Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/4nd-DP_ymkf3DYArDQC7CtVceEQ.roa
File: 4nd-DP_ymkf3DYArDQC7CtVceEQ.roa (raw, json)
Hash identifier: kWIc/fCxnFO7mZl60VV/nQnhRsbj6yvXCXmWGM67c1k=
Subject key identifier: E2:77:7E:0C:FF:F2:9A:47:F7:0D:80:2B:0D:00:BB:0A:D5:5C:78:44
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 01942521C3AFBF63D0CA47F80ADB62839D8B
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/4nd-DP_ymkf3DYArDQC7CtVceEQ.roa
Signing time: Thu 02 Jan 2025 03:49:17 +0000
ROA not before: Thu 02 Jan 2025 03:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34305
IP address blocks: 85.12.28.0/22 maxlen: 24
85.12.32.0/20 maxlen: 20
85.12.48.0/21 maxlen: 21
85.12.58.0/23 maxlen: 24
85.12.60.0/22 maxlen: 22
91.148.208.0/20 maxlen: 20
185.91.28.0/24 maxlen: 24
193.138.220.0/24 maxlen: 24
195.200.84.0/24 maxlen: 24
195.200.85.0/24 maxlen: 24
2a01:788::/32 maxlen: 48
2a01:788:1000::/48 maxlen: 48
2a01:788:aaaa::/48 maxlen: 48
2a01:788:aaab::/48 maxlen: 48
2a01:788:aaac::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c3:af:bf:63:d0:ca:47:f8:0a:db:62:83:9d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Jan 2 03:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2777e0cfff29a47f70d802b0d00bb0ad55c7844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:81:72:e7:d3:31:f6:aa:b6:22:94:8c:49:72:
08:73:a2:ca:c9:c2:c6:68:77:90:45:ef:11:52:d3:
63:c7:7a:cf:b7:49:d5:b6:8f:0e:03:ee:c0:2b:cc:
22:4a:4a:5b:de:46:cd:5a:e3:76:1c:49:ed:b9:ac:
63:a2:59:b1:23:ba:cf:08:39:57:e4:13:bc:b9:12:
bc:93:ad:65:ee:f1:e4:b8:b0:b3:c7:48:46:a1:b6:
82:4b:cd:04:8b:d9:33:51:30:30:a9:a6:05:d8:8e:
25:d0:da:da:22:4b:a2:59:07:ce:00:67:d6:7b:58:
53:ed:d2:29:95:67:58:2c:5b:2d:60:af:68:dc:b6:
fe:f2:1a:74:30:a7:4f:72:6c:75:3e:94:a0:1b:c1:
49:c7:9f:aa:0b:48:28:3b:69:c8:a6:8b:5d:dc:a8:
ea:68:82:05:e2:4e:87:f7:a5:15:ed:47:f9:ab:05:
15:d4:52:6d:db:06:8e:b2:f8:93:fb:b5:25:13:f1:
4c:24:7c:8a:38:da:22:33:69:d6:a7:99:59:34:e7:
a7:94:aa:b9:6c:cc:03:00:d2:8f:ba:b3:97:9c:22:
18:72:e2:2e:1a:cd:d8:09:c3:2e:f5:0f:b0:a6:b1:
3a:42:c4:88:f8:cf:a4:16:c9:ba:93:31:f7:e8:87:
10:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:77:7E:0C:FF:F2:9A:47:F7:0D:80:2B:0D:00:BB:0A:D5:5C:78:44
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/4nd-DP_ymkf3DYArDQC7CtVceEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.12.28.0-85.12.55.255
85.12.58.0-85.12.63.255
91.148.208.0/20
185.91.28.0/24
193.138.220.0/24
195.200.84.0/23
IPv6:
2a01:788::/32
Signature Algorithm: sha256WithRSAEncryption
30:a3:94:f7:b6:f6:c9:55:cf:56:e4:44:98:16:85:08:2b:c0:
af:8f:e5:77:48:ab:4b:ba:58:74:1e:e2:d2:b5:a0:fc:b6:43:
d8:3e:c5:cd:85:cb:74:5a:25:a8:8e:35:6b:66:b6:f8:ea:42:
81:08:3a:90:97:21:26:9c:97:aa:6a:ba:47:5a:5f:eb:01:96:
87:6b:0e:04:bd:5b:c1:36:af:9d:ef:3a:1d:5c:b1:5e:7e:2c:
18:00:21:a3:5e:c2:81:5e:31:21:e5:86:e6:97:67:92:95:c3:
18:36:bd:8c:5f:9e:4e:42:a9:b3:e6:ac:45:a6:c2:d8:0d:88:
f3:cd:6f:63:90:6d:74:25:f7:e6:4b:e5:02:bf:22:23:d1:51:
ef:6c:f3:94:b7:ca:07:b8:05:8d:aa:07:45:33:1f:5c:7a:3d:
47:9d:24:23:20:ff:b7:b7:fa:27:62:71:54:f5:40:e0:74:34:
db:03:b7:28:2b:87:2b:2a:2e:f4:b1:66:fa:af:df:53:11:40:
f0:38:2f:a3:11:d7:b0:8c:ab:0e:97:97:9e:82:05:4e:62:a9:
78:ee:f8:bb:08:1b:0a:b6:7d:44:8e:74:cc:e4:f5:20:96:92:
19:ce:78:f1:01:40:36:82:d7:04:75:9a:8b:ee:8d:66:1c:d1:
9c:1e:c7:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:33:42 2025 by rpki-client