Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/A3slZgyg9eemzONzeM4ZjQZOkQA.roa
File: A3slZgyg9eemzONzeM4ZjQZOkQA.roa (raw, json)
Hash identifier: X0hOJW7H3OQv8gNe/Scffw0tX7rp3lfITg3c2bDp62I=
Subject key identifier: 03:7B:25:66:0C:A0:F5:E7:A6:CC:E3:73:78:CE:19:8D:06:4E:91:00
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 0194258EB67B0D59BDCBFABAD2D6183F2C68
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/A3slZgyg9eemzONzeM4ZjQZOkQA.roa
Signing time: Thu 02 Jan 2025 05:48:17 +0000
ROA not before: Thu 02 Jan 2025 05:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399587
IP address blocks: 158.46.176.0/22 maxlen: 22
178.171.48.0/23 maxlen: 23
178.171.50.0/23 maxlen: 23
178.171.62.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:b6:7b:0d:59:bd:cb:fa:ba:d2:d6:18:3f:2c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Jan 2 05:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=037b25660ca0f5e7a6cce37378ce198d064e9100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:49:dd:2c:35:7c:36:4f:64:db:f1:77:26:9e:
75:38:58:06:20:c5:84:95:55:30:4b:2d:42:9e:7c:
20:ff:95:65:5f:4a:31:25:2e:92:0e:a3:70:1b:a5:
fe:7a:c6:90:c1:e9:3f:80:3b:67:6e:2d:f0:04:1b:
41:a2:7d:d0:c5:6b:02:ea:29:9b:cd:cc:26:16:b2:
16:2b:4c:90:4a:9d:97:32:0c:ca:7a:ed:c1:c1:98:
5b:a9:a6:4a:5a:96:34:d4:3f:de:f0:a3:28:64:fb:
73:c3:1b:7c:fa:8a:b0:43:2e:23:1e:18:c0:05:fc:
2a:f3:3f:e6:68:fb:98:c9:f6:7b:6b:5f:00:e8:52:
74:c4:92:b8:b7:e2:34:37:2b:f0:b1:47:1b:ca:4a:
5e:77:43:56:4c:41:aa:12:68:e3:90:14:b6:5c:cf:
eb:ff:cd:9c:ab:bd:38:eb:8f:82:32:ec:9a:c7:10:
41:17:f2:14:2e:05:8c:70:ea:6c:43:ff:8e:6c:45:
87:05:6b:e7:ff:0b:e0:42:2a:ba:8c:85:99:d5:1d:
6e:0e:63:63:c4:b3:54:50:70:b6:68:d1:80:86:ca:
40:c5:8c:3d:aa:97:42:c8:ca:6b:72:f6:59:a8:5a:
a1:07:ac:d7:cf:a7:0a:24:77:2c:6d:3e:b3:24:0c:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7B:25:66:0C:A0:F5:E7:A6:CC:E3:73:78:CE:19:8D:06:4E:91:00
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/A3slZgyg9eemzONzeM4ZjQZOkQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.176.0/22
178.171.48.0/22
178.171.62.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:37:37:cb:7d:3e:7f:c0:2e:a9:44:b1:e1:15:af:4c:22:81:
4a:b5:d5:05:85:5b:17:0b:8e:5a:0a:67:be:e7:dd:c0:ac:9d:
7b:ff:53:2c:18:ef:4c:11:34:99:6e:27:ce:e7:f9:76:6b:0d:
72:51:43:0b:36:4c:a5:16:ed:1f:73:19:fe:53:b4:b3:a1:8d:
35:83:52:2a:b6:ac:0d:82:98:c1:bf:ac:b9:55:e2:ed:da:68:
c3:13:20:70:44:f4:bb:d4:32:2e:24:39:c5:fc:1d:b0:02:bc:
95:e2:72:cc:6a:12:42:6c:18:43:ac:b8:bb:37:5a:d6:d0:9e:
fa:96:89:68:c1:b6:c4:d4:cd:27:60:df:09:41:c9:c6:9b:10:
ee:73:f1:5a:ad:85:75:99:04:40:0e:08:59:e7:bb:c5:4a:b7:
c9:28:80:4a:3f:70:93:65:f1:24:29:3f:60:4d:90:72:7a:3d:
01:82:f5:e4:a7:5f:29:7a:cf:d3:8b:fc:ca:91:6e:95:5b:62:
67:b7:f5:12:dd:46:ff:02:5e:b8:ea:f6:6e:fd:cf:17:51:ab:
05:b8:69:a9:b8:83:c0:8e:c3:e9:68:9e:68:00:df:34:15:02:
4e:ad:0c:c1:1a:0f:4b:fb:41:32:e5:48:22:da:27:0e:b7:6a:
2c:6e:3a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:22 2025 by rpki-client