Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/1-XtGkJ8Jd3c4uVesg7xkCJ7ybiY.roa
File: 1-XtGkJ8Jd3c4uVesg7xkCJ7ybiY.roa (raw, json)
Hash identifier: BQVLo0f3zkM362YzBfFEYph/KCDGOKSVQPjGQsi/Kt8=
Subject key identifier: F9:7B:46:90:9F:09:77:77:38:B9:57:AC:83:BC:64:08:9E:F2:6E:26
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 019423D7C9EEAAA799627E390994B0F5B34C
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/1-XtGkJ8Jd3c4uVesg7xkCJ7ybiY.roa
Signing time: Wed 01 Jan 2025 21:48:51 +0000
ROA not before: Wed 01 Jan 2025 21:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 146.19.191.0/24 maxlen: 24
193.111.248.0/24 maxlen: 24
193.111.249.0/24 maxlen: 24
2a12:eb00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:c9:ee:aa:a7:99:62:7e:39:09:94:b0:f5:b3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: Jan 1 21:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f97b46909f09777738b957ac83bc64089ef26e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:78:f6:1e:ae:4c:87:a0:f8:25:0e:35:b1:
ee:be:53:d4:25:aa:f6:0b:82:15:0f:b9:28:30:18:
87:de:52:69:48:45:af:92:ce:41:64:f1:00:6f:35:
9e:88:07:10:6b:c9:56:4b:a8:13:a4:0c:ac:89:83:
ea:cb:0c:f0:ac:96:79:85:2d:c3:c9:27:1e:f2:87:
71:d8:d7:99:99:3f:eb:04:bf:54:b1:57:bb:4a:aa:
36:53:c2:f7:94:a5:d4:2d:33:40:cf:e4:18:95:1d:
a0:0b:ae:51:ed:dc:65:6a:07:2e:47:78:7e:4c:42:
91:6f:e3:19:dc:5b:3f:1a:bd:8a:fc:84:b7:7f:ea:
0b:8a:c2:dd:42:69:29:25:a4:5e:fc:e8:08:26:02:
21:9d:32:64:53:1c:b7:54:8d:77:5c:5f:f3:21:7c:
cb:11:70:4d:ef:3b:33:14:fb:26:d3:f8:f1:a3:55:
56:b0:7b:ca:ea:42:5c:95:57:42:62:80:15:94:5b:
99:87:f5:38:a6:c6:a7:a4:7a:9c:99:9c:ab:49:42:
ff:38:98:8c:6b:bb:67:eb:8f:4b:2f:b2:0e:85:2c:
f4:1a:7a:a3:04:11:43:d6:5d:e2:75:22:4c:c4:75:
39:de:9a:e5:83:88:64:c5:03:d2:3a:7e:58:f7:3e:
27:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7B:46:90:9F:09:77:77:38:B9:57:AC:83:BC:64:08:9E:F2:6E:26
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/1-XtGkJ8Jd3c4uVesg7xkCJ7ybiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.191.0/24
193.111.248.0/23
IPv6:
2a12:eb00::/29
Signature Algorithm: sha256WithRSAEncryption
10:ba:60:b0:f3:32:7c:a8:61:6a:64:54:58:ae:bb:09:c1:f6:
50:bc:6b:ba:8d:8a:8c:ec:fb:fa:6e:dd:c2:9e:46:0a:d5:42:
27:25:07:71:01:76:1d:44:e4:82:1d:3a:e7:dd:18:ba:36:16:
3c:16:b1:7e:fe:c6:d3:b0:c8:de:7c:8a:1e:c7:4d:cd:33:29:
60:88:ce:75:55:c3:88:d7:60:99:04:bc:be:7d:89:2c:97:4f:
20:74:79:c7:fe:b9:94:38:17:98:50:73:47:55:20:ae:b5:08:
60:f4:b0:b4:d6:16:c0:5c:a7:c4:ba:f6:f1:5a:8b:d6:2d:78:
c6:94:f0:86:f9:13:ec:be:2a:d3:42:76:18:d2:ba:fe:2b:21:
2b:2e:48:b3:54:6b:dc:f4:d2:1c:c1:ac:f2:5e:23:02:46:74:
4b:0f:bd:30:03:94:6e:2b:39:77:8e:d2:1e:16:e5:d0:95:73:
e8:00:77:22:9d:b8:06:bf:0c:c9:4d:4b:c6:3f:c2:f1:de:3a:
93:c7:1a:72:16:98:fe:b3:5c:a3:b2:7d:61:7c:73:49:47:31:
93:2f:6f:8e:bd:3f:ca:c2:2a:f6:83:d0:a1:53:08:0a:83:6e:
79:1f:3c:37:18:64:8c:b6:c6:7a:29:cc:5f:8a:d7:0e:6a:e0:
18:b8:36:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:04 2025 by rpki-client