Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/1--aJOHbG2HarYQRIFHME9kGdrI8.roa
File: 1--aJOHbG2HarYQRIFHME9kGdrI8.roa (raw, json)
Hash identifier: e0PFqEIF1I8KQrFh+AG+JLWzJuU3cKKiEgrK5TdCBkw=
Subject key identifier: FB:E6:89:38:76:C6:D8:76:AB:61:04:48:14:73:04:F6:41:9D:AC:8F
Certificate issuer: /CN=f676887f22ecda8d074815a0bcf91faf81942abd
Certificate serial: 01942669F97304344CE2D63E90FCC4D7182B
Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/1--aJOHbG2HarYQRIFHME9kGdrI8.roa
Signing time: Thu 02 Jan 2025 09:47:46 +0000
ROA not before: Thu 02 Jan 2025 09:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44694
IP address blocks: 46.16.38.0/24 maxlen: 24
2a14:6480::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:69:f9:73:04:34:4c:e2:d6:3e:90:fc:c4:d7:18:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd
Validity
Not Before: Jan 2 09:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbe6893876c6d876ab610448147304f6419dac8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:51:0f:16:26:e2:44:e2:54:53:6b:85:60:6b:
01:51:0c:ca:50:de:e7:aa:b2:47:b1:6c:6f:35:14:
12:6d:97:07:fb:58:af:22:73:56:c1:e3:a3:1a:69:
1e:aa:b0:d6:a1:dc:e0:f5:23:60:e9:13:7a:02:b6:
68:f0:b9:c5:f6:9e:cd:94:b4:6c:9f:cd:7f:41:57:
69:fd:62:6f:52:a0:c5:59:a9:75:3d:5a:87:55:6b:
1d:37:83:85:05:c8:c9:0d:c8:f3:c3:ed:aa:22:ca:
dc:4d:04:70:ef:29:a7:31:53:56:36:10:d4:36:b3:
3c:35:b7:c5:90:77:e9:3b:d7:34:21:4d:71:8d:00:
41:cc:76:48:f6:6e:b5:38:74:0c:fc:fb:09:54:95:
84:cc:2e:00:2f:04:c8:6b:33:da:56:e6:c3:d9:8f:
3c:87:17:49:b2:59:bf:9a:6a:9b:4b:41:b6:6c:ac:
3d:ca:7e:2d:5d:54:6b:a7:9e:8b:cb:3e:7d:61:6b:
4b:bc:c5:0a:94:7b:a0:8a:23:70:ff:22:c3:e7:9d:
b1:33:41:69:15:97:92:50:4b:a8:83:d8:dc:fc:5b:
d5:16:70:21:11:21:ba:12:e3:4a:87:6b:75:a0:42:
fb:d4:24:b3:f6:ac:ab:9f:5e:02:79:92:6e:65:db:
1c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E6:89:38:76:C6:D8:76:AB:61:04:48:14:73:04:F6:41:9D:AC:8F
X509v3 Authority Key Identifier:
keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/1--aJOHbG2HarYQRIFHME9kGdrI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.38.0/24
IPv6:
2a14:6480::/33
Signature Algorithm: sha256WithRSAEncryption
28:3e:19:2c:6c:04:95:6a:02:be:e6:c9:04:b9:79:d4:2f:57:
59:cb:98:af:91:99:c8:ab:0c:bd:e6:f2:4b:3f:f7:fe:9e:ee:
b6:8d:4d:37:88:ea:ab:20:4d:82:01:30:9d:d6:14:bd:d8:71:
ee:ba:46:17:6b:8f:f7:7e:6c:9c:ae:19:13:e9:0a:e1:92:cc:
6b:eb:d6:25:30:2e:a0:97:54:38:b5:2c:56:2c:e0:4a:ec:c2:
a9:f2:74:7b:12:9b:3a:87:45:0e:8e:20:29:83:ce:87:c5:9f:
5b:42:ab:5e:d9:69:f7:06:f3:0f:8c:74:4b:3f:27:5c:9e:56:
a2:98:8a:ec:64:52:e2:7a:49:f2:95:ac:d3:63:f2:60:0c:5c:
4c:de:16:b2:95:e9:f3:46:a9:8b:bb:99:f0:d9:e9:b8:14:24:
99:d2:3a:41:50:a6:32:94:fa:d4:7e:7b:c1:3f:6a:0c:4f:79:
81:93:7a:7f:3b:1a:f2:7c:f7:8f:b1:1f:83:5a:4b:dd:e6:1d:
a5:73:b7:72:57:77:0d:93:0f:f1:c3:08:89:3b:78:eb:a2:63:
fd:0a:40:2f:7e:c0:8a:77:27:33:61:91:fa:5c:a2:e2:a8:87:
77:18:2c:7d:da:28:d4:9b:35:46:d4:d4:f2:57:97:b1:a9:c4:
c1:1d:54:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:56:40 2025 by rpki-client