Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/4gz_E19lt_WQtnrzaUTS2wLE9kU.roa
File: 4gz_E19lt_WQtnrzaUTS2wLE9kU.roa (raw, json)
Hash identifier: EPYfgGTHeJ3gz/LYRQ9uBlJ8BFrAwAfRiJVJRAOGoZE=
Subject key identifier: E2:0C:FF:13:5F:65:B7:F5:90:B6:7A:F3:69:44:D2:DB:02:C4:F6:45
Certificate issuer: /CN=f9951ba56329323b4c60f620d6a7391e707b5556
Certificate serial: 019422FB8CA6C94F184010D851E7FE0F66BE
Authority key identifier: F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/4gz_E19lt_WQtnrzaUTS2wLE9kU.roa
Signing time: Wed 01 Jan 2025 17:48:18 +0000
ROA not before: Wed 01 Jan 2025 17:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31017
IP address blocks: 194.102.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:8c:a6:c9:4f:18:40:10:d8:51:e7:fe:0f:66:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9951ba56329323b4c60f620d6a7391e707b5556
Validity
Not Before: Jan 1 17:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e20cff135f65b7f590b67af36944d2db02c4f645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:15:26:33:12:d3:01:6a:f0:64:9d:2b:71:
30:0b:34:f3:62:08:10:dc:c4:e5:ee:e6:d1:90:5d:
19:a2:f4:7b:c8:11:d4:6a:e9:54:61:b5:36:4e:f1:
66:1d:d2:2c:0b:dd:34:27:6d:09:ce:77:b3:28:6c:
b6:68:f2:47:ee:97:1a:d8:42:78:8e:f2:09:c5:37:
16:0b:02:90:99:51:a3:67:76:e6:5c:a1:5a:43:91:
b9:a1:0b:27:f8:ee:22:c2:a0:65:f4:38:43:a3:f5:
20:a3:e5:4e:c0:66:1b:69:89:d9:d0:6c:db:06:8d:
49:3e:1b:05:3f:09:ae:51:de:3d:f3:ee:fe:5d:46:
52:2e:1f:b9:52:6f:f9:6d:73:58:54:3d:8b:33:3f:
fc:80:fe:4c:60:2a:e3:ea:d5:fa:e5:25:2c:fd:ac:
40:5c:17:a7:0b:b3:ed:cd:62:32:35:51:9d:b4:6d:
50:95:eb:d7:84:72:82:9b:e4:30:85:48:e6:d4:2a:
57:10:78:f4:df:e0:ce:65:1c:a3:54:a0:c9:07:9e:
2a:a7:a7:be:9c:af:0b:9e:8d:d0:b1:5a:48:7e:34:
8d:1c:9f:54:5d:e1:1c:d3:3d:2c:9f:71:ea:e1:58:
e2:ea:ef:ca:6c:b5:6f:0c:fb:3c:a7:a3:b0:b1:88:
97:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0C:FF:13:5F:65:B7:F5:90:B6:7A:F3:69:44:D2:DB:02:C4:F6:45
X509v3 Authority Key Identifier:
keyid:F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/4gz_E19lt_WQtnrzaUTS2wLE9kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.194.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:8e:80:b6:08:f3:3e:64:13:5d:c0:a4:74:7b:63:a3:5b:16:
5c:62:fe:43:bc:f8:12:0b:0a:49:f9:45:b0:1b:e0:ec:83:47:
3a:81:bf:62:5a:fd:4e:e9:38:77:8f:1e:00:27:b2:d5:71:5e:
5a:30:23:d8:d6:e4:e9:3b:42:ab:a2:a1:3d:f1:61:1d:f1:57:
71:74:17:ed:e6:a2:6b:40:7b:82:5d:7a:6a:a5:45:bf:35:93:
2d:dc:ff:29:df:ce:96:2a:92:fa:33:4c:6c:2e:32:29:c1:3c:
e4:46:ee:52:a5:4c:25:0d:32:a1:e2:3f:59:87:45:ee:87:8a:
04:b5:59:4f:e4:8f:fa:66:5c:94:37:13:e6:6f:39:63:68:00:
01:2e:eb:16:e9:da:24:d6:ab:0c:72:2b:0d:26:50:fc:58:e4:
34:b0:57:4c:87:87:3b:5a:d7:a5:07:21:c5:15:7c:fa:c4:5f:
ff:49:ec:69:c0:67:1f:85:9a:ba:f0:a0:56:29:73:08:d2:55:
18:3d:25:c3:f1:c3:f3:71:95:cd:4c:f2:ed:0a:a9:1d:2f:c6:
d1:28:14:46:3e:d0:56:22:92:a1:97:9a:e9:77:3e:94:95:b7:
a6:a4:ae:a1:a8:82:65:85:25:b5:98:77:7d:94:4e:82:36:f1:
d3:21:90:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:42 2025 by rpki-client on console.sobornost.net