Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/H1WmesnGsPGxvhrpIvl23X68COY.roa
File: H1WmesnGsPGxvhrpIvl23X68COY.roa (raw, json)
Hash identifier: NWrgkD59WkzlbvqU60CxucBVP2HdE5fZ9W7KVT7TpRE=
Subject key identifier: 1F:55:A6:7A:C9:C6:B0:F1:B1:BE:1A:E9:22:F9:76:DD:7E:BC:08:E6
Certificate issuer: /CN=46ebddae6a7acee83a322a0e743a6759d85365f2
Certificate serial: 019424B3E1077916FD05F24DE3C1A11CEB99
Authority key identifier: 46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/H1WmesnGsPGxvhrpIvl23X68COY.roa
Signing time: Thu 02 Jan 2025 01:49:15 +0000
ROA not before: Thu 02 Jan 2025 01:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212346
IP address blocks: 185.217.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e1:07:79:16:fd:05:f2:4d:e3:c1:a1:1c:eb:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ebddae6a7acee83a322a0e743a6759d85365f2
Validity
Not Before: Jan 2 01:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f55a67ac9c6b0f1b1be1ae922f976dd7ebc08e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:87:87:db:af:4c:32:08:81:f6:b5:97:13:b7:
c9:e9:72:22:ca:3c:98:43:3e:fb:70:63:d9:62:6d:
ff:77:7c:b4:79:7e:86:20:51:d9:7e:24:61:08:44:
3e:81:e6:49:8c:09:59:d8:e8:b2:37:58:fe:be:db:
33:af:d0:89:35:e0:23:0e:b5:54:23:8f:8b:e2:fe:
60:d3:9b:bf:3e:4b:9b:94:d2:4f:c7:29:e2:b5:4a:
8b:11:95:71:1e:9d:e7:7f:9c:15:6b:55:9b:9a:47:
45:52:35:2c:33:0a:41:5d:f5:4b:d9:07:87:51:b0:
92:db:49:06:94:e1:d6:a7:68:46:14:09:fe:f8:2d:
87:27:38:1a:06:04:55:70:58:cb:f7:70:45:54:84:
82:41:d8:d6:88:e7:9e:bc:80:a8:94:aa:14:3a:5a:
ff:a8:50:84:4f:32:8c:8d:b9:35:d0:72:cc:b4:f3:
d3:58:97:6a:5d:b6:66:8c:53:b8:b3:b5:f4:69:21:
41:9d:5b:89:62:0d:ff:ae:0f:65:8f:f1:88:61:d6:
8f:53:4e:f2:a8:24:c8:45:46:5e:0c:4d:0a:5f:8f:
97:7d:64:ba:f3:f0:4d:4c:62:06:96:38:24:9b:71:
1b:8c:f0:93:a4:3b:dc:9c:0b:47:29:ae:24:e8:e9:
83:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:55:A6:7A:C9:C6:B0:F1:B1:BE:1A:E9:22:F9:76:DD:7E:BC:08:E6
X509v3 Authority Key Identifier:
keyid:46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/H1WmesnGsPGxvhrpIvl23X68COY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.36.0/24
Signature Algorithm: sha256WithRSAEncryption
26:11:40:cd:be:47:91:21:1d:b2:76:9f:cb:a4:de:9a:fe:33:
21:8f:fe:87:8d:2e:86:c3:73:26:09:b9:da:ae:37:73:ba:fe:
71:c4:c6:aa:10:a4:a6:36:2b:9f:0f:21:d1:41:1a:9a:09:59:
b2:bb:2d:32:6b:70:cf:94:54:3a:f9:6f:42:3f:d4:4c:43:6e:
f6:74:8f:af:cf:e0:1d:f5:13:f1:63:ab:04:64:09:1a:06:86:
90:27:54:30:fe:4f:94:3a:8c:f2:e3:be:c4:8b:4e:49:94:1a:
cc:83:d5:b2:c7:ef:4d:62:40:1e:d3:f5:bd:89:b0:53:2d:3f:
f6:66:37:a4:95:14:92:44:ba:59:e3:e4:48:1b:cd:2d:3e:7b:
7e:e2:ea:aa:37:a2:86:90:f1:b7:0c:94:01:73:f0:da:b2:06:
f1:e2:46:dc:d3:9e:64:3d:5b:36:06:cd:b2:06:9f:fd:af:8a:
8f:e4:ff:b4:9f:81:d4:e0:d2:7a:0a:a3:69:4c:4d:3b:4c:ac:
e5:e9:41:45:b3:14:f5:5a:6d:92:db:f8:04:78:f9:71:dc:12:
89:e2:9e:8d:c2:a9:40:fa:56:e7:29:c0:19:3d:2d:60:4e:5f:
d4:98:da:53:80:eb:0d:81:67:ba:33:a9:d9:0e:87:27:e0:df:
9b:22:2d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:36:20 2025 by rpki-client