:
a9:05:8b:c8:a8:57:b9:99:5e:ee:a3:d2:58:1b:f1:64:c9:08:
3c:f3:0e:7d:d5:d2:24:ad:61:3a:e2:e8:88:fc:5f:f8:68:35:
94:7b:08:57:85:e5:f4:11:2e:40:f5:c9:29:1e:0f:42:2a:90:
63:b3:0a:4c:f8:93:a0:b9:72:0d:6f:c6:c8:34:9b:5e:fa:21:
23:b2:8b:e9:ee:f1:cf:c9:8f:e9:a6:a9:2a:67:60:4b:95:76:
78:67:a6:f8:50:13:91:9e:7a:27:57:91:2e:c1:6b:63:32:c9:
73:6b:be:7f:2a:98:62:91:d6:88:9a:3b:39:5b:45:7a:dc:b4:
a8:23:64:18:d0:dc:d5:89:11:25:d9:bd:d5:c0:72:2c:a7:b5:
ad:e7:8c:8d:36:3b:51:8c:57:a7:53:31:23:3d:8d:c8:40:f4:
c0:03:2e:d8:7f:b1:20:54:34:2c:f7:6c:24:6b:8e:1e:d4:f7:
26:07:a0:6c:bc:5f:86:25:24:57:f2:b6:2d:e0:9f:42:6e:b6:
c1:30:d4:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:25:13 2025 by rpki-client