Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/ix48MvDGuyMGC7SsCyq5CBbj9_U.roa
File: ix48MvDGuyMGC7SsCyq5CBbj9_U.roa (raw, json)
Hash identifier: TdU/FjmcGDmmVtUcG0hSM2P6GM5lo+c3VUYtonFIPUY=
Subject key identifier: 8B:1E:3C:32:F0:C6:BB:23:06:0B:B4:AC:0B:2A:B9:08:16:E3:F7:F5
Certificate issuer: /CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
Certificate serial: 019424B3C51FA6CF74730F1FF71B73C48AAE
Authority key identifier: DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/ix48MvDGuyMGC7SsCyq5CBbj9_U.roa
Signing time: Thu 02 Jan 2025 01:49:08 +0000
ROA not before: Thu 02 Jan 2025 01:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204668
IP address blocks: 185.175.8.0/23 maxlen: 23
2a0d:180::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c5:1f:a6:cf:74:73:0f:1f:f7:1b:73:c4:8a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
Validity
Not Before: Jan 2 01:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b1e3c32f0c6bb23060bb4ac0b2ab90816e3f7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b5:33:64:c4:ba:1d:b8:64:a2:48:e3:f2:d5:
da:12:d9:c4:3c:16:c8:1b:62:79:e9:10:82:ed:77:
c9:6a:14:36:c9:4c:55:8b:8c:eb:b3:77:44:3c:c5:
4e:e8:53:ea:1f:a1:e9:6a:b5:c2:69:a2:58:71:f4:
77:c8:14:62:81:40:81:38:6d:2b:f0:47:69:1c:d1:
93:b9:77:2b:26:88:a3:fe:b2:61:cc:1f:bd:0d:68:
dc:54:4f:14:55:bf:6d:89:f8:e0:27:8c:28:c1:e6:
69:9b:45:fd:7f:07:3f:f7:1f:cf:57:f9:cd:50:b8:
81:5a:aa:6d:b5:54:be:9b:4c:5e:72:3e:51:ee:4d:
7b:1f:68:9a:23:a7:ca:b6:67:a7:6b:c1:bf:0e:53:
4f:14:d5:4f:8a:9c:49:f8:98:42:e4:f2:92:1b:fd:
e6:72:06:ed:01:0a:c3:49:ea:66:56:ba:5c:a6:93:
00:ba:f1:5d:c5:83:d7:aa:c7:81:2b:a9:c9:88:9c:
21:a7:b3:84:47:38:1b:78:a5:af:2b:5e:1f:40:56:
19:22:7e:7c:53:4d:21:ca:1b:2b:8b:27:6d:31:cd:
5c:df:eb:b9:35:ac:60:d9:ab:1c:a1:cb:25:26:f1:
84:0b:4b:9c:6d:7f:0b:16:89:da:60:18:b3:55:5c:
ee:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1E:3C:32:F0:C6:BB:23:06:0B:B4:AC:0B:2A:B9:08:16:E3:F7:F5
X509v3 Authority Key Identifier:
keyid:DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/ix48MvDGuyMGC7SsCyq5CBbj9_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.8.0/23
IPv6:
2a0d:180::/31
Signature Algorithm: sha256WithRSAEncryption
30:67:99:02:98:a8:84:7b:b4:07:b8:17:4d:44:df:d8:69:69:
d1:c3:36:0b:0c:87:e4:21:1b:24:b7:fc:1d:42:75:96:6a:a1:
54:07:38:cc:76:86:27:a2:87:98:06:e4:62:85:d1:20:97:31:
a3:29:86:d9:6c:77:51:4d:4c:08:b7:96:09:82:64:4f:7f:19:
38:1f:70:d2:ed:a1:86:29:36:04:e2:60:65:2a:9a:56:ec:5d:
58:0c:58:ee:19:d8:b9:38:89:d4:5e:c0:0e:56:18:f5:2c:47:
e8:f1:b3:30:4b:c5:44:77:f2:23:bc:49:ca:66:bd:6a:ef:6a:
f0:2b:9f:6b:a2:ab:09:81:ea:28:8f:cf:86:8a:c4:2b:a4:10:
3a:07:48:c8:2d:52:11:1f:47:78:97:3a:6b:c1:87:84:33:5f:
00:43:92:74:7f:6a:45:d8:e9:0e:52:de:ff:1f:c6:91:20:6c:
0e:cf:41:e7:43:dd:25:0c:84:c3:20:7c:9a:00:4c:de:d5:e5:
5b:ff:5f:0c:de:f7:06:75:bb:c5:9d:01:69:7e:07:f9:44:b5:
33:0a:36:44:71:ea:53:bd:cb:49:76:eb:0c:79:4e:a0:d6:06:
6c:9e:44:5c:20:44:0b:3b:95:82:be:04:94:f1:ef:3d:93:65:
df:f5:25:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:50:02 2025 by rpki-client