Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/RvRCSGjhEBgpFNBdyQsAZ6BhJK4.roa
File: RvRCSGjhEBgpFNBdyQsAZ6BhJK4.roa (raw, json)
Hash identifier: ko6/zbaRhdiSzNrvkPNdueOs6cifHWWxz2XYikWbq5I=
Subject key identifier: 46:F4:42:48:68:E1:10:18:29:14:D0:5D:C9:0B:00:67:A0:61:24:AE
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018F1B973BF558C3E9639CDA1B27C6E85960
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/RvRCSGjhEBgpFNBdyQsAZ6BhJK4.roa
Signing time: Fri 26 Apr 2024 18:07:27 +0000
ROA not before: Fri 26 Apr 2024 18:07:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204769
IP address blocks: 192.144.34.0/24 maxlen: 24
193.38.248.0/24 maxlen: 24
2a09:ff00:103::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1b:97:3b:f5:58:c3:e9:63:9c:da:1b:27:c6:e8:59:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Apr 26 18:07:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46f4424868e110182914d05dc90b0067a06124ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6e:b2:50:5e:39:2c:a2:ba:78:a5:4c:e3:22:
7e:b9:11:c9:44:b2:1d:b7:2a:37:1e:57:bc:d5:98:
a9:22:ab:d1:e3:c9:98:6c:d4:ef:9e:8b:35:23:99:
e7:3c:b9:99:10:90:2e:66:7e:5c:8a:6b:1d:45:84:
17:e9:c6:83:b0:ce:92:b5:fe:1f:cf:24:4c:51:15:
af:66:c9:6d:e7:70:1a:d6:bd:0a:44:60:e8:42:24:
7a:43:47:4a:c9:1c:b6:30:f8:04:c0:39:b1:9f:0d:
16:5f:13:47:0f:af:93:ef:28:b8:28:04:16:ef:a6:
4a:02:22:97:0f:4f:7f:95:33:3d:8d:98:1a:38:0f:
24:0b:b2:c3:99:1f:9e:b8:f9:4e:1b:10:69:41:c2:
6c:c6:e3:46:0f:a2:65:4a:18:73:51:0c:75:d5:49:
cb:a7:d6:93:b6:f5:31:ca:30:38:24:35:ff:0e:c7:
fa:63:46:da:ee:9e:de:16:9e:21:10:5e:a9:a1:ac:
c8:6b:3e:bc:fb:18:e8:a1:02:59:2f:b6:d6:bb:85:
7d:6e:04:d8:7a:63:d6:be:da:2c:53:4a:0e:93:d6:
c8:97:90:de:58:a1:06:5f:bd:23:70:e4:3b:e9:c0:
cf:cd:96:64:14:01:67:3e:71:2e:a0:4e:c6:8a:7b:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F4:42:48:68:E1:10:18:29:14:D0:5D:C9:0B:00:67:A0:61:24:AE
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/RvRCSGjhEBgpFNBdyQsAZ6BhJK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.34.0/24
193.38.248.0/24
IPv6:
2a09:ff00:103::/48
Signature Algorithm: sha256WithRSAEncryption
59:b9:c4:f0:18:69:5f:75:a4:04:c1:3f:ca:45:c4:57:c9:9d:
2c:38:91:2c:c1:a1:16:01:e7:ff:8f:03:bf:75:3b:f0:82:ac:
af:14:c8:d4:b6:d5:5b:36:53:63:05:fb:58:6a:ec:1f:29:98:
b7:35:ab:9f:31:33:f9:05:b6:26:20:2c:26:70:c5:7f:32:87:
3b:76:a2:5f:5a:61:4b:80:dc:aa:20:02:e6:29:bb:b4:9e:23:
17:20:ce:8d:1d:1e:e4:80:52:4c:93:5e:3d:38:0b:92:e3:02:
71:71:3f:de:af:11:00:02:92:eb:03:69:a4:55:f0:40:b6:8c:
1f:5f:91:a6:63:14:c4:57:f9:ea:a5:ec:82:72:ba:a3:b2:7f:
96:59:b1:95:a4:c0:78:4e:c0:df:d7:67:bc:ca:6d:9e:2a:94:
20:d4:29:13:b5:56:87:2d:6b:d1:35:35:b8:b7:df:ed:df:6f:
d1:90:f7:6a:75:f1:59:99:88:73:6d:b6:c9:04:d1:a3:a6:57:
cd:21:56:6a:07:27:72:b8:ae:17:04:b7:88:7e:d3:ed:14:ff:
71:a2:af:d4:11:87:d9:80:4e:80:15:dc:a0:bf:bd:e5:8d:e4:
1f:88:fa:fb:9c:30:14:5e:ac:5e:57:9d:cf:83:1f:24:4d:02:
f8:af:29:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:07 2025 by rpki-client