Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/CN7EuI0-M2CqLCuCRHt6GUrcg0E.roa
File: CN7EuI0-M2CqLCuCRHt6GUrcg0E.roa (raw, json)
Hash identifier: nPJ41a5MjCCJYxpL+ZRoeblB2rw9Ylu7iDblmReMQHw=
Subject key identifier: 08:DE:C4:B8:8D:3E:33:60:AA:2C:2B:82:44:7B:7A:19:4A:DC:83:41
Certificate issuer: /CN=fbcb947651260d9d8b02f31d5bc7f1d5d0b01780
Certificate serial: 01942521BF4DD5CD9ED3D07F0F73C43A91AE
Authority key identifier: FB:CB:94:76:51:26:0D:9D:8B:02:F3:1D:5B:C7:F1:D5:D0:B0:17:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/CN7EuI0-M2CqLCuCRHt6GUrcg0E.roa
Signing time: Thu 02 Jan 2025 03:49:16 +0000
ROA not before: Thu 02 Jan 2025 03:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49784
IP address blocks: 46.244.48.0/20 maxlen: 24
91.236.202.0/23 maxlen: 24
91.239.174.0/23 maxlen: 24
157.97.48.0/20 maxlen: 24
185.28.224.0/22 maxlen: 24
213.109.112.0/20 maxlen: 24
2a04:3640::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:bf:4d:d5:cd:9e:d3:d0:7f:0f:73:c4:3a:91:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcb947651260d9d8b02f31d5bc7f1d5d0b01780
Validity
Not Before: Jan 2 03:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08dec4b88d3e3360aa2c2b82447b7a194adc8341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ba:a6:15:41:5b:99:4c:62:f2:e3:07:cd:a6:
a5:27:9c:7a:be:38:2e:b9:e3:3e:7d:78:56:03:e2:
3b:17:59:da:f9:52:ce:78:5b:11:6d:fa:40:44:3f:
94:e5:82:1d:cc:5e:5f:ea:d8:07:55:12:3a:0d:10:
7a:2e:e1:96:12:c3:f6:db:e9:d0:5a:f3:18:04:a7:
27:6e:00:1b:16:20:db:63:96:54:75:07:47:6b:24:
35:16:db:d3:9c:a7:ca:4b:79:ae:d7:e4:89:a8:aa:
20:31:f5:79:56:c2:8b:80:79:3a:2f:2a:97:7d:22:
34:03:df:a7:35:91:18:43:0e:f5:db:d2:64:f8:8d:
31:17:4b:ff:43:1b:69:91:92:8c:d8:49:d1:59:8a:
53:12:71:78:5a:0e:bf:2d:a1:e7:37:0e:57:b5:00:
02:a3:f5:4a:07:93:de:60:01:db:30:12:8d:06:d4:
05:08:ae:79:3f:29:f6:2d:69:b5:7b:44:7e:fc:93:
16:84:26:25:b2:47:66:9a:eb:69:b8:ef:e8:a3:75:
7d:82:d2:f8:ed:1a:8e:ea:3a:f0:11:b0:da:29:a6:
c3:a6:31:9a:42:44:7d:58:f7:69:91:db:1c:a8:5b:
3a:37:f8:bd:48:c7:fa:91:96:ae:cf:c5:fa:19:3e:
8b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DE:C4:B8:8D:3E:33:60:AA:2C:2B:82:44:7B:7A:19:4A:DC:83:41
X509v3 Authority Key Identifier:
keyid:FB:CB:94:76:51:26:0D:9D:8B:02:F3:1D:5B:C7:F1:D5:D0:B0:17:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/CN7EuI0-M2CqLCuCRHt6GUrcg0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.48.0/20
91.236.202.0/23
91.239.174.0/23
157.97.48.0/20
185.28.224.0/22
213.109.112.0/20
IPv6:
2a04:3640::/29
Signature Algorithm: sha256WithRSAEncryption
bf:e9:c2:22:4d:94:0d:22:bf:76:f5:0c:61:76:a8:9b:af:8a:
17:ed:8c:ba:ec:aa:f6:83:ff:c5:82:eb:47:66:82:71:83:b9:
b4:57:57:4a:46:9e:d8:c2:a4:83:c4:b4:2b:ca:85:f7:a3:cc:
1d:25:d6:5e:2f:06:c1:4d:02:a7:e5:b0:59:7e:a0:7a:61:75:
9c:47:10:64:7a:ad:cb:56:50:6f:32:4a:00:83:b2:3e:9d:f8:
6a:5c:f9:d5:d6:83:76:2a:d3:fd:1d:76:3f:61:67:06:14:ce:
9a:11:fd:8b:f2:a9:19:b3:91:23:3b:75:53:b6:2c:e4:c1:b3:
02:19:19:88:8a:3b:03:d0:2d:f8:c0:63:28:60:d9:47:8f:ce:
58:ec:bd:38:19:48:43:83:38:b3:67:99:83:01:d2:55:b6:0c:
1b:09:0a:7a:70:dc:ce:5b:fa:85:55:54:cb:39:2f:fa:ce:ad:
6d:c5:60:0d:f7:a3:ce:e0:3a:01:65:ee:4b:23:fd:57:b0:cf:
16:28:37:e8:4e:f6:c7:0f:14:29:74:b9:79:21:ff:26:a7:1d:
28:fe:fa:bd:0e:e8:f5:98:4f:52:7f:ff:4e:48:7a:ba:1d:34:
e4:2a:5b:d1:e0:3c:e6:37:47:5f:2b:48:3a:01:25:86:e4:40:
de:6b:9a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:52:52 2025 by rpki-client