Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/SLerrWQQ2Vv32Cq9bFz18GlkgMk.roa
File: SLerrWQQ2Vv32Cq9bFz18GlkgMk.roa (raw, json)
Hash identifier: Ad8qEHYaGF2r52PO0P5P8U5o0SDN4u6UljC/+qUbGJ4=
Subject key identifier: 48:B7:AB:AD:64:10:D9:5B:F7:D8:2A:BD:6C:5C:F5:F0:69:64:80:C9
Certificate issuer: /CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Certificate serial: 0194221FEC39425F67233BDE537E1356972C
Authority key identifier: 11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/SLerrWQQ2Vv32Cq9bFz18GlkgMk.roa
Signing time: Wed 01 Jan 2025 13:48:24 +0000
ROA not before: Wed 01 Jan 2025 13:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 185.125.42.0/24 maxlen: 24
2a06:b7c2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ec:39:42:5f:67:23:3b:de:53:7e:13:56:97:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Validity
Not Before: Jan 1 13:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48b7abad6410d95bf7d82abd6c5cf5f0696480c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:df:43:a4:58:ff:71:9e:3c:8d:0f:63:c1:
3d:f4:d9:0f:0a:78:12:8a:d1:bc:15:12:65:7d:b6:
cc:34:1d:92:e7:6e:73:82:f1:6d:10:b4:67:bf:ca:
08:d7:2b:86:e6:b1:2e:8d:b2:32:38:e9:33:bb:80:
d7:bc:e9:d8:63:e5:67:4f:1e:7d:b2:64:6a:14:96:
e5:c4:bf:27:cd:b7:12:fb:24:94:25:bd:39:4e:38:
95:25:9c:a5:d0:90:23:df:ad:a2:dd:fb:de:a0:37:
69:01:4d:b2:36:82:ec:72:bf:3b:f6:39:e4:08:ad:
ad:7e:4a:f5:7b:02:13:3d:c9:fe:ff:1a:d3:dd:df:
4a:f3:cd:34:8d:7a:6a:41:c2:7d:26:a6:47:5f:7a:
3f:0b:19:eb:1c:ae:7f:ae:80:9b:6e:96:7a:16:bc:
26:73:c5:ac:6a:af:c5:b1:1a:15:26:62:ee:18:ec:
51:0a:6d:fd:eb:11:5f:9e:c4:53:c2:54:6f:77:22:
21:76:eb:8f:4a:34:b4:5c:cf:90:4e:b8:9a:42:33:
91:d6:35:9e:e2:4e:b3:d8:4e:2e:cb:71:c4:95:4e:
69:d7:4e:b7:9b:10:be:ec:22:05:e8:e6:9b:b1:98:
ef:99:8f:13:6c:53:e2:54:a5:e8:6d:e4:6d:6c:cb:
36:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B7:AB:AD:64:10:D9:5B:F7:D8:2A:BD:6C:5C:F5:F0:69:64:80:C9
X509v3 Authority Key Identifier:
keyid:11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/SLerrWQQ2Vv32Cq9bFz18GlkgMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.42.0/24
IPv6:
2a06:b7c2::/32
Signature Algorithm: sha256WithRSAEncryption
47:89:b7:de:0d:b6:81:da:88:9f:e2:df:fe:e6:be:64:f7:9f:
26:a9:76:9d:23:df:3c:4e:cd:7e:15:bb:f6:89:5f:b8:48:6a:
8b:92:6e:69:79:36:c9:39:b3:2f:53:ea:fa:75:67:24:b1:8b:
68:0c:d0:89:cd:49:99:8b:81:d7:53:b4:a1:79:a8:b0:3b:29:
9a:a3:e6:13:16:96:ae:7a:65:1a:9a:07:6b:d7:a1:dc:7f:c7:
e4:34:d4:7e:72:eb:14:cb:93:57:fa:49:d5:3e:af:53:26:97:
ae:f4:94:1b:ab:38:23:4c:63:7d:27:f7:2d:4e:44:37:a8:e7:
71:64:80:60:13:e1:58:c0:12:df:b5:a1:4e:9a:4d:b5:3d:4a:
9c:b3:73:6a:a7:f5:e8:b8:31:82:f9:83:06:28:4c:26:c0:2a:
90:d0:d1:ae:02:da:73:22:93:ba:d0:6b:fe:6a:03:01:51:a3:
cf:6f:39:d3:1b:58:3c:99:96:8b:79:8a:08:d8:b2:5a:f7:08:
5c:ba:0e:a8:76:de:ef:c2:0e:72:b4:a0:4b:f0:ce:fc:f1:cb:
9c:b5:78:64:91:d9:0e:03:10:21:4e:66:71:a6:87:43:d8:d4:
36:9d:56:1c:48:6f:82:7b:ef:39:3e:f7:50:9e:93:7b:c0:55:
4a:5c:d1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:54:55 2025 by rpki-client