Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/9O_ps_utRbhu1ElotpsHc_2G8eI.roa
File: 9O_ps_utRbhu1ElotpsHc_2G8eI.roa (raw, json)
Hash identifier: +niyIQmEtTxAK+/Qhr2RxdySLoxcaBgJrsdXiozKNpw=
Subject key identifier: F4:EF:E9:B3:FB:AD:45:B8:6E:D4:49:68:B6:9B:07:73:FD:86:F1:E2
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0194FE54434461A2A3930DD8A6EDE6341D1E
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/9O_ps_utRbhu1ElotpsHc_2G8eI.roa
Signing time: Thu 13 Feb 2025 08:02:02 +0000
ROA not before: Thu 13 Feb 2025 08:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 46.243.7.0/24 maxlen: 24
92.62.119.0/24 maxlen: 24
94.232.248.0/24 maxlen: 24
109.69.60.0/24 maxlen: 24
2a06:ddc0::/29 maxlen: 29
2a0b:8040::/29 maxlen: 29
2a0c:6980::/29 maxlen: 29
2a0c:f642::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fe:54:43:44:61:a2:a3:93:0d:d8:a6:ed:e6:34:1d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Feb 13 08:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4efe9b3fbad45b86ed44968b69b0773fd86f1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:6b:97:04:57:c1:1a:91:a8:ad:d6:e5:f5:
0b:6d:72:14:28:f7:1b:e0:83:a6:6a:4c:59:5a:41:
68:73:34:1e:95:d3:18:0a:88:c5:22:e2:43:1f:4a:
ac:26:2d:17:04:9c:57:eb:e0:8f:fc:5a:a4:e9:18:
bc:48:84:9b:be:74:a1:9e:2d:55:c5:78:2d:28:af:
0b:48:88:03:69:0c:96:56:45:e8:1e:bd:8f:9e:7b:
09:e4:45:9f:4b:b2:88:ce:5a:dc:de:76:d4:9b:7f:
5b:5c:44:a3:77:69:7f:c3:56:75:78:3a:5a:9c:6b:
d7:0c:b8:b0:05:0b:29:e7:60:c1:bc:d1:c8:f0:90:
26:9e:11:08:14:24:56:84:5b:2d:7d:05:0e:6c:60:
0d:42:3d:8c:3a:13:fa:5b:46:89:c2:cf:2d:d4:7e:
4c:c9:98:89:bd:e7:88:70:46:d1:d6:13:13:41:81:
34:39:16:84:c9:51:1e:b1:88:1a:f4:7b:33:d0:70:
db:6d:55:cb:2a:a6:b6:3e:56:cd:b7:0d:ce:cb:f5:
d8:ba:64:6a:61:b1:bf:f1:52:35:15:9f:a9:0a:36:
f2:e2:cb:73:5e:d0:8f:de:e3:5a:3a:db:ed:22:d9:
f9:c8:92:c1:7f:c5:45:75:e7:c9:9d:92:6d:11:69:
1c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EF:E9:B3:FB:AD:45:B8:6E:D4:49:68:B6:9B:07:73:FD:86:F1:E2
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/9O_ps_utRbhu1ElotpsHc_2G8eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.7.0/24
92.62.119.0/24
94.232.248.0/24
109.69.60.0/24
IPv6:
2a06:ddc0::/29
2a0b:8040::/29
2a0c:6980::/29
2a0c:f642::/32
Signature Algorithm: sha256WithRSAEncryption
13:ca:43:45:3a:bf:fc:37:8c:b7:3f:d4:61:67:6a:63:00:31:
29:9a:dc:94:7b:41:b6:6f:ac:84:fe:cb:e8:7f:af:94:a2:3c:
de:52:8e:a0:62:76:9f:68:4e:1f:cb:d8:0e:40:23:ca:d3:24:
f9:07:dd:0a:07:c2:36:59:f3:f2:4e:8f:71:f2:1f:b1:87:f4:
ee:0a:5a:2a:dc:e7:61:d2:83:ad:6e:be:b7:36:89:44:d3:ec:
aa:c4:70:f9:c3:b4:36:25:df:ea:46:1d:71:62:cf:59:a8:21:
6d:e4:bd:ad:b7:b1:0f:00:68:d4:c6:2c:c2:bb:e4:fc:38:26:
df:f6:a9:9e:e6:fa:89:e1:f2:2f:ac:81:ca:5c:ed:3e:56:eb:
1c:92:db:b7:9c:d6:b6:a5:8a:e8:31:20:47:ff:65:9e:2a:e5:
ee:35:09:5b:df:56:1a:c3:fd:69:52:cb:9a:29:e3:63:aa:48:
8a:0e:e6:bf:15:69:a2:b0:7c:a6:09:0a:6e:3c:1e:87:b6:1b:
e4:29:01:ac:7b:5a:ac:58:0c:ed:22:05:be:8f:a8:d4:ed:68:
aa:db:26:43:97:57:61:bf:74:81:c3:76:c1:0f:e5:c4:f5:0a:
b1:d0:0e:30:06:89:c6:36:02:87:9e:63:1f:22:47:df:e3:71:
44:7d:33:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:22:27 2025 by rpki-client