Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/r4535rejwLyNlch_9-1WL9yyNgI.roa
File: r4535rejwLyNlch_9-1WL9yyNgI.roa (raw, json)
Hash identifier: HlBTwouJ/vT3vPrKECrX417tf3S6s+K4qcEjU3ZHOug=
Subject key identifier: AF:8E:77:E6:B7:A3:C0:BC:8D:95:C8:7F:F7:ED:56:2F:DC:B2:36:02
Certificate issuer: /CN=82a4161acabf66d425ed878c5da96a7d5cb3ffe4
Certificate serial: 01942143BAF5FACBF399D21A1A9DC9041D97
Authority key identifier: 82:A4:16:1A:CA:BF:66:D4:25:ED:87:8C:5D:A9:6A:7D:5C:B3:FF:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/r4535rejwLyNlch_9-1WL9yyNgI.roa
Signing time: Wed 01 Jan 2025 09:47:54 +0000
ROA not before: Wed 01 Jan 2025 09:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59959
IP address blocks: 185.243.124.0/22 maxlen: 22
2a0d:1380::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ba:f5:fa:cb:f3:99:d2:1a:1a:9d:c9:04:1d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82a4161acabf66d425ed878c5da96a7d5cb3ffe4
Validity
Not Before: Jan 1 09:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af8e77e6b7a3c0bc8d95c87ff7ed562fdcb23602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:65:ae:1b:76:4c:4a:1a:6f:4c:14:b4:aa:
9e:62:7a:b7:de:fe:a1:7c:f1:3e:7d:d8:a1:cc:98:
a8:8f:fe:a6:78:5b:18:aa:69:9b:50:30:dc:01:a7:
4f:0b:0f:10:e7:c8:ef:f8:31:dd:12:42:fb:1d:22:
52:a1:4e:50:5c:92:39:e5:71:30:12:13:88:0b:c9:
1f:24:00:15:e8:e9:3d:a3:94:01:ed:c8:65:df:ae:
1d:3b:bd:36:a0:dc:76:1d:89:f2:c0:7c:09:14:ee:
76:2f:27:1d:fa:f9:da:12:32:cd:53:44:af:10:a2:
11:df:c9:20:c2:09:c6:7a:70:03:18:6c:c6:a4:18:
a2:44:09:f9:b3:4a:89:01:ee:3e:bd:8f:f2:aa:6b:
b6:a1:90:91:40:6c:75:db:74:d9:ed:62:7f:71:77:
b8:2c:33:85:01:7b:71:45:1c:72:d9:97:6a:46:7e:
a6:58:12:d2:bf:ac:3d:1f:3b:83:60:2b:4b:d3:7b:
08:f5:c4:66:e6:24:7b:1f:08:34:a7:b2:48:83:d5:
15:62:72:5f:1e:7c:3b:3e:69:32:22:19:bd:25:07:
d1:f1:34:45:7e:04:d8:26:b6:7c:6b:3d:41:6f:36:
de:bc:e0:d7:83:73:98:95:c3:7b:94:30:d7:11:42:
32:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8E:77:E6:B7:A3:C0:BC:8D:95:C8:7F:F7:ED:56:2F:DC:B2:36:02
X509v3 Authority Key Identifier:
keyid:82:A4:16:1A:CA:BF:66:D4:25:ED:87:8C:5D:A9:6A:7D:5C:B3:FF:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/r4535rejwLyNlch_9-1WL9yyNgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.124.0/22
IPv6:
2a0d:1380::/29
Signature Algorithm: sha256WithRSAEncryption
a7:81:59:6f:d0:04:a6:19:62:2f:97:da:a6:ce:f3:b3:d0:a6:
73:f3:57:b4:56:89:08:4b:f0:b7:3c:ee:fe:bf:74:0d:8a:ee:
7e:88:dc:75:1d:e4:46:0b:a1:ba:f7:c2:87:b7:a5:eb:fd:e5:
5c:69:d5:18:e3:e8:19:2a:c1:bc:2e:d9:f7:b4:13:10:6a:a3:
15:2f:53:e7:5f:84:a5:81:aa:21:a0:e7:cf:19:d0:39:30:38:
1c:dd:a8:50:7e:47:08:d0:b9:0b:47:af:00:a0:f9:b0:4f:3d:
5b:2c:4e:92:ea:50:0f:99:d5:a6:3a:09:05:35:68:7e:33:f0:
d7:7b:00:3f:cc:c6:d5:7f:3e:a3:80:60:05:90:93:d9:ea:1a:
f1:3f:15:df:9a:a7:a9:99:c1:66:c1:74:c7:37:31:ee:5e:73:
48:9e:ae:aa:18:e2:59:c8:80:63:54:97:5b:b1:5f:f2:e8:d7:
cd:b9:10:d9:90:58:02:6f:3f:4d:c8:27:a5:82:ea:b0:6d:c3:
c5:ed:c6:93:96:3d:9a:38:2a:18:fb:0a:a2:6f:a2:91:82:9b:
fc:82:2a:0f:fc:2e:44:1e:f5:d0:8a:93:53:a2:8f:21:7d:f8:
87:c4:ff:24:f1:e6:ce:80:6d:40:cc:5d:9c:06:e6:b9:c2:82:
ec:d2:47:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:40:54 2025 by rpki-client