Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T46eT9zSYH6URoM2Ax_k7Yqlvm0.roa
File: T46eT9zSYH6URoM2Ax_k7Yqlvm0.roa (raw, json)
Hash identifier: p7kOptu0n/Z95hIwZVAQ4UU0Tcx07mXU3vGZb5npLhU=
Subject key identifier: 4F:8E:9E:4F:DC:D2:60:7E:94:46:83:36:03:1F:E4:ED:8A:A5:BE:6D
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0194851707AB4E9AE3710EABCE6C2F85CB8E
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T46eT9zSYH6URoM2Ax_k7Yqlvm0.roa
Signing time: Mon 20 Jan 2025 19:01:06 +0000
ROA not before: Mon 20 Jan 2025 19:01:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397423
IP address blocks: 193.38.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:85:17:07:ab:4e:9a:e3:71:0e:ab:ce:6c:2f:85:cb:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 20 19:01:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f8e9e4fdcd2607e94468336031fe4ed8aa5be6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:f0:c3:96:5a:d0:cd:22:20:3f:b2:5a:da:
80:64:2d:66:04:b0:c3:d1:f4:96:e8:0a:c3:d8:b0:
86:54:75:13:26:65:49:b3:11:f8:93:5e:4f:e3:bf:
f4:d6:72:df:54:c8:5f:11:45:06:f3:a8:60:a8:04:
8c:bd:7e:02:54:eb:12:77:ed:af:0f:a9:a3:60:35:
f1:d4:3d:ba:df:21:57:5a:dc:93:b8:00:7f:e0:d7:
6a:14:74:76:9a:a0:c2:0e:83:91:8c:35:77:3b:1a:
17:92:17:13:d9:18:d6:56:f7:f1:f2:bd:46:58:55:
da:1d:25:7f:ac:1d:18:62:22:32:27:e2:37:90:5f:
41:b7:4d:25:ec:3c:cf:24:05:8e:a5:59:04:9e:f0:
09:09:b4:d2:6d:86:a4:ac:8e:60:83:e3:45:23:6b:
8c:32:92:0a:53:9f:75:9d:db:dd:cd:5e:af:c2:61:
46:fc:10:f9:ce:ff:01:c1:f2:a9:99:7e:ae:22:f9:
fe:19:f3:57:26:1e:e8:70:a8:ad:70:15:eb:fd:3c:
75:f6:a0:af:74:7a:0e:33:9b:79:34:d4:8d:3f:9b:
c7:48:71:4c:75:1a:fe:77:d2:ba:ef:af:9a:22:14:
f4:77:dd:09:67:08:79:68:81:ba:f7:f5:2b:56:69:
03:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8E:9E:4F:DC:D2:60:7E:94:46:83:36:03:1F:E4:ED:8A:A5:BE:6D
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T46eT9zSYH6URoM2Ax_k7Yqlvm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.249.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:06:44:56:09:a9:39:00:4c:7a:99:b3:a5:9e:b3:18:37:68:
f9:46:af:5e:b0:d4:17:70:34:bc:cd:3c:03:2d:ea:93:f1:d6:
6c:56:3c:3a:2d:df:16:7f:15:6d:bc:3e:f8:45:ac:6c:1f:48:
44:bc:6a:0b:85:77:5c:87:24:dd:6f:5e:84:78:22:cd:c5:07:
e5:6e:4a:c0:59:72:09:63:0f:ef:92:5a:41:ab:75:60:ec:59:
d3:ae:09:ab:4b:a0:71:95:62:25:05:97:eb:c1:d5:02:f0:da:
1f:4d:e2:10:88:dc:06:e5:0d:b3:e4:48:8c:c1:78:a5:b8:8c:
e7:fd:54:42:d3:d8:11:b3:63:9d:d2:d6:0d:fa:6d:e1:7c:70:
ad:85:74:77:70:95:3f:f4:80:c9:ff:c7:6e:1d:0f:58:6a:91:
c4:31:f3:c6:e7:54:56:2f:8c:65:60:d4:20:68:30:72:bf:df:
40:ac:13:a9:25:07:e5:ed:a8:69:20:7d:09:08:cb:a2:a3:dd:
12:da:e3:90:70:c0:6d:7f:4d:c0:3a:60:2d:69:0f:84:5a:33:
82:6e:50:45:a0:7b:86:8b:f0:56:92:64:4b:15:86:df:27:8b:
d3:f1:0d:96:e3:08:bf:0a:ea:6f:e9:ac:bf:1b:b3:cc:0e:85:
b6:46:c9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:38:24 2025 by rpki-client