Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/pPvNW_FjjB8IVvvOxts_XCA2Mls.roa
File: pPvNW_FjjB8IVvvOxts_XCA2Mls.roa (raw, json)
Hash identifier: YljUAeMCIRCHABINDqpaynGVTLqLA/H2A6irIYGG7BY=
Subject key identifier: A4:FB:CD:5B:F1:63:8C:1F:08:56:FB:CE:C6:DB:3F:5C:20:36:32:5B
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 0194236934E461751D6946E71145391C5D37
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/pPvNW_FjjB8IVvvOxts_XCA2Mls.roa
Signing time: Wed 01 Jan 2025 19:48:04 +0000
ROA not before: Wed 01 Jan 2025 19:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44979
IP address blocks: 185.111.4.0/24 maxlen: 24
185.111.5.0/24 maxlen: 24
185.111.6.0/24 maxlen: 24
185.111.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:34:e4:61:75:1d:69:46:e7:11:45:39:1c:5d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Jan 1 19:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4fbcd5bf1638c1f0856fbcec6db3f5c2036325b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ba:bd:76:37:f8:41:1f:ef:5e:3a:4f:3a:a3:
82:5d:b0:38:b2:a6:3c:e2:c1:c3:bb:81:64:66:6d:
15:0d:0f:5f:91:31:ad:e7:d9:4d:30:a0:72:ff:e3:
a9:8f:b5:48:1a:d9:3d:cf:99:f6:6c:6a:f7:d5:0a:
6b:39:5c:8d:bf:cc:3c:b4:9f:ef:d7:02:78:01:4f:
74:24:42:d3:33:64:31:e8:59:ec:fb:3c:49:0d:7e:
cb:25:f0:94:c9:00:e1:7b:dc:89:99:23:09:67:50:
cb:18:38:ab:f2:02:60:d7:ee:2f:11:f5:06:4b:c8:
b2:0f:d9:38:6a:4b:07:54:17:77:fa:0b:0f:78:08:
d8:51:88:65:61:6d:e6:de:c0:0c:b1:2b:15:49:5b:
84:1b:c1:57:65:47:58:25:48:35:96:f5:8e:02:ac:
c0:e5:a7:c2:3e:d3:a6:97:11:43:42:21:11:37:30:
22:3c:2b:3d:ab:23:4c:46:5c:16:f2:8c:a1:ca:74:
cd:5f:15:74:5e:f0:9a:72:ae:ed:49:47:76:f5:ff:
a6:27:2b:a0:0f:21:95:00:ff:8f:fd:ee:2e:e4:ff:
54:18:e0:2d:31:b8:31:58:24:28:28:cc:c8:75:5f:
16:a9:79:94:3a:95:ba:6d:7c:bb:6e:5e:69:47:dc:
64:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FB:CD:5B:F1:63:8C:1F:08:56:FB:CE:C6:DB:3F:5C:20:36:32:5B
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/pPvNW_FjjB8IVvvOxts_XCA2Mls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.4.0/22
Signature Algorithm: sha256WithRSAEncryption
42:6c:49:a2:cf:70:03:5f:8b:30:2e:72:a0:59:8a:b6:81:3a:
bb:d7:46:34:dc:9a:3b:2d:6c:b0:b7:dc:d2:ad:e1:64:d0:c0:
16:71:ca:db:ec:7c:f4:69:b8:78:88:c9:e0:92:79:6e:6a:0f:
30:8e:5d:53:4a:99:3e:18:29:a3:6d:1d:53:10:ac:f3:be:0b:
f5:a4:7e:27:83:6c:3c:03:0d:b8:10:77:b2:cb:1a:1e:12:44:
3c:bc:ac:f1:65:f1:16:e9:42:05:1a:9b:53:19:c2:f4:7e:02:
a8:ea:7c:71:6f:4c:61:f9:4c:e2:85:87:a6:97:79:cd:63:07:
d7:ea:02:b3:68:c1:b7:2f:c1:27:9c:6b:e1:0f:76:a7:73:fb:
58:1a:28:3d:7e:9b:58:8e:29:f9:63:cc:5b:bd:77:08:ed:d0:
e9:75:88:5f:d1:31:3a:20:32:6f:bf:e3:91:d5:d2:f3:ce:9d:
42:eb:03:4f:47:78:98:ae:28:46:d4:f4:60:15:7f:9a:ea:d6:
0e:98:01:94:16:c3:31:63:b7:07:17:d8:f0:4c:76:ff:9b:da:
48:1d:7b:eb:a4:0e:8b:21:8d:4b:0f:a1:9a:5e:14:8d:6c:81:
d9:87:1e:eb:3d:4b:fb:30:b2:27:70:2c:31:73:fa:1e:e3:d3:
a6:e2:0c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:43 2025 by rpki-client on console.sobornost.net