Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/NYoZjbIugQuxKbQ3AOfllIqIvGI.roa
File: NYoZjbIugQuxKbQ3AOfllIqIvGI.roa (raw, json)
Hash identifier: MP3bZZbgC6I+guroq7hjxBmjZFMjOlVQchFUz6yhGNE=
Subject key identifier: 35:8A:19:8D:B2:2E:81:0B:B1:29:B4:37:00:E7:E5:94:8A:88:BC:62
Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial: 019422FC1E952F6BA671DB4DB678E76795A0
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/NYoZjbIugQuxKbQ3AOfllIqIvGI.roa
Signing time: Wed 01 Jan 2025 17:48:55 +0000
ROA not before: Wed 01 Jan 2025 17:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61180
IP address blocks: 185.46.173.0/24 maxlen: 24
185.46.173.0/27 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1e:95:2f:6b:a6:71:db:4d:b6:78:e7:67:95:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
Validity
Not Before: Jan 1 17:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=358a198db22e810bb129b43700e7e5948a88bc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:00:79:85:24:8e:30:62:45:79:81:51:f9:3e:
32:93:f4:cb:b6:49:c7:25:c8:9f:60:02:40:23:0d:
59:94:af:74:1b:cb:34:f0:42:1e:18:6d:77:cc:52:
a3:7e:56:b1:2c:8f:55:85:ff:8d:7e:7a:03:02:eb:
3f:ae:55:1f:20:4a:98:b6:5a:23:6e:29:37:c5:dd:
8f:91:7d:cb:dc:8a:f9:12:c2:ac:e9:2b:67:cb:86:
c3:f0:f3:e9:a1:1a:ea:1e:6f:a1:29:dc:f7:17:a2:
58:59:ba:78:08:86:0f:3c:2e:56:a6:d1:70:64:f6:
f2:ff:dd:31:c7:f6:a8:21:e4:df:73:13:7b:34:99:
07:d5:5a:a3:05:67:fd:dc:8a:2b:e9:c6:a3:51:40:
69:78:3b:06:15:85:0c:b8:c5:fd:56:2c:62:7f:34:
27:ec:49:d1:1f:86:3e:b9:f6:7e:20:43:15:ff:59:
a3:24:39:71:6d:69:bd:13:7b:4b:76:81:27:67:6a:
b4:67:9d:c9:b3:01:6f:10:b3:2f:cb:15:50:ac:6a:
15:d0:d6:d5:04:6d:37:f6:5e:85:e6:d7:23:fa:83:
5a:51:48:b1:27:b9:a9:60:cb:a8:4d:84:36:9e:89:
86:a3:51:2e:e1:69:c3:9c:1e:40:7d:43:0e:d5:2b:
93:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8A:19:8D:B2:2E:81:0B:B1:29:B4:37:00:E7:E5:94:8A:88:BC:62
X509v3 Authority Key Identifier:
keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/NYoZjbIugQuxKbQ3AOfllIqIvGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.173.0/24
Signature Algorithm: sha256WithRSAEncryption
38:05:5c:a8:d3:0f:2a:50:83:a9:b8:76:66:b6:69:95:30:84:
d4:5b:8d:5c:96:44:52:38:e0:c9:23:14:c5:63:e0:bd:bc:48:
be:a0:1a:55:e0:7f:e2:62:23:1f:a8:20:41:3c:66:3f:b8:3b:
56:ee:67:d7:9a:0c:69:76:3b:2e:ca:0d:6c:7a:ff:37:3f:10:
30:2d:e1:48:7c:d6:0b:d6:4c:b1:4b:1d:60:4b:c3:e0:2b:c6:
b9:0f:74:11:49:d9:4a:14:a8:82:76:a4:f8:0e:4a:a5:39:3c:
a1:79:d6:fa:bf:c2:c5:b9:c2:31:ee:e9:31:08:37:1b:71:4e:
85:76:30:3c:ee:b1:3b:82:0b:5e:9d:f7:36:c4:4f:f8:cc:1c:
8d:a4:3e:3f:5a:76:dd:3d:61:5c:bc:18:bf:54:43:6c:9e:02:
d5:a9:5c:fe:9e:e4:03:55:de:cd:24:4f:cd:bc:90:1e:0b:2e:
d6:3b:b1:b6:44:ff:fe:ca:0e:e1:33:50:8a:90:1a:b7:df:d4:
c8:93:03:29:b2:0c:2e:8c:df:d8:47:59:22:b8:7a:72:5c:1f:
33:62:5e:a1:e4:16:74:a7:d0:79:db:c8:92:c2:33:cd:ad:89:
a1:e8:48:48:0b:fb:77:8f:29:d8:2a:45:f4:d5:1e:82:e1:7f:
ae:cf:11:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:23 2025 by rpki-client