Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/TP20cqgrRS62gq18eb59UXXXu_4.roa
File: TP20cqgrRS62gq18eb59UXXXu_4.roa (raw, json)
Hash identifier: R3eXtiwBlk955gzJVNGvUpi8z8C3GRcoXeIJ9oVuG1Y=
Subject key identifier: 4C:FD:B4:72:A8:2B:45:2E:B6:82:AD:7C:79:BE:7D:51:75:D7:BB:FE
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0194266B0A7A9CA584305634A974B13AE33A
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/TP20cqgrRS62gq18eb59UXXXu_4.roa
Signing time: Thu 02 Jan 2025 09:48:56 +0000
ROA not before: Thu 02 Jan 2025 09:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151612
IP address blocks: 85.117.243.0/24 maxlen: 24
185.236.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:0a:7a:9c:a5:84:30:56:34:a9:74:b1:3a:e3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 2 09:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cfdb472a82b452eb682ad7c79be7d5175d7bbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:88:82:42:43:b9:b4:6e:68:d8:0f:16:a1:33:
6a:18:0b:de:33:96:af:d8:ee:ec:fa:d3:ab:89:cd:
52:d6:ea:2b:0f:65:0c:bf:b0:91:22:9d:53:66:7b:
77:d1:1f:29:1c:a4:75:7f:5e:79:2e:02:30:5f:88:
cb:16:10:46:68:8e:d5:46:04:d5:a2:8b:00:a8:da:
d9:c5:c5:87:27:03:83:d2:bc:74:d8:74:e9:37:bd:
d5:19:1a:0a:77:a5:ee:ca:5b:e5:eb:04:55:50:b0:
06:19:6d:aa:b4:1e:d3:e8:8f:89:c6:8c:26:0d:70:
97:51:99:aa:63:9f:fa:bc:a7:72:03:8d:8f:8d:1e:
a2:91:a8:e1:e8:59:ca:c7:18:92:c4:6a:46:cd:a2:
fd:4a:63:b4:5a:8c:db:79:e1:90:9a:a3:81:06:6c:
a4:72:cc:a6:bb:07:6d:ae:ec:64:df:5c:75:93:f6:
ff:7e:bd:e2:2c:73:9c:ff:26:dd:bf:f4:85:ed:b9:
e5:db:03:29:95:5f:a1:c4:6e:15:1f:6b:f8:54:12:
93:54:3d:7d:11:7a:58:5b:20:3f:32:87:b6:b1:e7:
b6:cb:0c:d6:28:af:33:49:18:5b:d1:9f:66:45:50:
aa:16:bb:58:20:03:9e:b5:bf:9c:a0:9b:f6:c4:63:
5e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FD:B4:72:A8:2B:45:2E:B6:82:AD:7C:79:BE:7D:51:75:D7:BB:FE
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/TP20cqgrRS62gq18eb59UXXXu_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.243.0/24
185.236.8.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:7b:51:e6:c1:36:77:48:5d:85:33:98:50:86:45:ef:6b:86:
06:a0:4a:f8:24:55:63:f9:bb:37:7b:37:2f:e7:82:6b:ca:fa:
d1:27:56:f7:5e:f6:22:71:ba:1c:ec:5e:69:f3:df:ae:40:69:
a2:b7:87:d0:05:6c:73:ab:34:57:cc:29:fe:0d:a5:7d:73:9f:
0f:bd:11:6b:60:e9:6d:f1:2d:fb:11:97:94:f7:9e:60:5c:ec:
81:3c:62:67:c6:3e:ae:07:39:d8:47:a1:10:8c:e6:fc:7c:58:
6b:bd:c0:d2:b7:9c:bb:42:ba:67:96:89:81:d9:ca:1a:c8:05:
3d:d5:48:4e:d1:d4:33:02:39:6e:73:08:22:cf:ec:7e:87:34:
ff:d3:51:dd:69:37:d1:e6:21:d4:38:8f:12:b7:fa:47:35:ec:
1a:e7:f2:c2:ad:f4:f7:3f:28:67:37:aa:4e:85:d1:82:b9:a4:
2b:be:36:87:3e:5d:68:78:48:7b:93:93:3d:05:dd:0a:90:67:
37:33:51:b7:29:3d:63:23:15:27:e6:d1:de:2e:42:d2:04:86:
f8:3a:41:6f:02:bf:52:27:6d:ba:7b:df:f2:00:be:98:c7:5a:
4d:27:32:80:de:ab:97:2b:0e:21:14:f4:d0:b6:dc:9d:74:c3:
08:e3:10:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:01 2025 by rpki-client