Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/84kpIndO6O-kBrvo6G8FCJ-Mh7c.roa
File: 84kpIndO6O-kBrvo6G8FCJ-Mh7c.roa (raw, json)
Hash identifier: uKI3cc6MdSBc3U/MUFC3w51NVXcvXAUE9e8+DJj6c/E=
Subject key identifier: F3:89:29:22:77:4E:E8:EF:A4:06:BB:E8:E8:6F:05:08:9F:8C:87:B7
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 0194266B89E84BD141D79778FE58022E1AAB
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/84kpIndO6O-kBrvo6G8FCJ-Mh7c.roa
Signing time: Thu 02 Jan 2025 09:49:29 +0000
ROA not before: Thu 02 Jan 2025 09:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209087
IP address blocks: 46.26.164.0/24 maxlen: 24
77.231.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:89:e8:4b:d1:41:d7:97:78:fe:58:02:2e:1a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 2 09:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3892922774ee8efa406bbe8e86f05089f8c87b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:95:95:bd:3c:ff:a0:79:43:4f:49:df:70:
d6:c3:35:94:09:92:60:f1:7e:6c:ad:e5:0f:87:68:
f7:3a:03:1b:fd:43:1f:58:72:78:88:4d:70:8d:fa:
a3:d8:b4:48:3a:1e:14:44:7d:34:45:bf:26:25:7a:
90:1e:49:75:ca:40:46:c6:92:11:72:e6:9b:a7:2b:
ff:e7:e0:5c:fc:58:65:80:3a:ba:20:73:80:c5:d3:
e9:69:67:27:c3:2c:6c:3f:db:a2:1c:52:6c:63:df:
de:82:f7:21:fd:49:ce:b9:de:ff:30:92:bf:0d:49:
74:4c:f8:93:da:74:83:38:6e:24:9f:d6:01:5f:bb:
69:c3:8e:66:5c:2b:eb:99:f0:7c:08:60:be:be:a8:
5a:80:a5:5f:89:3e:5f:f5:fd:91:1f:69:60:57:14:
18:99:74:63:21:23:98:26:06:71:27:d3:df:25:d3:
ce:80:58:a2:09:e4:7e:dd:42:28:32:18:b4:97:14:
b1:36:da:af:89:65:da:e8:c0:bf:56:ec:0c:37:ce:
22:75:ab:47:22:47:15:34:cb:e3:f8:39:30:55:12:
fa:4e:cc:46:78:d8:25:25:56:b9:d0:bf:d9:d2:07:
49:c4:7f:e4:4c:3e:a2:cf:50:e3:37:59:da:19:61:
72:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:89:29:22:77:4E:E8:EF:A4:06:BB:E8:E8:6F:05:08:9F:8C:87:B7
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/84kpIndO6O-kBrvo6G8FCJ-Mh7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.26.164.0/24
77.231.181.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:2a:28:16:cd:ac:25:17:8e:e6:fd:30:a5:b8:0d:91:6f:6a:
ee:3b:04:b0:61:a5:f7:2b:1f:ad:9f:3e:1d:3e:5c:d5:83:ef:
15:f1:74:75:74:0a:fb:11:aa:32:fb:60:8d:96:73:15:fe:05:
2e:e4:09:87:a5:f8:ca:88:ab:4d:57:80:9a:ad:1d:6c:4f:a3:
24:6b:4f:8a:20:e8:37:34:54:0e:af:0e:f8:6b:db:a7:25:96:
22:1e:ad:e8:80:0e:b1:8a:dc:ea:e1:a9:f3:76:85:64:65:c4:
34:3f:9c:40:95:5c:f8:50:1b:75:38:06:52:3f:5d:b8:7a:60:
b1:8b:5a:e4:da:f2:68:43:06:5a:f0:94:85:8f:ae:f9:5e:8a:
f8:b2:de:04:55:ce:bb:c2:d7:df:7c:0e:7e:f4:5e:75:30:1a:
00:85:24:e7:4e:f5:95:36:e2:72:37:1e:56:24:50:53:5e:f1:
1a:6f:31:48:e3:33:24:c4:a7:53:84:cf:1e:a0:6c:75:78:fd:
8c:bd:d6:0e:c0:bf:8e:84:b9:6a:6c:8d:ad:7d:79:39:a7:6f:
f8:51:d7:63:2b:4b:41:65:48:ce:63:1d:2e:d4:1f:6d:00:f4:
6f:26:dd:5b:c5:31:c5:6e:9b:e8:57:5b:ce:87:d7:f1:37:c0:
23:2f:60:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:57 2025 by rpki-client