Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/fVZny3FRspGg7D4Ss3AUbX0JyBI.roa
File: fVZny3FRspGg7D4Ss3AUbX0JyBI.roa (raw, json)
Hash identifier: SocyXocZHSo8f5zsAWiffJrBZyiPOdy55HQXZcolvh4=
Subject key identifier: 7D:56:67:CB:71:51:B2:91:A0:EC:3E:12:B3:70:14:6D:7D:09:C8:12
Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Certificate serial: 019420685B7091BDC10AC2A833EF3C400E6C
Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/fVZny3FRspGg7D4Ss3AUbX0JyBI.roa
Signing time: Wed 01 Jan 2025 05:48:17 +0000
ROA not before: Wed 01 Jan 2025 05:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34702
IP address blocks: 185.46.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5b:70:91:bd:c1:0a:c2:a8:33:ef:3c:40:0e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Validity
Not Before: Jan 1 05:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d5667cb7151b291a0ec3e12b370146d7d09c812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:f7:df:59:3d:2c:dc:80:44:78:f7:08:0a:
92:7d:d6:af:78:31:52:de:4c:9b:0c:a4:80:38:25:
8e:a8:c0:69:f8:8e:be:81:e7:3b:fd:4e:f3:fc:93:
86:99:01:3e:a0:f8:b9:b4:94:8b:ff:26:96:2a:f6:
f5:c7:76:b0:64:8a:f2:09:aa:99:9b:67:7a:42:80:
42:49:dd:93:da:17:36:2a:89:d0:ce:cb:85:e0:91:
6b:9c:92:23:08:0c:04:2b:ce:fe:6d:56:90:51:d2:
94:78:c6:fb:c2:8b:79:03:06:5a:75:00:e8:70:7e:
e6:f3:e2:1d:60:5a:33:f6:3a:e2:0a:34:dc:b9:09:
3b:4b:d1:83:9f:9b:99:88:08:dc:0a:59:1a:ee:54:
f3:fb:fb:6b:e2:02:9a:b9:67:cb:e2:4a:24:a7:b5:
b4:87:9d:0f:b2:85:eb:1b:0f:44:cd:82:98:ae:04:
9b:38:be:9a:eb:23:ea:aa:eb:11:58:60:52:80:bc:
fa:38:52:52:d2:61:97:e3:fb:a2:ce:77:98:55:d9:
79:a8:0e:09:3f:4b:d7:45:5f:f4:e0:88:46:21:19:
c8:06:fa:14:63:03:a3:7f:56:25:e1:47:a4:b5:09:
a9:33:3d:9e:7d:98:50:3e:19:26:52:5b:75:81:18:
02:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:56:67:CB:71:51:B2:91:A0:EC:3E:12:B3:70:14:6D:7D:09:C8:12
X509v3 Authority Key Identifier:
keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/fVZny3FRspGg7D4Ss3AUbX0JyBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.20.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:f8:c1:09:0b:2d:d5:5a:a8:27:34:36:b6:5f:8b:bb:af:23:
6e:98:70:f4:9e:b5:7e:07:b7:69:e3:e6:2d:cd:7b:84:81:23:
da:7f:d9:73:7a:6c:76:8b:cc:af:08:7d:1d:7f:f9:7a:0f:70:
0c:cd:94:3f:bf:5f:68:c4:bd:c2:d4:ca:98:5a:01:b3:cb:1a:
11:de:3c:7c:b1:09:1e:d8:1f:fd:78:ce:84:fe:67:c1:4f:62:
79:b6:bd:b4:f4:1e:fb:7b:24:2c:9c:cf:91:1a:39:08:52:d0:
2e:2c:c1:75:31:24:04:e1:22:89:6b:33:bd:ee:cb:49:1a:f4:
79:0e:10:ea:43:0e:b5:4a:da:18:54:94:ef:55:e9:b2:93:2c:
a0:1e:02:2c:9c:40:3c:c0:30:24:89:32:99:51:cb:59:57:fd:
4b:b8:49:19:0b:60:45:d6:ad:d4:e6:8c:1a:e1:ee:cc:ee:26:
06:f1:76:2a:9f:af:5e:3e:82:88:63:9e:28:c3:2a:43:19:a6:
f4:92:73:9d:df:98:cf:99:90:4a:91:a8:27:5f:40:39:3c:cd:
d5:53:fd:d9:60:14:1a:62:5b:fe:97:c6:62:6c:0c:dd:d3:c3:
d7:a9:87:93:01:c7:12:64:4c:d5:6f:d0:26:07:83:b4:bb:96:
9e:fe:5e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:14 2025 by rpki-client