Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/1-FAoR0vAZm3dzG0um_3k65SL5TI.roa
File: 1-FAoR0vAZm3dzG0um_3k65SL5TI.roa (raw, json)
Hash identifier: Z7jt+DdbWf3pwnfnzk8lFhhbswv5u6TZqI6guWDiRjQ=
Subject key identifier: F8:50:28:47:4B:C0:66:6D:DD:CC:6D:2E:9B:FD:E4:EB:94:8B:E5:32
Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Certificate serial: 019421B1B180E84AEBC3C270976D55FC34D0
Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/1-FAoR0vAZm3dzG0um_3k65SL5TI.roa
Signing time: Wed 01 Jan 2025 11:48:00 +0000
ROA not before: Wed 01 Jan 2025 11:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44740
IP address blocks: 89.46.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b1:80:e8:4a:eb:c3:c2:70:97:6d:55:fc:34:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Validity
Not Before: Jan 1 11:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f85028474bc0666dddcc6d2e9bfde4eb948be532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b6:22:30:59:2e:9a:ea:9b:51:41:f2:65:87:
32:fe:16:52:d0:45:31:e7:1a:02:e6:4d:ed:58:8c:
62:9d:a4:06:1d:5b:42:6f:ff:5d:89:2a:f2:25:30:
45:31:b4:66:34:46:cf:3d:d3:14:60:da:08:08:05:
0d:1f:c4:c9:aa:4f:fd:1d:20:af:2a:0f:38:79:c3:
9a:9d:36:26:12:90:03:3a:28:15:71:55:e7:1a:59:
70:6c:8a:dc:6a:da:ce:2b:76:16:1d:0b:97:a3:dd:
55:cc:cb:29:69:96:4b:b2:48:de:33:68:83:6e:c2:
ac:0a:46:65:c3:e8:57:b8:b2:e9:91:d7:ae:0b:85:
69:05:77:00:cf:66:70:aa:89:31:61:55:e9:b7:ad:
db:28:d4:75:1d:12:b2:38:f6:69:93:b3:62:37:74:
c7:09:fe:e7:9d:3c:19:39:4c:a9:53:82:4b:44:c2:
8f:d1:b4:16:52:f0:55:83:35:a4:81:de:6c:bf:a9:
22:f3:5d:d0:c7:67:76:36:05:b6:16:2c:70:29:93:
3e:07:19:33:e3:94:e2:79:8c:64:6d:0b:63:88:5f:
85:d5:e3:fa:c4:27:82:5a:2a:3d:8a:2b:6b:8a:82:
5c:55:a0:1f:f7:e2:82:9b:2a:e0:c2:2f:0c:97:17:
ad:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:50:28:47:4B:C0:66:6D:DD:CC:6D:2E:9B:FD:E4:EB:94:8B:E5:32
X509v3 Authority Key Identifier:
keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/1-FAoR0vAZm3dzG0um_3k65SL5TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.245.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:93:19:45:75:47:82:54:81:38:0b:8a:54:dd:43:8c:27:49:
38:68:b8:9f:f4:8e:05:3f:92:47:66:40:46:a2:e2:5e:22:7c:
53:8f:27:40:9a:a9:60:8c:08:38:b9:4f:3d:24:87:83:58:3f:
43:a6:ea:54:31:96:63:59:12:3c:31:ab:d3:d4:ff:e6:15:f8:
03:43:d6:08:ae:58:fb:7b:f6:7b:50:13:10:96:a1:e4:ea:b6:
84:fa:3a:f0:3e:17:6a:dc:45:49:0a:df:b4:0f:b1:c7:46:09:
a0:a7:cf:2b:48:51:d2:7f:85:0c:c5:56:6f:66:70:0e:b1:36:
11:81:96:f7:fa:97:4d:3b:a0:d8:fc:18:39:64:31:c7:4d:c0:
6c:4c:b4:1e:d2:b1:1b:d8:7f:0b:da:77:dd:87:0a:48:b5:8b:
69:22:47:b5:5b:81:eb:10:d2:5e:75:7b:c0:1c:c3:93:7c:87:
3c:b0:e1:9b:8e:0d:11:4c:23:bb:3f:81:23:21:e7:55:f6:a7:
af:08:cb:69:e9:db:7a:34:0f:a2:13:b9:7a:ab:36:96:1f:ef:
af:aa:fe:3f:40:7b:b8:cf:56:28:42:df:b5:47:d8:0b:0a:54:
6a:de:63:e0:76:c1:fe:27:2c:1f:6e:15:5a:61:dd:e1:e5:ef:
96:00:f6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:17 2025 by rpki-client