Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/A3wyPhRamUsWB9_qHryX-EDk1e0.roa
File: A3wyPhRamUsWB9_qHryX-EDk1e0.roa (raw, json)
Hash identifier: QXg6wSruYhyDuN8fgBSyc5BU3QNmFqD0/uvIAs24UoQ=
Subject key identifier: 03:7C:32:3E:14:5A:99:4B:16:07:DF:EA:1E:BC:97:F8:40:E4:D5:ED
Certificate issuer: /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Certificate serial: 019425FC644D407F477C73DEB372AD229738
Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/A3wyPhRamUsWB9_qHryX-EDk1e0.roa
Signing time: Thu 02 Jan 2025 07:48:05 +0000
ROA not before: Thu 02 Jan 2025 07:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34702
IP address blocks: 46.22.208.0/20 maxlen: 20
80.79.112.0/20 maxlen: 20
185.246.184.0/22 maxlen: 22
2a01:97a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:64:4d:40:7f:47:7c:73:de:b3:72:ad:22:97:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Validity
Not Before: Jan 2 07:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=037c323e145a994b1607dfea1ebc97f840e4d5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:56:0f:40:d3:f8:04:4a:19:26:99:80:42:2b:
03:b9:28:63:c8:bb:d7:5b:c2:94:12:ee:30:c1:6a:
2d:85:2a:63:b2:f5:02:87:05:87:e9:2c:38:92:55:
76:e9:51:ca:59:cf:54:4e:06:da:a3:c0:35:f8:19:
27:f5:71:11:a3:10:e5:ff:26:ce:ca:33:5d:59:61:
bd:ab:7b:12:55:52:b5:8e:e9:32:d8:94:81:6b:99:
c1:65:23:a8:86:9f:3e:4e:f1:a5:39:a7:88:2c:e0:
7b:4b:25:8d:23:30:b3:e4:23:62:ff:50:64:d7:4f:
02:11:f5:0d:c4:4f:5e:d2:67:29:24:f2:3e:df:f9:
50:9a:7b:4a:e1:cd:9f:d0:64:49:e2:d8:c0:49:1f:
8a:14:3f:d0:1e:61:98:2d:ff:c6:21:2e:7b:be:bd:
fc:28:25:7b:fe:68:79:4f:81:4f:3e:49:27:bc:dc:
6e:4c:7c:63:0f:ca:bc:5a:98:30:29:49:22:c5:f7:
e8:4e:20:3a:1e:f5:fe:2f:ed:14:92:8f:f6:78:e5:
f4:54:1a:a8:d5:39:a3:13:c1:4a:fd:d9:00:a3:85:
6c:4a:c7:50:db:8f:6e:ed:59:6b:aa:6d:ec:6c:59:
59:1d:fd:11:4e:4b:3f:ea:a2:30:a8:17:a6:c6:f5:
76:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7C:32:3E:14:5A:99:4B:16:07:DF:EA:1E:BC:97:F8:40:E4:D5:ED
X509v3 Authority Key Identifier:
keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/A3wyPhRamUsWB9_qHryX-EDk1e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.208.0/20
80.79.112.0/20
185.246.184.0/22
IPv6:
2a01:97a0::/32
Signature Algorithm: sha256WithRSAEncryption
b5:9b:71:43:6b:45:23:12:99:58:75:17:4f:24:50:91:ca:c0:
8a:81:8d:1c:82:25:8b:d9:fb:38:c5:00:92:3e:7b:78:bd:aa:
11:ec:17:45:f5:de:23:25:7f:c0:24:85:ee:68:26:84:9c:eb:
f2:7c:f7:d9:e9:76:85:54:a1:83:ab:ad:38:b7:39:01:1a:4c:
08:90:69:d2:28:c2:63:74:cb:3f:3f:d9:9a:3b:fe:c9:71:67:
d6:03:a0:bf:45:e0:ca:bf:1a:26:89:a8:63:a5:cc:c8:5f:49:
00:c1:32:94:d0:f9:bd:fe:33:d8:df:c6:9f:e2:7a:4c:4c:c3:
f8:44:99:3e:f7:ee:c0:55:ca:3c:a1:6c:33:8a:b1:83:10:d8:
7a:8a:5a:0a:d9:02:13:72:97:25:b0:ae:06:d3:24:90:79:df:
93:2b:13:66:04:5e:15:03:43:01:ac:ca:46:06:56:ec:62:14:
15:70:fd:bc:e5:d1:32:e2:53:58:12:0a:67:93:fd:c4:5b:dc:
7d:74:60:e3:92:77:03:9d:cb:d2:2d:3f:a3:c5:23:0e:be:04:
31:8a:7d:87:0f:07:70:ae:0f:38:46:86:ef:13:9f:f2:a2:84:
eb:9f:d0:0d:db:0c:68:86:d4:bc:28:54:f1:8a:6a:b7:fa:f0:
6e:1e:f5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:19:08 2025 by rpki-client