Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/_npBPU_qU8Q1a65hoUMHOBSefXQ.roa
File: _npBPU_qU8Q1a65hoUMHOBSefXQ.roa (raw, json)
Hash identifier: e8tqm7dxs7+LcvLZgwgmWSIzqUCH5DxQZJAY7CIpCfc=
Subject key identifier: FE:7A:41:3D:4F:EA:53:C4:35:6B:AE:61:A1:43:07:38:14:9E:7D:74
Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial: 019425217691A1F89023237A7CEF3A04B841
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/_npBPU_qU8Q1a65hoUMHOBSefXQ.roa
Signing time: Thu 02 Jan 2025 03:48:57 +0000
ROA not before: Thu 02 Jan 2025 03:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49053
IP address blocks: 185.62.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:76:91:a1:f8:90:23:23:7a:7c:ef:3a:04:b8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Validity
Not Before: Jan 2 03:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe7a413d4fea53c4356bae61a1430738149e7d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:bf:67:5e:ad:0f:3d:e6:1c:0a:28:ca:61:
ab:32:12:c4:67:18:2b:35:1f:54:70:14:b0:34:55:
9a:34:9f:f6:94:ef:e7:5c:7c:dc:23:3c:c6:af:13:
d2:e7:86:a3:30:c2:0f:ce:e4:ae:99:1d:29:b3:2c:
01:d7:05:a4:41:00:c3:71:d0:7b:9c:11:12:66:21:
20:c8:7d:a5:21:2d:54:07:44:c8:9a:b1:15:45:ef:
02:a0:aa:f1:b2:94:f1:11:b1:c5:3c:0c:29:40:66:
b7:ad:3d:8e:16:43:d2:d4:d6:46:d2:f6:5a:d9:e9:
39:f0:93:a6:b8:fd:a4:46:e5:c5:26:5c:ea:db:25:
44:22:99:20:c2:41:8b:bc:1f:4f:d5:d2:98:b7:08:
ad:75:2f:34:2c:68:bb:ac:70:7e:45:42:58:06:c6:
bc:8c:e6:c7:6e:99:ee:f1:87:bd:1a:6b:68:92:1f:
3b:f7:16:78:e9:82:a1:92:65:f7:7d:70:3a:2a:5f:
76:5a:33:c2:d4:09:31:b8:8d:15:3b:30:35:4e:58:
b4:4b:1c:73:3d:2f:64:ab:a6:e9:40:b5:4c:cf:ce:
d5:e5:99:6d:9f:f1:46:ec:2a:c6:65:c9:b8:20:03:
95:85:97:df:f1:2d:42:e9:49:6f:32:56:ac:7d:92:
ed:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7A:41:3D:4F:EA:53:C4:35:6B:AE:61:A1:43:07:38:14:9E:7D:74
X509v3 Authority Key Identifier:
keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/_npBPU_qU8Q1a65hoUMHOBSefXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.203.0/24
Signature Algorithm: sha256WithRSAEncryption
96:6f:56:37:54:01:89:69:9a:de:4c:3e:3d:81:78:d8:de:ee:
ec:03:9f:19:c3:c3:61:4e:65:81:1b:cb:20:82:17:07:e9:63:
3c:28:db:25:dc:17:08:13:95:32:5f:fc:48:b3:cc:69:a4:f8:
d7:f4:88:cd:72:64:7a:ae:ea:0a:3b:27:5e:a5:21:3b:35:28:
f0:f2:06:84:bd:9e:1a:e9:6b:f0:19:cd:7f:4b:0a:c1:93:31:
08:d5:c2:45:69:f5:eb:91:a3:54:31:67:36:26:70:92:11:5f:
e4:6a:ca:53:f7:19:68:08:e5:1e:8a:c7:0a:71:1d:25:4a:79:
bb:20:0f:bc:48:ae:32:32:ac:fc:f7:74:2b:22:a5:28:12:52:
4d:53:bd:ce:96:08:20:06:f2:55:f6:04:03:ac:74:6a:35:14:
9a:b9:7d:c2:f4:8e:9f:99:84:48:e0:bd:e1:6d:39:a1:33:ab:
6d:b4:f5:03:34:9d:9f:d7:6f:ab:7a:bb:65:29:46:d1:36:c2:
7f:4d:dd:34:56:c4:b3:d6:0e:f1:95:89:b5:74:f2:11:0a:d2:
7c:23:9a:be:eb:76:72:a7:85:15:1c:b3:3d:a7:50:49:0b:e6:
25:f0:eb:17:d4:36:bd:2d:a2:73:f5:4a:97:46:3e:0c:5e:89:
61:d8:46:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIXaRofiQIyN6fO86BLhBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YmEzZjgwMDM5YjllNzg0Y2ZiMjRiZjJjN2RkYjI0ZTE5
MDBhNzYwHhcNMjUwMTAyMDM0ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTdhNDEzZDRmZWE1M2M0MzU2YmFlNjFhMTQzMDczODE0OWU3ZDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO+/Z16tDz3mHAooymGrMhLEZxgr
NR9UcBSwNFWaNJ/2lO/nXHzcIzzGrxPS54ajMMIPzuSumR0psywB1wWkQQDDcdB7
nBESZiEgyH2lIS1UB0TImrEVRe8CoKrxspTxEbHFPAwpQGa3rT2OFkPS1NZG0vZa
2ek58JOmuP2kRuXFJlzq2yVEIpkgwkGLvB9P1dKYtwitdS80LGi7rHB+RUJYBsa8
jObHbpnu8Ye9Gmtokh879xZ46YKhkmX3fXA6Kl92WjPC1AkxuI0VOzA1Tli0Sxxz
PS9kq6bpQLVMz87V5Zltn/FG7CrGZcm4IAOVhZff8S1C6UlvMlasfZLtmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP56QT1P6lPENWuuYaFDBzgUnn10MB8GA1UdIwQY
MBaAFEa6P4ADm554TPskvyx92yThkAp2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWIt
ODlhY2UzODIyMGZiLzEvX25wQlBVX3FVOFExYTY1aG9VTUhPQlNlZlhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWItODlhY2UzODIyMGZi
LzEvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuT7LMA0G
CSqGSIb3DQEBCwUAA4IBAQCWb1Y3VAGJaZreTD49gXjY3u7sA58Zw8NhTmWBG8sg
ghcH6WM8KNsl3BcIE5UyX/xIs8xppPjX9IjNcmR6ruoKOydepSE7NSjw8gaEvZ4a
6WvwGc1/SwrBkzEI1cJFafXrkaNUMWc2JnCSEV/kaspT9xloCOUeiscKcR0lSnm7
IA+8SK4yMqz893QrIqUoElJNU73OlgggBvJV9gQDrHRqNRSauX3C9I6fmYRI4L3h
bTmhM6tttPUDNJ2f12+rertlKUbRNsJ/Td00VsSz1g7xlYm1dPIRCtJ8I5q+63Zy
p4UVHLM9p1BJC+Yl8OsX1Da9LaJz9UqXRj4MXolh2EYs
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:28 2025 by rpki-client