Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/fgZqb1eXsifotU80oWGCNeapyHo.roa
File: fgZqb1eXsifotU80oWGCNeapyHo.roa (raw, json)
Hash identifier: tNyodLqu2MH+TIN/vy+n1/1LvfEmsJX7JG+2Qz7k9Us=
Subject key identifier: 7E:06:6A:6F:57:97:B2:27:E8:B5:4F:34:A1:61:82:35:E6:A9:C8:7A
Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial: 01941F8C16FFE3AB3BF49152FE6F4A6C5130
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/fgZqb1eXsifotU80oWGCNeapyHo.roa
Signing time: Wed 01 Jan 2025 01:47:42 +0000
ROA not before: Wed 01 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 46.17.72.0/21 maxlen: 24
46.17.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:16:ff:e3:ab:3b:f4:91:52:fe:6f:4a:6c:51:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e066a6f5797b227e8b54f34a1618235e6a9c87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9d:c9:91:0c:6d:3b:86:f1:3e:ee:08:fd:c3:
0e:da:4e:10:22:02:8d:39:e7:7a:13:c6:9d:b5:14:
d0:6f:3f:2a:85:1f:35:bd:b8:7b:50:f8:0e:cd:e2:
70:24:e5:47:a3:cd:00:9a:00:4d:0a:c5:ad:cb:05:
92:f0:81:fe:6a:32:25:eb:12:c2:32:3f:1e:16:d3:
1f:16:34:84:f7:90:31:47:db:fc:fa:7b:15:f8:9e:
c8:04:9a:c1:2d:47:65:36:ca:c2:2b:bf:aa:98:da:
60:ec:b2:9c:ca:39:c8:b1:af:f5:0d:f9:00:9d:d2:
62:ad:86:46:db:30:63:a7:78:4d:8a:89:fb:c0:7b:
a1:39:45:3e:4d:3c:7b:1f:04:24:d1:c7:b5:13:6f:
48:aa:76:e9:cc:04:4a:f9:71:8b:50:b2:3f:66:ac:
ae:38:49:25:73:b7:e8:c0:70:53:37:c5:68:15:3a:
0a:8b:ac:c9:c7:20:4b:f3:3a:73:78:3f:26:60:45:
de:e0:28:72:ab:b0:96:7d:7f:2f:cf:a9:56:7f:aa:
57:af:75:97:3c:58:e7:db:9a:b3:b8:bc:2c:4b:f4:
8c:d9:fe:c9:a5:f9:ac:98:0d:bf:ca:a7:b5:7d:c9:
c4:5d:2e:cf:3c:30:6e:7f:c7:7e:79:a6:00:d7:2a:
0d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:06:6A:6F:57:97:B2:27:E8:B5:4F:34:A1:61:82:35:E6:A9:C8:7A
X509v3 Authority Key Identifier:
keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/fgZqb1eXsifotU80oWGCNeapyHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.72.0/21
Signature Algorithm: sha256WithRSAEncryption
04:a8:d8:fe:40:45:34:7a:f5:c7:4e:16:1e:05:f6:80:b5:99:
0c:5e:b0:03:57:37:51:bb:3c:16:e4:51:ea:b1:f5:31:ca:2f:
9e:94:d3:b5:49:80:74:b4:68:53:0c:d2:aa:fa:37:42:56:51:
1e:4c:c8:71:50:4f:d9:44:85:ba:3a:66:c8:73:b4:be:fc:d8:
62:46:c2:44:22:53:ba:4d:da:75:99:47:88:56:54:c9:58:33:
d1:76:17:6e:f0:45:cb:4c:03:e1:b0:cb:ec:bc:50:b0:61:57:
6e:6d:83:86:5e:9d:94:5d:5b:c6:04:84:92:86:49:ec:7f:8a:
98:bb:ca:d9:07:b0:54:cc:c5:2e:62:26:39:0a:df:28:0e:b3:
92:2e:7b:e3:95:b6:90:fc:ec:29:bd:0c:83:b2:9c:ef:92:f4:
0a:1c:19:1c:51:9c:f2:76:1f:91:ca:25:92:11:71:31:00:b4:
34:13:78:05:34:3d:a2:b6:c6:eb:53:c3:dc:cf:34:6b:51:c7:
9c:5e:fc:57:95:51:03:22:94:34:8e:6a:b8:68:f5:a9:89:7f:
cb:7b:bb:fc:88:ae:4f:6e:d7:f9:eb:69:5a:6d:12:68:92:82:
b6:92:b3:58:4d:f0:f6:f4:39:17:13:c8:5a:63:86:ba:b4:48:
c0:9d:f0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:35 2025 by rpki-client