Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b4db54-1e48-48ad-bff5-d7a939d67ba7/1/_hsqyp5FCChiZwtPW1D7Q6Pt7zg.roa
File: _hsqyp5FCChiZwtPW1D7Q6Pt7zg.roa (raw, json)
Hash identifier: t+YR1gOw0XfA1PV++dh2hNz/jUc+RfbveLe87GS6SVE=
Subject key identifier: FE:1B:2A:CA:9E:45:08:28:62:67:0B:4F:5B:50:FB:43:A3:ED:EF:38
Certificate issuer: /CN=a1b6c7e761d902e3bb9d400cde25e6370a3f0e5b
Certificate serial: 01856D016EAC6A7B31F1859DC0D520ABB62B
Authority key identifier: A1:B6:C7:E7:61:D9:02:E3:BB:9D:40:0C:DE:25:E6:37:0A:3F:0E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obbH52HZAuO7nUAM3iXmNwo_Dls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b4db54-1e48-48ad-bff5-d7a939d67ba7/1/_hsqyp5FCChiZwtPW1D7Q6Pt7zg.roa
Signing time: Sun 01 Jan 2023 11:04:48 +0000
ROA not before: Sun 01 Jan 2023 11:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35184
IP address blocks: 87.240.64.0/18 maxlen: 24
46.21.128.0/20 maxlen: 24
2a03:6c00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:6e:ac:6a:7b:31:f1:85:9d:c0:d5:20:ab:b6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b6c7e761d902e3bb9d400cde25e6370a3f0e5b
Validity
Not Before: Jan 1 11:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe1b2aca9e45082862670b4f5b50fb43a3edef38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:66:c5:f7:84:04:58:58:c1:57:c2:59:f1:82:
90:dd:c5:03:99:45:d9:32:db:cb:86:1b:37:89:81:
fe:5e:ec:f2:11:51:82:0a:fc:9b:a6:a7:9c:a1:13:
2d:13:46:e5:fb:8c:33:ef:4d:b1:08:8e:d5:9c:96:
79:b9:de:77:40:d1:46:3e:4e:a2:10:c2:7a:e4:8b:
a8:c1:e1:c5:08:05:0c:7e:fb:ce:ae:04:b7:19:3c:
10:8c:cf:fb:c6:c5:51:1b:bc:fc:1c:9c:ef:19:3e:
8f:fe:b7:fb:1d:5b:cd:1a:75:90:7c:93:25:91:fe:
45:f6:47:a1:fb:30:d0:15:1a:f9:63:aa:ac:b9:fd:
a5:64:33:50:98:1c:fd:75:f6:c5:fd:ce:aa:38:61:
63:1e:3b:c2:5d:b5:c6:a0:e0:98:2c:56:fe:78:df:
79:11:26:fc:f6:bf:8a:e5:f5:d4:d5:bd:ee:5f:fc:
a8:e6:9b:2f:61:19:b2:66:e7:db:7a:e2:2b:2c:ef:
b2:e9:a1:33:8d:f7:7a:6f:d8:e4:25:8a:03:79:f9:
cd:fc:93:f0:ad:43:2d:b3:96:7f:6c:28:5b:f0:f5:
30:80:f4:94:bb:a9:b7:69:44:02:16:bc:45:64:d0:
fa:09:c0:03:3e:7f:c8:49:fc:e4:ec:33:72:8b:3d:
e1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1B:2A:CA:9E:45:08:28:62:67:0B:4F:5B:50:FB:43:A3:ED:EF:38
X509v3 Authority Key Identifier:
keyid:A1:B6:C7:E7:61:D9:02:E3:BB:9D:40:0C:DE:25:E6:37:0A:3F:0E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obbH52HZAuO7nUAM3iXmNwo_Dls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b4db54-1e48-48ad-bff5-d7a939d67ba7/1/_hsqyp5FCChiZwtPW1D7Q6Pt7zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b4db54-1e48-48ad-bff5-d7a939d67ba7/1/obbH52HZAuO7nUAM3iXmNwo_Dls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.128.0/20
87.240.64.0/18
IPv6:
2a03:6c00::/32
Signature Algorithm: sha256WithRSAEncryption
af:8b:bf:0b:b7:eb:9c:48:33:62:a0:8f:43:1a:f6:53:d8:3e:
97:e1:f4:f2:32:37:07:72:73:d2:40:21:ba:97:fb:1b:54:8b:
c9:18:4d:61:d9:cd:f3:2d:55:83:b8:3f:c2:9f:d3:bc:54:5e:
17:2c:12:c2:ce:5c:e5:ff:e1:3b:97:96:4a:87:2a:ee:77:f4:
a3:0a:59:da:21:64:2d:f3:66:21:35:ac:17:1f:e7:55:bf:7f:
e5:6a:dc:62:9f:9b:51:ee:31:05:30:f6:10:66:1b:09:eb:d7:
51:79:2a:96:6c:d1:d3:56:9d:33:3b:f5:25:f1:08:11:34:b7:
f0:83:6d:8a:51:58:6c:d1:1d:7a:dc:e2:e7:dd:54:60:8b:93:
6e:9c:66:f2:af:19:be:08:66:f3:99:97:59:34:98:16:2d:cf:
18:46:9b:d3:2c:b6:b3:26:61:dd:d8:06:33:de:72:e6:79:04:
67:ba:43:b7:4a:f0:15:61:2a:f7:e2:7d:d0:bb:d0:6c:fe:67:
33:16:5b:8e:8c:2c:8f:41:25:23:67:02:94:cc:fb:62:3a:35:
86:41:a5:35:89:a3:39:38:d6:69:42:9b:b4:dc:c7:d4:37:a1:
ac:f6:50:b1:0a:73:02:4c:d7:1f:61:10:4e:87:6f:8a:8c:f2:
42:ca:52:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:53:14 2025 by rpki-client