Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/4Vp82kMVFy3SS-QpMeiBb_LCuZM.roa
File: 4Vp82kMVFy3SS-QpMeiBb_LCuZM.roa (raw, json)
Hash identifier: eQLhAc0fHmyRxdit6MMg+tHEhHD6XioTBzmbHJz5rsE=
Subject key identifier: E1:5A:7C:DA:43:15:17:2D:D2:4B:E4:29:31:E8:81:6F:F2:C2:B9:93
Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial: 0194236A34716B9AE3036A80CD09F25C4290
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/4Vp82kMVFy3SS-QpMeiBb_LCuZM.roa
Signing time: Wed 01 Jan 2025 19:49:10 +0000
ROA not before: Wed 01 Jan 2025 19:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41068
IP address blocks: 185.222.48.0/24 maxlen: 24
185.222.49.0/24 maxlen: 24
185.222.50.0/24 maxlen: 24
185.222.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:34:71:6b:9a:e3:03:6a:80:cd:09:f2:5c:42:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
Validity
Not Before: Jan 1 19:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e15a7cda4315172dd24be42931e8816ff2c2b993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:6d:5f:fb:39:9f:e3:d8:2c:e0:59:13:0a:
7e:02:37:55:05:1c:e2:54:0b:ac:15:cf:8a:cb:1b:
42:89:d8:27:30:3d:e2:5c:65:81:e6:87:a6:ff:a9:
50:b3:34:06:55:4d:e3:dc:01:eb:78:a2:64:43:92:
ca:d1:0e:4d:da:e3:6d:8d:89:bb:d2:34:5a:c4:bf:
a7:d5:94:13:21:55:fd:0b:c7:32:b3:f8:74:55:a3:
23:af:78:fa:19:ca:c5:99:f9:e7:c7:70:13:76:7d:
b4:e0:b3:30:04:63:8b:04:16:8f:88:63:df:91:ee:
53:da:ed:2b:6b:b1:87:9a:d1:95:0e:8e:ed:a3:62:
93:de:b7:11:44:54:fd:31:4c:ce:66:12:57:ef:9f:
80:ae:0e:29:c7:76:0b:2d:be:34:e7:3c:61:b7:f6:
da:f6:cb:50:3c:d2:74:12:07:73:d8:b9:02:d5:0b:
33:68:fb:ec:24:5c:13:01:c5:5e:aa:66:93:eb:02:
e6:2a:db:9e:21:36:4a:d7:fc:1e:eb:09:0c:37:e0:
30:1a:98:67:54:a1:90:ef:be:0c:96:ce:ad:9e:4a:
7a:1d:dc:94:48:43:d4:10:3e:8e:f1:fd:02:68:37:
96:d3:ed:80:a3:13:92:9a:9b:56:ea:0c:b3:71:09:
bb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5A:7C:DA:43:15:17:2D:D2:4B:E4:29:31:E8:81:6F:F2:C2:B9:93
X509v3 Authority Key Identifier:
keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/4Vp82kMVFy3SS-QpMeiBb_LCuZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.48.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:3f:02:da:1e:f3:1f:19:ae:2c:48:7e:ca:58:2b:10:a9:f9:
16:34:26:ef:09:7f:ad:e7:ec:bb:26:0f:48:e1:69:f0:62:a8:
4b:ca:14:d5:54:8d:0c:9a:90:b6:42:02:d5:f5:a2:b8:0d:b2:
93:93:6b:68:cd:8e:d4:9b:0c:47:57:86:82:38:e0:1b:6d:9f:
a0:b2:b6:ef:a1:75:da:55:76:8e:cf:44:39:74:ed:41:dd:79:
e8:5b:54:54:a9:27:dd:d1:29:b8:2a:dc:67:de:4b:b0:04:9b:
fc:e7:bd:4d:b9:f8:6f:18:0a:b0:d7:e6:ab:20:84:07:d4:5f:
84:e8:f6:3f:2f:84:66:88:64:15:8f:12:ca:0b:4a:96:24:52:
72:7f:74:e5:0b:18:38:7d:9b:f7:e9:37:ab:46:44:87:e3:1f:
20:7b:50:18:b8:a3:02:ed:87:8c:4d:b2:5a:41:d8:f4:55:fa:
26:73:29:b7:8d:24:e1:6f:5e:4c:f3:b2:34:fd:3c:38:8a:c2:
c4:ff:37:55:65:02:9f:55:39:83:eb:9e:59:2e:72:13:40:c7:
cf:3f:cf:17:15:86:08:12:24:cf:4f:c0:59:1d:93:ad:c4:34:
8a:52:66:dc:eb:db:55:dd:79:46:ee:b6:d6:12:c8:05:0a:48:
94:30:61:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:31 2025 by rpki-client