Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4-K7u71SGjpJ_Bo3COL8WsWDmds.roa
File: 4-K7u71SGjpJ_Bo3COL8WsWDmds.roa (raw, json)
Hash identifier: sVX3lVSG5SXhlFz9T41qz6bjDG4mzYSXW17adnK/KiI=
Subject key identifier: E3:E2:BB:BB:BD:52:1A:3A:49:FC:1A:37:08:E2:FC:5A:C5:83:99:DB
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019422201C33028F9A6AED00D0D297A3740D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4-K7u71SGjpJ_Bo3COL8WsWDmds.roa
Signing time: Wed 01 Jan 2025 13:48:37 +0000
ROA not before: Wed 01 Jan 2025 13:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 176.125.248.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1c:33:02:8f:9a:6a:ed:00:d0:d2:97:a3:74:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3e2bbbbbd521a3a49fc1a3708e2fc5ac58399db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:51:cf:76:12:41:dc:87:d3:53:12:ee:59:7e:
d0:39:be:00:79:bc:04:d3:c9:29:e0:76:6c:da:98:
fa:94:7e:f7:29:02:fa:de:3f:23:fd:93:6a:61:f7:
ab:1c:63:62:5a:44:b6:9b:bb:b7:95:ca:18:7f:8c:
9f:e4:92:5e:f7:f3:e6:14:f0:dc:20:5c:21:1d:a8:
f3:ff:75:75:de:68:9a:e2:72:d9:94:54:50:48:42:
34:b9:03:c0:f8:04:ee:f3:44:1f:6a:78:f4:ba:0f:
56:b7:53:73:81:61:63:52:f6:de:56:2e:7e:5a:38:
ab:d2:0a:5e:6c:88:97:35:4e:0e:9d:00:e3:12:cf:
a8:c5:85:eb:65:89:1f:c8:fb:e4:1a:3e:d4:d4:63:
cd:8a:4b:0e:43:c9:30:a5:1c:db:cf:96:60:92:15:
1e:4c:1f:3c:8f:94:0c:e2:53:19:e7:75:63:10:88:
68:46:09:80:0e:e6:da:b5:26:70:ee:e5:69:8b:99:
fc:ae:d2:31:a4:64:35:72:a5:c1:cd:4f:06:92:da:
0a:c8:db:93:ae:fb:83:dd:92:de:37:11:92:f8:83:
d4:ca:00:cb:62:1d:75:d9:52:fa:0c:bf:81:c5:e2:
64:e2:92:09:ca:1b:ea:3c:51:84:c2:46:aa:8b:ea:
9d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E2:BB:BB:BD:52:1A:3A:49:FC:1A:37:08:E2:FC:5A:C5:83:99:DB
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4-K7u71SGjpJ_Bo3COL8WsWDmds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.248.0/24
185.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:57:f1:7d:72:b6:cd:80:08:d8:8f:70:96:1d:4a:57:b3:5e:
b7:ee:42:1c:03:a2:90:81:19:5d:89:a2:41:76:d6:e4:f8:2d:
d7:9c:4e:d6:bd:f2:31:e3:43:48:bd:75:25:33:bd:b9:e5:54:
00:0a:7e:32:71:af:e2:5f:af:ef:14:8f:b7:66:9b:f9:3d:b1:
0f:2d:f7:15:7c:8f:e2:63:0f:99:7b:68:a4:fc:17:21:d8:ce:
d7:26:ab:3a:3f:df:f5:6a:2e:f6:d5:54:64:a4:32:13:c0:84:
27:48:e3:de:ba:65:cd:c7:4f:b3:f4:6c:51:a8:7c:f6:b0:54:
3c:9d:16:c7:80:95:40:e4:e2:2e:54:8d:0f:ac:4e:85:ab:78:
1f:dc:4f:6b:e8:9e:4e:7d:22:1a:5a:76:22:49:20:2f:99:57:
ac:9d:cf:ec:c5:b5:c1:83:1a:21:27:57:e5:b2:91:55:b3:7e:
96:d4:2e:7d:a5:ae:00:56:45:7e:f7:cb:b1:8f:3a:17:11:6e:
42:a1:31:b6:e0:22:42:52:02:fd:4e:1a:65:5f:2d:ba:30:98:
6b:41:7e:f6:13:ba:a6:3d:35:7a:aa:f2:b9:61:44:80:6c:25:
61:2a:df:be:77:6a:ae:e1:ae:17:c2:d5:59:cf:a0:a4:06:fc:
27:00:6b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:48:00 2025 by rpki-client