Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/4aDro6K4uBzQDwqf0WWWDv-WEKk.roa
File: 4aDro6K4uBzQDwqf0WWWDv-WEKk.roa (raw, json)
Hash identifier: KqqgAJBLDDctP248xFMqsm3yeCd/FvEIq/xYuv9Vp94=
Subject key identifier: E1:A0:EB:A3:A2:B8:B8:1C:D0:0F:0A:9F:D1:65:96:0E:FF:96:10:A9
Certificate issuer: /CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Certificate serial: 0194221FD1EE265E94E04BB309F80B53A564
Authority key identifier: 41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/4aDro6K4uBzQDwqf0WWWDv-WEKk.roa
Signing time: Wed 01 Jan 2025 13:48:18 +0000
ROA not before: Wed 01 Jan 2025 13:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51088
IP address blocks: 92.249.7.0/24 maxlen: 24
2a14:12c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d1:ee:26:5e:94:e0:4b:b3:09:f8:0b:53:a5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Validity
Not Before: Jan 1 13:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1a0eba3a2b8b81cd00f0a9fd165960eff9610a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2b:de:e2:86:21:35:ac:99:c8:23:00:c3:e6:
32:96:9e:e4:ff:34:10:51:46:37:14:b2:f4:38:0a:
ea:b7:de:d2:ee:6d:89:8c:3c:b5:a4:93:57:3b:28:
5c:85:e4:80:24:ef:1f:42:c5:96:8a:42:7d:14:6f:
a5:8a:ff:c1:98:60:a5:3d:dd:e1:7f:59:f1:b0:0d:
b1:ae:93:e6:d0:23:a8:4c:0b:df:cc:be:cd:0f:5c:
b1:e8:59:82:18:fa:36:fb:2d:e3:28:65:bf:ac:34:
39:75:e8:04:c4:0a:9a:4d:3f:a6:b2:2f:b4:17:69:
e8:55:7a:9e:9a:40:41:4b:91:63:48:67:21:57:74:
a4:a8:a0:3d:ba:6a:15:33:3b:4d:42:16:2c:61:2d:
63:a8:c9:94:5e:87:4b:00:f5:b9:12:4b:49:fd:7c:
df:13:61:77:fc:57:86:21:50:76:78:96:4b:27:43:
8a:58:85:33:67:b8:91:9b:1d:f4:44:35:f6:bb:ad:
d2:10:92:04:5f:b1:17:2f:67:f4:72:d8:e2:3d:12:
83:99:9b:a2:4c:30:f1:6e:01:73:16:a7:52:03:37:
4e:8e:10:93:d7:bf:f8:8e:19:03:35:51:bb:df:2d:
a7:08:20:5d:8f:76:5f:aa:de:54:c8:5d:0f:4c:4e:
a6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A0:EB:A3:A2:B8:B8:1C:D0:0F:0A:9F:D1:65:96:0E:FF:96:10:A9
X509v3 Authority Key Identifier:
keyid:41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/4aDro6K4uBzQDwqf0WWWDv-WEKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.7.0/24
IPv6:
2a14:12c0::/32
Signature Algorithm: sha256WithRSAEncryption
16:62:e5:6e:4a:00:f3:9b:ce:7e:63:b3:90:19:00:36:5f:7e:
61:3a:09:1f:42:18:99:b1:2b:eb:f3:c7:c8:d5:06:25:be:59:
d4:2c:bb:9c:79:02:a2:8f:05:89:f2:38:96:24:2c:e6:0a:7c:
9f:d6:63:4e:4a:16:8b:3f:4d:86:9f:09:13:d1:3d:19:e6:39:
ef:4a:7f:9c:83:f1:52:5a:ed:66:c3:6d:2b:5b:16:26:42:06:
35:dd:88:3e:4a:98:6b:13:cb:13:2b:4d:80:da:28:57:4e:02:
52:23:9e:1c:99:c0:23:ba:a4:83:73:f2:17:57:3c:bb:9e:e4:
4a:97:a2:38:39:3a:af:0d:82:36:4c:83:06:3e:a0:7a:e9:c3:
3f:ac:a7:52:e8:e6:bb:48:8a:75:f3:fe:36:e7:d3:cc:fa:24:
2e:2b:e9:e0:2c:d0:35:01:a2:49:9c:b9:8a:7f:ac:0f:a9:d8:
cb:88:ec:e2:d6:7a:73:cc:bd:8b:af:b0:4d:a3:b4:5c:1e:03:
2f:fa:b4:8e:e0:ca:0f:f0:fe:30:b8:7d:93:ab:8e:6c:c1:cd:
72:5b:ae:86:29:0d:f8:d4:de:4e:65:bc:d3:64:cc:43:87:21:
a6:0b:b0:9c:59:c3:18:8f:68:6a:f8:bf:a7:cf:ff:0d:d5:01:
68:47:d7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:51:14 2025 by rpki-client