Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/h4r6_-LfekfaLQxvVfPS9GkrY-s.roa
File: h4r6_-LfekfaLQxvVfPS9GkrY-s.roa (raw, json)
Hash identifier: MKC92jxp6SOhvoc6ixvO37EcmexSj94+zIUcFGaWU/w=
Subject key identifier: 87:8A:FA:FF:E2:DF:7A:47:DA:2D:0C:6F:55:F3:D2:F4:69:2B:63:EB
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 019548817BEA45015ACF2639F659C9B0FB7A
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/h4r6_-LfekfaLQxvVfPS9GkrY-s.roa
Signing time: Thu 27 Feb 2025 17:43:19 +0000
ROA not before: Thu 27 Feb 2025 17:43:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8708
IP address blocks: 46.102.175.0/24 maxlen: 24
85.204.242.0/24 maxlen: 24
86.105.233.0/24 maxlen: 24
86.106.113.0/24 maxlen: 24
89.34.178.0/24 maxlen: 24
89.38.236.0/24 maxlen: 24
89.43.53.0/24 maxlen: 24
89.43.63.0/24 maxlen: 24
89.46.93.0/24 maxlen: 24
93.114.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:48:81:7b:ea:45:01:5a:cf:26:39:f6:59:c9:b0:fb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Feb 27 17:43:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=878afaffe2df7a47da2d0c6f55f3d2f4692b63eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:47:70:5d:a5:ba:06:b4:6d:00:c0:b4:e0:
13:f5:3f:02:4c:4a:62:46:4b:d5:98:70:59:c2:9f:
d0:ad:88:45:26:b7:f0:c9:e8:88:6a:75:d9:f4:28:
85:3b:48:d6:1c:ae:9b:08:f4:9a:03:e5:bf:cc:39:
2f:46:c2:6f:83:7e:06:6f:11:51:2b:b1:8d:9a:48:
1d:ec:2d:3b:e1:98:e5:cf:58:8e:8d:9d:48:6d:b5:
d9:99:ec:10:b5:b0:7e:a8:44:93:a0:67:60:25:78:
36:5a:fd:21:61:b4:86:92:fb:69:2a:5e:dd:96:9c:
55:a9:b6:d3:ab:a3:b0:a4:c2:76:59:3e:2c:44:58:
a1:5f:8f:08:15:68:67:e4:05:8c:90:9d:0d:89:46:
82:54:e6:a5:d9:38:56:5f:39:ea:dd:92:37:66:79:
e2:84:72:e3:97:e5:54:0a:e9:73:e6:dc:58:db:a8:
78:2f:09:ae:17:b8:ee:29:bd:ec:24:9c:55:24:43:
85:40:30:32:c5:ee:06:c9:57:fe:28:6d:49:ca:7b:
7f:84:ea:0c:b5:4a:84:09:a0:2e:85:0e:62:10:11:
a5:b4:5b:66:f0:c5:70:06:56:a9:8b:0f:70:07:f1:
b7:3c:4f:3c:52:04:2b:b6:4f:10:62:70:77:c0:e7:
b2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8A:FA:FF:E2:DF:7A:47:DA:2D:0C:6F:55:F3:D2:F4:69:2B:63:EB
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/h4r6_-LfekfaLQxvVfPS9GkrY-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.175.0/24
85.204.242.0/24
86.105.233.0/24
86.106.113.0/24
89.34.178.0/24
89.38.236.0/24
89.43.53.0/24
89.43.63.0/24
89.46.93.0/24
93.114.57.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:b9:74:57:0d:c0:fd:77:03:17:96:e3:4f:9d:8b:80:39:4a:
a3:4f:6d:5f:00:f9:b5:f4:19:14:7c:e5:22:6e:e1:28:d4:86:
77:a2:aa:fd:21:48:ae:cf:6e:2a:31:aa:97:f8:38:6b:ed:e6:
42:04:89:7b:f2:33:4d:39:fe:06:26:a4:03:6a:79:fc:f1:7f:
3a:10:ae:68:d5:9c:7c:1c:a1:72:7e:3e:72:00:f4:22:cb:bf:
43:98:31:ff:6b:04:5a:b9:23:09:8e:fb:f6:4e:81:2e:b4:9b:
53:cc:01:ac:07:d2:6a:60:f0:14:71:a3:83:a8:2b:6b:67:b5:
fc:ed:ef:61:94:4d:ec:5a:c9:4e:89:06:9e:56:9d:29:af:cc:
b2:96:0b:9a:c3:69:70:38:0d:8e:ff:1d:8d:f0:5d:f0:27:77:
2c:9d:7e:53:84:e4:d6:5b:bd:95:c5:db:09:05:7d:29:f7:9f:
39:66:b5:00:e4:7d:57:72:7b:7d:57:99:df:42:3c:90:85:2a:
06:6e:fd:25:25:24:f2:09:a4:25:99:82:24:f6:d9:51:a4:4c:
0b:4b:bd:bc:83:92:87:d2:93:1f:ed:75:9e:78:bd:2e:16:9a:
d2:5b:e6:c0:82:2f:47:b8:23:22:b2:9d:5e:92:4f:c4:fa:3b:
4a:3c:d6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:39:31 2025 by rpki-client