Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/4xfLpgjd4Enxc-qc8nof3OkbJKI.roa
File: 4xfLpgjd4Enxc-qc8nof3OkbJKI.roa (raw, json)
Hash identifier: qMoNzrHzj4dbd+webpPz0KwxOvGmhXmFlkGqK08FyRc=
Subject key identifier: E3:17:CB:A6:08:DD:E0:49:F1:73:EA:9C:F2:7A:1F:DC:E9:1B:24:A2
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 01941FFAB70B943AB6DFC4D1241D825C66AD
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/4xfLpgjd4Enxc-qc8nof3OkbJKI.roa
Signing time: Wed 01 Jan 2025 03:48:32 +0000
ROA not before: Wed 01 Jan 2025 03:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209505
IP address blocks: 185.250.9.0/24 maxlen: 24
185.250.10.0/23 maxlen: 23
2a0b:9400:1000::/48 maxlen: 48
2a0b:9401::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b7:0b:94:3a:b6:df:c4:d1:24:1d:82:5c:66:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Jan 1 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e317cba608dde049f173ea9cf27a1fdce91b24a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:dd:7f:38:af:ba:04:46:ff:57:22:13:a5:
98:54:2f:6c:46:ba:4c:2b:b8:49:82:3a:11:4b:0e:
e3:fc:8c:39:90:62:01:8b:e4:84:6e:55:aa:38:dd:
34:76:b0:70:b7:25:9b:9c:3c:58:07:91:c5:9b:77:
47:f2:47:70:a7:c5:a7:fc:62:87:96:58:e3:e1:22:
51:f2:06:01:6a:95:54:cf:5e:c1:3e:c4:f8:fb:f3:
1d:76:f2:8d:5e:d1:dc:37:d2:94:f8:6d:86:56:94:
e2:ee:3e:ec:0a:77:f4:89:a5:c1:dd:eb:d6:bf:f9:
60:3f:bc:77:be:e6:e4:ad:bf:d0:f9:69:1a:5f:d5:
69:98:54:8c:b9:90:62:df:5c:1d:c6:56:57:06:0c:
31:49:68:8e:a9:02:fa:f1:10:d4:5e:5f:5e:a0:17:
5c:10:9c:db:cf:da:cc:8a:28:96:4c:92:07:70:7d:
9d:b4:e4:6f:8c:bd:23:e6:08:27:13:72:0f:0e:88:
9f:47:e4:b6:b0:b0:e3:3f:b0:14:0b:f5:ce:47:e4:
f7:f7:f6:3c:9f:4e:24:5b:8d:87:b2:03:66:02:de:
3c:a1:37:0e:78:e9:7a:ba:0d:e5:ea:2f:fb:ad:16:
87:61:01:84:09:2a:8f:3e:25:fd:94:34:7f:97:6a:
4a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:17:CB:A6:08:DD:E0:49:F1:73:EA:9C:F2:7A:1F:DC:E9:1B:24:A2
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/4xfLpgjd4Enxc-qc8nof3OkbJKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.9.0-185.250.11.255
IPv6:
2a0b:9400:1000::/48
2a0b:9401::/32
Signature Algorithm: sha256WithRSAEncryption
a2:65:de:e3:b4:ef:e7:58:74:1f:04:f3:60:d1:d7:4c:7e:49:
d3:80:70:a3:bc:69:fa:c1:f9:11:5d:33:7c:39:a6:bc:76:82:
fb:07:12:1c:81:01:1c:73:ba:dd:1b:9d:0a:3e:a0:4b:a4:c1:
24:bd:4e:df:82:39:14:1c:2f:1b:f0:6a:e8:f2:f0:1a:d7:8a:
fc:18:ca:03:8e:3b:1a:cf:31:b9:61:df:d6:b7:cb:ff:cd:94:
43:10:1f:28:b8:fd:85:b1:88:54:8e:ab:7e:bc:8d:20:26:9e:
77:79:ba:23:f9:86:22:78:dc:75:97:4e:02:74:ae:e8:44:c3:
53:52:bc:18:da:e1:18:be:28:81:de:eb:ad:27:c3:42:f6:a5:
b9:0f:47:32:c8:b2:2e:b8:6c:aa:1d:f7:e7:65:92:25:14:7c:
cb:44:f9:ef:1c:77:41:90:58:52:1b:1e:02:32:f1:94:1d:94:
de:00:fb:cb:1b:be:7b:92:79:50:e7:fa:a6:6d:11:c7:5c:c5:
e2:d3:5f:63:1f:29:60:13:de:14:31:43:86:d6:b0:18:8e:2e:
82:97:0d:d1:49:ca:6b:87:97:ea:8c:8e:af:3a:c4:0b:2b:c7:
81:74:60:4b:5d:3a:2b:be:f5:ae:cd:e8:52:77:f3:11:18:e1:
8a:f2:08:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:03 2025 by rpki-client on console.sobornost.net