Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/4SEUaFHVUAL3abRJwnhpLcw21dk.roa
File: 4SEUaFHVUAL3abRJwnhpLcw21dk.roa (raw, json)
Hash identifier: Nz767QGxnFH79p/BW/8MOsNM3RviNN1Kvy4GgZgMyGs=
Subject key identifier: E1:21:14:68:51:D5:50:02:F7:69:B4:49:C2:78:69:2D:CC:36:D5:D9
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 0194221F8411EF225CD9C03C31F9B4557F05
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/4SEUaFHVUAL3abRJwnhpLcw21dk.roa
Signing time: Wed 01 Jan 2025 13:47:58 +0000
ROA not before: Wed 01 Jan 2025 13:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 81.19.133.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:84:11:ef:22:5c:d9:c0:3c:31:f9:b4:55:7f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Jan 1 13:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e121146851d55002f769b449c278692dcc36d5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:ca:50:f2:9e:fc:e2:52:a1:53:f3:b2:bb:
88:23:00:8e:d9:dc:e0:60:91:8c:8d:b7:14:bf:6e:
15:8d:04:d9:1f:88:39:2c:03:30:fa:a4:2c:b6:c7:
e2:cc:6d:11:0f:7e:a4:76:22:76:05:4d:f8:ba:4e:
c1:ef:74:9b:7c:89:6a:40:13:5f:07:d3:d5:3f:9e:
88:67:f8:3d:ee:90:87:1b:3a:be:38:6d:0f:fe:37:
46:44:fe:2a:c3:46:54:34:43:bd:08:dc:88:05:e9:
66:ad:6a:83:b6:88:4f:dd:39:f4:5f:31:96:ff:5a:
a7:db:be:ab:e2:8a:a8:ff:4d:3a:c9:cb:7f:35:33:
e4:81:a7:13:4d:d1:da:5b:97:db:ad:a7:fd:79:3e:
38:97:b8:00:0e:00:b7:31:18:74:50:bd:a2:e6:9d:
95:e7:61:0b:86:1d:81:6d:2d:3d:b6:3e:f0:d0:88:
85:99:bd:bc:98:ea:4c:d4:29:71:e0:5b:4a:34:4d:
74:66:4e:88:52:57:c7:cb:d7:7d:5c:40:fe:e1:cd:
56:73:6e:73:bc:d6:b1:b4:34:72:84:84:8e:2f:9b:
8e:f2:c8:b4:74:7f:3e:02:c5:ad:79:a3:d1:03:1c:
b8:c3:47:77:c8:37:c0:13:c4:fd:fb:c8:75:b4:28:
75:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:21:14:68:51:D5:50:02:F7:69:B4:49:C2:78:69:2D:CC:36:D5:D9
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/4SEUaFHVUAL3abRJwnhpLcw21dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.133.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:b4:f5:f6:9d:fc:aa:2b:5f:0f:d8:c6:14:b6:2a:9c:44:0c:
00:3d:da:f8:fc:8c:12:4a:38:33:b1:5f:79:1d:3d:f9:c5:36:
ae:3a:b5:d6:4d:9b:f4:fd:12:71:17:6e:26:a6:67:f6:47:8e:
7c:0c:e2:5f:a1:ef:37:88:e5:a5:28:e4:af:78:d7:d2:66:a9:
6a:88:fa:72:31:09:3f:e7:62:c2:73:fd:74:34:a5:d0:e8:41:
8a:c9:c3:fb:77:64:ef:ef:e9:0a:f8:20:9c:2c:d7:c8:06:5e:
28:ff:e7:f1:55:3f:2a:1d:ac:3e:73:3d:84:85:fd:f8:36:35:
22:9e:a0:24:52:c7:1e:2b:76:a0:7b:6c:af:69:c2:90:d9:8e:
c2:a2:db:5c:0a:51:7f:89:d0:1c:5c:fe:c6:2c:9c:b2:d2:80:
34:50:71:65:85:53:49:95:21:38:50:c6:77:53:53:45:c1:1b:
4d:72:bc:7c:5b:aa:45:f9:b3:cd:36:49:40:09:0e:b5:96:2e:
4e:8d:47:2d:5c:4b:f6:8f:c1:29:63:d9:a7:74:b8:b0:84:59:
14:3d:dc:a5:63:4a:fc:0c:c5:51:d6:f9:16:af:a0:2f:5c:f5:
de:30:ad:83:aa:08:bd:7b:cc:54:52:95:0e:21:c1:95:50:9e:
9d:dd:db:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:37:58 2025 by rpki-client