Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/bJ4sh6U6AWn89GmwoeAcocafgE4.roa
File: bJ4sh6U6AWn89GmwoeAcocafgE4.roa (raw, json)
Hash identifier: Y+U7WWWf4hP7E6R51Ww3VT3Vt2JWiwOghZ095dPcPh8=
Subject key identifier: 6C:9E:2C:87:A5:3A:01:69:FC:F4:69:B0:A1:E0:1C:A1:C6:9F:80:4E
Certificate issuer: /CN=ede0294d1305bebaf6894642bfd92fd439825102
Certificate serial: 0194258E76E19FA3E4AFC3757D4847B3F381
Authority key identifier: ED:E0:29:4D:13:05:BE:BA:F6:89:46:42:BF:D9:2F:D4:39:82:51:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eApTRMFvrr2iUZCv9kv1DmCUQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/bJ4sh6U6AWn89GmwoeAcocafgE4.roa
Signing time: Thu 02 Jan 2025 05:48:01 +0000
ROA not before: Thu 02 Jan 2025 05:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44558
IP address blocks: 46.30.176.0/21 maxlen: 24
46.252.96.0/20 maxlen: 24
185.24.124.0/22 maxlen: 24
185.205.92.0/22 maxlen: 24
2a00:66e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:76:e1:9f:a3:e4:af:c3:75:7d:48:47:b3:f3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede0294d1305bebaf6894642bfd92fd439825102
Validity
Not Before: Jan 2 05:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c9e2c87a53a0169fcf469b0a1e01ca1c69f804e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:16:11:eb:ef:fc:05:a1:50:d4:9d:25:b8:66:
7f:74:28:87:83:28:c6:d7:ed:0b:6b:d8:84:86:45:
1e:a1:96:9d:ea:48:68:e4:8e:9c:03:d5:fa:33:58:
db:fd:e0:c2:93:a5:79:eb:b5:33:59:e8:a2:d1:ca:
7e:44:08:49:ac:3b:25:f5:1c:b0:41:51:3c:61:98:
8e:04:0e:5a:9a:65:fe:48:f0:b7:46:58:96:50:7e:
f3:c2:0b:28:15:db:8a:60:a9:1c:a5:8a:d8:90:64:
62:57:0c:6d:fe:4c:39:4f:d7:10:14:5f:69:89:c6:
a8:4b:b4:4e:0c:4e:fc:6e:62:06:f2:c5:7c:bd:91:
ae:75:b5:10:35:8f:6e:fa:8c:83:3a:fa:03:aa:ff:
ce:1c:f2:42:70:34:5d:4a:b1:8d:ff:f3:0f:03:fe:
3c:db:06:0b:f1:99:d9:df:34:cb:a1:f1:16:cd:f9:
7d:25:e2:a1:42:cc:29:71:27:8b:c8:aa:ac:34:be:
42:9e:f5:a9:ad:30:ef:f3:04:77:34:53:9e:b9:aa:
1e:3e:72:c7:d8:61:11:e2:f1:6c:e1:42:eb:ff:00:
a5:fc:14:18:a8:55:db:dd:37:37:88:8d:d4:d8:c5:
19:73:3a:ca:29:3f:f9:04:07:b9:2f:f2:17:6b:02:
e1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9E:2C:87:A5:3A:01:69:FC:F4:69:B0:A1:E0:1C:A1:C6:9F:80:4E
X509v3 Authority Key Identifier:
keyid:ED:E0:29:4D:13:05:BE:BA:F6:89:46:42:BF:D9:2F:D4:39:82:51:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eApTRMFvrr2iUZCv9kv1DmCUQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/bJ4sh6U6AWn89GmwoeAcocafgE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.176.0/21
46.252.96.0/20
185.24.124.0/22
185.205.92.0/22
IPv6:
2a00:66e0::/32
Signature Algorithm: sha256WithRSAEncryption
91:0b:37:85:ae:1d:22:54:30:3c:5d:e4:15:ed:64:86:7a:79:
92:a0:be:dd:f9:0c:b2:c5:a6:7e:df:5d:c3:40:b6:9a:3b:6e:
b9:61:6e:90:c2:94:87:3d:ba:c3:ce:34:d0:f0:b5:4c:27:1a:
28:96:a7:b8:20:8b:21:9c:ed:8d:66:03:68:ec:e9:2f:16:d3:
78:fc:a4:33:11:23:80:e3:d1:ef:ed:1e:2e:b0:73:b6:28:ed:
dc:a4:98:ea:c2:82:17:d2:de:77:64:2e:fc:d1:c9:95:98:53:
2d:9c:ff:14:3a:39:d4:e4:85:1d:9f:13:da:86:7c:64:a6:5d:
ea:50:40:78:da:6a:20:42:fe:33:ee:91:af:8b:42:7a:a7:bc:
b1:af:f0:d9:64:2b:bc:c9:24:31:b7:67:95:cb:33:10:51:22:
99:35:c1:97:b1:03:fe:e8:16:00:2e:5d:ee:c7:f4:16:8e:06:
d4:fd:82:2c:89:4e:a9:fb:30:56:99:dc:85:08:11:d7:8d:53:
38:08:5f:be:e6:b5:e9:7e:5f:2f:b1:32:b6:3d:d7:e2:f2:91:
fe:2c:c5:d3:f9:de:e1:cf:83:00:12:82:bc:8c:be:13:42:34:
81:9d:26:d3:f8:e7:dc:ea:03:1b:06:95:76:77:f1:3e:a1:5a:
df:07:a8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:36:19 2025 by rpki-client