Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/f1jshjvqQC1or_SUp4VaHxnz0vg.roa
File: f1jshjvqQC1or_SUp4VaHxnz0vg.roa (raw, json)
Hash identifier: HU3zUMPmn0Fu+40+47r6GzF5dnxd/KAN0UXFve0A1sw=
Subject key identifier: 7F:58:EC:86:3B:EA:40:2D:68:AF:F4:94:A7:85:5A:1F:19:F3:D2:F8
Certificate issuer: /CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Certificate serial: 0194244533DA8E311351BE3B5D24C04712FF
Authority key identifier: 8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/f1jshjvqQC1or_SUp4VaHxnz0vg.roa
Signing time: Wed 01 Jan 2025 23:48:22 +0000
ROA not before: Wed 01 Jan 2025 23:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62132
IP address blocks: 185.46.108.0/22 maxlen: 22
185.46.108.0/24 maxlen: 24
185.46.109.0/24 maxlen: 24
185.46.110.0/24 maxlen: 24
185.46.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:33:da:8e:31:13:51:be:3b:5d:24:c0:47:12:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Validity
Not Before: Jan 1 23:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f58ec863bea402d68aff494a7855a1f19f3d2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2f:0c:c1:c7:c5:08:10:18:1e:97:1d:a4:e5:
72:44:b1:7d:7f:a8:7c:88:06:64:27:ac:ff:84:8e:
1c:b7:d3:2e:82:e7:3c:78:b3:4f:de:08:16:2a:85:
55:8c:a1:c3:a2:1f:ac:ad:2c:e1:fc:8e:6b:5f:41:
f2:74:a4:a7:c1:dd:4b:cd:a1:61:e6:82:47:34:59:
ba:2d:b4:ca:fb:6c:05:91:6e:ae:81:34:94:12:01:
cf:15:fd:ab:eb:71:e7:9f:a1:24:30:2f:11:7c:03:
06:1b:5f:b8:44:9a:41:96:fb:fe:c6:fa:75:5c:18:
b6:2b:b3:4c:2a:fc:d6:ec:d1:36:ef:e3:ff:ea:be:
82:d9:13:4b:84:42:47:c3:37:6d:3a:71:58:f5:e1:
fe:4c:db:6e:1b:eb:3b:75:e2:81:43:45:89:9d:26:
4c:2c:0e:d0:47:b5:6f:39:e1:5f:e3:11:f1:93:1d:
73:bd:d8:eb:6c:b4:64:f0:f6:3d:7b:c7:fa:4c:8f:
ea:2b:1f:89:e0:61:bf:7d:95:49:58:bc:61:b7:1e:
f8:48:bd:c9:d4:d2:01:ea:17:ef:8f:a6:9f:41:bc:
34:87:a4:d7:11:3e:23:fc:d2:6c:1c:9e:8a:6a:d4:
55:78:a8:63:e2:8f:41:48:78:0c:ef:46:bf:94:66:
3d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:58:EC:86:3B:EA:40:2D:68:AF:F4:94:A7:85:5A:1F:19:F3:D2:F8
X509v3 Authority Key Identifier:
keyid:8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/f1jshjvqQC1or_SUp4VaHxnz0vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.108.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:98:c9:9d:be:23:ce:fe:bc:51:14:ef:38:78:44:b6:64:e8:
88:6d:b2:26:b8:b3:9a:6d:f6:31:53:90:03:b1:e8:06:c4:ee:
5c:2e:e2:1b:37:3b:aa:78:c2:41:ce:13:a6:c6:7e:c5:55:14:
27:62:2f:aa:56:d5:97:c6:5e:ce:01:cf:20:0e:ff:ba:fb:5c:
ac:55:b5:ed:4e:ea:24:60:a8:21:bd:b2:b7:8c:63:3f:eb:e9:
ce:32:01:3d:3c:fe:d9:aa:01:46:11:84:74:42:c0:73:d1:5f:
b3:62:da:a0:b3:cf:c3:25:f2:e2:c5:a3:4e:2f:cc:47:49:b7:
4b:1e:3c:dc:a2:73:84:34:ef:91:f4:67:11:74:a9:c4:e5:f1:
2d:13:84:ee:46:55:88:24:a8:14:a4:7f:d2:d9:c7:00:99:dc:
6e:de:7f:68:10:82:c6:35:70:39:aa:02:9d:fb:b5:71:0b:5d:
14:f5:9d:60:7d:8f:f3:6a:db:3a:4a:63:70:6e:94:89:c1:70:
e2:cd:40:68:cf:b2:da:e1:3a:28:48:f5:1f:7c:c4:cf:c7:e4:
d3:38:39:4d:97:9e:42:9b:6f:48:53:e3:28:a8:94:21:4c:4c:
e3:af:33:19:d0:90:7e:a1:4b:bf:3a:a0:c6:84:8b:46:f3:34:
93:8a:36:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:49 2025 by rpki-client