Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/4mhWI24CV0WVpul-unTGPYPUNoE.roa
File: 4mhWI24CV0WVpul-unTGPYPUNoE.roa (raw, json)
Hash identifier: Jp2gJ5ppBcHj3w3q2g2dwgXP6MDoKqwkJHFNhXu9n7Y=
Subject key identifier: E2:68:56:23:6E:02:57:45:95:A6:E9:7E:BA:74:C6:3D:83:D4:36:81
Certificate issuer: /CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Certificate serial: 0194C67B72B105975E9CD5F2969E09FB0233
Authority key identifier: 5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/4mhWI24CV0WVpul-unTGPYPUNoE.roa
Signing time: Sun 02 Feb 2025 11:46:06 +0000
ROA not before: Sun 02 Feb 2025 11:46:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28851
IP address blocks: 185.78.12.0/22 maxlen: 22
213.19.0.0/17 maxlen: 17
213.155.32.0/19 maxlen: 19
213.250.192.0/18 maxlen: 18
2a02:2588::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c6:7b:72:b1:05:97:5e:9c:d5:f2:96:9e:09:fb:02:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Validity
Not Before: Feb 2 11:46:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e26856236e02574595a6e97eba74c63d83d43681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:44:21:7d:8e:f9:0a:db:d4:3f:63:c2:87:
ae:c6:d8:cd:84:9c:ed:30:2b:f6:d5:75:07:2e:a2:
64:c8:06:a9:d9:e3:6d:2e:86:6f:b0:4a:e2:62:08:
dd:7e:e5:c3:a0:70:46:a3:fe:c6:ec:f3:e0:a3:18:
b4:75:2c:bc:ca:b6:0f:6f:3f:c8:9c:61:33:d2:40:
84:2f:d9:cd:de:dd:3d:c2:e5:29:1e:62:ea:cc:95:
36:61:58:84:30:23:69:84:cf:f6:1f:b6:ec:f3:66:
09:2a:9f:20:8e:53:1d:ef:79:2f:c1:b8:00:88:4b:
9c:35:a4:c4:f5:c9:c3:00:50:53:b8:e1:d1:ef:dd:
56:58:86:20:af:d1:64:17:38:b2:5c:59:7a:6c:98:
09:e1:c4:fc:6c:85:01:86:06:b3:24:3f:53:0e:dd:
8f:b5:f7:eb:36:78:e3:6d:18:76:36:8a:71:7f:7c:
d1:84:6b:11:0c:53:ee:57:de:7a:fe:da:34:46:75:
57:de:9e:bb:13:22:5b:c2:ce:9d:7e:54:b9:c2:4a:
46:6a:7d:b8:25:e4:91:3b:d7:de:84:c3:c1:44:c4:
a3:e9:3e:79:94:75:0d:ee:68:39:68:e3:8c:34:f2:
3d:53:5d:5d:1d:02:de:96:f1:e6:a1:2c:2f:e3:fc:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:68:56:23:6E:02:57:45:95:A6:E9:7E:BA:74:C6:3D:83:D4:36:81
X509v3 Authority Key Identifier:
keyid:5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/4mhWI24CV0WVpul-unTGPYPUNoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.12.0/22
213.19.0.0/17
213.155.32.0/19
213.250.192.0/18
IPv6:
2a02:2588::/29
Signature Algorithm: sha256WithRSAEncryption
4c:a1:06:ed:ed:8a:25:65:39:ac:4a:77:0a:1c:4f:3e:9d:a0:
b2:69:77:fa:9c:ac:ac:2d:75:62:22:dc:45:64:f5:2b:8b:ce:
14:82:c9:34:5c:5b:5e:86:25:19:2f:b0:0a:58:4e:75:66:9d:
a4:cb:56:40:05:17:94:b9:6a:3c:ac:b1:34:6b:e7:ed:4c:34:
21:1d:d8:d9:19:ec:f0:2a:c2:e9:12:ea:c4:92:02:73:9a:16:
ac:a4:89:0b:fa:9d:80:f2:0c:c6:4d:7d:4e:08:96:02:29:19:
30:33:09:52:94:1f:7e:e6:29:2d:b4:7e:15:6c:bc:1a:11:63:
50:4d:65:2c:a4:19:4c:1f:ad:bd:70:75:b7:98:dc:d0:74:0f:
19:e8:64:4b:e1:37:c8:9e:3b:27:62:81:0a:8b:e8:7b:97:5d:
48:2c:b2:dc:4e:21:c7:2c:73:dd:97:00:35:84:20:ee:15:30:
0c:05:d2:a4:37:c0:e7:e1:50:1d:e7:06:d5:d2:17:62:80:99:
36:e9:e5:98:fc:5d:7a:31:72:46:72:58:b8:35:ba:a4:bc:04:
8f:5a:03:1c:29:d7:d1:e5:83:94:27:33:07:21:21:64:c6:51:
11:8a:ce:cc:58:4b:81:25:64:e0:0e:1c:2b:06:30:87:c6:2d:
7d:b8:da:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:54:56 2025 by rpki-client