Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/4S3I8iOH8dvNeoUdpR8F6wiHfZk.roa
File: 4S3I8iOH8dvNeoUdpR8F6wiHfZk.roa (raw, json)
Hash identifier: mxQZp2Bj9hP1TKo3JR4nFN0+5PMHR5qVix0IQ02MR/w=
Subject key identifier: E1:2D:C8:F2:23:87:F1:DB:CD:7A:85:1D:A5:1F:05:EB:08:87:7D:99
Certificate issuer: /CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Certificate serial: 019427B5055CFD870C5DDC33E2170D2105A2
Authority key identifier: 81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/4S3I8iOH8dvNeoUdpR8F6wiHfZk.roa
Signing time: Thu 02 Jan 2025 15:49:22 +0000
ROA not before: Thu 02 Jan 2025 15:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21221
IP address blocks: 82.210.96.0/19 maxlen: 24
84.35.0.0/16 maxlen: 24
212.29.160.0/19 maxlen: 24
2001:15b0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:05:5c:fd:87:0c:5d:dc:33:e2:17:0d:21:05:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Validity
Not Before: Jan 2 15:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e12dc8f22387f1dbcd7a851da51f05eb08877d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:76:53:37:59:cf:53:9b:fc:00:53:a1:83:9e:
4f:0f:b6:40:3e:ba:5b:6d:9f:d7:00:32:ef:3d:fb:
32:ec:e7:3b:2f:c9:d5:21:5b:e4:44:83:c1:c7:e6:
1b:33:aa:c9:07:e5:4c:0f:b5:df:73:3a:c9:59:1a:
14:e0:bb:91:34:cc:13:99:a2:ec:57:f8:9b:c5:d3:
74:74:45:24:c4:90:32:e0:b5:a2:be:b5:32:40:b6:
d6:8e:e4:47:79:dc:ad:a5:77:81:ac:74:0f:34:b9:
c7:ef:c3:1b:af:a3:d6:45:4f:2b:c8:e7:c8:50:72:
47:e8:5a:4c:a0:f3:8b:ab:5e:27:05:3a:b3:b5:46:
ea:2c:5f:44:0c:49:0c:50:a8:a2:f2:2d:57:e7:52:
0b:f3:a6:a7:ae:2b:54:a4:c9:17:e6:50:8c:e6:66:
10:ca:c6:16:03:bb:1a:fa:3e:33:96:3b:b1:a5:7d:
80:5b:bd:73:84:96:a0:d5:1f:a0:38:32:4a:02:6a:
fb:0d:b6:e5:e1:b2:3e:50:3c:3b:c1:17:10:2f:32:
2e:53:1a:08:6b:39:46:00:31:91:70:8f:1d:ac:92:
07:05:c7:a6:c5:c2:98:ac:1b:f9:f6:52:c4:61:01:
02:67:19:ae:66:b5:83:cc:35:3b:e2:11:e6:fb:d6:
8c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2D:C8:F2:23:87:F1:DB:CD:7A:85:1D:A5:1F:05:EB:08:87:7D:99
X509v3 Authority Key Identifier:
keyid:81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/4S3I8iOH8dvNeoUdpR8F6wiHfZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.210.96.0/19
84.35.0.0/16
212.29.160.0/19
IPv6:
2001:15b0::/32
Signature Algorithm: sha256WithRSAEncryption
78:01:79:65:a0:8c:96:ee:95:12:f3:b2:e0:dc:0c:28:32:e6:
0b:6d:aa:eb:3c:7e:52:9a:41:0c:e7:cc:e2:85:82:a7:04:76:
2b:6c:25:9b:37:28:10:9b:25:98:39:9a:97:06:7e:7a:c7:ab:
5a:4e:85:69:35:f9:15:e2:36:dc:b9:dc:3c:db:43:b0:cf:2d:
f2:88:a5:37:39:90:dc:ed:f6:ed:fe:d9:60:04:1c:d8:f1:fd:
ae:42:6c:86:af:e0:46:bd:fb:59:f3:f7:3f:3b:10:e2:d5:7a:
87:06:26:05:6c:59:ca:7f:5d:44:5f:ba:c5:6b:8f:2e:0c:ac:
98:af:94:3a:48:29:aa:83:55:55:6d:b5:50:c8:9a:fc:ee:82:
ec:a1:f3:1f:ad:a9:16:14:27:ec:9a:07:7d:f2:82:93:04:19:
7f:ec:2b:25:2c:88:09:4b:28:f5:bf:03:fa:55:af:e7:24:78:
27:45:5d:94:44:40:fe:91:0a:a6:d1:58:16:c6:86:eb:5e:44:
ef:d9:23:51:b8:9b:b2:18:d3:4d:54:03:55:94:5e:2d:75:b8:
79:e5:71:6b:f0:10:c0:a9:16:94:09:df:de:72:a4:58:4c:b1:
a4:6c:1c:1a:3a:39:2a:a6:89:e6:55:fc:de:4b:25:0e:db:e5:
2a:2e:21:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:02:13 2025 by rpki-client