Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ARAnhAS9c3ojnJGOqWRhScgrVC8.roa
File: ARAnhAS9c3ojnJGOqWRhScgrVC8.roa (raw, json)
Hash identifier: py7BSh3ZcCNWPMn+CMOYPqA6gm0T7R3Eu7AE66LEl4o=
Subject key identifier: 01:10:27:84:04:BD:73:7A:23:9C:91:8E:A9:64:61:49:C8:2B:54:2F
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019598A169451996CA2F2FB45134798AF2E3
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ARAnhAS9c3ojnJGOqWRhScgrVC8.roa
Signing time: Sat 15 Mar 2025 07:07:49 +0000
ROA not before: Sat 15 Mar 2025 07:07:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200195
IP address blocks: 147.45.47.0/24 maxlen: 24
193.233.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:98:a1:69:45:19:96:ca:2f:2f:b4:51:34:79:8a:f2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Mar 15 07:07:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0110278404bd737a239c918ea9646149c82b542f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:0b:f2:94:a1:e7:25:65:2b:ec:2d:6e:49:
e3:8c:ae:28:d3:19:48:48:7d:26:a7:45:70:8f:11:
ad:71:05:a0:f1:e6:a6:98:5c:66:c8:71:72:36:5e:
30:34:00:db:24:33:c6:77:38:b6:3f:64:fb:88:57:
ad:44:f5:59:e0:2b:d2:97:af:3e:a0:0f:c3:4a:31:
2c:5b:d0:7c:d6:41:3e:5b:c4:57:b6:e5:0b:70:90:
78:67:ce:f4:85:99:fa:63:fd:06:13:48:01:14:3b:
d6:47:af:04:42:2d:f5:e1:62:24:be:87:4e:3b:bf:
01:a4:41:49:9d:a6:aa:5e:eb:04:7b:82:36:24:ca:
23:e2:71:d6:a5:ea:38:83:e0:4b:ff:e0:75:70:91:
c9:cc:90:11:97:b4:08:4e:be:c1:95:63:95:93:2a:
86:bf:ab:72:7e:91:ce:c2:26:05:38:a9:4c:1a:b2:
45:5c:bd:71:f9:e5:46:bc:85:ae:b1:1f:85:e2:3f:
c7:db:d5:3c:af:ac:73:f7:96:b0:cc:b3:f3:1e:cf:
73:a3:75:2f:36:39:df:da:db:a2:78:ef:a6:1f:54:
c6:51:80:e4:b8:f0:d2:f7:1e:71:ef:41:65:8d:59:
d6:34:ae:b7:38:ad:9d:e8:7f:0b:ed:94:9a:10:c6:
03:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:10:27:84:04:BD:73:7A:23:9C:91:8E:A9:64:61:49:C8:2B:54:2F
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ARAnhAS9c3ojnJGOqWRhScgrVC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.47.0/24
193.233.135.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:9b:f2:13:0c:b2:9a:d6:cd:f3:5d:a3:c1:51:63:c5:f4:78:
ed:53:2b:4f:75:cd:40:a3:8e:f5:e9:02:0d:b3:ca:5d:b6:9b:
9c:4d:d4:c3:14:b6:da:c7:3b:16:2a:14:5b:ca:b3:f4:46:a8:
9f:60:55:3c:14:3e:1e:10:dd:d7:de:36:60:8f:ef:1b:2e:09:
7c:12:ad:3d:6e:6a:62:8b:2a:7b:69:67:26:47:35:db:0e:15:
bd:4a:6f:a5:ae:ae:91:9c:48:79:ae:73:1c:6a:8c:a1:13:e0:
ad:db:8d:ba:22:f3:17:38:a6:48:34:69:b3:f9:f6:d0:24:45:
d4:6b:a0:27:d3:a1:eb:ab:43:ea:0b:9e:d5:42:a2:d3:2b:df:
58:fd:b1:3e:61:6f:b9:a7:47:d0:3f:45:b9:b8:4e:33:3a:45:
d0:12:ba:97:c4:6f:84:0f:55:3a:8a:7f:d1:09:77:ce:69:97:
0b:e7:ae:33:c0:9c:d9:f7:f6:39:a8:0c:51:4f:97:cb:94:25:
9c:43:1e:ba:95:23:b5:d0:9e:1b:f1:9b:09:40:58:86:ba:49:
7c:60:eb:f9:43:b1:12:57:4d:1a:bc:9a:5b:e0:de:91:73:7f:
d4:9b:56:29:f2:18:ea:03:5e:0b:2c:e5:10:cd:89:09:d1:65:
35:fc:bf:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:56 2025 by rpki-client