Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/heOGsEgwvnx0rV_PQ-KerQ9C-CY.roa
File: heOGsEgwvnx0rV_PQ-KerQ9C-CY.roa (raw, json)
Hash identifier: sP+8nNNKaPD0x4Bknlm6WIvlRad2W4u8N2Xxii0xN0U=
Subject key identifier: 85:E3:86:B0:48:30:BE:7C:74:AD:5F:CF:43:E2:9E:AD:0F:42:F8:26
Certificate issuer: /CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Certificate serial: 0194258F2E73DFD78C78468F38A6D931B2CE
Authority key identifier: F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/heOGsEgwvnx0rV_PQ-KerQ9C-CY.roa
Signing time: Thu 02 Jan 2025 05:48:47 +0000
ROA not before: Thu 02 Jan 2025 05:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8752
IP address blocks: 46.38.96.0/19 maxlen: 19
95.182.32.0/19 maxlen: 19
185.35.168.0/22 maxlen: 22
212.46.0.0/19 maxlen: 19
2a03:3200::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:2e:73:df:d7:8c:78:46:8f:38:a6:d9:31:b2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Validity
Not Before: Jan 2 05:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85e386b04830be7c74ad5fcf43e29ead0f42f826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cf:56:29:e7:51:1e:f4:76:41:f8:a0:75:f5:
32:af:2a:1e:b5:ea:6a:df:83:67:0c:c3:66:30:34:
eb:64:70:ea:e5:22:a7:d6:7c:68:e2:83:6a:07:88:
98:86:08:d3:4d:ab:05:03:f7:ed:5a:65:4e:e7:40:
88:80:ce:0f:d4:d1:20:e9:29:d6:14:b9:3a:82:0c:
b7:41:9a:94:2e:3b:9c:cc:d3:5b:67:b8:5f:6a:0e:
53:aa:3c:df:96:ed:fd:54:05:a5:91:d5:1f:79:44:
12:ac:64:ef:08:0d:0c:b2:bf:5f:fe:12:82:02:04:
2c:9d:f6:ec:1d:dd:32:e4:c5:2e:ae:f8:7b:51:15:
2c:ee:df:f9:4a:b2:41:cf:b8:d1:47:32:d3:f3:67:
8b:9e:53:ef:b9:f8:ca:9e:b9:32:27:22:eb:94:b2:
3c:3a:84:65:e3:65:eb:8e:d7:fe:48:82:62:5b:63:
51:02:cf:19:bb:0e:91:f4:ba:c7:78:77:43:cc:ff:
2a:51:86:a5:40:40:7d:bc:40:2e:6f:98:94:d3:23:
50:05:28:af:ef:1f:9c:ee:5f:d4:59:fc:5f:ca:4f:
1f:62:91:0c:aa:ed:a0:13:19:39:df:92:9d:1f:02:
6e:ab:e8:11:c6:88:b4:63:5c:26:bb:ab:db:c6:dd:
05:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E3:86:B0:48:30:BE:7C:74:AD:5F:CF:43:E2:9E:AD:0F:42:F8:26
X509v3 Authority Key Identifier:
keyid:F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/heOGsEgwvnx0rV_PQ-KerQ9C-CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.96.0/19
95.182.32.0/19
185.35.168.0/22
212.46.0.0/19
IPv6:
2a03:3200::/32
Signature Algorithm: sha256WithRSAEncryption
4e:33:06:0d:d7:10:f5:d0:06:18:8c:6a:2f:b0:f2:b2:35:06:
bd:31:95:01:09:e8:d8:d1:0d:4d:92:ce:01:67:61:dd:c7:e7:
11:6b:75:a3:27:f3:eb:cf:22:fd:3a:1f:f3:35:ec:99:b3:0f:
50:5f:69:be:68:87:2b:02:c8:f2:99:ab:75:74:6e:2d:b2:1d:
b9:4a:06:3b:38:fe:a5:b2:8f:da:03:04:a1:05:43:f8:3b:3c:
ec:6b:5a:bf:29:0b:39:6c:6a:66:a0:00:30:aa:80:eb:22:d1:
72:ba:53:c5:e5:62:92:34:1a:2a:a4:cc:38:5d:19:c0:fa:42:
5b:f0:6e:f9:d7:f3:84:cf:63:14:ec:20:5b:e5:e8:b3:ca:47:
63:6f:4e:9c:0e:85:54:3b:77:4d:dc:c2:19:cb:aa:a1:c2:72:
70:2e:03:60:5c:86:c6:3c:0c:71:94:f0:14:1d:f2:c5:8e:15:
68:ba:d1:8e:f6:e4:e7:e9:6e:49:09:fc:bf:2d:59:42:7c:be:
96:66:d3:8d:ca:2e:d6:fd:8d:e9:3b:ee:b2:60:ec:9b:06:c3:
db:31:b9:b7:f0:61:01:8e:7f:df:cc:b5:a9:4c:b8:4f:11:c4:
13:15:90:23:2c:18:4d:35:88:37:9a:2e:11:dc:c1:c1:70:ad:
6d:d2:02:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:56 2025 by rpki-client