Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/4B99kvU4y_gVU64tDCbwq2bgtMo.roa
File: 4B99kvU4y_gVU64tDCbwq2bgtMo.roa (raw, json)
Hash identifier: PVMaecDRlBnCKBFb8ZG0EYPoiEpO5ECVby3MNSUAgTg=
Subject key identifier: E0:1F:7D:92:F5:38:CB:F8:15:53:AE:2D:0C:26:F0:AB:66:E0:B4:CA
Certificate issuer: /CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Certificate serial: 0185A83C55CCB59033E310E6D0EE5A686471
Authority key identifier: 35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/4B99kvU4y_gVU64tDCbwq2bgtMo.roa
Signing time: Thu 12 Jan 2023 23:06:44 +0000
ROA not before: Thu 12 Jan 2023 23:06:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 79.139.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a8:3c:55:cc:b5:90:33:e3:10:e6:d0:ee:5a:68:64:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Validity
Not Before: Jan 12 23:06:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e01f7d92f538cbf81553ae2d0c26f0ab66e0b4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:09:e4:fa:52:6c:10:99:32:15:9b:c2:88:b4:
9b:78:4b:4b:e5:59:a4:f6:15:08:cd:ea:0b:9d:44:
c1:d4:23:11:9d:04:56:69:5c:2b:c7:c4:1f:16:68:
e3:b8:64:75:21:4d:12:d8:c3:e0:4f:a0:15:e8:e2:
9c:bc:2d:05:e3:a2:40:1f:84:2c:19:b8:51:12:6c:
98:88:7e:3d:f4:0c:66:de:4e:96:87:b5:6f:06:e2:
34:16:cd:88:7b:91:2a:b4:18:d1:d1:63:03:99:34:
1c:d4:7f:ca:3b:f1:a3:b0:b5:3e:18:98:c8:ff:dd:
34:c6:9f:21:9b:1a:2b:2e:76:90:e8:2e:a3:18:7d:
0c:15:73:01:78:0e:35:15:90:58:94:8e:e2:e0:38:
46:6c:b2:15:c7:09:9b:2a:0a:6b:c3:e0:f9:d8:88:
47:e4:8b:f5:aa:44:70:68:d2:22:0f:b6:f0:51:ae:
f7:63:a8:f0:96:7b:7d:4b:03:59:9b:02:34:51:e9:
4b:82:a1:cd:c1:57:63:dd:16:35:f0:15:20:a5:48:
ee:4e:65:ee:50:2e:4d:69:5a:13:77:c3:8e:a2:da:
42:ab:5d:01:fe:ef:8b:98:e4:c0:4c:44:49:5a:df:
b3:38:e0:06:a7:cc:37:c8:66:15:98:62:13:bd:3a:
dd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1F:7D:92:F5:38:CB:F8:15:53:AE:2D:0C:26:F0:AB:66:E0:B4:CA
X509v3 Authority Key Identifier:
keyid:35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/4B99kvU4y_gVU64tDCbwq2bgtMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/NclgZQk5mLpCz7oRvw0X06xAPUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.139.52.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:77:e1:18:90:ab:4b:b8:4d:e8:11:c9:44:a9:db:22:3b:42:
51:5e:a6:f4:ca:b9:79:a4:35:ff:48:66:62:d8:30:e3:38:48:
37:3a:f5:00:d8:74:5e:16:26:fc:c2:17:19:62:83:c6:7c:8f:
7f:44:d6:3c:5c:91:9c:61:a6:db:7d:9d:42:5a:ad:15:b8:ab:
a2:7f:46:03:63:09:5a:30:cd:af:fc:93:a4:5d:91:0b:76:de:
39:56:bf:7f:fa:d5:83:c3:80:89:c8:b3:50:63:95:4a:cf:dd:
3a:c0:91:61:a3:a4:56:e6:f2:20:85:9d:e1:21:a9:c9:c5:98:
4a:1c:bb:44:a6:60:3a:82:e7:54:6e:ee:5e:3f:c5:c1:d8:51:
6a:56:75:30:47:8f:a4:a5:2e:16:91:0a:23:9b:49:90:32:0a:
00:09:0f:89:f5:6a:1a:97:f5:48:51:31:fa:a2:87:b6:07:ab:
f7:c3:4c:40:fa:c1:0a:81:54:cc:c6:87:0e:90:19:bc:83:e8:
24:69:45:70:0e:fb:d6:e8:fd:7e:23:86:7b:35:7c:be:79:d3:
3a:41:92:3b:bd:0a:7f:5b:60:b4:90:b7:9a:2d:e1:5d:b3:80:
bd:22:9a:25:20:68:e1:e7:4f:89:50:7a:74:6f:a9:01:0a:ec:
89:73:23:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:35:34 2025 by rpki-client