Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/4Gcae_TgkqRGfUsxPV5DJhfgyWI.roa
File: 4Gcae_TgkqRGfUsxPV5DJhfgyWI.roa (raw, json)
Hash identifier: paAdpC7qR+39s63v1lKKgqBwKLqwrzz8gisXlWTAmhc=
Subject key identifier: E0:67:1A:7B:F4:E0:92:A4:46:7D:4B:31:3D:5E:43:26:17:E0:C9:62
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 0194258F8398BA079DFF22DB108064E84D1A
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/4Gcae_TgkqRGfUsxPV5DJhfgyWI.roa
Signing time: Thu 02 Jan 2025 05:49:09 +0000
ROA not before: Thu 02 Jan 2025 05:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42093
IP address blocks: 217.170.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:83:98:ba:07:9d:ff:22:db:10:80:64:e8:4d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Jan 2 05:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0671a7bf4e092a4467d4b313d5e432617e0c962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d6:7b:2a:2c:e4:dc:3a:40:af:f7:42:c9:97:
1d:e4:3f:4f:38:22:d5:27:23:35:c3:fb:73:df:21:
83:d6:67:9f:06:95:9e:e0:3e:3e:a8:f9:11:7a:a4:
35:13:c5:ef:ce:3b:b3:e7:04:74:d7:ce:4c:57:12:
95:94:07:7a:82:88:9a:0c:8e:fb:bb:ed:b2:2e:6f:
fc:3b:fb:ae:6b:27:a7:22:04:b0:c9:f0:04:a9:e2:
16:c1:6e:40:67:90:4a:27:97:ec:79:2d:af:b2:89:
92:34:1c:30:e9:f5:65:73:87:7f:00:28:18:06:0b:
a3:a7:fa:9f:9f:21:30:a1:07:6a:9e:fe:66:bc:fe:
88:47:b6:b6:cd:80:d9:87:e6:98:17:c8:07:58:87:
ae:52:44:e9:05:c3:36:5c:81:a9:3d:60:56:28:cc:
1d:85:d0:4b:62:12:9d:57:52:93:e8:97:24:9a:c4:
03:bb:30:96:cc:e4:bc:6b:99:88:fd:2d:75:a5:a8:
48:bb:a2:73:a2:66:cd:e4:85:b1:71:5a:20:85:e4:
d1:bd:e7:52:4d:fe:ba:02:97:bc:2f:bc:c3:4f:2a:
bc:b4:f4:d4:bb:e3:25:71:62:5d:ab:a0:2a:01:14:
bd:3d:4c:3d:44:45:c9:14:7a:f4:cc:09:a9:64:7d:
88:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:67:1A:7B:F4:E0:92:A4:46:7D:4B:31:3D:5E:43:26:17:E0:C9:62
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/4Gcae_TgkqRGfUsxPV5DJhfgyWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.170.4.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:4b:ed:e9:03:bc:dc:86:6a:29:eb:a3:2a:7d:23:2e:a3:14:
2b:a9:bb:04:da:c6:7d:40:da:bb:20:98:42:6d:56:99:1e:cd:
3c:43:f8:5f:71:77:c4:87:77:5c:e7:c5:7b:a9:fa:dd:fd:38:
09:bc:ba:33:79:4d:6a:78:c8:3d:74:20:24:72:57:a2:4b:82:
fd:9f:79:ee:8e:55:ca:f7:12:40:b0:30:a7:8c:85:06:4d:83:
36:98:52:19:62:d2:c3:28:ca:a3:63:20:d2:ef:23:31:d9:4b:
86:4d:d4:5e:7b:7a:8f:eb:5d:8b:c2:2b:d8:f8:cc:27:ed:8b:
7c:74:2e:fb:93:47:7c:f6:20:56:48:b3:b1:3c:5e:61:07:ba:
60:d6:e1:2d:24:79:fd:dd:e8:19:22:f0:05:c8:e6:40:b8:b2:
f2:ac:77:0b:fe:11:03:44:c2:dd:5c:4e:66:06:ae:e8:6b:f8:
65:79:96:63:0c:14:75:d3:c9:56:84:68:e6:2c:bc:fb:b9:18:
e7:39:8b:fd:b0:dc:8b:1f:b5:18:99:e2:58:6e:9c:3b:b0:29:
cc:3a:6f:20:03:ea:71:d2:b1:24:e1:a5:10:8e:01:cb:5b:ab:
72:d7:82:ff:65:68:7f:a6:2c:a3:ff:e5:26:5a:a8:46:21:77:
24:47:87:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:14:06 2025 by rpki-client