Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/cW1dQczT5TIbX2h9QMnQvvvgst0.roa
File: cW1dQczT5TIbX2h9QMnQvvvgst0.roa (raw, json)
Hash identifier: LoF7bKHNx/b/rqvPxychY/FV7Mf6p5uxTp1lxzEa+Sg=
Subject key identifier: 71:6D:5D:41:CC:D3:E5:32:1B:5F:68:7D:40:C9:D0:BE:FB:E0:B2:DD
Certificate issuer: /CN=dfce961ae0e1618e7499c88a22559bb2025022ad
Certificate serial: 0194274860A4FCF07CB9144863535EA30149
Authority key identifier: DF:CE:96:1A:E0:E1:61:8E:74:99:C8:8A:22:55:9B:B2:02:50:22:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/cW1dQczT5TIbX2h9QMnQvvvgst0.roa
Signing time: Thu 02 Jan 2025 13:50:42 +0000
ROA not before: Thu 02 Jan 2025 13:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28905
IP address blocks: 46.30.64.0/21 maxlen: 21
185.174.44.0/22 maxlen: 22
213.226.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:60:a4:fc:f0:7c:b9:14:48:63:53:5e:a3:01:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfce961ae0e1618e7499c88a22559bb2025022ad
Validity
Not Before: Jan 2 13:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=716d5d41ccd3e5321b5f687d40c9d0befbe0b2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:23:cc:5d:3c:2e:81:36:78:cc:5f:2f:75:
be:45:f2:c1:3a:7c:46:87:53:4e:e4:b0:b7:d5:4a:
9a:b9:b0:45:71:b2:40:f2:d6:5b:97:81:3a:a9:f4:
36:a3:1f:bf:56:eb:bb:7e:d0:85:06:e3:2a:d9:92:
74:91:da:c8:43:65:52:7e:85:2e:5c:56:51:43:97:
9f:51:a1:b6:b1:87:67:44:21:1f:9b:e6:d4:1b:24:
b5:4c:6f:7c:65:78:ea:2d:22:09:9f:af:21:8b:d7:
e0:9b:9f:98:7d:52:4d:5e:a0:e2:09:87:41:f8:35:
0f:87:41:f5:35:6c:8a:62:da:1b:a0:e8:62:c8:eb:
59:66:61:39:db:83:df:21:6e:dc:d4:fd:bc:ba:cc:
81:c5:21:e9:0e:6d:67:8d:ab:61:20:ba:69:63:c6:
cb:ac:30:39:6b:99:56:b5:aa:80:3b:6a:a7:bc:54:
bf:5a:33:cd:50:31:dd:fc:f5:9a:ec:6d:76:ee:79:
95:70:c1:db:7f:33:7c:7c:77:23:dd:1c:26:52:42:
86:f9:be:51:66:9d:00:c5:1d:1e:28:5a:3b:43:b4:
ce:a8:89:02:d2:6a:04:4a:d9:d4:9f:12:c9:30:7c:
e4:92:d3:10:53:e1:a0:78:cc:aa:fa:24:be:9f:59:
85:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6D:5D:41:CC:D3:E5:32:1B:5F:68:7D:40:C9:D0:BE:FB:E0:B2:DD
X509v3 Authority Key Identifier:
keyid:DF:CE:96:1A:E0:E1:61:8E:74:99:C8:8A:22:55:9B:B2:02:50:22:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/cW1dQczT5TIbX2h9QMnQvvvgst0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.64.0/21
185.174.44.0/22
213.226.192.0/20
Signature Algorithm: sha256WithRSAEncryption
32:68:0a:55:e9:64:e4:9c:24:ee:a5:ee:33:51:ea:c7:9f:f8:
ae:ee:43:a8:92:e7:e2:e7:24:c2:61:5a:0d:09:27:c0:15:93:
c3:23:df:98:48:f6:53:45:d2:87:07:fe:b7:d8:83:5b:5c:63:
b2:db:67:6b:1a:e4:44:b3:5e:b8:0a:8e:ed:d8:cd:a7:0a:35:
a1:38:26:28:41:ff:63:71:d0:ba:68:9d:17:25:75:85:98:75:
0b:c4:81:d0:e2:4e:a1:83:a0:e5:12:08:a0:81:76:2e:f6:ef:
6a:cb:e7:de:28:2f:8e:c9:14:07:4c:94:50:96:65:10:6b:7d:
1a:b5:c8:98:30:e4:9f:63:01:75:37:bd:03:7a:a8:15:3e:3c:
b4:37:36:13:ae:05:43:f2:fa:23:85:58:5e:8d:e9:0b:93:38:
66:3b:8b:74:35:86:e5:74:37:be:79:43:f3:e3:d9:1c:ab:23:
b9:87:46:02:5f:a7:47:a3:28:78:ef:8e:58:d3:94:30:1c:10:
ce:c3:d7:f9:fd:bc:88:7b:a4:bc:9c:f7:08:f2:da:93:cb:80:
d7:71:b9:5f:24:89:6f:a6:af:30:e4:87:4d:57:cc:76:2e:3e:
ea:f8:28:44:92:3e:08:ee:8b:06:59:7c:e8:3a:1d:8d:2e:f1:
24:f9:50:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:15 2025 by rpki-client