Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/G4FFwIyiIU29W95QZk9-MWiLljM.roa
File: G4FFwIyiIU29W95QZk9-MWiLljM.roa (raw, json)
Hash identifier: iDaSzS67wgh1om9NMNs4mTJZEfMH7AGf6ifeuTsPDRg=
Subject key identifier: 1B:81:45:C0:8C:A2:21:4D:BD:5B:DE:50:66:4F:7E:31:68:8B:96:33
Certificate issuer: /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial: 0194747A67E76D7F353CBB7A7FE36D92534B
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/G4FFwIyiIU29W95QZk9-MWiLljM.roa
Signing time: Fri 17 Jan 2025 13:36:06 +0000
ROA not before: Fri 17 Jan 2025 13:36:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47540
IP address blocks: 185.97.214.0/24 maxlen: 24
2a13:cfc0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:74:7a:67:e7:6d:7f:35:3c:bb:7a:7f:e3:6d:92:53:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Validity
Not Before: Jan 17 13:36:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b8145c08ca2214dbd5bde50664f7e31688b9633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:51:52:c2:26:61:c1:bb:a3:ae:a5:5f:ab:
44:6c:8e:85:69:85:56:90:3c:d2:d5:11:5a:e3:04:
94:88:bb:82:21:35:66:14:79:11:e5:4b:c1:1a:2a:
5a:f1:6c:90:ba:8b:d3:1c:37:fa:b7:b7:44:5b:75:
e7:08:18:8c:48:07:de:87:68:98:d0:1a:a5:e4:0b:
66:a8:dd:b0:3c:30:41:9a:2c:d3:8b:2b:f7:8d:81:
31:c4:30:b3:ea:4a:02:be:e4:91:0a:ff:88:4c:90:
85:24:02:17:1c:04:58:0a:bd:bc:a0:f3:ba:fe:70:
92:83:5d:05:9f:35:b7:77:ae:46:d5:34:58:15:21:
79:16:b3:46:37:18:f2:3a:bd:55:29:3f:db:da:ba:
56:d4:d8:35:ea:51:eb:fe:e0:e8:d1:a7:2e:d9:e5:
4c:c9:0f:30:ae:dd:04:30:62:4d:1f:24:7f:9b:15:
fc:ba:af:d3:22:3d:14:9d:d4:33:b4:7c:33:84:fe:
9b:51:3a:b7:87:a8:24:45:48:ea:1e:e2:eb:bf:a2:
10:ea:f8:4d:43:69:27:28:d2:7c:5a:73:1f:a4:91:
4c:19:f8:18:3a:93:13:60:82:44:b9:3a:b9:43:e2:
c9:6e:5f:b9:66:0c:04:38:70:c3:2a:65:ad:82:12:
67:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:81:45:C0:8C:A2:21:4D:BD:5B:DE:50:66:4F:7E:31:68:8B:96:33
X509v3 Authority Key Identifier:
keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/G4FFwIyiIU29W95QZk9-MWiLljM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.214.0/24
IPv6:
2a13:cfc0::/29
Signature Algorithm: sha256WithRSAEncryption
ba:f7:a7:4c:2b:bb:40:8f:7e:7a:88:fc:80:f7:80:ea:18:34:
2c:c7:54:d3:59:29:55:dc:77:9f:79:2f:3a:48:47:10:6b:3b:
5c:50:3b:94:d0:8f:e8:f7:5a:5a:6e:11:d7:5a:f6:08:22:be:
1e:76:55:0d:d3:16:ab:ff:80:af:35:22:b0:ce:d0:7d:9b:2d:
22:8d:c7:71:f7:91:a6:b0:4f:27:0c:46:b2:5f:05:86:44:78:
75:5d:a7:7e:fd:5c:1c:6b:a4:90:49:64:a7:a2:9e:dd:24:ea:
38:76:ec:e8:07:84:f8:79:f4:eb:de:8e:04:3a:df:ff:b0:80:
bd:8f:7f:ba:17:52:4f:47:5f:45:c2:1f:59:3b:4c:93:4f:b5:
25:f7:f7:7d:6b:6a:85:c7:d9:c3:63:f3:78:9b:8f:0f:fb:34:
1f:0f:0e:d3:59:cf:3d:85:9e:a2:6f:34:d9:e2:5f:fd:0b:97:
36:1a:f8:37:74:8a:65:8f:4b:15:b0:b6:0f:c8:a9:b9:2d:fa:
c2:ee:42:60:08:7e:57:cd:56:1c:41:48:1d:95:4c:ec:dd:b1:
d5:1a:48:52:50:09:4b:b3:63:7f:be:e4:69:b9:a4:1b:43:95:
09:72:e7:21:22:76:8b:e7:16:1a:c5:bb:4e:ff:f0:33:90:a1:
90:c5:f1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:16 2025 by rpki-client