Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/1-XP7SSYynpJIZg4ibI0Wpm_d7y4.roa
File: 1-XP7SSYynpJIZg4ibI0Wpm_d7y4.roa (raw, json)
Hash identifier: LOYh8aPG/hc+f2Wb/Cw6QofBs2xxLo7hf2Lj5w8CzgE=
Subject key identifier: F9:73:FB:49:26:32:9E:92:48:66:0E:22:6C:8D:16:A6:6F:DD:EF:2E
Certificate issuer: /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial: 01941FFA12DB90EE7FC0CFC0ED57F206BD48
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/1-XP7SSYynpJIZg4ibI0Wpm_d7y4.roa
Signing time: Wed 01 Jan 2025 03:47:49 +0000
ROA not before: Wed 01 Jan 2025 03:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48861
IP address blocks: 46.182.175.0/24 maxlen: 24
195.88.66.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:12:db:90:ee:7f:c0:cf:c0:ed:57:f2:06:bd:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Validity
Not Before: Jan 1 03:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f973fb4926329e9248660e226c8d16a66fddef2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b0:31:c9:de:13:c5:c8:38:84:bd:fd:62:7b:
a9:dd:c3:4d:5d:55:90:9d:18:01:9c:72:89:9b:33:
90:49:ef:15:1a:8c:66:27:08:86:a4:6e:59:94:3b:
d9:46:f0:73:7b:c0:87:dd:ec:7a:23:2b:c1:98:91:
0e:af:a1:dd:26:99:c7:84:db:0f:6d:dd:b3:6b:bc:
ef:f6:ff:70:f3:37:84:43:3f:7d:46:40:a2:79:97:
29:96:dd:c8:25:50:42:97:a8:d0:39:99:11:96:aa:
80:3b:59:51:9e:b8:5f:df:b5:eb:26:7d:33:a3:8a:
6c:a1:1d:b3:c0:79:09:e1:bc:e4:9f:41:34:c3:95:
da:f9:51:07:43:b2:9c:f6:18:3a:a7:89:74:b4:ea:
45:6f:a3:0e:19:95:4a:fe:7e:23:cf:26:7c:09:b5:
02:26:3a:24:a6:58:d8:d9:7d:c3:af:78:75:e7:24:
3d:8b:c5:39:d0:47:6a:f8:62:29:21:69:7a:dc:d5:
f6:ed:8c:ba:f1:66:b2:16:98:c0:2f:52:bd:8e:24:
8d:64:66:b7:43:f1:5d:e9:8f:94:cf:91:51:86:5a:
ea:27:fe:bb:da:f5:5b:e0:ed:77:0a:31:a7:8d:df:
51:e6:4e:d0:ba:df:03:a5:cb:3c:f1:98:22:0e:01:
7b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:73:FB:49:26:32:9E:92:48:66:0E:22:6C:8D:16:A6:6F:DD:EF:2E
X509v3 Authority Key Identifier:
keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/1-XP7SSYynpJIZg4ibI0Wpm_d7y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.175.0/24
195.88.66.0/23
Signature Algorithm: sha256WithRSAEncryption
50:32:ab:4e:2d:08:b0:92:3c:b7:37:de:1a:e5:41:d9:2c:ff:
88:de:ea:dd:d3:6c:41:41:08:af:e2:e6:71:ee:fe:44:97:4b:
ea:a1:f4:76:4c:ba:36:5a:56:82:08:2e:40:c8:71:5c:0e:3a:
2a:ad:d6:12:96:b7:f3:fc:36:a0:3d:92:84:20:0d:a3:a8:13:
f8:cb:66:36:8a:26:56:a5:37:b3:5a:ef:57:c4:26:9b:3a:a4:
68:5c:cd:5e:b7:ab:95:90:64:18:16:09:5f:6a:0a:2e:d9:3d:
25:15:d3:02:58:42:1c:41:7a:05:d7:4b:93:e4:90:4b:33:3f:
32:a6:5a:03:08:ca:aa:3f:84:86:70:76:14:e3:ec:09:4b:46:
ca:7e:45:78:62:0b:18:40:40:be:62:c1:94:5d:5b:7b:36:66:
a7:97:47:75:b5:52:0d:b5:79:95:d9:c5:9d:a2:dd:ec:79:c4:
7e:61:aa:2f:e9:8f:7e:f4:36:c2:94:ce:9f:0f:72:c2:91:84:
f6:7a:81:eb:5f:f5:0d:06:2e:43:27:c7:58:58:64:87:d3:92:
78:38:7c:20:bb:78:e8:28:58:d1:7b:f0:d3:99:14:57:ed:35:
a4:bb:ea:9e:af:a0:f2:10:2e:ab:c2:09:1f:ca:ae:58:b9:37:
72:ae:d0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:36 2025 by rpki-client