Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/4Ku-0cUF9qZ0LS7vyPfvM2SNy5o.roa
File: 4Ku-0cUF9qZ0LS7vyPfvM2SNy5o.roa (raw, json)
Hash identifier: szeWOI15qdjX9qNILGK8SEUnyB06n+biNNDZValgehM=
Subject key identifier: E0:AB:BE:D1:C5:05:F6:A6:74:2D:2E:EF:C8:F7:EF:33:64:8D:CB:9A
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 018CCA2BCFCA2AF652E9C93422DF4F418E0E
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/4Ku-0cUF9qZ0LS7vyPfvM2SNy5o.roa
Signing time: Tue 02 Jan 2024 12:35:18 +0000
ROA not before: Tue 02 Jan 2024 12:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206621
IP address blocks: 141.105.136.0/24 maxlen: 24
212.87.170.0/24 maxlen: 24
212.87.170.0/23 maxlen: 23
212.87.180.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:cf:ca:2a:f6:52:e9:c9:34:22:df:4f:41:8e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Jan 2 12:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0abbed1c505f6a6742d2eefc8f7ef33648dcb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:50:0f:0d:e0:0d:3e:d4:db:23:22:c7:6c:
67:5c:f6:ce:5c:52:bf:b5:c6:a6:8d:76:5a:6c:7a:
eb:fd:4b:95:5b:fa:52:97:55:25:e0:74:e1:df:0b:
49:8f:0a:57:6a:87:a5:7f:2b:d3:9c:2c:66:22:f7:
ee:d4:70:21:89:3d:ef:9c:14:50:38:6c:e4:5a:cf:
04:d4:92:8c:d3:7a:6a:7a:50:68:1a:89:f2:69:50:
6f:2a:89:0b:54:50:a1:7c:11:46:0f:57:1d:76:02:
b3:47:77:f7:52:c9:e8:38:a4:5a:2e:d3:34:77:bf:
1d:09:21:c3:c2:85:f1:42:a6:f1:a7:f2:ef:ac:aa:
a6:9d:98:1d:ef:82:25:8e:52:c1:35:34:eb:6b:09:
31:e3:a2:1e:37:3d:42:53:8b:06:78:f8:9d:96:f2:
6f:e5:25:0c:ef:fa:55:bc:41:b1:21:0d:8e:67:a4:
35:a9:fd:a3:ad:e2:2c:65:3a:14:d8:e2:d3:ee:e3:
e9:a3:3d:bd:e1:fc:16:ba:6f:de:cd:f6:f4:89:24:
18:7a:1f:18:69:a3:c9:78:27:d5:62:82:0a:fc:01:
de:26:d6:93:53:0f:d2:10:b0:0c:03:fe:7e:6c:06:
e2:29:28:34:5d:cf:b2:00:fa:4d:3b:72:83:d7:cd:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AB:BE:D1:C5:05:F6:A6:74:2D:2E:EF:C8:F7:EF:33:64:8D:CB:9A
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/4Ku-0cUF9qZ0LS7vyPfvM2SNy5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.136.0/24
212.87.170.0/23
212.87.180.0/23
Signature Algorithm: sha256WithRSAEncryption
21:e0:99:71:82:a6:2b:fa:03:d2:ae:f7:c3:0f:05:06:3f:4e:
03:ba:ef:a0:c3:b9:56:5a:23:e5:48:ff:40:65:bf:2e:e0:50:
65:51:1c:8c:5c:13:f2:ba:ce:df:cf:82:06:6d:1d:f0:a2:c1:
55:85:ab:63:e7:6f:75:84:c9:5f:7f:97:41:cc:e1:2e:ee:31:
29:f8:d6:be:e4:d4:7d:2b:b0:95:28:02:1b:99:39:5c:3c:c7:
f5:05:92:44:39:52:3b:d2:c7:6e:c4:7e:92:3e:e8:48:1a:bb:
ef:07:a7:e2:57:cb:8a:6c:07:25:63:5c:a7:ef:d2:6d:50:cc:
28:0e:14:eb:a1:43:11:57:45:8e:80:a7:22:1b:2a:10:ac:d7:
af:67:f3:bc:28:74:8c:8a:ac:d5:bf:03:a6:79:44:db:e4:06:
37:2d:54:a4:b8:a4:49:7e:ff:e9:09:f7:4d:cc:34:7a:51:4c:
b3:50:74:fe:bf:2d:d0:d9:15:85:ff:c9:9a:76:52:75:69:9f:
1c:de:dc:fa:3d:f0:65:c5:51:05:02:b0:5a:87:88:d8:86:1c:
36:46:57:48:9f:19:4e:86:de:13:8a:f2:ad:d4:43:03:6f:89:
ef:4b:db:a1:3a:24:05:14:85:b4:f7:ac:e1:a1:f1:b0:4c:a1:
c4:67:9d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:50 2025 by rpki-client