Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/4V9UnV1Yi4lf1STc1xhZ4bIgUvA.roa
File: 4V9UnV1Yi4lf1STc1xhZ4bIgUvA.roa (raw, json)
Hash identifier: OKQzkBUD42iLo7oYo0ouIYvBAPZ/5GAsgIcFR+QH2YU=
Subject key identifier: E1:5F:54:9D:5D:58:8B:89:5F:D5:24:DC:D7:18:59:E1:B2:20:52:F0
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019422FB5ECA754B6AA0319A098575053369
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/4V9UnV1Yi4lf1STc1xhZ4bIgUvA.roa
Signing time: Wed 01 Jan 2025 17:48:06 +0000
ROA not before: Wed 01 Jan 2025 17:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39238
IP address blocks: 138.124.185.0/24 maxlen: 24
138.124.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:5e:ca:75:4b:6a:a0:31:9a:09:85:75:05:33:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 17:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e15f549d5d588b895fd524dcd71859e1b22052f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c5:39:77:78:67:e9:85:49:e3:a3:24:08:7a:
3f:9b:53:5a:fc:57:83:78:fd:23:80:21:47:7d:0b:
11:ca:5a:1f:ee:16:af:c5:05:06:37:5c:99:84:6c:
0e:50:06:96:db:c4:65:33:08:d2:d8:89:02:0c:1e:
df:e7:80:eb:8e:33:40:1a:ff:74:c1:26:a5:3a:28:
eb:98:ab:76:91:47:06:bb:0b:63:df:6c:cc:b5:48:
a5:ec:30:03:61:6f:cf:e2:6f:22:e3:e2:db:84:c8:
38:15:2b:94:22:f4:0f:36:ed:51:3c:91:47:57:c9:
9a:28:3f:03:94:ff:1e:bb:49:db:90:d0:13:7a:db:
d8:a4:ba:1e:ff:22:1a:86:a1:54:bf:be:61:f8:59:
ce:da:03:2a:f9:44:24:96:d2:4c:16:76:11:08:f9:
c6:df:a2:08:de:2c:95:37:58:12:c8:01:21:71:42:
b9:fd:e7:a2:85:f8:ee:de:9c:be:2d:e1:cb:2a:d2:
d3:23:ca:cd:d4:f2:1f:68:8f:b8:1f:ce:8d:cf:11:
4b:18:d5:69:a3:b1:0e:63:ad:da:b9:2a:9f:02:22:
49:04:68:41:fc:e8:ec:ae:6e:d7:68:7b:7f:9d:64:
c9:a3:b7:b8:3a:7e:d0:d4:a8:a2:ac:cf:be:7b:fe:
e9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5F:54:9D:5D:58:8B:89:5F:D5:24:DC:D7:18:59:E1:B2:20:52:F0
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/4V9UnV1Yi4lf1STc1xhZ4bIgUvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.185.0-138.124.186.255
Signature Algorithm: sha256WithRSAEncryption
0f:fc:8d:f0:b0:b5:1d:7f:e7:44:87:26:42:17:da:b0:4e:a0:
9c:54:48:40:69:42:f5:42:c5:1d:27:d7:83:a1:e6:05:fa:ac:
65:9c:8f:c0:f2:71:c2:d6:4c:e8:23:3d:52:7c:7f:57:4a:38:
95:c8:58:ab:4f:b7:84:f9:b6:4e:5e:bb:ec:cc:40:04:87:41:
4f:31:3f:02:58:dd:22:3d:f2:1f:8e:1e:ae:dd:03:31:34:fc:
a1:4d:d5:39:1c:03:d2:a0:08:4b:98:b4:54:4a:20:55:58:f5:
ea:f8:49:92:f8:68:df:ba:5c:01:8e:0b:19:3c:68:20:87:4d:
5c:f1:14:6b:e9:35:ad:be:cd:e3:91:7d:38:30:f5:db:49:a9:
5a:2c:0f:6e:e7:16:33:d3:4f:e3:29:3d:db:6f:69:92:6d:ae:
32:c3:22:aa:e1:fd:a9:68:0a:7b:ca:af:de:9b:e0:28:20:3b:
15:bf:9d:ca:14:cb:4c:85:97:2f:0a:54:14:6f:a9:a6:30:28:
b8:d2:22:bd:fe:53:ac:ce:f4:bd:dc:b5:ed:80:1c:c7:da:46:
18:d8:c3:63:a6:37:81:db:6e:54:79:51:cc:c9:7e:a9:1e:80:
4a:88:c5:12:5d:f5:86:03:3b:2a:23:1c:77:45:b9:08:16:62:
b5:af:bf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:46:54 2025 by rpki-client