Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/TeI7S8OZx8mbZ1CT76zicAPWzfI.roa
File: TeI7S8OZx8mbZ1CT76zicAPWzfI.roa (raw, json)
Hash identifier: i/HXyRHpcSf9pln1mzWKzux0Q76zSD8sVny0yg1+Z14=
Subject key identifier: 4D:E2:3B:4B:C3:99:C7:C9:9B:67:50:93:EF:AC:E2:70:03:D6:CD:F2
Certificate issuer: /CN=6837a2fa4b78773a66200fea4c58507a92f31203
Certificate serial: 019424B3B1FDE2A8E83B8D2EF0F6EBCD9DE7
Authority key identifier: 68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/TeI7S8OZx8mbZ1CT76zicAPWzfI.roa
Signing time: Thu 02 Jan 2025 01:49:03 +0000
ROA not before: Thu 02 Jan 2025 01:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2116
IP address blocks: 185.246.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b1:fd:e2:a8:e8:3b:8d:2e:f0:f6:eb:cd:9d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6837a2fa4b78773a66200fea4c58507a92f31203
Validity
Not Before: Jan 2 01:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4de23b4bc399c7c99b675093eface27003d6cdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:35:9f:61:91:1e:0b:29:d1:52:7d:69:26:
51:bc:f1:18:17:79:7a:42:58:e7:5f:aa:cc:38:06:
3a:e7:8a:62:57:ab:9a:55:3f:03:18:78:cc:33:1d:
72:a3:4c:99:03:fa:49:22:54:44:2e:65:32:ed:37:
ca:0c:34:03:d3:c8:35:8c:c4:72:29:bd:4e:9b:b5:
cd:a3:cf:b9:e0:06:e2:a0:02:3b:03:db:f7:3d:70:
4b:d7:d7:8c:22:0a:e0:1d:79:bf:98:2f:56:2c:05:
6e:53:4b:15:92:c3:98:ba:b1:7c:ba:70:36:5d:2e:
43:ee:7d:8f:47:f3:fe:f4:8f:dd:24:99:03:e5:d1:
ec:4e:a4:33:f5:73:48:bc:e3:05:29:5b:68:86:31:
f3:ac:94:3d:ca:26:11:29:27:eb:81:7c:53:08:79:
7c:8c:55:69:62:46:37:fe:3a:4c:68:c0:2e:2d:e9:
26:46:24:73:d1:9a:e9:fc:12:fe:a2:fa:9e:62:91:
36:75:d2:82:8b:0c:f3:4e:f0:4d:6a:ee:85:e4:9f:
c2:6d:d1:ac:37:ba:c4:d3:d2:ad:37:a6:7e:04:31:
cc:f8:7c:23:f5:b9:09:71:31:f7:5f:fe:03:1d:5c:
e4:8d:d4:ac:d2:11:85:43:36:e4:a9:f0:19:9a:05:
95:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E2:3B:4B:C3:99:C7:C9:9B:67:50:93:EF:AC:E2:70:03:D6:CD:F2
X509v3 Authority Key Identifier:
keyid:68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/TeI7S8OZx8mbZ1CT76zicAPWzfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.80.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:f2:0a:e5:37:c9:43:2c:4e:82:32:2d:45:3f:10:5f:5a:57:
e9:03:39:e1:5f:f6:c2:a7:4c:50:61:11:75:f4:06:11:ba:e9:
f4:d6:ce:a7:39:d0:0a:13:b2:70:ad:44:b5:58:0b:9f:61:75:
9f:5e:51:aa:7b:fd:18:5b:9f:b9:ce:a4:3c:e0:af:11:5c:41:
d1:96:79:87:20:78:74:c3:7c:a3:dc:fd:43:5f:28:dc:41:1b:
de:b8:bd:c1:88:f4:bd:0a:05:49:76:85:a5:2d:ee:41:ed:d2:
26:8e:e4:14:11:ec:86:9d:ba:c9:0c:a9:ee:85:8a:c8:c2:51:
0e:4b:32:f3:b2:8c:84:c1:83:41:23:8a:e0:4f:33:d9:48:7e:
32:5e:c9:f6:8a:fc:3f:3b:cb:03:20:97:d2:a7:9a:10:47:4a:
b8:39:90:2a:6d:b9:67:17:47:3c:93:65:aa:11:e0:5d:3d:1c:
d4:3a:41:f3:8a:4b:5d:cf:c9:fb:83:dd:51:d0:3d:ed:b3:bf:
b4:f4:8e:58:20:ee:40:3f:78:c2:45:40:ea:26:c5:68:7d:88:
ce:b8:b3:d8:ea:1d:0e:b8:e0:46:72:59:7f:68:79:3f:0a:c0:
fa:04:8d:34:ef:94:fd:c5:c6:7c:0c:c4:3f:75:c2:2b:0a:91:
f2:f1:99:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:21 2025 by rpki-client