Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/1QmmbYJZZWZoqiWNQVq4wZmhLNg.roa
File: 1QmmbYJZZWZoqiWNQVq4wZmhLNg.roa (raw, json)
Hash identifier: gVkThpG7tc6UKYu6nfIrbCxYB1OnM75XNE9Zf3BxXSE=
Subject key identifier: D5:09:A6:6D:82:59:65:66:68:AA:25:8D:41:5A:B8:C1:99:A1:2C:D8
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 0194228E3ACDD688DACCE7BEDC8FC3471C5B
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/1QmmbYJZZWZoqiWNQVq4wZmhLNg.roa
Signing time: Wed 01 Jan 2025 15:48:53 +0000
ROA not before: Wed 01 Jan 2025 15:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210546
IP address blocks: 185.149.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3a:cd:d6:88:da:cc:e7:be:dc:8f:c3:47:1c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Jan 1 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d509a66d8259656668aa258d415ab8c199a12cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:06:f8:4f:91:5d:7f:72:e3:61:4d:30:d7:
fa:9d:40:93:b2:a1:9e:fd:9d:bf:37:1d:2b:70:d3:
3f:e6:92:ec:84:22:8d:79:9f:9c:71:5f:55:7b:e3:
a7:c9:aa:97:59:8c:ba:29:24:54:79:a9:af:cc:82:
c0:eb:e2:4e:31:44:e3:a2:29:2a:b9:7d:d1:73:7f:
da:12:99:72:bb:f8:46:7b:10:65:ce:5e:c0:75:61:
3e:28:8c:14:e7:26:34:fb:86:db:d8:8c:33:96:3e:
af:75:2f:b6:d4:3d:27:b9:86:51:60:b8:fa:74:bb:
6e:5c:36:aa:5c:c2:b9:f1:7d:ce:2c:10:9c:74:5d:
91:12:d4:f8:67:5a:8a:65:e0:54:7f:f4:ab:f2:de:
9a:33:1b:d8:fd:1b:9e:fe:8b:6a:4c:69:02:73:14:
72:8a:7e:64:c3:4e:1c:68:cc:bc:80:74:0d:86:09:
37:46:a6:95:c8:3a:51:cc:c0:0c:a6:48:52:fc:52:
db:be:b2:60:63:53:74:2c:73:7f:12:5c:0e:0b:e1:
ca:99:0e:dc:30:07:ae:17:e6:38:de:8c:a3:f9:be:
df:e2:e2:75:5f:58:7e:c7:7b:2a:9e:f0:db:9e:69:
03:4b:03:ef:e3:61:68:21:ab:f5:60:f0:47:d0:89:
53:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:09:A6:6D:82:59:65:66:68:AA:25:8D:41:5A:B8:C1:99:A1:2C:D8
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/1QmmbYJZZWZoqiWNQVq4wZmhLNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.146.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:ac:81:9f:f5:a4:56:0e:72:9c:e9:63:ec:03:0f:aa:3d:c7:
ee:4a:71:48:3d:56:be:06:05:ea:cb:45:f9:e0:e0:8c:23:01:
43:55:1c:2d:67:0f:b4:50:cb:5d:ce:ac:3b:02:9f:54:58:25:
6f:ce:5a:de:19:f3:1a:57:45:41:07:bd:29:50:f6:5c:ee:19:
97:b4:fa:39:59:f7:ee:fc:90:87:8f:3d:f4:14:47:31:49:89:
7b:bf:0d:45:ac:08:88:3a:98:95:3a:18:a5:10:a3:9d:64:d7:
ba:fa:8b:0e:a4:6b:1e:4d:cb:c3:57:4b:f2:2e:9e:e2:63:56:
f1:02:50:7d:6f:21:99:d7:ad:0c:cb:99:41:ad:91:05:87:16:
3a:63:04:17:53:ea:d0:ea:e3:69:59:b4:b7:fb:1b:cb:5f:b0:
26:b4:00:9a:f4:03:84:23:23:19:f7:9b:84:4e:7b:3f:89:cb:
26:7b:de:28:73:a9:42:f8:60:9a:12:81:69:61:ff:aa:86:50:
c5:59:d9:b2:71:31:72:c3:60:19:67:40:1c:fc:7b:de:3d:8e:
3e:e5:85:5d:3c:23:09:b6:f5:bd:e0:5f:9d:83:f5:aa:96:fa:
d3:39:48:13:3c:49:9b:fd:69:01:f4:de:eb:23:51:13:2a:68:
10:db:14:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:36:57 2025 by rpki-client