Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/RRHkc1lOsJ0WrMbiCvf9G3l9Ja4.roa
File: RRHkc1lOsJ0WrMbiCvf9G3l9Ja4.roa (raw, json)
Hash identifier: fpJ4KH8CMslY9U5qvXp1614yNP772K6f37C+wQxE5Ec=
Subject key identifier: 45:11:E4:73:59:4E:B0:9D:16:AC:C6:E2:0A:F7:FD:1B:79:7D:25:AE
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 019422202B55C30FC9BF08E66F614ADCC0EE
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/RRHkc1lOsJ0WrMbiCvf9G3l9Ja4.roa
Signing time: Wed 01 Jan 2025 13:48:41 +0000
ROA not before: Wed 01 Jan 2025 13:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43624
IP address blocks: 93.185.166.0/24 maxlen: 24
193.43.147.0/24 maxlen: 24
193.46.57.0/24 maxlen: 24
193.57.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2b:55:c3:0f:c9:bf:08:e6:6f:61:4a:dc:c0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 1 13:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4511e473594eb09d16acc6e20af7fd1b797d25ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3d:46:7e:5c:66:d7:68:8b:f0:98:e5:bb:35:
d4:05:d7:43:45:93:aa:2f:8f:2e:20:11:a9:1c:47:
64:18:05:9e:f6:be:4c:4a:11:a6:05:9f:35:64:1d:
b5:4a:1f:aa:6b:16:81:d6:d4:49:8b:8f:2b:ba:b8:
6b:fc:71:0f:81:e4:53:bc:ad:e1:d7:ac:99:4d:a5:
3f:66:ce:dc:c0:0b:e4:51:d4:c7:bf:10:2f:5d:8e:
ca:47:ce:76:bf:f4:41:dd:2a:d3:56:49:64:44:24:
df:3f:79:3e:8b:b8:5a:7a:30:d5:9d:c0:90:d8:d3:
83:9a:52:c9:e4:e4:30:1e:dd:35:6c:9b:d3:2c:e1:
f1:55:60:b1:95:95:c6:55:3b:03:c0:c8:86:3a:2f:
1f:41:f1:cc:be:99:be:9b:c1:53:65:aa:39:ca:aa:
46:d8:f4:2c:9e:1b:05:89:1c:53:a9:8f:d9:75:ae:
e6:b7:97:70:b5:44:01:4c:5a:fa:28:f9:db:91:f7:
01:6f:40:36:28:4d:bc:00:8b:ba:3e:4e:50:23:1a:
1f:2c:53:0e:95:6e:33:16:bf:08:35:4f:97:04:0f:
63:ed:3e:2d:88:87:bc:af:bc:b2:7c:f4:68:bd:7d:
ec:36:23:0a:17:bd:e5:c4:c8:b8:1f:18:1e:4a:fd:
a6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:11:E4:73:59:4E:B0:9D:16:AC:C6:E2:0A:F7:FD:1B:79:7D:25:AE
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/RRHkc1lOsJ0WrMbiCvf9G3l9Ja4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.166.0/24
193.43.147.0/24
193.46.57.0/24
193.57.137.0/24
Signature Algorithm: sha256WithRSAEncryption
46:47:aa:c6:95:fc:fb:b2:0d:6b:60:73:12:ee:c9:2a:f1:c8:
3c:06:c9:59:ef:e6:8d:74:7c:e9:50:83:6b:42:6c:3d:3e:8f:
02:0a:92:e6:34:15:5d:c1:60:26:f0:58:b3:00:53:b8:4a:40:
72:7e:27:90:50:84:d7:69:64:e7:f7:a3:0a:11:dc:64:66:3c:
d9:4a:49:2e:6a:2a:11:95:d0:8a:e6:6d:1f:38:b9:d9:33:0d:
73:4c:56:e4:dc:fd:e0:b0:00:d8:9b:62:9d:ae:c6:6e:18:db:
eb:52:b4:54:7b:53:63:0a:9a:83:0a:f8:b1:1c:61:2e:43:90:
2b:ab:7d:a3:8a:43:96:e2:06:9a:29:20:a5:1f:e5:70:f5:dc:
86:79:fb:bb:1e:fe:9c:7f:17:49:ae:fc:40:53:1c:86:44:27:
cc:26:dd:0e:e4:7b:76:ab:58:36:28:da:50:12:a0:96:d7:95:
2f:a5:ca:e8:5e:7f:9a:02:06:d8:aa:78:a6:c8:4f:0e:db:07:
eb:c5:09:d4:1c:63:a5:1b:4b:9c:b0:3e:c4:e1:b6:7f:86:ec:
73:a6:2f:e5:7e:86:19:73:0b:fe:e8:49:2a:32:4d:a7:e4:dd:
71:bb:0b:38:03:1a:ef:cd:9f:7a:90:5f:fa:d1:79:04:08:ae:
b3:9a:95:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:08:03 2025 by rpki-client