Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/4j50cayLViAepgfdm6IYImcPQD0.roa
File: 4j50cayLViAepgfdm6IYImcPQD0.roa (raw, json)
Hash identifier: JNZ7UQbS8a50315GF1emxNf7nju1SNfKUIVMvbqehhU=
Subject key identifier: E2:3E:74:71:AC:8B:56:20:1E:A6:07:DD:9B:A2:18:22:67:0F:40:3D
Certificate issuer: /CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Certificate serial: 018CC801CB353E14EC0C0771B8AB281816BC
Authority key identifier: FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/4j50cayLViAepgfdm6IYImcPQD0.roa
Signing time: Tue 02 Jan 2024 02:30:09 +0000
ROA not before: Tue 02 Jan 2024 02:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47295
IP address blocks: 93.90.128.0/20 maxlen: 20
194.48.144.0/22 maxlen: 22
2a03:2400::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:cb:35:3e:14:ec:0c:07:71:b8:ab:28:18:16:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Validity
Not Before: Jan 2 02:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e23e7471ac8b56201ea607dd9ba21822670f403d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3c:91:d1:07:b8:15:37:52:76:c0:23:62:b6:
35:26:dc:3d:58:04:3d:40:15:ba:eb:6f:72:6f:1c:
c1:6e:99:11:4d:d8:6b:3e:2e:19:89:1c:cf:26:7f:
31:c1:94:4d:a8:54:c0:d6:b9:2e:10:0a:26:00:e4:
17:3c:34:bd:66:db:07:d8:40:6b:7e:02:83:1b:31:
08:98:f3:64:88:25:40:f4:b3:f5:38:22:b3:7f:82:
0b:ae:5c:36:36:c4:e2:c1:b0:32:40:51:ed:54:2f:
c0:d5:5a:31:4f:fe:00:ac:ea:00:67:73:88:c1:44:
31:49:59:6c:91:83:2d:65:a2:64:f1:62:90:f7:74:
2a:a5:50:35:94:05:c9:e6:75:3f:37:85:7a:23:f3:
a1:c3:4d:bf:51:98:c7:08:a2:00:18:e2:97:3d:48:
9f:75:d7:73:1a:ab:6d:46:8b:88:08:c5:d9:7d:49:
cd:e4:a8:bc:e3:4b:bc:99:8a:96:c5:10:20:f9:3c:
e9:c5:94:8a:db:41:87:28:18:95:52:90:d4:63:7d:
68:cc:52:7b:52:c6:b9:6a:7a:a7:1f:e4:56:43:26:
c8:82:15:05:2b:bf:ba:4e:89:38:af:89:69:e1:dd:
b0:68:30:08:7b:af:44:94:0a:3b:28:72:d8:11:1a:
06:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3E:74:71:AC:8B:56:20:1E:A6:07:DD:9B:A2:18:22:67:0F:40:3D
X509v3 Authority Key Identifier:
keyid:FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/4j50cayLViAepgfdm6IYImcPQD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.90.128.0/20
194.48.144.0/22
IPv6:
2a03:2400::/29
Signature Algorithm: sha256WithRSAEncryption
4c:fc:9b:c1:98:bf:00:ed:a4:47:4d:e7:45:e2:ad:07:ac:ec:
bc:1d:44:bd:1d:14:3a:a0:c2:28:41:f4:55:22:80:73:a5:63:
5c:3b:11:07:87:d7:59:f6:34:ce:40:55:36:f5:4e:e6:79:6c:
15:e9:37:77:fd:eb:c5:07:d7:dc:fd:2c:eb:95:31:a1:11:4f:
93:52:cc:97:cd:5f:47:bc:ca:bf:aa:d2:6b:b2:30:ad:5d:18:
41:17:86:e2:77:9d:64:1c:b7:30:91:fa:65:06:b6:c6:fe:b8:
50:87:ab:b3:2b:0f:ab:7a:70:8f:0e:44:ab:b7:36:73:ee:6e:
5c:e7:5f:5f:0a:b9:68:f9:c7:18:df:58:b2:18:bf:d6:7b:fc:
e8:f6:0a:69:10:ac:3c:ab:49:5f:00:68:de:84:28:8e:cb:02:
b9:d0:4c:a9:d4:5e:26:54:e2:f0:84:74:ee:4e:d9:fd:8e:6c:
0c:d7:75:74:26:21:7f:5e:06:37:ee:81:87:bb:4f:3a:48:e9:
fb:e9:93:a3:bf:a0:b4:74:45:4a:17:ab:3f:4a:af:3d:d0:13:
8b:07:24:c6:5f:20:f1:05:8c:d4:4f:d3:20:b0:13:11:60:18:
69:6c:e7:e1:65:1d:85:e7:32:58:12:28:db:57:9b:c8:4d:3d:
6c:22:30:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:06:20 2025 by rpki-client