Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/aM3cc5239WAy4buFXqwE6avsPpA.roa
File: aM3cc5239WAy4buFXqwE6avsPpA.roa (raw, json)
Hash identifier: IiNQUlQAEuG6gzv/NjmTi9efglVA0BqHGXlQ4OoKAfs=
Subject key identifier: 68:CD:DC:73:9D:B7:F5:60:32:E1:BB:85:5E:AC:04:E9:AB:EC:3E:90
Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Certificate serial: 01942143D1AE247598CD17D895B7ECAEF80D
Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/aM3cc5239WAy4buFXqwE6avsPpA.roa
Signing time: Wed 01 Jan 2025 09:48:00 +0000
ROA not before: Wed 01 Jan 2025 09:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35701
IP address blocks: 192.109.204.0/24 maxlen: 24
195.234.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d1:ae:24:75:98:cd:17:d8:95:b7:ec:ae:f8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Validity
Not Before: Jan 1 09:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68cddc739db7f56032e1bb855eac04e9abec3e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:0e:3a:96:b4:1f:a4:8a:78:09:be:61:04:
4f:05:f4:36:d9:c8:d4:5a:cc:ea:d5:6c:32:38:35:
b6:80:e8:62:5d:b5:e6:17:77:b5:bd:2c:25:25:06:
9b:24:a1:9f:e3:9a:c3:71:7a:e3:58:5f:61:9e:1d:
1b:0b:65:48:51:9c:ac:f9:8c:a6:a4:c6:a9:30:b5:
e8:a4:f7:cd:0c:9c:25:88:e4:db:ac:06:c0:72:cc:
98:f0:2c:47:0b:36:b7:c9:7b:39:98:8f:ed:10:4d:
9d:c8:d5:a8:a0:55:9d:b5:20:c6:7b:ac:ae:7d:64:
17:51:6f:40:e3:d1:1a:a9:0f:5d:0d:ec:85:ec:6b:
df:c6:9b:d2:c1:17:cb:84:15:6a:4c:7d:4d:ae:c3:
95:b8:40:29:d3:2f:48:40:09:bc:69:c7:fe:97:51:
5b:61:7b:ed:ed:65:1d:f8:74:c2:18:e7:4d:c5:0f:
15:e4:fd:34:41:82:f0:a9:3c:ca:22:8e:d1:74:10:
f4:46:5a:44:f6:d8:ca:d8:0c:54:50:90:62:7e:8a:
3d:6c:fe:3a:f2:46:5e:95:20:fb:db:c7:7b:58:c3:
6c:07:79:24:b2:31:93:ad:4e:3f:16:95:36:d0:bf:
12:e5:2f:48:40:5f:29:48:cf:45:0b:1a:a5:a5:b5:
48:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CD:DC:73:9D:B7:F5:60:32:E1:BB:85:5E:AC:04:E9:AB:EC:3E:90
X509v3 Authority Key Identifier:
keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/aM3cc5239WAy4buFXqwE6avsPpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.204.0/24
195.234.45.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:85:53:fa:b7:44:09:33:cd:ad:d2:17:40:65:72:ce:1e:da:
13:31:66:65:76:c1:38:f4:db:e6:c1:58:0e:06:32:5c:3f:1d:
d7:16:f8:f7:d2:3c:98:57:88:26:b6:0e:48:06:d7:67:0d:8f:
ba:ed:45:12:2f:84:93:49:0c:05:3f:81:f1:8a:6f:24:41:59:
76:b2:e8:ea:f7:c6:49:0b:7a:b4:de:29:9b:8f:75:ca:2f:55:
61:84:40:30:f9:8e:2e:67:de:72:b1:a4:42:81:98:50:a5:93:
2c:54:06:09:3d:c0:d0:53:98:a0:4e:22:01:29:94:fb:15:cb:
9f:16:87:a8:d5:b9:4a:f2:1f:e3:e4:d0:1b:7c:04:1d:18:be:
56:6b:dd:27:76:34:29:c3:b7:9c:0f:4b:dd:f4:16:01:f0:55:
ff:bf:46:f3:ca:d8:fe:d1:40:65:aa:74:6e:94:85:1f:7e:e4:
ff:4e:36:23:50:2c:fc:a0:56:96:e9:96:37:a4:92:65:34:51:
b5:ba:f4:f3:52:f7:02:10:33:75:62:21:a2:67:5e:a9:d2:b0:
e6:c4:15:45:b8:e4:4d:94:d3:1d:a6:f3:12:5e:39:90:38:e3:
9c:53:96:80:d5:b1:d6:af:91:e7:46:5f:29:48:e3:93:dc:06:
a1:f6:20:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:44 2025 by rpki-client