Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/4I-6pUBuhpnNk_pbMH3X7d2ARgw.roa
File: 4I-6pUBuhpnNk_pbMH3X7d2ARgw.roa (raw, json)
Hash identifier: sibDBbjHGj/0cV6Q2SgY8FXb2d2DZJUAVvA8r4si5j0=
Subject key identifier: E0:8F:BA:A5:40:6E:86:99:CD:93:FA:5B:30:7D:D7:ED:DD:80:46:0C
Certificate issuer: /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial: 01941FFA88FCF0B1AC86F249A8CCCA688562
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/4I-6pUBuhpnNk_pbMH3X7d2ARgw.roa
Signing time: Wed 01 Jan 2025 03:48:20 +0000
ROA not before: Wed 01 Jan 2025 03:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15169
IP address blocks: 193.186.4.0/24 maxlen: 24
2a00:1450::/32 maxlen: 32
2a00:1450:4001::/48 maxlen: 48
2a00:1450:4002::/48 maxlen: 48
2a00:1450:4003::/48 maxlen: 48
2a00:1450:4004::/48 maxlen: 48
2a00:1450:4005::/48 maxlen: 48
2a00:1450:4006::/48 maxlen: 48
2a00:1450:4007::/48 maxlen: 48
2a00:1450:4008::/48 maxlen: 48
2a00:1450:4009::/48 maxlen: 48
2a00:1450:400a::/48 maxlen: 48
2a00:1450:400b::/48 maxlen: 48
2a00:1450:400c::/48 maxlen: 48
2a00:1450:400d::/48 maxlen: 48
2a00:1450:400e::/48 maxlen: 48
2a00:1450:400f::/48 maxlen: 48
2a00:1450:4010::/48 maxlen: 48
2a00:1450:4011::/48 maxlen: 48
2a00:1450:4012::/48 maxlen: 48
2a00:1450:4013::/48 maxlen: 48
2a00:1450:4014::/48 maxlen: 48
2a00:1450:4015::/48 maxlen: 48
2a00:1450:4016::/48 maxlen: 48
2a00:1450:4017::/48 maxlen: 48
2a00:1450:4018::/48 maxlen: 48
2a00:1450:4019::/48 maxlen: 48
2a00:1450:401a::/48 maxlen: 48
2a00:1450:401b::/48 maxlen: 48
2a00:1450:401c::/48 maxlen: 48
2a00:1450:480e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:88:fc:f0:b1:ac:86:f2:49:a8:cc:ca:68:85:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
Validity
Not Before: Jan 1 03:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e08fbaa5406e8699cd93fa5b307dd7eddd80460c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d2:73:17:00:b0:72:8e:88:e5:c1:7a:c8:e7:
cf:63:c3:db:ad:70:50:5f:29:74:94:d7:2c:3f:4e:
2b:81:dc:b9:6c:f6:ff:0c:c6:0a:1f:59:2d:80:19:
a1:87:e0:cb:41:0c:b2:6d:47:20:56:d5:2c:51:ab:
52:3e:16:b6:29:f3:16:6b:0c:43:a0:b3:10:02:63:
b6:59:24:57:82:04:0e:94:6f:80:dc:51:92:47:6f:
f5:db:5a:4c:66:09:aa:fb:8b:ca:13:90:bf:85:3e:
6e:a5:08:03:cf:07:52:e3:85:cf:3b:dd:88:f4:88:
84:16:c6:77:f5:19:01:52:33:06:bb:ed:88:cb:1f:
56:b9:5c:28:36:34:c1:99:51:8a:b5:38:48:f7:a9:
d8:60:1a:09:04:01:27:ac:b5:55:24:4d:b8:f4:f9:
7c:a3:ed:10:1d:08:b9:2e:85:a5:52:a2:d3:34:7c:
3e:40:b9:ae:fe:a1:99:02:76:39:38:3a:2f:00:fb:
8c:ac:3e:df:ed:04:a2:79:e0:06:23:5d:bf:c1:9b:
6d:8c:94:d6:65:f9:ff:e5:ed:c1:98:5a:35:5f:16:
b8:db:0c:7f:0f:3d:a9:aa:a9:7c:2d:ee:75:5c:97:
fd:d7:0f:58:5a:0b:0a:c6:84:44:68:ff:dd:c3:e3:
45:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8F:BA:A5:40:6E:86:99:CD:93:FA:5B:30:7D:D7:ED:DD:80:46:0C
X509v3 Authority Key Identifier:
keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/4I-6pUBuhpnNk_pbMH3X7d2ARgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.4.0/24
IPv6:
2a00:1450::/32
Signature Algorithm: sha256WithRSAEncryption
a8:f7:66:df:9b:93:e9:77:bc:ea:5d:6d:36:93:f3:b0:82:fd:
e5:47:a3:80:85:61:12:2a:68:a1:7d:6b:30:99:fc:54:61:19:
fa:ac:bc:c4:e4:03:5c:e2:8f:c6:76:ca:5d:09:02:61:12:cc:
a3:de:d7:42:98:b9:01:bd:14:e5:e4:b6:c4:15:cc:58:42:f9:
86:90:02:f5:72:d2:d7:54:c4:40:38:b8:19:5a:9e:d0:ca:8b:
7b:92:c2:50:8e:8c:ba:d3:de:40:ed:30:90:6f:73:5a:cc:8f:
a7:2f:01:ee:ba:cf:89:04:cb:b6:8d:07:2d:3d:4d:e5:33:01:
13:bf:3b:ee:2d:28:b4:5b:a2:34:b7:02:45:42:cf:a5:97:74:
3e:ba:2f:bd:15:4a:52:b3:75:e3:79:42:58:d7:54:de:a1:1c:
8c:21:60:56:40:cd:2b:ef:6c:ce:64:9e:b0:33:83:5d:2d:20:
55:c0:3d:b0:52:5a:6a:8b:59:fb:d0:d1:7f:07:46:4e:37:78:
f5:36:50:cc:b1:61:c5:21:7f:36:02:c5:b7:6d:e0:dc:3f:95:
dc:8a:01:7d:6f:68:b2:79:2f:a9:5a:68:bc:94:c7:44:99:f4:
db:f5:d1:a9:54:42:0c:a0:29:0c:e4:b9:52:e5:2a:2a:7b:db:
98:ba:6a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:04:36 2025 by rpki-client