Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/hvgPktb28JZOlfxo2lqsIiBq_F4.roa
File: hvgPktb28JZOlfxo2lqsIiBq_F4.roa (raw, json)
Hash identifier: lMAt56qgAKkePjxgTJPjLfDGVUIeEmfaykniGCOPJ9Q=
Subject key identifier: 86:F8:0F:92:D6:F6:F0:96:4E:95:FC:68:DA:5A:AC:22:20:6A:FC:5E
Certificate issuer: /CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Certificate serial: 01856F4B85A6527CC3D5330B48EF26F0D4AD
Authority key identifier: FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/hvgPktb28JZOlfxo2lqsIiBq_F4.roa
Signing time: Sun 01 Jan 2023 21:44:58 +0000
ROA not before: Sun 01 Jan 2023 21:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42487
IP address blocks: 46.235.176.0/21 maxlen: 24
85.95.192.0/19 maxlen: 24
2a03:d602::/31 maxlen: 31
2a03:d606::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:85:a6:52:7c:c3:d5:33:0b:48:ef:26:f0:d4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Validity
Not Before: Jan 1 21:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86f80f92d6f6f0964e95fc68da5aac22206afc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:90:11:ba:08:6f:55:3a:07:74:bf:6a:75:b7:
40:a5:f1:6b:65:f8:7a:8a:6e:86:9d:b2:36:b8:9a:
a3:4e:0d:8c:ee:32:5f:1c:e8:e6:b2:f3:3f:de:c3:
37:77:bf:67:b0:2d:6c:39:d7:2a:f5:91:d2:2c:8d:
7f:32:50:93:f7:c9:94:1d:a2:14:a9:35:78:f3:f3:
b3:80:3e:dc:9a:fc:0b:de:d5:40:13:ca:66:d5:43:
b1:9c:12:7a:8b:47:38:cc:b4:e8:c6:98:27:1c:63:
88:19:1e:91:43:11:3b:0b:9c:32:2e:34:11:36:51:
88:a4:a3:9d:64:24:67:61:7d:02:ad:f5:82:41:22:
a2:eb:81:7e:88:a3:fa:ed:bd:5b:39:ea:c6:82:ba:
bd:22:c2:da:9a:0b:fd:7f:86:ae:c1:f6:39:98:c3:
8a:1c:f5:05:4f:4f:2e:20:eb:11:f7:94:46:6a:f5:
9a:3d:e0:51:e5:d6:4b:f3:1c:de:c4:20:da:07:5d:
5f:8a:a8:7e:e9:9a:af:28:8c:f5:47:c7:f0:5d:39:
3e:fc:0a:34:d0:5f:55:de:42:dc:4f:c3:38:2c:a9:
b7:aa:1a:b5:9c:78:3c:25:5c:c3:cf:cb:fc:b5:78:
b4:d6:54:e5:69:c6:76:88:c1:15:a7:32:26:b2:e0:
01:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F8:0F:92:D6:F6:F0:96:4E:95:FC:68:DA:5A:AC:22:20:6A:FC:5E
X509v3 Authority Key Identifier:
keyid:FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/hvgPktb28JZOlfxo2lqsIiBq_F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.176.0/21
85.95.192.0/19
IPv6:
2a03:d602::/31
2a03:d606::/31
Signature Algorithm: sha256WithRSAEncryption
02:cd:3f:d8:4b:6c:c9:23:1b:66:03:e9:e8:94:f8:17:77:2c:
81:5b:bf:09:c7:ec:6a:73:53:fb:64:f4:03:81:4a:26:e2:dd:
6b:50:88:93:0c:0a:57:c2:e1:af:12:0e:75:ac:0f:10:84:92:
1c:e0:64:29:03:44:9b:75:b9:e3:18:e2:3a:80:59:65:5e:37:
e4:27:a9:f1:ce:16:9d:89:34:47:b3:20:9a:c2:0c:bd:59:8c:
da:73:88:b5:93:40:11:69:3b:31:34:39:65:9c:9d:48:6d:56:
86:92:4b:79:72:b2:2f:d2:72:2b:22:6d:77:36:27:6a:a3:63:
cc:b7:b5:02:7d:45:27:48:98:76:68:d3:2c:4b:64:1b:c9:f6:
ff:4e:c7:e1:86:5c:7b:10:c5:f0:d5:3d:c0:98:a5:1c:7f:50:
fc:7d:05:16:17:5f:48:51:4d:79:05:97:39:0b:22:9f:38:d0:
62:63:c6:16:de:22:99:58:42:78:b1:1b:5f:13:8f:97:2d:74:
10:44:9d:e0:ef:f8:31:fa:75:20:54:e0:7b:c7:5a:67:18:f8:
63:66:45:f2:7c:e7:60:5a:48:8c:41:b9:82:56:f5:9a:69:b5:
07:0c:d6:a0:fa:e2:63:eb:40:ac:16:cd:04:26:9d:f7:1d:0a:
ec:98:38:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:21 2025 by rpki-client