Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/pHWoiJZ03yIv09h0ROxjAKjoD7s.roa
File: pHWoiJZ03yIv09h0ROxjAKjoD7s.roa (raw, json)
Hash identifier: Ca/82vbFPqPO0ibIcky7j0iRB5ZuZE0t6B2Hhb6nWPA=
Subject key identifier: A4:75:A8:88:96:74:DF:22:2F:D3:D8:74:44:EC:63:00:A8:E8:0F:BB
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B593FAB6A1F97DA18DF5E88FBEDED6
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/pHWoiJZ03yIv09h0ROxjAKjoD7s.roa
Signing time: Thu 02 Jan 2025 15:49:58 +0000
ROA not before: Thu 02 Jan 2025 15:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8342
IP address blocks: 146.185.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:93:fa:b6:a1:f9:7d:a1:8d:f5:e8:8f:be:de:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a475a8889674df222fd3d87444ec6300a8e80fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b6:45:e2:52:2a:cc:13:5f:ab:d7:86:81:7d:
1a:b0:7c:92:c0:b1:fe:39:d9:2c:60:c0:bc:2e:33:
2e:1f:b9:49:c4:c3:42:23:ae:7b:c3:39:7a:8c:35:
95:2d:3e:54:94:64:6f:89:a7:ce:a1:48:77:74:33:
3a:f3:67:4c:b4:4f:ae:de:3c:0b:06:73:b0:1a:9c:
4f:35:80:14:0a:1d:9c:6d:08:2f:1b:54:9c:7c:0b:
bb:05:2c:e1:90:7b:ec:c4:84:5f:b2:28:80:39:a6:
01:b1:30:a8:16:d0:0b:d9:7e:48:76:e1:1b:13:fc:
6f:67:8f:4e:00:72:97:ff:dd:1d:40:8b:f9:9b:3d:
0e:d6:8a:30:1b:5a:58:e4:c9:c3:27:c1:1f:bb:6e:
7e:ae:4c:0d:91:cc:0d:65:47:70:dc:41:47:b5:4a:
25:d4:82:4c:40:b2:79:bd:82:45:1a:aa:2b:78:8f:
f9:0f:06:05:87:de:45:50:fc:5d:eb:9f:5f:b4:5f:
1f:0a:13:85:cb:51:34:a0:32:b2:55:3e:cb:5c:f4:
f7:c0:20:13:2d:9d:8b:58:b4:d2:dc:2b:8d:8b:9c:
e0:f1:79:33:cd:85:dd:ee:31:3e:70:55:3b:0f:d2:
ba:7f:7f:0c:a4:71:f7:24:aa:7e:bf:a7:8e:db:13:
d7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:75:A8:88:96:74:DF:22:2F:D3:D8:74:44:EC:63:00:A8:E8:0F:BB
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/pHWoiJZ03yIv09h0ROxjAKjoD7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.185.238.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:7b:45:94:a9:c8:46:a8:72:2f:01:95:e7:e5:d1:06:fd:19:
af:1f:6a:39:de:f7:ec:76:3c:0a:db:59:fd:c4:31:96:e9:fe:
09:42:3d:ff:bd:d3:7e:89:5b:92:57:42:3d:5f:cc:e9:de:a8:
d6:de:b2:a8:77:59:e7:65:a4:62:ed:c4:24:97:0f:70:c8:a1:
2f:a4:52:d2:3f:4e:e3:68:07:6b:20:c8:0a:bd:cb:96:09:52:
26:e3:0c:9d:5f:9c:82:45:9d:a7:03:78:61:90:b6:4c:6d:0a:
60:83:c5:ed:38:f6:30:cf:70:5d:ac:bf:ce:49:f7:f7:8c:4a:
08:0c:5b:e9:1b:e4:06:88:40:c0:1b:10:2b:55:00:b6:61:12:
b7:88:26:69:51:d0:5e:db:3d:54:40:0e:fb:3b:67:66:30:52:
c2:d1:85:c4:f0:36:09:d4:c1:87:79:4b:e8:7d:b8:01:3f:c0:
33:50:49:fb:14:89:89:a9:d1:ce:4f:33:a9:45:9d:29:f3:50:
1f:cb:37:11:b9:c5:cb:d9:ab:b3:85:19:25:84:1b:ea:de:e0:
52:a7:98:c2:36:11:a8:3c:8e:82:90:b1:86:90:79:34:a2:8a:
f3:6c:92:7b:5d:6a:20:cf:26:5d:af:bb:5b:71:b0:17:ac:43:
51:a4:01:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:51 2025 by rpki-client