Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/r6JJsn0eajhp7sOEpygQyvJsZMU.roa
File: r6JJsn0eajhp7sOEpygQyvJsZMU.roa (raw, json)
Hash identifier: cxRi0/gis8Ga5ROT0QtFOFL60z01cmboldkWqbkptMA=
Subject key identifier: AF:A2:49:B2:7D:1E:6A:38:69:EE:C3:84:A7:28:10:CA:F2:6C:64:C5
Certificate issuer: /CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Certificate serial: 01941FFA322FD284666782C335A45DD0D74C
Authority key identifier: 7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/r6JJsn0eajhp7sOEpygQyvJsZMU.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199864
IP address blocks: 185.46.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:32:2f:d2:84:66:67:82:c3:35:a4:5d:d0:d7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afa249b27d1e6a3869eec384a72810caf26c64c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:b8:1e:14:4a:2e:48:94:14:ff:a9:89:8d:
81:b0:77:05:0b:36:c0:e5:2b:1b:d4:77:28:82:4d:
79:d7:ea:b0:bd:6a:ee:13:fe:a5:b2:65:5e:85:93:
c9:2a:98:03:68:31:01:b3:0b:7d:ea:cd:76:3f:a3:
fd:a4:bd:41:ff:5c:fb:7e:20:3c:db:81:6e:26:57:
42:f5:68:84:c2:ca:69:b4:bc:05:20:76:df:10:4e:
59:72:00:b7:5d:f6:cd:01:46:a6:ed:c9:cb:8f:63:
1b:32:2a:3b:89:3d:7e:c6:48:3a:19:d5:35:21:24:
ff:67:5e:3f:c1:97:4b:ef:d1:22:d7:a6:43:5e:b7:
14:a2:a9:cd:63:13:81:5e:c5:46:36:86:a0:ff:55:
8e:7f:ab:c2:df:d8:ca:8c:de:0e:19:d5:de:cc:7e:
31:b7:52:5d:38:b3:b1:10:11:50:34:5f:79:a2:a0:
97:29:ca:f4:e6:28:02:12:8a:aa:3f:7b:d5:0c:84:
38:b1:76:87:60:1c:9c:5a:3b:7a:5b:ca:cd:c8:fe:
e8:6c:5f:4d:35:36:f9:d3:5c:84:67:ac:ce:3a:17:
6f:e2:5c:f8:50:bb:4c:63:c1:52:68:07:af:1a:eb:
78:73:11:c9:81:25:9c:2c:de:d7:27:c3:99:2c:b7:
4f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A2:49:B2:7D:1E:6A:38:69:EE:C3:84:A7:28:10:CA:F2:6C:64:C5
X509v3 Authority Key Identifier:
keyid:7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/r6JJsn0eajhp7sOEpygQyvJsZMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.27.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e1:89:f6:f9:15:ed:cd:ee:e6:f5:87:f9:70:df:a1:bf:12:
1d:fa:7e:56:86:44:45:ea:f7:42:96:2f:23:18:96:61:11:d2:
16:4d:f0:f8:9c:68:2b:87:4c:68:cb:b7:88:ac:e6:36:9d:ec:
a1:4a:67:81:3c:99:d6:e1:09:29:af:32:73:7b:90:3e:33:2c:
ce:91:3d:06:75:ed:7a:76:4a:99:29:ec:1a:be:51:34:8c:44:
67:fc:58:b4:d6:1a:17:42:a4:d0:81:67:7d:d7:25:72:d6:ef:
04:1a:69:cd:d8:8b:bd:e7:8c:e5:ee:26:8d:8c:82:ba:85:7f:
4a:a5:92:ba:9f:41:4c:b7:b0:91:b3:dc:91:a2:28:94:ff:dc:
e1:19:a7:16:de:1d:0c:ca:d5:ce:b4:97:4e:86:56:c5:dc:d2:
3f:4f:c3:d6:47:4b:b4:9b:5f:94:62:7d:0a:49:8d:ca:51:3c:
6a:b8:01:af:53:8b:0e:26:44:a7:8e:97:a8:92:80:f2:f0:c3:
9c:1e:30:1c:14:82:ee:6b:c7:f1:de:a3:53:d5:13:43:9d:a8:
3e:9f:0f:0d:ba:84:c9:93:93:3d:8a:ba:47:83:b0:a9:eb:46:
eb:0e:85:ca:25:d6:69:4c:58:73:ac:de:66:d3:d0:e8:f3:d0:
11:6e:02:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:40:04 2025 by rpki-client