Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/a7ce53-9a9b-40c9-ad50-ef3140f4185b/1/4VU-JSLoqGLRbkIpscKQOWs4iT0.roa
File: 4VU-JSLoqGLRbkIpscKQOWs4iT0.roa (raw, json)
Hash identifier: ropQisTj+PQl6SMtsRZASArOuA3Vzhw0h3PgHbSMcas=
Subject key identifier: E1:55:3E:25:22:E8:A8:62:D1:6E:42:29:B1:C2:90:39:6B:38:89:3D
Certificate issuer: /CN=e955baa2e601ca899abdbfaf01ecaa8a230fd002
Certificate serial: 093B636A
Authority key identifier: E9:55:BA:A2:E6:01:CA:89:9A:BD:BF:AF:01:EC:AA:8A:23:0F:D0:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6VW6ouYByomavb-vAeyqiiMP0AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/a7ce53-9a9b-40c9-ad50-ef3140f4185b/1/4VU-JSLoqGLRbkIpscKQOWs4iT0.roa
Signing time: Sat 01 Jan 2022 11:02:48 +0000
ROA not before: Sat 01 Jan 2022 11:02:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199139
IP address blocks: 217.76.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154887018 (0x93b636a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e955baa2e601ca899abdbfaf01ecaa8a230fd002
Validity
Not Before: Jan 1 11:02:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1553e2522e8a862d16e4229b1c290396b38893d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:99:ad:90:a4:9d:d8:61:d4:af:4c:b1:0f:f0:
dd:1f:e1:50:34:6e:fb:d7:88:ab:b7:a8:9a:fb:e7:
8e:a2:3e:17:5f:d2:76:13:62:6c:b6:99:40:61:ff:
d5:fd:ef:71:41:33:6d:1a:58:c5:07:a9:89:b4:82:
30:ff:45:53:0d:82:d3:4c:16:e8:62:53:87:b7:86:
de:0b:55:a4:90:1f:99:2d:5a:95:9b:64:6b:b6:65:
cc:40:ff:ec:cd:fa:72:26:fe:6b:d9:fd:d0:2c:e7:
ec:59:ba:78:b7:f2:ea:bd:df:78:b9:41:56:a3:48:
e1:34:88:f7:b7:a4:45:4b:14:0a:36:e5:41:24:b8:
9e:17:00:86:17:f6:b2:8d:74:3c:4f:60:a7:37:80:
00:8a:d9:61:33:7a:55:d1:c4:86:a9:45:d7:08:2f:
e4:50:4d:e4:46:4a:60:97:5b:3b:f8:3f:8e:46:ca:
b4:8f:47:32:ba:c9:9a:58:01:f2:5b:99:e9:28:81:
8b:ed:5b:43:6f:e1:25:d4:1e:49:7d:9f:5a:1d:ce:
bc:83:ad:00:23:49:6f:2d:9c:d9:26:67:28:2b:09:
ed:66:28:5e:86:ec:88:1e:b3:51:6d:51:78:a4:6a:
42:56:4e:43:21:e9:0f:6a:bc:32:3e:66:b1:81:de:
eb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:55:3E:25:22:E8:A8:62:D1:6E:42:29:B1:C2:90:39:6B:38:89:3D
X509v3 Authority Key Identifier:
keyid:E9:55:BA:A2:E6:01:CA:89:9A:BD:BF:AF:01:EC:AA:8A:23:0F:D0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6VW6ouYByomavb-vAeyqiiMP0AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a7ce53-9a9b-40c9-ad50-ef3140f4185b/1/4VU-JSLoqGLRbkIpscKQOWs4iT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a7ce53-9a9b-40c9-ad50-ef3140f4185b/1/6VW6ouYByomavb-vAeyqiiMP0AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.76.16.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:66:aa:8f:db:42:27:79:01:ff:b6:d3:3e:44:87:b1:36:85:
78:78:3c:30:19:5c:9c:f6:55:d8:61:be:43:ba:46:6a:36:9b:
fa:5e:a2:1e:56:7a:48:14:28:64:06:2a:6a:af:09:e7:81:92:
e4:16:c2:29:12:0a:75:2c:0c:cb:09:23:ca:f5:d2:d6:8d:4a:
6b:38:a4:03:69:21:79:1e:fd:11:38:62:8c:e3:f5:1a:37:3b:
cb:ad:88:0b:36:17:31:4b:18:7d:cf:fe:28:34:bd:a4:0d:bc:
76:df:f9:cc:c8:2f:69:ce:cd:11:94:60:93:7a:aa:fd:5b:b2:
89:1a:e9:e7:bc:aa:ca:88:41:86:7f:ec:7c:7b:ec:72:f8:85:
b4:73:f8:7a:f9:c3:b3:0f:f4:71:e4:e3:18:9a:00:b6:24:12:
0d:3e:82:29:2a:46:49:c4:03:48:68:b7:01:ea:e6:30:cd:e9:
80:a5:f0:12:3a:ef:a5:ed:d9:e1:d9:8d:10:f5:26:5f:25:74:
f6:70:4b:4b:5b:2f:1b:8c:a6:8c:44:7b:d5:0b:88:6f:8c:2a:
8d:12:20:83:00:17:6a:28:f7:fc:fb:85:1c:1f:39:0a:c9:81:
cf:d7:d8:bc:b4:0a:ce:df:ac:6b:79:b5:12:e1:25:f6:1e:8e:
fa:4c:b9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:20:40 2025 by rpki-client