Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/5gAw8BvaCy_yqyyoOq0F1MdqNMs.roa
File: 5gAw8BvaCy_yqyyoOq0F1MdqNMs.roa (raw, json)
Hash identifier: dRBNNRzXx7leWPJmnEN9mNRC9MNFKRYSzwdE5g4LBB4=
Subject key identifier: E6:00:30:F0:1B:DA:0B:2F:F2:AB:2C:A8:3A:AD:05:D4:C7:6A:34:CB
Certificate issuer: /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Certificate serial: 019425FDBECAB464EB04060C92E72EF19B7A
Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/5gAw8BvaCy_yqyyoOq0F1MdqNMs.roa
Signing time: Thu 02 Jan 2025 07:49:33 +0000
ROA not before: Thu 02 Jan 2025 07:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62136
IP address blocks: 185.46.112.0/22 maxlen: 22
2a01:86e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:be:ca:b4:64:eb:04:06:0c:92:e7:2e:f1:9b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Validity
Not Before: Jan 2 07:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e60030f01bda0b2ff2ab2ca83aad05d4c76a34cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b4:7a:6e:53:97:98:ab:6d:a2:5e:18:05:f8:
23:7c:15:0e:e0:e9:18:b1:41:73:83:bb:ab:72:bb:
98:bd:b9:8c:32:41:ef:12:52:39:40:97:4e:31:08:
b1:1b:84:9c:a5:14:96:fc:2c:2b:7d:09:c8:fc:4a:
c8:03:6f:6f:35:ec:32:48:73:b3:d0:fe:ad:91:9d:
4f:36:13:02:89:3f:c1:54:7f:a2:4a:42:a3:a0:f7:
7c:76:e1:96:fc:2b:e4:7b:d1:77:2d:82:fc:90:d6:
e9:85:47:3a:b9:bc:b4:84:0f:a8:8b:06:95:c7:4a:
96:15:37:74:de:66:1a:52:07:ec:9a:de:15:c4:ce:
a3:13:2b:95:39:66:4d:9d:b5:fa:89:78:12:ee:6d:
cb:cc:a7:5f:8b:01:6d:45:3c:f6:5c:78:8d:45:8e:
39:10:fb:a8:42:93:34:81:0d:20:76:c3:4b:66:d4:
fa:21:b1:b6:31:93:2d:af:6e:71:65:4f:cc:17:03:
17:db:9f:81:60:e1:36:ab:23:6f:ba:71:ca:25:aa:
6d:14:73:5f:8e:52:13:69:47:0f:13:53:b9:88:f0:
32:e0:4c:d1:7d:de:ff:13:72:e0:a7:69:71:b9:58:
a8:83:5b:4a:9a:92:c6:ca:b5:ae:34:0d:e5:e9:16:
a4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:00:30:F0:1B:DA:0B:2F:F2:AB:2C:A8:3A:AD:05:D4:C7:6A:34:CB
X509v3 Authority Key Identifier:
keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/5gAw8BvaCy_yqyyoOq0F1MdqNMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.112.0/22
IPv6:
2a01:86e0::/32
Signature Algorithm: sha256WithRSAEncryption
59:0a:5e:1d:f8:10:31:77:59:88:02:68:c2:44:ff:74:18:ee:
83:6c:8a:92:19:c4:2a:38:f9:33:fd:24:0a:6c:a1:03:06:c9:
a2:3f:23:6a:49:32:b6:df:af:24:08:bf:7f:2c:e7:6a:a3:ad:
50:7f:e2:02:19:42:a7:8c:aa:6e:5d:89:d5:ff:f7:23:1c:33:
27:d6:1c:3c:c4:82:79:6d:50:87:01:88:ca:f4:d6:60:a2:84:
e6:52:7d:f6:a9:0d:15:eb:b4:14:59:55:9b:b6:7b:13:59:c9:
d8:a8:40:88:26:77:74:1c:e7:47:5e:01:69:d6:9f:a9:22:75:
bb:93:f1:a5:a8:64:b0:32:4b:71:d6:67:28:3f:14:3a:67:f8:
9a:8e:c1:c5:e8:db:c9:0d:07:0b:c7:34:10:a6:a0:5b:e2:49:
92:ad:21:93:8c:d9:b0:80:57:eb:91:93:9e:5e:42:6c:70:67:
a8:14:58:e7:c7:d9:fc:66:ba:3b:e2:0d:fd:5e:40:ca:4a:0c:
6c:78:54:b9:9d:bc:70:c6:b9:04:a7:56:c2:59:eb:08:65:e0:
8c:19:61:fe:56:52:31:ce:79:b0:1f:d5:ba:f7:64:73:fa:c4:
e9:5c:a8:3b:e7:14:16:96:fa:fa:09:2b:4a:a5:6c:fc:2c:c0:
41:98:8e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:46 2025 by rpki-client