Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/9L0Co8CEy186G13kaYMinlb5Afg.roa
File: 9L0Co8CEy186G13kaYMinlb5Afg.roa (raw, json)
Hash identifier: 6p7nu1hIgCVQFvaFdpUf1fbcZ1K03G9ItG/q4By8N9A=
Subject key identifier: F4:BD:02:A3:C0:84:CB:5F:3A:1B:5D:E4:69:83:22:9E:56:F9:01:F8
Certificate issuer: /CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
Certificate serial: 019421B1E60E934F821D6D434F65F4B5A37A
Authority key identifier: 46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/9L0Co8CEy186G13kaYMinlb5Afg.roa
Signing time: Wed 01 Jan 2025 11:48:14 +0000
ROA not before: Wed 01 Jan 2025 11:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203995
IP address blocks: 46.46.192.0/18 maxlen: 20
46.230.128.0/19 maxlen: 20
91.149.0.0/19 maxlen: 19
91.149.48.0/20 maxlen: 20
93.179.0.0/19 maxlen: 20
178.72.32.0/19 maxlen: 19
185.83.164.0/22 maxlen: 22
2a05:9cc0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e6:0e:93:4f:82:1d:6d:43:4f:65:f4:b5:a3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
Validity
Not Before: Jan 1 11:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4bd02a3c084cb5f3a1b5de46983229e56f901f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:86:54:43:ef:53:8e:e0:89:7e:f0:10:bd:4c:
4f:37:ef:d1:88:f7:10:50:66:26:37:8e:fb:15:f3:
93:e0:cc:90:a9:b7:b6:da:42:cf:a3:c7:40:0b:81:
18:07:0d:76:25:80:cf:5a:14:40:bf:44:3b:72:3f:
d0:11:e6:22:70:95:4e:1d:ed:76:7f:fb:31:f9:5c:
0b:06:5e:0e:95:80:64:28:5f:49:07:ba:76:60:da:
72:32:20:5d:11:ef:c9:ff:45:fb:13:01:1d:b1:b3:
1e:98:d9:5c:e4:c5:a9:4a:e6:ad:16:62:9e:d2:6e:
e5:4f:47:9c:e0:ca:70:c8:53:c0:93:4a:c8:0d:c5:
35:89:8a:1a:4d:d9:64:68:c3:e7:3a:f0:7e:0b:18:
ce:cb:ed:58:ae:2d:7a:46:79:45:0d:96:8d:30:c8:
42:e3:30:64:3b:70:12:c8:93:66:77:4e:f6:1d:71:
63:fb:35:79:f5:c6:cd:3d:0a:66:31:57:3b:51:8a:
a3:31:0f:60:03:81:4f:f8:72:3d:34:c0:10:ba:8d:
cc:b3:39:c7:0b:84:59:fb:40:cf:23:10:cc:4a:14:
34:30:f0:f0:b2:be:ba:0b:aa:5b:fe:f0:e2:b5:b5:
58:6f:ab:7e:ee:6b:70:f9:3e:c4:6c:29:fd:3e:23:
e7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BD:02:A3:C0:84:CB:5F:3A:1B:5D:E4:69:83:22:9E:56:F9:01:F8
X509v3 Authority Key Identifier:
keyid:46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/9L0Co8CEy186G13kaYMinlb5Afg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.46.192.0/18
46.230.128.0/19
91.149.0.0/19
91.149.48.0/20
93.179.0.0/19
178.72.32.0/19
185.83.164.0/22
IPv6:
2a05:9cc0::/29
Signature Algorithm: sha256WithRSAEncryption
76:01:0a:07:c1:0f:ce:ce:2d:dc:45:dd:48:6f:ae:5b:05:a5:
6d:7c:7e:ac:28:cf:bc:3c:24:cc:bb:68:92:63:8d:73:66:0f:
14:94:62:a4:d6:bd:d7:b0:b2:52:17:01:57:69:84:4f:e6:20:
5c:4f:35:0f:cc:dd:33:9a:d2:a0:3c:7f:b4:cb:45:23:04:94:
b4:bc:31:d4:df:ab:2c:dd:2a:7d:2f:72:42:c8:a1:ef:52:36:
4a:6f:ba:33:b1:8b:ba:31:4d:07:5d:56:f2:31:78:a2:2d:c8:
30:87:0a:4d:6d:2e:f0:3a:b9:2f:e6:75:66:e0:df:fe:ea:38:
6d:ce:3f:86:bb:81:5e:6b:ed:f3:77:bb:b5:46:9c:50:0f:55:
1c:db:05:e5:f9:3f:8f:23:ea:e7:17:94:f7:9f:9c:2f:55:d5:
6d:79:62:b8:e7:b1:95:74:5c:e3:dd:82:1b:38:b6:b3:65:11:
d9:f0:5d:7e:d7:6f:c2:d9:5a:4c:b8:9e:7f:e7:91:c9:9d:8a:
e9:9c:3f:7b:ec:7a:64:19:2a:38:4a:0d:45:71:13:ad:f1:6b:
dd:b0:dd:d2:b0:68:ae:2a:7f:58:bd:9e:71:94:30:42:06:b5:
d9:81:49:13:51:a8:eb:13:04:3a:43:30:5d:40:ca:c9:bb:17:
a3:78:e7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:21 2025 by rpki-client