Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/Rg6hH-WpB5JizUzL9_m7Rs15AT8.roa
File: Rg6hH-WpB5JizUzL9_m7Rs15AT8.roa (raw, json)
Hash identifier: evDadyMTuwtAOSC/b6PGvpRRvlRN1DP+6W56r0BhqXQ=
Subject key identifier: 46:0E:A1:1F:E5:A9:07:92:62:CD:4C:CB:F7:F9:BB:46:CD:79:01:3F
Certificate issuer: /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Certificate serial: 0194266C1E368CA1122FFF7C2614D88138C2
Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/Rg6hH-WpB5JizUzL9_m7Rs15AT8.roa
Signing time: Thu 02 Jan 2025 09:50:07 +0000
ROA not before: Thu 02 Jan 2025 09:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41073
IP address blocks: 89.207.56.0/21 maxlen: 24
185.54.104.0/22 maxlen: 22
2a00:1ed8::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1e:36:8c:a1:12:2f:ff:7c:26:14:d8:81:38:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Validity
Not Before: Jan 2 09:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=460ea11fe5a9079262cd4ccbf7f9bb46cd79013f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9f:9f:f6:20:f6:16:9f:44:fe:e5:af:0e:af:
52:a0:f9:0b:1c:05:48:81:8b:e7:09:68:28:06:f8:
58:aa:1d:51:db:87:8d:f2:cc:40:02:55:10:3f:c1:
50:68:44:5a:1d:10:9b:86:96:1a:31:a8:fa:57:91:
9f:48:bb:8f:b4:da:91:ec:1c:e3:7e:cf:5b:54:e8:
3d:38:3c:3d:3a:e8:fe:2e:d3:ac:81:c6:d3:bb:bd:
f4:0f:33:ca:74:74:6a:b3:0e:3f:c3:90:04:ef:08:
f1:be:dc:3d:02:5b:fe:a0:28:e5:9f:55:83:63:f9:
a4:33:e8:ef:ca:89:10:9a:50:97:94:3c:a3:20:1a:
d2:c3:ae:5e:14:dc:f6:af:53:02:dd:e6:0f:65:d5:
18:9d:a7:3d:3b:03:89:a5:a1:1d:f9:90:8d:e0:95:
4f:1b:97:65:9e:e9:34:20:e9:04:cd:13:12:a0:36:
83:af:2e:88:c7:9d:34:e9:fa:2b:94:c5:b8:6a:7a:
bb:46:8c:2f:d4:b9:0e:ed:71:cc:e5:7f:6f:ba:17:
d0:e7:2d:5e:f8:bf:fe:48:39:d5:37:dc:5a:5f:e6:
8c:a8:87:72:72:d0:c2:18:dc:1b:05:83:ce:33:47:
1e:7f:d9:5d:37:6d:3b:a9:22:ce:9d:6a:cf:bc:1f:
b5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0E:A1:1F:E5:A9:07:92:62:CD:4C:CB:F7:F9:BB:46:CD:79:01:3F
X509v3 Authority Key Identifier:
keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/Rg6hH-WpB5JizUzL9_m7Rs15AT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.56.0/21
185.54.104.0/22
IPv6:
2a00:1ed8::/29
Signature Algorithm: sha256WithRSAEncryption
93:dd:cf:75:2d:22:5d:79:53:d5:6a:e7:29:97:aa:f5:1c:30:
b7:7a:a4:c9:55:12:ea:ce:bd:3e:2e:8d:d3:8b:8b:b3:61:15:
4c:19:3d:0e:4f:a2:4d:86:4c:f9:08:40:93:54:7f:35:64:ec:
09:87:25:e3:5a:fc:f1:25:60:34:62:54:c4:b3:38:9e:01:c1:
a1:15:b6:08:9a:04:b9:6b:d0:c3:8e:7f:98:77:29:4b:31:7d:
27:43:4f:82:5a:14:d1:97:02:6f:eb:90:5a:82:e1:60:12:14:
00:19:d7:68:b0:2e:de:b5:69:39:b0:cb:ae:11:d8:69:70:95:
96:7b:86:d8:f1:d1:1e:7a:d5:ca:f8:9c:3d:8c:c2:25:e8:26:
95:0a:4b:2d:fd:a0:0c:26:86:7d:c1:b0:67:94:0a:b5:57:23:
50:f8:0a:a1:97:db:0b:7f:80:a1:cc:41:0b:a3:5e:5d:d1:d3:
2f:31:64:57:1f:20:82:56:a4:a8:f0:5a:ee:fc:dd:bf:9c:0f:
bb:a2:0e:5b:4a:d6:7c:3d:bd:80:fa:50:1e:f2:b9:c4:ba:7c:
c4:be:0f:c0:33:1d:e3:ff:ea:3a:ee:da:84:bc:65:5a:e2:2b:
45:95:d0:0c:83:e3:61:14:2c:38:90:9d:d2:67:75:8a:d8:bd:
df:54:71:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:24:55 2025 by rpki-client