Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/94kIYfqeFgknlBrr_TOvpCgSdqU.roa
File: 94kIYfqeFgknlBrr_TOvpCgSdqU.roa (raw, json)
Hash identifier: 81jYnPOJR+qUf9stNF6tQ8TBm+nuWM6vD4G5gF21A04=
Subject key identifier: F7:89:08:61:FA:9E:16:09:27:94:1A:EB:FD:33:AF:A4:28:12:76:A5
Certificate issuer: /CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Certificate serial: 019424453F56B3367B6438B39975C233273B
Authority key identifier: 1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/94kIYfqeFgknlBrr_TOvpCgSdqU.roa
Signing time: Wed 01 Jan 2025 23:48:25 +0000
ROA not before: Wed 01 Jan 2025 23:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47381
IP address blocks: 185.224.46.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:3f:56:b3:36:7b:64:38:b3:99:75:c2:33:27:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Validity
Not Before: Jan 1 23:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7890861fa9e160927941aebfd33afa4281276a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:55:a5:72:60:6d:5b:0a:4a:cc:0f:4c:65:9d:
ac:c0:4b:d3:13:27:7e:52:30:10:53:1c:e6:09:75:
55:e5:57:9a:5b:15:21:f4:0f:09:08:bf:95:5e:57:
ea:4b:7b:fe:64:40:af:0c:e0:58:44:ce:ff:7f:24:
d8:66:4d:6e:f5:b4:7f:28:fe:5c:42:24:24:ab:23:
8c:71:b9:48:fa:b5:58:a5:5b:3d:35:52:f4:92:5c:
80:05:62:18:79:f7:c3:25:53:f1:e6:ff:f6:f1:ea:
af:66:27:d1:f1:c2:db:fa:74:62:89:8e:95:ab:18:
ef:46:ba:69:bd:18:e4:12:e7:74:e9:69:e0:78:1d:
c9:09:90:55:df:02:00:ec:d6:d6:f3:5f:bf:b5:e0:
1f:c2:13:40:b1:43:4d:2d:e3:23:ce:e5:49:23:16:
0f:b1:f9:cf:a5:99:1b:49:2b:b7:20:8d:4a:1d:f5:
fb:63:2d:1e:47:2c:57:09:f1:7d:f6:c2:79:ed:cb:
2e:29:72:36:1f:95:8c:9f:29:42:25:30:71:54:e2:
49:4d:9b:5b:8e:45:c8:3d:7e:d6:94:a3:b6:96:57:
66:6b:63:10:bd:9f:bb:de:c0:7d:89:58:e5:2d:16:
31:41:36:6b:24:b3:ff:92:80:6c:63:24:a8:df:a0:
b9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:89:08:61:FA:9E:16:09:27:94:1A:EB:FD:33:AF:A4:28:12:76:A5
X509v3 Authority Key Identifier:
keyid:1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/94kIYfqeFgknlBrr_TOvpCgSdqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.46.0/23
Signature Algorithm: sha256WithRSAEncryption
12:13:c7:61:07:4a:61:f8:de:9d:46:dd:04:0c:40:27:8f:8b:
54:0e:6b:54:01:34:87:4e:d5:cc:11:2a:a6:a8:80:93:3e:5e:
5f:93:e5:c5:54:f5:09:0b:64:6f:4d:07:a8:c7:2b:5d:6c:2d:
29:26:51:7f:a8:48:e9:46:48:b2:e2:b6:39:76:0f:fe:4a:9b:
d3:dd:0f:cb:70:f7:ec:14:67:3f:47:88:37:b5:50:48:50:56:
03:c0:b6:23:31:2d:44:60:34:d2:e4:81:79:9f:17:28:05:36:
e2:ef:58:c0:b1:51:ab:bb:e1:aa:26:cc:4c:c0:37:51:9c:f1:
a3:08:4b:1b:33:31:40:1c:05:21:28:a2:9f:3c:be:93:d2:2e:
62:84:d5:fb:93:e6:68:fe:97:83:de:1d:b6:88:41:a0:91:38:
ac:57:55:d8:90:3f:eb:42:44:8f:6e:8e:02:18:b6:1a:87:91:
d7:6a:d6:b8:7d:3d:b1:ff:39:cc:85:c7:bd:c6:25:80:44:e3:
c4:fa:cb:43:49:64:c9:bf:7f:05:8c:11:ba:af:b3:0f:98:33:
f6:9c:03:89:d0:7b:dc:9a:bc:c3:63:e8:21:53:1a:8b:88:ec:
6c:be:28:16:29:f4:e7:08:ad:7f:a1:d0:2c:03:ea:41:77:69:
85:57:51:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:08 2025 by rpki-client