Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/4aqwjBsaXXO1wP1ULqjC3gIKzyE.roa
File: 4aqwjBsaXXO1wP1ULqjC3gIKzyE.roa (raw, json)
Hash identifier: kgFt0xMNhqvnXYZjd5Juq33SX8vF1YawKA62vDJ+afo=
Subject key identifier: E1:AA:B0:8C:1B:1A:5D:73:B5:C0:FD:54:2E:A8:C2:DE:02:0A:CF:21
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA3E15E8C907DBD1F4C2AA4A8141DD
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/4aqwjBsaXXO1wP1ULqjC3gIKzyE.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202637
IP address blocks: 188.213.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3e:15:e8:c9:07:db:d1:f4:c2:aa:4a:81:41:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1aab08c1b1a5d73b5c0fd542ea8c2de020acf21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6d:76:23:c5:f8:58:bf:fe:4d:61:fa:56:06:
72:e8:36:12:6e:01:4e:27:02:86:29:c7:bd:55:c6:
dc:76:28:97:17:aa:07:0a:57:49:2b:b1:4a:38:6e:
7a:5d:b8:b0:58:7b:7f:da:35:c7:89:8b:f3:65:41:
cb:c7:cb:5a:b3:0a:a4:1e:6b:64:fc:8c:98:6f:99:
a8:17:42:d1:c9:f3:d9:4e:8a:2b:9d:e0:dd:6b:f1:
22:c6:68:7b:b1:ed:1d:f7:9a:80:a3:8e:a7:ae:29:
df:40:d1:95:b9:26:83:bb:be:07:8a:cc:73:ac:ba:
9d:2d:b2:14:1d:d5:4b:f3:94:41:0c:34:15:73:87:
a1:74:96:d1:8f:c8:8e:0a:c0:72:59:c8:3a:ab:a7:
8c:8d:0a:e2:b5:4d:78:df:9a:f5:39:10:25:3d:ba:
b7:4f:a0:fe:e8:48:c6:40:c3:e8:79:df:03:99:cc:
c1:18:4e:d1:38:6b:5c:76:dc:63:cf:50:68:48:9c:
c6:49:35:24:0e:8c:0d:ad:19:60:be:2f:2f:89:fc:
bd:88:88:25:ec:ef:41:9c:c0:0c:3f:35:78:5f:18:
ae:e6:cc:47:89:5e:39:55:17:7a:38:f0:45:ad:05:
48:8b:17:4e:ff:3f:32:5e:a8:a1:78:30:e9:56:36:
31:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AA:B0:8C:1B:1A:5D:73:B5:C0:FD:54:2E:A8:C2:DE:02:0A:CF:21
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/4aqwjBsaXXO1wP1ULqjC3gIKzyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.48.0/24
Signature Algorithm: sha256WithRSAEncryption
65:94:c8:14:72:aa:ec:8a:2c:6d:f1:1f:de:6c:be:64:a1:de:
2e:f5:22:5a:2f:d2:5e:33:9d:65:a4:a1:0f:26:99:76:35:32:
90:7b:6c:6f:12:48:41:28:bd:27:aa:6a:66:e3:bd:4b:ef:db:
76:1e:b9:95:cb:b0:f0:79:87:c6:b8:30:fb:2a:6e:12:ac:ea:
05:43:b1:da:b9:78:49:34:17:31:d0:62:61:ea:7f:60:9c:75:
9e:8f:f4:12:d0:bd:0b:42:4f:7e:a1:8f:09:f3:d1:10:a9:d2:
ae:a9:cb:34:86:e4:f5:1c:c3:28:ec:a2:9f:9a:d2:0b:40:9a:
06:41:a7:76:e9:89:59:31:f3:88:d3:87:d9:b1:75:da:38:2d:
c0:56:72:32:a2:ca:fa:3e:5c:53:90:a2:d9:86:16:c2:22:b6:
83:86:8a:35:11:0d:cd:98:76:18:1f:f0:25:df:ed:93:a1:2f:
cb:6d:f2:ab:36:80:b4:80:aa:87:2e:ff:07:a9:3c:9b:d0:71:
71:73:26:b6:48:52:f1:4e:a2:a7:e0:1b:7e:e0:f3:e5:14:60:
bf:1a:8c:5b:22:10:d6:90:c2:f3:d9:d1:dc:67:8e:e8:0c:ee:
df:7d:71:5c:92:76:fd:1b:c1:b7:a8:ab:ea:67:4e:76:18:0b:
15:a0:e9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:46:13 2025 by rpki-client