Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4aW0n50qKHixf_Ab_AZCfcl9Xwk.roa
File: 4aW0n50qKHixf_Ab_AZCfcl9Xwk.roa (raw, json)
Hash identifier: oxfoP4U83/dIrFvkCjjkHatXby4jXN4KsHSojnxho70=
Subject key identifier: E1:A5:B4:9F:9D:2A:28:78:B1:7F:F0:1B:FC:06:42:7D:C9:7D:5F:09
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0194266BAEC6E07A669064EC5248173EA543
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4aW0n50qKHixf_Ab_AZCfcl9Xwk.roa
Signing time: Thu 02 Jan 2025 09:49:38 +0000
ROA not before: Thu 02 Jan 2025 09:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213296
IP address blocks: 194.28.156.0/24 maxlen: 24
194.28.158.0/24 maxlen: 24
194.104.4.0/24 maxlen: 24
194.104.5.0/24 maxlen: 24
194.104.6.0/24 maxlen: 24
212.69.132.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
212.69.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ae:c6:e0:7a:66:90:64:ec:52:48:17:3e:a5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 09:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1a5b49f9d2a2878b17ff01bfc06427dc97d5f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:1f:a9:d3:de:6a:b7:d1:ba:35:8e:d3:4a:
8a:c8:b3:88:c2:2a:b6:fa:40:d3:cc:1e:0f:72:79:
d1:e9:ff:e1:f3:22:95:fe:7c:5a:47:d5:84:b0:e9:
c5:cb:07:74:2b:ea:ce:55:98:05:1e:ce:2c:61:1c:
4f:13:3e:36:23:56:d1:fc:f8:7b:f8:02:cf:87:1d:
dc:86:8c:52:10:e6:28:4b:49:24:d6:72:e4:9a:5b:
54:aa:3b:9e:17:60:a0:00:2b:5a:98:a1:3e:de:24:
0b:71:44:d4:84:20:fa:c8:bf:a8:8b:cf:92:8a:a4:
ad:4c:a1:e4:57:15:ee:2c:1d:84:8a:b2:70:bd:0e:
76:eb:a3:55:41:06:a3:d2:f4:15:44:86:64:59:f7:
26:83:32:2a:b7:c9:9a:4d:de:38:bc:ec:5d:95:f0:
7e:00:5d:4d:df:5e:ec:64:6e:c0:e9:f1:96:0e:0c:
97:59:ca:14:9c:55:30:24:ff:b6:c0:ae:b9:19:2c:
a4:e6:a6:1c:56:dc:39:d2:52:1a:21:d7:6c:40:f0:
96:a4:53:b9:30:fd:6a:95:99:8d:fc:cf:65:92:4c:
1f:e8:65:b1:ad:b6:82:bc:2f:8e:c6:a2:25:52:9e:
d6:bc:c7:8d:f9:b2:44:1b:3c:fb:f6:e3:19:bc:4f:
57:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A5:B4:9F:9D:2A:28:78:B1:7F:F0:1B:FC:06:42:7D:C9:7D:5F:09
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4aW0n50qKHixf_Ab_AZCfcl9Xwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.156.0/24
194.28.158.0/24
194.104.4.0-194.104.6.255
212.69.132.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
14:09:46:4c:b8:df:52:7e:5f:ed:30:70:59:e4:00:8f:9b:b6:
95:02:ee:13:1a:26:d7:cd:26:f9:9e:ca:1c:13:13:cd:4e:d2:
5c:59:f3:60:68:0f:70:25:f3:44:2a:90:bc:d3:83:3a:4b:c3:
01:92:91:96:88:7f:66:a8:dd:ea:80:01:66:03:c1:85:44:2a:
06:c8:24:20:e3:14:0a:32:62:76:d1:2d:8c:38:c5:a9:e0:6f:
8b:2c:2f:2e:6f:7d:9d:25:a2:4b:aa:bd:b3:63:97:04:6e:67:
99:ad:37:9d:19:c9:e3:fc:fe:e7:86:38:b7:68:37:b1:93:d0:
5b:91:14:47:40:96:d8:f5:a4:6f:cc:2e:50:ce:0a:d4:4a:c8:
2e:8a:a0:4e:d4:02:7a:ff:95:a0:0f:db:e0:02:d5:cf:c2:42:
e1:ae:8d:ec:66:98:c6:45:6f:4d:6b:fe:34:1c:31:56:3c:ff:
e4:06:5b:27:ba:ac:f2:2a:cc:92:dd:fe:45:3b:b9:35:a0:c8:
c2:52:4f:36:68:a1:56:67:07:69:32:99:da:7a:35:b1:42:41:
8a:0d:e3:07:c0:35:dc:49:d2:50:b0:f6:66:92:fc:2d:17:16:
97:f7:6b:50:23:7d:69:c1:1b:04:45:96:84:3b:47:7f:01:43:
86:72:3d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:33 2025 by rpki-client