Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/4VYvQ_rHAW_WLHHmWWJoJe8DxXI.roa
File: 4VYvQ_rHAW_WLHHmWWJoJe8DxXI.roa (raw, json)
Hash identifier: 2vq5lY7p3QV26YVrvW4JIsT+fBab01wVcEMyf7CWXAA=
Subject key identifier: E1:56:2F:43:FA:C7:01:6F:D6:2C:71:E6:59:62:68:25:EF:03:C5:72
Certificate issuer: /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Certificate serial: 0195C7955FCBACF596239789D75147EAC8B8
Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/4VYvQ_rHAW_WLHHmWWJoJe8DxXI.roa
Signing time: Mon 24 Mar 2025 09:56:50 +0000
ROA not before: Mon 24 Mar 2025 09:56:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211093
IP address blocks: 158.120.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c7:95:5f:cb:ac:f5:96:23:97:89:d7:51:47:ea:c8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7
Validity
Not Before: Mar 24 09:56:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1562f43fac7016fd62c71e659626825ef03c572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:e4:14:55:4f:11:5f:0c:a7:23:9e:d7:c2:
00:f3:a3:cc:f7:59:d1:e0:8a:ce:18:f1:81:4e:12:
7f:98:9b:81:e5:13:d5:67:64:4a:96:42:20:01:66:
bb:39:72:b7:e5:8b:c3:a8:6a:4a:11:03:70:2b:f8:
6d:0e:4e:b2:e2:8f:34:79:47:1a:70:b2:15:59:1c:
5c:e9:fc:ab:88:2a:b9:c5:8e:c9:d9:19:0f:4c:19:
e3:f1:72:77:87:a1:a0:68:f8:7f:09:fa:f6:d9:f5:
bc:c4:93:d4:66:40:91:99:a4:eb:59:0a:18:b6:f5:
c3:a5:d4:cd:c2:d6:28:1f:54:39:ef:02:6a:91:3a:
ef:66:a4:b8:f7:48:b8:cc:6a:1d:1d:96:25:24:70:
d6:28:0a:a7:7f:39:f1:7b:cd:ef:24:9d:45:7c:ed:
ce:28:98:00:06:84:b9:03:ca:55:a4:89:d4:25:54:
c8:a1:dd:e6:6d:69:2c:83:60:3d:e1:90:6d:d9:4a:
ca:ec:8e:37:6a:f8:92:ae:05:23:33:ea:d5:1a:2a:
b8:94:e1:94:ab:68:b0:67:1c:1e:65:99:2d:4e:0e:
4b:78:97:af:07:81:45:30:b5:61:ed:45:36:8e:4b:
ca:7b:68:6e:6a:5e:e8:40:d1:59:a9:c1:71:b9:fa:
64:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:56:2F:43:FA:C7:01:6F:D6:2C:71:E6:59:62:68:25:EF:03:C5:72
X509v3 Authority Key Identifier:
keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/4VYvQ_rHAW_WLHHmWWJoJe8DxXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.120.254.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:5d:76:c0:82:6c:4b:d9:6f:6d:8c:7b:d1:05:e3:29:26:6c:
ce:25:af:84:c2:f4:0d:da:26:57:b1:4f:a1:69:cd:d6:a8:69:
9d:30:26:1f:8c:3c:35:72:f3:90:1e:b0:41:0c:34:0b:68:46:
95:a9:6e:11:28:e1:9e:98:16:5c:87:60:67:82:41:d8:40:82:
d7:34:6c:f7:fa:d0:c8:8e:7a:3d:cf:27:dc:d4:5b:0a:bc:60:
3d:a7:30:b4:60:ed:c7:4e:40:d1:c8:ad:b3:b9:a8:b7:89:74:
32:02:a4:09:21:4d:a6:4a:b3:5e:d7:4b:a0:b5:d8:87:ae:62:
25:37:a9:26:0f:34:18:6d:ad:d5:59:80:02:38:0e:3f:9d:ed:
2a:fa:02:dd:4d:9d:67:1b:f7:6e:85:a3:01:c2:15:4a:bd:9f:
0c:8b:4d:12:39:0c:c7:42:6d:f2:45:86:4f:ae:a5:40:99:68:
89:d7:47:8a:f2:26:fb:7e:2c:b4:92:e7:ca:b4:c5:48:13:17:
21:40:c2:f7:69:bb:73:f2:7b:4e:0e:65:29:5f:21:6d:25:43:
54:2c:8f:8c:b5:18:cb:c4:59:c1:91:34:8c:f0:65:f7:ed:18:
98:a5:12:e0:96:3f:f3:ee:f5:5a:10:c2:93:f4:88:d3:68:6d:
86:d3:74:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:56:01 2025 by rpki-client