Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/ol0yF-2yJSflw_ZYhiJJY4fxMnU.roa
File: ol0yF-2yJSflw_ZYhiJJY4fxMnU.roa (raw, json)
Hash identifier: uwqj4CFvKVNkmhKMglSF22ZAXWwfKXlh6tWeNXdxYbE=
Subject key identifier: A2:5D:32:17:ED:B2:25:27:E5:C3:F6:58:86:22:49:63:87:F1:32:75
Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial: 019425217A406A477A96538AEE4D34946F35
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/ol0yF-2yJSflw_ZYhiJJY4fxMnU.roa
Signing time: Thu 02 Jan 2025 03:48:57 +0000
ROA not before: Thu 02 Jan 2025 03:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201513
IP address blocks: 213.184.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7a:40:6a:47:7a:96:53:8a:ee:4d:34:94:6f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Validity
Not Before: Jan 2 03:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a25d3217edb22527e5c3f6588622496387f13275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:70:a8:60:d4:15:97:71:4d:3a:4c:15:3e:
11:c8:6e:a5:57:da:bf:37:52:67:d1:6d:2a:f6:7c:
75:24:11:90:e0:fa:19:90:5f:94:99:0e:db:93:ef:
57:47:ce:4d:02:6b:4e:ce:ef:bf:e9:11:d7:67:86:
99:0a:39:78:b5:9c:20:a6:74:7c:a2:1f:b6:12:75:
9f:41:a9:58:43:cf:d2:fd:c8:f7:9d:6b:37:99:06:
d2:0f:a0:b7:92:b9:dd:f2:96:71:b5:16:c8:a4:f4:
53:38:22:c2:7a:01:70:ef:5a:a9:f7:7d:bb:5e:92:
3a:77:45:9d:d1:ad:df:07:85:78:4c:d7:4f:f7:33:
d3:9c:b3:dc:40:27:0b:e6:e8:a3:a9:12:3a:d4:d9:
96:ae:7f:29:18:69:ee:89:0f:b6:dd:2c:a2:ca:31:
b9:7e:8b:bc:5a:29:1e:61:71:ca:74:a3:f8:e6:62:
17:c2:08:5d:89:8c:79:03:c9:d3:f3:9d:93:4d:b7:
76:55:33:d6:48:98:9a:25:dc:43:36:d4:f4:23:ab:
c8:6d:8f:44:bb:56:58:bf:52:e9:34:f8:5c:41:a6:
4c:64:3a:d8:63:27:4f:1a:1a:c5:86:bf:7b:5b:4b:
38:18:2a:3f:27:d3:ae:21:87:48:95:59:a1:2b:19:
96:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5D:32:17:ED:B2:25:27:E5:C3:F6:58:86:22:49:63:87:F1:32:75
X509v3 Authority Key Identifier:
keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/ol0yF-2yJSflw_ZYhiJJY4fxMnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.184.154.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:29:54:e0:32:05:dd:d6:bd:5c:5f:02:25:08:9e:ad:fa:1d:
27:76:bf:dd:86:2d:20:12:36:c9:7d:ed:8f:3d:5f:22:99:f1:
39:b1:73:70:4b:de:0d:87:c4:62:a8:ec:c6:cb:c8:02:35:57:
1b:71:71:ee:bf:1e:81:6b:f8:b8:bd:6d:6b:79:83:76:2c:c0:
47:a9:c8:40:30:f6:57:dc:b7:4e:5a:b1:ef:29:ea:47:63:c5:
d0:42:7b:1e:a3:a9:1d:d9:4b:4b:be:da:e7:e1:ac:a7:39:df:
e2:d0:3f:4f:da:0f:b9:84:dc:1a:7e:2d:60:02:a2:3a:9d:51:
6e:9b:f2:50:b7:27:77:7a:ad:36:1a:23:68:79:61:22:a5:b2:
6b:c8:39:d9:28:0f:0b:75:63:14:70:02:8c:6d:35:c4:3d:57:
d6:3f:3f:93:87:2a:21:f4:4c:82:6c:8f:34:c3:61:34:bb:d6:
e2:aa:c9:ce:86:37:12:18:00:5b:4e:9c:a4:23:39:90:e0:05:
af:f9:79:b8:85:9a:80:0b:f5:a1:bb:f1:c2:ca:fd:59:6e:31:
b1:ae:46:9d:c1:00:b6:6d:0d:53:0d:0f:34:42:ab:54:95:d8:
be:4b:82:11:a0:9b:12:e7:60:49:b3:2a:16:8c:4d:e7:94:f1:
a4:59:bd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:46 2025 by rpki-client