Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/xAHFWshzCwZ9iWzPHD319yAWavE.roa
File: xAHFWshzCwZ9iWzPHD319yAWavE.roa (raw, json)
Hash identifier: LAjKykzMh8QraV6MgCdF6nP15mOVTD1M9V0STezqNjY=
Subject key identifier: C4:01:C5:5A:C8:73:0B:06:7D:89:6C:CF:1C:3D:F5:F7:20:16:6A:F1
Certificate issuer: /CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Certificate serial: 019425223A2D0396773405A854CE181EA822
Authority key identifier: 46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/xAHFWshzCwZ9iWzPHD319yAWavE.roa
Signing time: Thu 02 Jan 2025 03:49:47 +0000
ROA not before: Thu 02 Jan 2025 03:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206012
IP address blocks: 91.192.96.0/22 maxlen: 22
91.198.46.0/24 maxlen: 24
185.90.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:3a:2d:03:96:77:34:05:a8:54:ce:18:1e:a8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c401c55ac8730b067d896ccf1c3df5f720166af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b7:1d:1c:09:59:e1:80:a1:c0:c3:ac:4d:76:
6b:d2:c0:31:d5:55:45:16:48:9e:4e:4a:d7:d4:f9:
e7:9e:11:e1:b3:49:ac:9d:26:92:f8:6d:f7:8a:e9:
1e:e0:18:ac:a0:4b:68:8f:8c:0c:25:2b:90:3a:63:
b9:5d:46:60:f6:47:d1:71:62:6b:c9:f1:df:90:d0:
8c:f6:fa:a4:fa:95:ce:f9:02:f8:50:e4:f2:b6:bf:
67:5a:3d:ee:3b:a6:1f:4e:14:2a:82:9d:09:14:2d:
40:b6:84:8b:51:54:6c:a9:a5:da:ec:0e:a9:56:9f:
8f:29:d7:f8:9c:d3:6b:91:9f:3f:01:24:02:bb:61:
d4:ef:a2:23:fe:40:87:c5:0e:81:66:41:36:48:76:
0b:61:58:c8:f0:ae:d6:32:86:ef:f1:0d:6a:06:e9:
8a:8c:10:a9:2f:90:62:3d:a2:71:b7:22:85:ec:33:
e0:4b:d7:8f:7f:52:f5:b5:36:64:d8:fb:6e:24:0b:
0b:1f:82:92:24:d7:6b:44:24:8a:65:57:cf:4d:cb:
e4:12:91:40:1d:50:bf:34:98:9e:c9:d2:b5:06:00:
cd:48:9b:89:9f:58:d6:ac:4c:eb:c2:7a:ef:52:6f:
88:33:9a:59:41:6c:aa:bd:85:af:12:c6:88:2b:48:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:01:C5:5A:C8:73:0B:06:7D:89:6C:CF:1C:3D:F5:F7:20:16:6A:F1
X509v3 Authority Key Identifier:
keyid:46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/xAHFWshzCwZ9iWzPHD319yAWavE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.96.0/22
91.198.46.0/24
185.90.224.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:f1:84:a0:23:b6:4a:df:bf:b4:2a:00:c2:10:3a:11:3f:41:
e9:a7:29:42:00:58:c1:47:24:b5:57:09:c7:ca:ac:bc:7d:1b:
44:42:8c:b1:5c:87:d3:01:ec:01:62:cb:7e:8c:40:ae:b1:6d:
dc:f0:90:25:ea:78:22:94:4b:8c:f4:67:b4:08:fa:6d:e5:a1:
82:cd:04:26:e9:2e:b8:88:13:27:e0:b2:c5:cb:3b:0b:9d:18:
ab:33:63:e4:15:6a:1e:cd:ef:34:bc:32:85:1f:68:3d:86:ba:
38:5b:dd:3b:4d:3b:cc:9c:c6:c3:11:e0:e0:e0:c5:90:71:2a:
d6:a9:27:5e:9b:1f:ac:39:bc:0f:08:34:26:7e:14:50:6a:82:
2a:4c:50:40:a4:72:62:96:12:67:d3:eb:fe:6b:cc:8b:f9:33:
0f:b5:ba:ae:6a:01:36:84:26:3f:bd:be:1b:e7:db:d7:bd:61:
cd:bf:6a:e1:f5:6b:c1:0b:e5:6b:fd:80:0c:48:2c:3a:e5:f0:
35:85:f0:c5:26:f3:7e:f6:ab:2f:5f:d3:9d:c8:1d:26:32:b0:
06:4b:8d:8b:d3:e8:0e:63:7b:ef:22:ef:3b:e9:17:02:25:bd:
b8:6e:81:a7:4b:8c:5b:ee:0b:0b:0a:62:ff:1f:75:f9:86:3b:
d7:19:1d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:39 2025 by rpki-client