Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/4OxcURyUIN8rIg_zubFtLHWT6fM.roa
File: 4OxcURyUIN8rIg_zubFtLHWT6fM.roa (raw, json)
Hash identifier: Boca2vUs2FdFn/NJjp3cdOpI7mcfGGKI5DewOxKm5rA=
Subject key identifier: E0:EC:5C:51:1C:94:20:DF:2B:22:0F:F3:B9:B1:6D:2C:75:93:E9:F3
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 01856ED4C1C5D9740B150874A3F4407B77F1
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/4OxcURyUIN8rIg_zubFtLHWT6fM.roa
Signing time: Sun 01 Jan 2023 19:35:14 +0000
ROA not before: Sun 01 Jan 2023 19:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398464
IP address blocks: 193.142.36.0/22 maxlen: 24
91.132.125.0/24 maxlen: 24
91.132.124.0/24 maxlen: 24
212.87.218.0/24 maxlen: 24
212.87.216.0/24 maxlen: 24
212.87.219.0/24 maxlen: 24
93.177.95.0/24 maxlen: 24
93.177.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:c1:c5:d9:74:0b:15:08:74:a3:f4:40:7b:77:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jan 1 19:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0ec5c511c9420df2b220ff3b9b16d2c7593e9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e1:55:8c:de:03:f0:30:c3:01:18:3d:6f:47:
a8:c1:3c:ce:f4:f7:8f:73:23:e6:bb:8e:53:fa:b5:
77:0c:50:44:f4:81:c2:c8:a0:6c:e0:d0:b4:d9:b0:
21:3b:79:64:45:c7:c7:7a:52:53:fa:13:58:5c:7d:
be:97:b9:4f:b4:1b:6b:be:7d:5a:bd:ca:a2:95:6f:
90:00:9e:45:6e:00:79:9d:45:73:fa:2d:ba:0e:cf:
b9:8a:ff:e9:67:7e:3a:6f:74:66:9e:58:ff:b4:d8:
11:b8:fc:e9:70:04:e5:66:dd:6d:0e:98:50:68:2c:
33:32:f0:41:f7:f8:7c:a1:8d:75:df:38:ee:f8:4e:
3a:64:c3:9c:31:3d:b7:cc:22:9e:37:99:45:e8:5b:
57:7b:85:02:5d:a3:8f:eb:33:86:ac:48:e2:f8:ce:
4f:3c:19:4d:13:eb:f1:03:47:81:d5:58:b9:15:2c:
ec:1f:72:3d:43:95:68:79:d0:2b:a6:e7:96:a8:1f:
64:d3:90:66:d1:b2:55:b3:ed:60:e5:98:a5:31:51:
46:cf:38:c9:12:df:8b:33:7e:dd:df:7e:15:e3:58:
bf:25:59:02:56:b2:73:9f:69:09:a5:ea:8c:7c:08:
19:69:f1:28:f7:57:a5:32:58:99:6b:4d:81:b2:ba:
a4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EC:5C:51:1C:94:20:DF:2B:22:0F:F3:B9:B1:6D:2C:75:93:E9:F3
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/4OxcURyUIN8rIg_zubFtLHWT6fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.124.0/23
93.177.94.0/23
193.142.36.0/22
212.87.216.0/24
212.87.218.0/23
Signature Algorithm: sha256WithRSAEncryption
df:3e:68:e2:30:b7:4d:a8:43:d6:11:4d:b4:80:63:56:85:54:
17:0a:d0:13:19:2a:0a:c6:45:d8:13:6f:3f:1a:6b:8e:57:b5:
6c:d8:80:48:a5:0f:84:6d:72:1f:49:67:e1:e9:16:26:ac:ce:
83:f4:a0:d5:05:43:0b:a6:47:ae:90:5b:c2:63:b8:de:ab:b1:
d2:a6:80:df:52:30:b7:39:ff:3d:c3:95:26:53:78:7e:f3:68:
2f:c0:4f:01:11:01:fd:10:7c:0c:09:73:da:b7:e3:c5:1b:b0:
2c:9b:ff:8a:8d:b7:44:b7:92:fd:30:9c:69:5a:da:dd:bb:65:
a5:5f:cf:76:b4:35:b7:bc:ba:c8:21:06:01:9a:56:2f:7b:13:
e4:2d:39:4b:91:94:e6:fd:8b:34:07:19:2d:cc:44:28:88:8f:
4a:6b:76:89:7e:dc:c2:4f:cc:8e:9a:e9:e1:a0:b7:74:33:9d:
62:02:68:67:1b:c9:8b:9d:86:4b:a9:b6:3b:bd:32:5a:ce:4a:
03:76:41:ea:2b:79:8c:87:88:7a:2d:0c:24:23:81:fa:a2:7d:
1c:d7:42:c3:59:22:62:f0:81:fc:a8:d3:df:9c:48:f9:74:d3:
6e:1e:c2:3c:06:ce:7f:8c:39:fd:ad:9c:10:96:b9:60:5c:62:
f0:93:2c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:46:46 2025 by rpki-client