Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/4vkn1FF3uZBsEscdtUVYEjfO7cw.roa
File: 4vkn1FF3uZBsEscdtUVYEjfO7cw.roa (raw, json)
Hash identifier: QRFbxZfmmyAMi/46hEmQba/rZAbpiWDLDJEvFi3Wnjo=
Subject key identifier: E2:F9:27:D4:51:77:B9:90:6C:12:C7:1D:B5:45:58:12:37:CE:ED:CC
Certificate issuer: /CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Certificate serial: 09045DC6
Authority key identifier: B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/4vkn1FF3uZBsEscdtUVYEjfO7cw.roa
Signing time: Sat 01 Jan 2022 06:03:18 +0000
ROA not before: Sat 01 Jan 2022 06:03:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64421
IP address blocks: 2.58.16.0/22 maxlen: 22
195.26.20.0/23 maxlen: 23
2a09:e0c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151281094 (0x9045dc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Validity
Not Before: Jan 1 06:03:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2f927d45177b9906c12c71db545581237ceedcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6f:18:90:2f:a1:5d:67:9d:3c:ff:c2:dd:b2:
ac:a3:2e:28:1b:19:42:31:35:46:20:04:b0:9c:85:
91:81:16:95:6f:e7:c2:68:69:7e:41:ac:f6:c7:4d:
36:e9:91:58:72:e9:77:0e:cb:44:99:60:25:e2:1b:
ec:e3:19:5d:f1:97:6f:5f:a2:b2:be:fc:16:27:f8:
46:ad:92:6b:d2:fb:b4:d2:33:dc:6a:f5:1c:e8:53:
ba:9f:29:b1:e5:c0:50:43:4e:82:af:c7:99:b9:6c:
f4:bd:93:88:94:da:7f:13:c3:55:a4:19:b4:43:61:
a4:a5:c8:f0:63:5f:5d:1d:d7:d7:bb:c0:e4:b4:29:
f7:c8:4a:ae:eb:da:d9:21:63:68:42:01:2d:25:0a:
ed:6b:6c:20:b4:16:9f:af:3b:a3:78:48:7b:ac:1e:
1e:98:61:b1:0a:ba:9c:8f:2a:3e:64:14:7a:40:3b:
6b:97:fb:97:40:29:67:ca:74:8c:6c:e6:96:0a:62:
bf:70:51:da:42:79:76:e3:60:f4:4b:a3:ee:4c:44:
e7:1a:17:6f:76:c2:4f:b9:08:1e:24:48:46:11:99:
60:12:0f:d7:bd:50:49:d5:69:00:a3:26:d1:44:82:
33:e2:84:32:ff:f9:f3:52:9c:25:0d:bf:cf:ff:5d:
7f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F9:27:D4:51:77:B9:90:6C:12:C7:1D:B5:45:58:12:37:CE:ED:CC
X509v3 Authority Key Identifier:
keyid:B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/4vkn1FF3uZBsEscdtUVYEjfO7cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.16.0/22
195.26.20.0/23
IPv6:
2a09:e0c0::/29
Signature Algorithm: sha256WithRSAEncryption
75:79:07:4c:84:28:ab:6c:d1:b6:b8:de:bb:ea:b0:f8:40:28:
4c:a7:95:ad:29:d0:f7:22:e1:b6:cd:42:2e:5f:bf:95:e7:f4:
20:02:09:c6:2a:8d:e2:93:a4:2c:b1:28:5f:7e:c5:1a:66:88:
4c:8a:9a:a8:ee:24:a7:0e:1f:ca:7a:8d:26:67:a2:c3:82:2b:
42:3d:12:64:d8:39:05:1d:78:1c:88:15:f0:1c:32:33:b8:c0:
e9:c2:ae:35:f3:db:e7:0e:d9:96:76:ff:02:69:52:c5:ce:9a:
6b:f5:db:0b:35:f6:0a:7f:40:2f:d7:76:0c:41:3d:49:fc:70:
38:da:6f:d1:ed:54:81:60:e1:6a:53:ed:5a:7c:2c:de:ba:29:
c4:e3:2f:fe:18:00:66:35:97:6f:a9:76:84:73:a0:e7:80:ab:
5d:8e:33:f2:03:4f:9b:0d:da:66:df:64:17:9b:7e:a3:b6:f0:
d5:f5:e0:1d:02:34:d7:e6:e6:2d:b3:a1:01:57:22:78:d8:d1:
bb:dc:4e:52:bc:8f:8b:b8:4e:18:43:c2:1b:d1:77:cd:94:7b:
bf:3a:95:83:27:c2:1c:7c:13:7b:18:11:77:75:0e:89:f2:7e:
59:0c:a3:74:b0:97:ef:11:28:b8:dd:1b:e9:0d:07:0f:93:9d:
17:15:b1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:25:49 2025 by rpki-client