Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/9fRtydBjgnhbFaykZOo5uuxjF38.roa
File: 9fRtydBjgnhbFaykZOo5uuxjF38.roa (raw, json)
Hash identifier: RH3Om+bNuUzjZrbi9dURSTYAb514YDgcJdJj7pg2lZE=
Subject key identifier: F5:F4:6D:C9:D0:63:82:78:5B:15:AC:A4:64:EA:39:BA:EC:63:17:7F
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 019428258B37AE59906B2FEDE223FA4CDDEE
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/9fRtydBjgnhbFaykZOo5uuxjF38.roa
Signing time: Thu 02 Jan 2025 17:52:16 +0000
ROA not before: Thu 02 Jan 2025 17:52:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54103
IP address blocks: 46.244.116.0/22 maxlen: 22
185.51.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:8b:37:ae:59:90:6b:2f:ed:e2:23:fa:4c:dd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Jan 2 17:52:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5f46dc9d06382785b15aca464ea39baec63177f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:96:40:ea:a1:b0:8c:2b:45:f4:57:d5:bc:
d9:12:c9:16:3a:65:28:4a:92:b6:fd:f5:16:ea:d7:
65:d9:88:0c:4c:ea:ba:e0:16:65:8a:4d:73:14:b0:
44:33:71:b9:2f:5e:a3:79:d1:fb:28:77:26:16:c6:
dd:a5:7b:e2:66:b0:ac:e9:5f:ed:59:80:7c:b9:25:
48:c8:8e:44:23:9d:d3:0d:c0:03:81:39:38:97:dc:
ef:fa:41:b2:5a:e6:0b:6b:0e:8c:94:80:78:5e:0f:
57:1b:79:29:0b:0b:77:0c:37:97:8f:4a:49:67:cb:
1c:4f:1d:21:da:63:57:ef:91:d5:5d:e5:68:be:98:
c8:95:c2:5b:48:0e:9f:bc:25:90:3b:5b:9d:60:6e:
f4:a3:ca:99:e5:4b:fc:ab:99:3c:ef:ae:98:15:8d:
b4:52:f4:81:de:3a:24:3f:12:cc:fc:3c:df:91:da:
1f:a7:a4:7c:c5:72:d4:84:f8:e3:f9:be:b5:57:ff:
e7:e1:bf:34:bb:90:19:bb:dc:cc:ff:1f:5a:71:29:
6a:30:ab:fc:b2:c4:37:5f:ea:2a:fd:b4:b8:08:00:
d3:46:58:da:45:05:1d:59:13:8e:73:07:27:56:e2:
98:6d:91:eb:ac:80:ed:12:17:05:87:cd:13:69:54:
dd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F4:6D:C9:D0:63:82:78:5B:15:AC:A4:64:EA:39:BA:EC:63:17:7F
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/9fRtydBjgnhbFaykZOo5uuxjF38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.116.0/22
185.51.48.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:11:dd:76:ec:35:59:9b:56:9c:9a:55:69:70:94:b6:2e:eb:
07:4f:a2:bf:07:d0:52:6c:bd:ba:9a:53:d0:1b:0b:42:79:13:
84:1a:d2:17:8c:9b:db:ce:43:d8:f5:e1:8a:a1:52:c5:75:4a:
72:5d:1f:23:96:24:e3:20:f0:5c:41:ef:56:85:b1:6e:f0:ff:
b1:36:8b:fa:06:f1:00:ad:46:0b:6a:e2:95:89:00:a5:99:e4:
d7:72:fd:be:43:4c:f8:f8:09:b5:41:4a:95:3e:ad:46:7c:a4:
4a:d4:19:02:b9:ca:c1:e5:de:69:60:f0:da:70:23:dc:1c:c5:
7e:33:cd:c9:b5:66:37:e4:92:b7:42:5b:fc:1e:74:d6:3f:4e:
63:b8:5c:e1:4d:e2:17:c4:f3:94:df:c2:98:ae:d4:d8:50:77:
cf:64:83:02:7e:74:20:6f:c8:ce:5c:43:2c:19:9f:f6:09:e1:
cf:ee:73:0f:b0:3d:eb:dd:0d:5a:b9:12:a9:c2:ce:5b:de:32:
b0:a1:4d:8c:b4:c0:29:85:e8:a5:cc:0a:b4:8d:be:56:58:ef:
80:63:e0:ee:c3:81:4a:a0:5a:5b:9b:5b:38:de:ff:4d:b8:91:
ed:88:ed:50:ef:a1:b5:11:4b:85:f5:cd:e7:ce:22:2f:d9:84:
07:74:77:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:25 2025 by rpki-client