Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4oFgbvjivonc75j6oWwkurpCHuo.roa
File: 4oFgbvjivonc75j6oWwkurpCHuo.roa (raw, json)
Hash identifier: wfNIhptalUUsPvpgzrp9sVZFBDTSEW8d7lJfHh/ba4k=
Subject key identifier: E2:81:60:6E:F8:E2:BE:89:DC:EF:98:FA:A1:6C:24:BA:BA:42:1E:EA
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01942747CE252481B0E448DF7EB5ED22A8F5
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4oFgbvjivonc75j6oWwkurpCHuo.roa
Signing time: Thu 02 Jan 2025 13:50:04 +0000
ROA not before: Thu 02 Jan 2025 13:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44066
IP address blocks: 5.183.95.0/24 maxlen: 24
45.86.163.0/24 maxlen: 24
46.30.189.0/24 maxlen: 24
46.30.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ce:25:24:81:b0:e4:48:df:7e:b5:ed:22:a8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 2 13:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e281606ef8e2be89dcef98faa16c24baba421eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4b:27:7b:6e:8f:09:0d:18:70:17:f6:21:50:
78:0d:29:90:25:d3:f1:8e:9f:61:b0:be:a4:7b:6a:
bf:4a:22:df:51:00:75:78:67:b3:e6:f4:ec:14:46:
8f:7d:62:5a:f3:b1:f0:94:7a:45:ca:1e:be:9f:35:
17:e9:cf:c8:07:39:4a:e9:82:cc:b7:ab:7e:48:5f:
92:02:f6:f6:4e:f1:3e:fb:8a:12:1a:b4:84:93:8e:
86:07:0f:7f:7a:f1:be:ad:3d:54:2f:1a:e2:af:98:
a5:6a:66:a6:45:1b:2a:f6:f2:c0:13:a0:31:0f:93:
78:ef:ca:df:6e:53:64:4e:5a:e0:12:8f:63:da:16:
a5:7a:52:b6:33:47:7c:e7:b5:9e:71:d0:f2:29:f0:
ec:52:be:19:17:73:29:db:2a:93:86:55:f9:d4:74:
58:3a:c6:5f:d0:53:a9:d8:f7:75:50:2a:50:3b:d3:
ce:ef:0d:dc:77:6f:44:ac:4e:5f:e8:45:43:77:b3:
cf:ab:8f:5e:4f:05:08:c4:ff:39:fa:b1:bb:06:da:
3b:08:47:a1:bb:84:36:f4:b1:5d:f8:a3:dc:7f:a1:
45:a2:d3:2b:ad:e7:3b:5b:f5:29:06:3c:1a:49:a5:
22:19:ca:62:82:a9:02:d0:f8:1c:c1:b4:5d:5c:82:
d1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:81:60:6E:F8:E2:BE:89:DC:EF:98:FA:A1:6C:24:BA:BA:42:1E:EA
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4oFgbvjivonc75j6oWwkurpCHuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.95.0/24
45.86.163.0/24
46.30.189.0-46.30.190.255
Signature Algorithm: sha256WithRSAEncryption
aa:03:a3:e0:61:2c:4f:87:36:ed:48:f6:ab:0e:c3:f8:8e:38:
d8:c0:ad:8c:9d:c8:d9:eb:a6:d7:12:44:a4:8c:a5:02:8b:f5:
2c:3c:94:bb:9d:c9:18:13:ba:78:0d:ba:75:ee:cb:a0:f7:b1:
c7:2e:ef:1a:f1:52:d3:6b:48:7e:80:2c:d9:1e:81:64:5c:2c:
e7:d5:4e:e3:78:9a:3d:1e:2a:6c:46:4c:16:6c:99:b0:5d:03:
50:88:03:c2:c3:1c:65:97:3c:17:1c:ee:1e:73:50:42:56:7b:
ab:26:88:dc:10:51:bf:d4:1d:49:de:d6:a9:1c:d6:12:76:84:
d7:c9:d0:32:f4:5c:39:fd:95:8d:cd:3e:8a:fa:3c:f7:22:8a:
de:c0:69:50:e3:07:68:fa:6d:c0:39:35:4f:f4:c9:57:4c:05:
d6:c4:38:72:63:ea:ed:a4:23:d4:5b:18:72:11:f1:1b:c4:14:
96:3d:02:30:29:db:9c:4e:e7:06:42:e7:1e:f8:93:49:2b:97:
3c:aa:0c:50:16:66:f5:70:a2:07:f8:f7:b1:ec:d5:bd:a7:b4:
16:ca:36:6a:4f:94:d6:eb:6d:b5:62:fb:ee:cd:80:49:52:09:
c9:ad:64:6b:98:a0:9b:50:ed:7f:15:5a:90:3b:e8:ef:2c:6f:
8c:a4:ba:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:50:53 2025 by rpki-client