Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9c89bf-c81e-413f-a2d4-a05560601ac2/1/3NTQf1FEDJDrb8F56yWMP1fsJ4c.roa
File: 3NTQf1FEDJDrb8F56yWMP1fsJ4c.roa (raw, json)
Hash identifier: yzzuCFzjyx58QlW8DON9GV52ODNyKIeIUqeR1xK/sQo=
Subject key identifier: DC:D4:D0:7F:51:44:0C:90:EB:6F:C1:79:EB:25:8C:3F:57:EC:27:87
Certificate issuer: /CN=4b993958d47daae349eec6fd2eba28354377e5d4
Certificate serial: 0A729A82
Authority key identifier: 4B:99:39:58:D4:7D:AA:E3:49:EE:C6:FD:2E:BA:28:35:43:77:E5:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5k5WNR9quNJ7sb9LrooNUN35dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c89bf-c81e-413f-a2d4-a05560601ac2/1/3NTQf1FEDJDrb8F56yWMP1fsJ4c.roa
Signing time: Sat 01 Jan 2022 11:01:13 +0000
ROA not before: Sat 01 Jan 2022 11:01:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44196
IP address blocks: 195.2.202.0/24 maxlen: 24
195.2.202.0/23 maxlen: 23
195.2.203.0/24 maxlen: 24
195.93.132.0/24 maxlen: 24
195.93.132.0/23 maxlen: 23
195.93.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175282818 (0xa729a82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b993958d47daae349eec6fd2eba28354377e5d4
Validity
Not Before: Jan 1 11:01:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcd4d07f51440c90eb6fc179eb258c3f57ec2787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:b3:3d:c3:d3:cc:ae:ef:0e:11:65:2b:60:
1e:6f:de:b6:d8:38:0f:51:11:78:94:d1:db:3d:0d:
33:91:cb:f3:42:f3:6a:19:2d:82:51:55:0c:87:c9:
2b:52:31:ff:39:35:05:e7:9f:ae:5b:ba:0b:51:5d:
39:75:14:01:15:a8:0c:82:3f:d9:1c:94:09:f0:7f:
2f:89:66:1f:97:92:d4:76:be:61:dd:12:b0:1e:74:
62:5d:c7:59:4a:a6:eb:0f:54:e1:2b:96:23:e6:a4:
99:b8:5f:42:8e:73:f3:02:15:b0:13:bd:9d:fc:b2:
dd:81:89:67:84:a2:9f:83:f1:34:05:c2:08:12:1f:
75:9b:6e:7e:1f:32:a3:df:c6:48:1c:e7:68:e7:ab:
30:c8:bd:99:7d:78:41:64:eb:71:55:44:86:16:63:
f0:d4:7d:79:d8:a6:f5:98:23:ae:3e:36:24:14:2c:
9b:1a:40:9a:27:d1:57:0b:0a:50:db:9a:b5:68:f9:
f5:cd:58:d4:eb:89:8d:47:b5:d6:38:35:e6:69:6f:
0c:45:17:e6:27:2d:cd:ff:35:9b:84:cf:89:26:2d:
56:e6:97:83:27:15:0b:c3:cb:15:2a:18:7f:a0:c6:
ea:04:53:96:81:d8:56:16:83:3e:dd:81:c8:c3:62:
9e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D4:D0:7F:51:44:0C:90:EB:6F:C1:79:EB:25:8C:3F:57:EC:27:87
X509v3 Authority Key Identifier:
keyid:4B:99:39:58:D4:7D:AA:E3:49:EE:C6:FD:2E:BA:28:35:43:77:E5:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5k5WNR9quNJ7sb9LrooNUN35dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c89bf-c81e-413f-a2d4-a05560601ac2/1/3NTQf1FEDJDrb8F56yWMP1fsJ4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c89bf-c81e-413f-a2d4-a05560601ac2/1/S5k5WNR9quNJ7sb9LrooNUN35dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.2.202.0/23
195.93.132.0/23
Signature Algorithm: sha256WithRSAEncryption
75:ab:08:3f:2a:b8:b2:1e:76:a9:6b:0a:1c:62:b8:6c:a2:94:
11:56:0c:98:f1:ed:db:0e:e2:fd:7f:46:ac:d1:cf:93:a1:98:
e6:ef:1b:70:e5:19:8f:94:6f:29:19:7b:29:6e:ba:94:0d:50:
4b:a8:6f:22:77:cb:90:3e:58:f9:9f:bc:cb:77:90:b0:42:bb:
5c:e5:ad:df:a7:86:93:92:ec:7f:a7:83:94:f1:99:bf:f4:65:
0f:e0:aa:e7:6a:c6:a7:47:87:8c:e5:03:ce:7d:91:e2:5c:d2:
d3:67:79:e3:59:29:5c:e8:2a:9e:e6:06:3f:e8:e0:40:40:b6:
64:db:32:a9:48:59:dc:d1:a8:f0:e0:43:5f:0d:b3:1d:da:ce:
9e:69:64:dd:d3:f9:dd:b4:bf:ef:ac:2a:d5:27:8a:c1:7d:57:
c9:28:36:85:46:5d:48:90:4a:83:24:12:a7:57:9a:6c:e9:e8:
fe:50:a9:ae:cd:93:f4:1c:72:6d:99:e6:31:93:f1:6a:1f:44:
c7:13:33:fb:4c:d4:05:34:75:33:63:1b:8d:a3:8a:9a:12:7f:
1c:7e:9a:fb:35:ba:6a:d2:72:d2:9a:cf:d8:25:d1:19:45:61:
9d:d1:f2:55:0f:72:0b:a5:a6:bb:e7:bd:53:a6:43:b4:d6:9a:
d0:15:b0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:03:49 2025 by rpki-client