Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/4zMayEyTScydYSx5e9GovGL7pkM.roa
File: 4zMayEyTScydYSx5e9GovGL7pkM.roa (raw, json)
Hash identifier: AaVZUthJt+Aimr+2JlDl6oO/dE85Vk6oJNZAO0OVBBY=
Subject key identifier: E3:33:1A:C8:4C:93:49:CC:9D:61:2C:79:7B:D1:A8:BC:62:FB:A6:43
Certificate issuer: /CN=537192cc8fcf52e81e8d0530466fe99a56aaf3d1
Certificate serial: 01857094EAE96A65798B1031305061C637AF
Authority key identifier: 53:71:92:CC:8F:CF:52:E8:1E:8D:05:30:46:6F:E9:9A:56:AA:F3:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3GSzI_PUugejQUwRm_pmlaq89E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/4zMayEyTScydYSx5e9GovGL7pkM.roa
Signing time: Mon 02 Jan 2023 03:44:45 +0000
ROA not before: Mon 02 Jan 2023 03:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208261
IP address blocks: 62.204.43.0/24 maxlen: 24
193.58.43.0/24 maxlen: 24
45.149.56.0/22 maxlen: 22
2a0f:ce00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:ea:e9:6a:65:79:8b:10:31:30:50:61:c6:37:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537192cc8fcf52e81e8d0530466fe99a56aaf3d1
Validity
Not Before: Jan 2 03:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3331ac84c9349cc9d612c797bd1a8bc62fba643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:83:45:a9:b4:2c:e6:7c:6c:ae:bb:2b:26:
a3:9f:c9:cd:c2:69:d6:c3:ab:1e:d4:bf:20:af:19:
80:be:17:c9:e8:93:08:14:3c:3b:0d:2d:51:58:ba:
f8:89:e4:8a:ba:c6:96:38:6c:9c:10:05:1d:7d:77:
66:b7:62:0a:ed:4e:12:d3:aa:33:5f:8f:3c:ed:bb:
9f:d9:b2:54:0c:1b:d1:11:53:e5:0f:6e:3d:a7:3a:
14:e1:ee:1a:f8:fc:b4:3f:96:04:20:36:53:a3:63:
d1:65:2a:ae:fa:70:d0:fb:fa:df:8b:10:06:61:1b:
a6:5d:3d:dc:ff:fb:db:71:2c:79:f5:e4:24:62:17:
29:8d:3c:0e:ac:0e:52:2c:2b:89:64:4d:5e:1a:23:
22:18:66:34:7c:4b:39:0b:78:c2:29:78:f6:99:70:
de:f9:52:e7:b7:d2:8d:71:59:70:2b:c2:ee:ee:71:
35:f4:24:c8:4b:12:39:e9:77:78:cc:39:49:01:ab:
56:f0:3e:84:d9:e0:0f:7c:bb:76:a5:e6:73:39:d5:
db:34:fc:24:d8:bb:a3:46:4b:15:66:78:12:20:bf:
ff:ca:96:6f:28:d0:12:8f:1b:37:3f:02:ea:10:68:
a0:e2:aa:17:98:bb:19:09:48:45:aa:73:2e:e9:51:
62:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:33:1A:C8:4C:93:49:CC:9D:61:2C:79:7B:D1:A8:BC:62:FB:A6:43
X509v3 Authority Key Identifier:
keyid:53:71:92:CC:8F:CF:52:E8:1E:8D:05:30:46:6F:E9:9A:56:AA:F3:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3GSzI_PUugejQUwRm_pmlaq89E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/4zMayEyTScydYSx5e9GovGL7pkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/U3GSzI_PUugejQUwRm_pmlaq89E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.56.0/22
62.204.43.0/24
193.58.43.0/24
IPv6:
2a0f:ce00::/29
Signature Algorithm: sha256WithRSAEncryption
9a:99:22:2b:13:9d:3f:2b:98:c2:62:b1:c7:80:44:c0:0e:09:
0c:d6:7e:47:43:27:e6:7a:04:c5:8f:94:eb:99:08:f7:17:47:
1c:94:3f:04:65:23:09:fd:6c:ce:9a:c9:7d:f4:d9:22:77:c8:
44:3d:3a:83:d3:d7:7e:b1:4b:ed:2b:fd:ae:37:81:9c:ac:07:
9f:41:2d:65:cb:53:8d:9c:fb:26:5d:d1:48:70:cb:a3:4d:cc:
fe:84:86:dd:3c:4c:10:30:f0:7e:7d:de:d5:d6:75:74:af:26:
e8:e4:9c:a6:71:b5:d2:fb:5e:0e:b1:bd:3b:55:7e:ec:02:cf:
c8:e9:83:f5:e6:5b:e8:b7:21:a2:3b:b1:e9:b2:66:fa:a2:47:
ae:66:a7:e6:ef:72:bf:ff:f4:dc:63:b2:f8:51:8c:f1:4c:8e:
5c:74:37:dc:5d:86:d9:6d:d0:9f:4e:65:59:16:d6:11:46:46:
b5:f5:39:f6:ba:17:f0:74:a8:ed:2d:c0:af:df:37:41:2c:26:
82:9e:29:3e:70:36:0f:f4:48:e0:dc:e8:55:7c:07:01:ba:09:
f6:2c:66:a2:b8:9f:3b:6f:92:d3:c3:9e:97:e5:de:52:2a:ea:
d7:5d:e3:9a:af:77:ba:df:5c:bc:2c:57:95:40:3c:71:c7:9a:
e2:08:0e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:14 2025 by rpki-client