Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/RrQG9mTNvqijfpK9hxxi5arQQl8.roa
File: RrQG9mTNvqijfpK9hxxi5arQQl8.roa (raw, json)
Hash identifier: 68l7WOhFiSwMdfEHVW7iQtxBS25LLIy1s/fmM858aaI=
Subject key identifier: 46:B4:06:F6:64:CD:BE:A8:A3:7E:92:BD:87:1C:62:E5:AA:D0:42:5F
Certificate issuer: /CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Certificate serial: 019425FC379FE26ABBF48EE24D31F3341BE6
Authority key identifier: 4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/RrQG9mTNvqijfpK9hxxi5arQQl8.roa
Signing time: Thu 02 Jan 2025 07:47:53 +0000
ROA not before: Thu 02 Jan 2025 07:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199937
IP address blocks: 185.42.68.0/23 maxlen: 23
185.42.71.0/24 maxlen: 24
2a04:8e80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:37:9f:e2:6a:bb:f4:8e:e2:4d:31:f3:34:1b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Validity
Not Before: Jan 2 07:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46b406f664cdbea8a37e92bd871c62e5aad0425f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f7:d4:f9:07:d9:ff:e4:83:df:03:5f:00:1f:
c2:91:18:bb:4e:24:e0:02:0b:d9:91:25:1b:3f:ae:
a7:64:cb:b9:b6:0c:92:0f:f5:2c:3b:93:cc:82:a8:
a4:34:ab:23:ff:93:88:e9:71:a1:35:f7:e9:22:a8:
97:3e:6d:35:8c:f1:ba:37:86:d6:94:6d:de:b4:7e:
77:f7:1a:71:34:db:1b:87:81:ff:3c:18:62:de:2e:
20:9c:98:81:eb:f6:8f:6a:8e:1d:ad:8c:de:b0:66:
af:07:a7:32:48:54:be:2c:d0:67:3e:d1:14:23:f9:
3c:3b:0e:c7:29:e6:ea:fb:fe:52:a7:7a:7d:8c:34:
cf:15:f4:ea:12:04:8a:9c:1a:a4:1a:0d:9f:4b:94:
e0:10:cd:2b:25:f2:5c:26:bd:32:0a:79:f9:90:ee:
87:7c:81:a1:42:49:79:56:1d:62:82:d5:6d:39:7b:
49:64:d3:2b:3a:b9:91:08:22:30:35:1d:b5:8e:a1:
22:6e:e2:45:38:f9:a0:3d:97:7b:21:54:0e:30:14:
65:fd:f0:bf:21:e5:13:a5:90:8e:b8:f7:ce:e7:bc:
8b:d4:6f:22:cd:a9:09:9e:10:e0:54:9f:32:2b:db:
69:5e:c6:b9:c7:9b:f2:41:60:56:2a:c9:fc:ea:cb:
33:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B4:06:F6:64:CD:BE:A8:A3:7E:92:BD:87:1C:62:E5:AA:D0:42:5F
X509v3 Authority Key Identifier:
keyid:4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/RrQG9mTNvqijfpK9hxxi5arQQl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.68.0/23
185.42.71.0/24
IPv6:
2a04:8e80::/48
Signature Algorithm: sha256WithRSAEncryption
27:26:50:78:fa:f4:38:a3:a7:36:dd:5e:70:13:ea:90:41:60:
29:1b:09:50:34:ee:a4:cb:96:6b:71:a6:af:32:01:3b:a4:4b:
26:8d:6c:e7:eb:e5:dd:03:4e:14:8e:61:7e:0f:b2:6a:18:6f:
27:b8:61:0a:b8:36:a2:7c:a0:90:ca:47:6f:99:da:6b:8a:07:
55:e5:ff:02:3e:7f:fc:ff:66:2f:8a:1c:ff:fc:e4:8b:5a:cc:
d1:64:72:33:dc:29:4a:69:d9:e6:00:e6:9c:6e:6d:17:ad:c6:
2c:a1:3c:20:2d:93:44:ab:e4:cc:37:25:a5:15:9d:ff:08:92:
c5:b7:04:c6:3f:54:93:3b:39:88:38:f4:c9:06:17:0e:20:03:
14:d6:d0:6f:90:5b:1f:ab:93:5a:90:1d:3d:ac:f9:a4:08:2e:
df:84:9f:1d:0c:44:b7:3b:30:f0:71:c7:25:42:ba:f5:64:94:
3b:4b:59:22:84:21:ba:07:e7:88:4b:fa:14:a6:a1:c8:08:df:
79:d3:d0:4f:7b:9a:8f:a2:72:87:f9:ee:3f:e2:8e:cf:a8:97:
f0:a5:bc:d0:3b:97:c0:04:11:21:de:16:ab:91:a7:74:45:b0:
0b:db:1f:69:aa:2b:61:03:5e:ba:04:9b:67:76:9a:e9:ee:e9:
f0:c1:4b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:33 2025 by rpki-client