Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/hRAGbWYguLP9Mnoj5m_pvRhV0DY.roa
File: hRAGbWYguLP9Mnoj5m_pvRhV0DY.roa (raw, json)
Hash identifier: hk2I51i33N5BlVTOnTx1roRE5SaWyBioiYPkZ/0sAv8=
Subject key identifier: 85:10:06:6D:66:20:B8:B3:FD:32:7A:23:E6:6F:E9:BD:18:55:D0:36
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2EA8DE546E715DF87CDE3A7505B4C
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/hRAGbWYguLP9Mnoj5m_pvRhV0DY.roa
Signing time: Thu 02 Jan 2025 01:48:12 +0000
ROA not before: Thu 02 Jan 2025 01:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30823
IP address blocks: 46.19.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:ea:8d:e5:46:e7:15:df:87:cd:e3:a7:50:5b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8510066d6620b8b3fd327a23e66fe9bd1855d036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:66:31:99:d4:08:f5:f6:77:8e:f0:ef:9e:a2:
df:80:bf:3e:75:b5:de:b1:6d:0c:0a:96:90:29:fd:
df:28:60:e3:c6:84:a5:61:c9:b6:c1:4d:a2:79:4a:
3c:0b:c8:3b:6f:af:2f:4f:ff:d7:66:6f:91:78:9a:
95:42:95:fe:92:ab:c3:b7:80:8c:5b:1b:fc:1f:c3:
89:11:6c:db:8b:b4:f5:41:e0:e7:40:93:5e:77:a1:
06:bf:01:26:17:79:03:8c:08:00:4a:3f:47:7b:68:
0c:db:f3:ee:bc:9e:4e:ae:c8:d8:a9:ff:05:7d:6f:
8e:22:c4:fa:82:f2:63:ad:de:80:63:b1:e6:2a:e7:
6a:7d:9d:f5:85:bd:79:a7:63:c8:0a:ab:32:1b:b0:
fb:0c:f0:b3:73:77:9a:16:b9:26:9a:a9:f7:a0:6e:
c3:c8:4d:b6:63:08:da:25:93:df:93:ea:af:c5:a8:
70:09:c4:77:75:f8:af:da:48:d2:02:de:41:07:0f:
d2:de:68:a5:81:e6:42:ad:11:ba:d6:88:76:bf:a8:
50:c7:0b:5b:07:54:a0:3b:d5:e3:d5:97:7b:de:bc:
72:64:fc:3f:d6:bd:d8:3e:1e:de:4f:f0:9c:5b:3d:
3d:c3:0c:1d:90:6d:e8:c6:27:cb:f5:53:7f:5b:55:
d1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:10:06:6D:66:20:B8:B3:FD:32:7A:23:E6:6F:E9:BD:18:55:D0:36
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/hRAGbWYguLP9Mnoj5m_pvRhV0DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.207.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:19:72:38:20:30:40:29:f4:18:8a:93:d3:83:22:28:4d:ac:
53:18:96:21:7f:ce:f9:0f:50:9e:38:be:8b:de:29:0d:13:26:
28:71:85:e7:fc:55:ad:f6:43:4c:7c:b9:18:58:1a:31:9d:26:
ed:34:b8:c9:c1:1a:b5:0c:99:f0:d5:fd:a7:b0:e7:42:ee:83:
19:c5:4a:de:15:46:e7:f1:fe:f1:80:cf:a7:2a:33:13:28:1c:
c9:c4:dd:92:08:6d:7a:bf:d1:f6:ab:54:a4:29:43:c5:39:05:
e4:a0:d0:d1:39:51:70:c9:2f:41:bd:5f:eb:97:0a:a6:a0:14:
00:1a:b9:b3:5b:e9:70:ad:8d:c6:cc:47:17:73:f0:e9:ab:ab:
53:ad:dc:01:5e:67:50:20:44:f7:be:52:52:18:a8:b3:4d:dc:
4b:a5:7e:ee:85:80:ae:44:01:c6:a3:9b:f4:12:0e:76:ff:f3:
cb:7e:ea:d6:c2:a5:12:c6:d0:a3:79:e6:61:49:54:c4:09:3f:
6b:af:c4:34:2a:5e:ad:2a:b3:8d:d3:17:dc:a0:71:1d:30:71:
20:38:34:d3:ff:c0:49:ba:63:c1:2f:26:5c:74:88:34:0d:cd:
2e:6a:c0:3a:bd:aa:0b:36:59:ae:23:7d:cc:bb:64:c1:51:62:
a3:84:b2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:32 2025 by rpki-client