Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4iSTB1pAtlgRtvXVZNc9GYloxqE.roa
File: 4iSTB1pAtlgRtvXVZNc9GYloxqE.roa (raw, json)
Hash identifier: wAr8vpRgYOuJShId4PS2157k2eM/urSNtvw1HpVV5uQ=
Subject key identifier: E2:24:93:07:5A:40:B6:58:11:B6:F5:D5:64:D7:3D:19:89:68:C6:A1
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B2307BE52FE6CE477A80026FDE53F8
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4iSTB1pAtlgRtvXVZNc9GYloxqE.roa
Signing time: Wed 01 Jan 2025 11:48:33 +0000
ROA not before: Wed 01 Jan 2025 11:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 45.8.195.0/24 maxlen: 24
45.8.197.0/24 maxlen: 24
45.8.198.0/24 maxlen: 24
193.168.208.0/24 maxlen: 24
193.168.209.0/24 maxlen: 24
193.168.210.0/24 maxlen: 24
193.168.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:30:7b:e5:2f:e6:ce:47:7a:80:02:6f:de:53:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e22493075a40b65811b6f5d564d73d198968c6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:e2:9b:e7:1b:2b:a9:7c:83:b5:a2:e3:38:
ce:0e:b2:f0:5f:b0:45:50:19:86:cd:5a:cd:9f:f3:
fa:3f:0e:42:6f:4f:86:39:01:b1:93:0a:4a:b3:95:
d0:c1:45:4a:e1:47:0a:87:6b:d2:3e:d3:a5:52:aa:
a7:7a:3b:39:8d:a8:a1:13:32:97:c2:d7:66:21:1d:
70:38:00:a3:f7:e8:d3:a0:ef:9a:7d:f1:59:d5:f4:
2c:b7:c1:25:8b:87:f0:8e:a2:3d:b8:81:8a:da:68:
69:c9:46:f2:a0:c4:21:7b:57:82:04:3c:0c:23:2a:
b6:cf:6e:2c:5f:20:27:4c:c1:7c:44:cc:55:52:f7:
a5:94:9d:c3:ab:d7:7a:30:38:a6:2f:34:34:a8:f7:
59:ea:1d:ff:fa:3f:41:d8:2b:d6:69:c0:21:2e:d4:
6a:f9:1a:b8:1b:49:18:94:09:02:53:59:54:57:29:
62:da:58:db:88:eb:15:8f:5a:6f:8a:1d:43:65:0d:
f0:68:c7:bb:94:08:2a:4b:f2:60:17:ad:13:a3:8a:
b5:98:50:6a:46:b1:2f:71:34:d7:0d:a7:e9:ac:6d:
b3:69:85:ce:2f:26:f5:a5:47:74:ce:79:a9:08:82:
8a:b0:d5:1a:83:ee:99:49:0b:45:fd:14:af:89:50:
73:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:24:93:07:5A:40:B6:58:11:B6:F5:D5:64:D7:3D:19:89:68:C6:A1
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4iSTB1pAtlgRtvXVZNc9GYloxqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.195.0/24
45.8.197.0-45.8.198.255
193.168.208.0/22
Signature Algorithm: sha256WithRSAEncryption
33:15:61:00:e5:6b:53:20:4f:2d:8d:23:03:45:fd:ae:96:2b:
60:92:86:a0:3e:0a:22:c6:67:57:81:43:17:15:0f:df:ce:65:
b6:fc:02:7b:d1:90:3c:f2:dd:4f:a3:d0:da:e2:9f:8c:b9:97:
c7:13:de:53:22:f4:8f:63:6a:1b:57:c7:f4:97:68:1b:d8:8b:
58:b7:dc:28:e7:af:6b:b6:2a:87:79:34:32:cf:e4:dd:6a:00:
39:e6:02:8c:e9:2e:e3:22:8f:2d:d4:4f:64:20:9e:9a:8e:9b:
16:f0:11:0c:b9:8c:7b:2e:ed:4d:25:71:2e:ca:01:3b:5d:26:
6c:6d:ea:e6:03:08:a3:cd:10:af:92:98:6e:99:24:09:ed:e9:
8e:9f:71:70:0b:ce:a4:48:c6:88:dd:a7:43:3b:75:21:61:56:
12:89:f0:20:cf:8d:1e:48:18:51:ba:e2:a4:ca:57:90:19:94:
94:41:8c:cb:82:d3:dd:e7:9c:b3:59:4d:81:3c:19:60:81:7b:
4d:13:42:d1:4e:47:e2:2a:d0:d7:24:ac:9d:bd:22:a5:58:96:
32:39:78:bd:ac:b8:60:3e:73:f5:92:0f:46:13:4d:73:ba:04:
fd:7b:7d:b2:29:51:f3:f5:ca:c8:dc:b6:5c:26:1c:1a:74:3e:
e0:5b:67:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:20:56 2025 by rpki-client