Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/jElde4LN4C2i3pym4F4y91OayEs.roa
File: jElde4LN4C2i3pym4F4y91OayEs.roa (raw, json)
Hash identifier: 7gygj/Wc2hTPFuICpy0xfksrHDoNGuF9fqYNabwRgb0=
Subject key identifier: 8C:49:5D:7B:82:CD:E0:2D:A2:DE:9C:A6:E0:5E:32:F7:53:9A:C8:4B
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 04324B3C
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/jElde4LN4C2i3pym4F4y91OayEs.roa
Signing time: Sun 06 Mar 2022 20:48:50 +0000
ROA not before: Sun 06 Mar 2022 20:48:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 185.42.25.0/24 maxlen: 24
185.42.26.0/24 maxlen: 24
185.42.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70404924 (0x4324b3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Mar 6 20:48:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c495d7b82cde02da2de9ca6e05e32f7539ac84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:6b:d8:46:f8:ef:ed:7f:f1:ba:aa:16:b4:
15:e9:66:f6:02:09:97:a7:24:b9:52:3e:d8:c4:b4:
23:0e:c5:6b:93:13:76:37:90:99:24:6b:43:93:ed:
22:fb:9d:be:9b:76:89:d5:88:ed:3e:b6:38:48:93:
02:96:40:a3:47:3c:49:3b:03:30:15:d5:5e:be:7b:
63:94:0b:5f:0a:31:a3:37:e3:b0:0a:5b:50:59:29:
ba:af:5e:01:7e:80:80:e6:f3:7a:70:a9:34:14:7a:
03:58:79:cd:31:75:1e:88:b7:64:4a:61:82:4f:54:
c9:40:2f:32:c3:ce:37:f9:8d:f4:9e:02:f5:17:c4:
f4:d3:d6:b2:66:37:70:f8:d0:c7:eb:3a:95:6d:89:
c8:db:bf:e5:05:84:be:bb:79:e8:92:01:10:ee:3e:
f5:9b:4e:4b:20:cc:c2:60:cb:f3:0d:ac:26:49:bb:
92:0d:e2:93:eb:79:03:9c:23:1d:70:b5:0a:39:1f:
79:1c:13:71:89:f2:65:09:d3:f6:09:d1:d5:ac:1c:
1f:bf:d6:6a:b4:4c:30:5c:a5:69:1b:03:78:bb:4b:
20:c6:1b:4f:e2:c2:fd:71:ac:fa:05:70:6d:23:59:
41:71:2f:3d:4a:fa:d0:e3:56:8c:e6:c5:bb:b4:93:
75:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:49:5D:7B:82:CD:E0:2D:A2:DE:9C:A6:E0:5E:32:F7:53:9A:C8:4B
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/jElde4LN4C2i3pym4F4y91OayEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.25.0-185.42.27.255
Signature Algorithm: sha256WithRSAEncryption
4b:26:83:22:12:91:5c:0a:3f:41:29:cb:1b:8a:73:35:19:22:
d8:a7:60:b1:77:b6:54:4b:fa:82:fe:0c:2e:28:e8:70:0a:22:
13:8c:91:f5:aa:9b:8f:1b:88:40:af:05:51:47:8a:c2:9b:98:
3f:f1:77:d4:1e:11:4a:58:fc:77:05:78:f1:22:cf:86:a6:86:
ea:96:11:6d:11:8f:a1:3e:4d:7a:8d:5c:ba:f3:57:8d:7c:b5:
e7:e6:b4:f0:c9:b0:78:8f:fc:50:0a:87:40:8e:ae:fc:7f:35:
7c:50:83:20:49:18:68:a4:a7:85:85:90:e6:8c:b1:30:e9:2d:
22:f0:0c:25:89:ad:8a:2e:a9:eb:8b:24:ae:c3:38:39:01:82:
05:c0:1a:62:70:35:36:0f:72:73:bc:50:8a:77:c8:dd:3e:85:
30:6f:11:0e:6e:f8:d7:0b:7e:ce:61:93:a9:ec:31:73:29:1a:
4f:25:da:8e:18:5d:e2:e3:aa:be:31:fc:6e:fa:1f:5c:36:66:
43:1f:51:c9:1a:fe:42:ca:85:64:ab:ef:ae:a5:68:fe:27:9a:
e6:c8:8d:b4:7f:81:1c:30:5d:bf:9f:09:c0:0c:00:6f:49:8c:
9c:ea:c1:85:93:8a:f8:fb:50:c0:86:48:57:e2:3e:88:32:d9:
5f:fb:45:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:27:09 2025 by rpki-client