Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/4Mdmn6MaRoFLUycUXlZaFSGboEs.roa
File: 4Mdmn6MaRoFLUycUXlZaFSGboEs.roa (raw, json)
Hash identifier: C9ut+tYKUryPFgIx2+ThOOLJz+YjKuj147RuRXfxtis=
Subject key identifier: E0:C7:66:9F:A3:1A:46:81:4B:53:27:14:5E:56:5A:15:21:9B:A0:4B
Certificate issuer: /CN=3de2681dda00702a7597a71257e14f7a725e890e
Certificate serial: 0195D40FA5040992180ED4BFA6654B409365
Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/4Mdmn6MaRoFLUycUXlZaFSGboEs.roa
Signing time: Wed 26 Mar 2025 20:05:49 +0000
ROA not before: Wed 26 Mar 2025 20:05:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 145.43.252.0/24 maxlen: 24
145.43.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d4:0f:a5:04:09:92:18:0e:d4:bf:a6:65:4b:40:93:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e
Validity
Not Before: Mar 26 20:05:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0c7669fa31a46814b5327145e565a15219ba04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:fe:1a:c0:10:9c:6c:e9:0d:59:c4:56:39:
5d:1f:1b:96:f4:e8:cd:4b:eb:fa:b8:60:8f:d0:ee:
ba:4e:05:1f:23:4a:80:5f:64:ca:68:2c:4e:2d:c9:
12:fa:7e:4c:6e:30:a0:53:f7:36:46:da:9d:8a:c1:
00:03:7d:0a:ff:e3:1d:72:6a:14:d8:e5:db:bc:44:
ce:b1:64:50:bb:b4:c2:06:31:56:1c:70:90:1d:b4:
26:95:54:39:3f:c1:c5:5e:c6:96:d8:33:8e:7e:76:
0d:94:91:8a:ef:d1:fc:79:bb:d2:dc:d7:a8:35:b0:
03:5d:f1:fb:7c:51:9b:a1:ba:e9:d0:6a:ad:6f:22:
91:37:17:fa:42:75:e4:a9:24:fb:1a:d6:61:36:83:
dc:f6:19:c5:db:68:ce:f5:4c:ef:b3:5a:67:0d:a9:
51:d2:a2:43:7c:74:2c:89:c3:7d:46:00:64:72:14:
89:83:71:9d:a4:1c:6f:e1:10:f3:5d:39:54:8a:0c:
78:91:2e:5b:74:1e:fa:f9:a8:48:f9:93:6c:61:51:
8c:37:0f:86:1b:94:9f:d2:da:5b:3e:f9:77:81:3e:
d1:35:14:28:75:f4:1a:29:9a:10:97:cf:b4:a8:41:
93:b3:2f:5d:83:e1:fe:cd:1b:75:fa:e0:e8:6f:4e:
88:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C7:66:9F:A3:1A:46:81:4B:53:27:14:5E:56:5A:15:21:9B:A0:4B
X509v3 Authority Key Identifier:
keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/4Mdmn6MaRoFLUycUXlZaFSGboEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.43.252.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:19:05:45:d6:b1:b0:35:0a:86:3e:b3:71:52:d8:a2:6e:eb:
0d:d2:d6:2d:c5:a4:17:40:28:1c:a2:73:c8:c5:c2:22:67:b0:
29:cf:84:ad:4f:99:87:ae:dd:0e:24:d6:3b:2f:13:c7:dd:f8:
a4:e8:6d:ad:a1:b9:65:17:0b:cd:94:34:ad:66:3b:01:50:8d:
dc:f1:0a:b2:f1:61:9a:8f:88:cc:8e:c5:4a:27:07:cc:07:40:
e2:df:b9:27:ac:23:7a:5d:c8:3f:06:2a:4c:58:f5:08:ab:f4:
6e:0e:8b:3c:a7:8e:04:1d:de:70:a0:45:b8:d5:73:18:d0:68:
a4:73:b5:31:c3:c5:81:c4:ae:ab:e7:42:d5:39:8c:0e:a8:c1:
02:15:a6:61:a2:3e:ec:3f:1b:3d:c8:96:a3:a5:e9:8e:ca:7b:
f0:a5:50:9d:74:9f:57:c0:0f:3b:69:cb:33:5d:af:35:f4:dd:
7e:c6:41:1a:e4:85:d0:7d:0d:f0:3f:04:34:be:e9:36:63:75:
b6:a4:2f:2f:06:5f:14:41:57:25:c5:c8:c7:c3:ca:19:a5:5a:
e0:43:6c:9c:6e:84:f9:79:78:a8:7a:a7:81:63:3d:a6:7c:94:
e9:76:1a:85:34:4a:31:59:cd:63:7d:51:64:f3:b2:55:ca:a5:
0a:69:fd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:57:20 2025 by rpki-client