Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/8XyUaz5PxPLue0CrUchlRmHnqJs.roa
File: 8XyUaz5PxPLue0CrUchlRmHnqJs.roa (raw, json)
Hash identifier: KMSpxL6wtJUNFCJFnfAUFjLMRmLQ4Dcv8f1856Q+IkY=
Subject key identifier: F1:7C:94:6B:3E:4F:C4:F2:EE:7B:40:AB:51:C8:65:46:61:E7:A8:9B
Certificate issuer: /CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Certificate serial: 019424B2B24BCF667D73E95F149495D91641
Authority key identifier: 07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/8XyUaz5PxPLue0CrUchlRmHnqJs.roa
Signing time: Thu 02 Jan 2025 01:47:58 +0000
ROA not before: Thu 02 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44136
IP address blocks: 46.16.232.0/21 maxlen: 24
91.201.60.0/22 maxlen: 24
185.20.12.0/22 maxlen: 24
2a02:28f0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:b2:4b:cf:66:7d:73:e9:5f:14:94:95:d9:16:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Validity
Not Before: Jan 2 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f17c946b3e4fc4f2ee7b40ab51c8654661e7a89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2e:07:9c:c0:66:94:c1:43:63:58:56:e2:cb:
ac:ee:c1:89:47:3e:5b:c5:75:a2:6c:55:44:e8:fb:
c1:fe:71:aa:de:02:b5:f9:a3:89:47:b4:0c:50:4a:
7b:2e:a0:6d:c7:8e:84:da:54:82:e8:59:22:81:7d:
ce:01:2d:5f:ac:69:fe:c6:98:f4:8e:53:6b:b1:e7:
b6:c4:0f:47:cd:ff:52:1c:66:80:96:43:32:4b:ff:
3b:7c:6c:ba:ce:ed:a1:e2:6a:b4:0b:5d:d6:89:16:
30:7f:2e:03:83:4c:3c:9a:da:48:8a:cd:2e:2f:6c:
a2:de:d6:f9:c6:d1:42:43:99:2f:88:92:f5:14:b0:
2b:1a:40:9a:ba:22:a6:ac:c8:e5:3c:f8:a8:28:39:
db:81:3f:da:4d:39:50:71:db:ce:cf:42:eb:b2:57:
41:dd:e6:7a:c1:8d:97:9e:71:e8:df:43:d8:b3:3f:
a7:00:4d:00:48:bb:9b:45:87:16:e6:65:60:3e:de:
f2:fd:28:4d:bf:37:8b:0e:b6:90:ff:e6:a4:85:29:
57:85:50:8d:21:ee:11:25:b9:d6:e3:bf:d5:55:6f:
ec:23:6f:68:8d:8b:7f:ad:9b:45:c4:78:71:c2:85:
6e:72:c5:0d:69:d8:c2:c0:9f:c8:74:c0:94:a4:3c:
9d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7C:94:6B:3E:4F:C4:F2:EE:7B:40:AB:51:C8:65:46:61:E7:A8:9B
X509v3 Authority Key Identifier:
keyid:07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/8XyUaz5PxPLue0CrUchlRmHnqJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.232.0/21
91.201.60.0/22
185.20.12.0/22
IPv6:
2a02:28f0::/29
Signature Algorithm: sha256WithRSAEncryption
00:3b:67:56:6a:d7:f7:59:26:a0:ca:03:0b:ab:37:b3:70:e8:
21:9c:29:9a:08:87:a9:7f:02:3b:1c:22:c6:5c:eb:10:d0:9b:
68:3c:05:f3:0b:9f:4d:43:3b:31:22:46:e8:65:57:14:74:bb:
41:f0:8e:f3:f6:f2:5b:fe:85:8e:3e:93:87:56:1b:59:3f:67:
10:c6:47:c3:15:db:40:4a:7b:68:46:34:c7:6a:17:86:53:79:
c5:c2:a6:46:1b:eb:89:46:69:f7:8f:22:d8:00:7c:ac:3a:da:
f4:38:a4:1c:c3:d6:c3:ff:0c:ce:c4:2e:e1:26:6f:ea:ac:5e:
5a:d6:be:af:96:7e:e4:22:96:21:54:6e:f5:bb:26:8d:e0:21:
61:d5:5f:3c:5b:41:4f:a2:1a:a4:2f:8f:e8:28:a6:c0:0b:a7:
9a:67:5d:c5:8b:ec:9a:95:b3:a4:6c:99:cf:0d:be:57:2f:e2:
e2:cf:a2:cd:1a:d8:ba:5b:2c:8f:31:3a:33:60:09:78:65:49:
b6:4d:e4:d7:31:88:59:a0:ca:67:4a:9a:5a:86:ea:93:83:2f:
10:4e:bf:35:32:dd:d2:50:cf:12:49:df:f7:9a:92:c8:16:c6:
bf:05:e1:2b:b8:c1:aa:c9:51:2c:c9:d7:00:ea:8f:ff:5a:b6:
79:de:87:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:10:39 2025 by rpki-client