Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/SgvI68PmlnA7NwUuo_8z5p_-zkU.roa
File: SgvI68PmlnA7NwUuo_8z5p_-zkU.roa (raw, json)
Hash identifier: 0evY3N1d1ft+p3Hm/s0EfWmxmHQJZuaQIHNJODvB5fU=
Subject key identifier: 4A:0B:C8:EB:C3:E6:96:70:3B:37:05:2E:A3:FF:33:E6:9F:FE:CE:45
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747D547D3B9B20C1878A1D32E14B51D
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/SgvI68PmlnA7NwUuo_8z5p_-zkU.roa
Signing time: Thu 02 Jan 2025 13:50:06 +0000
ROA not before: Thu 02 Jan 2025 13:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212487
IP address blocks: 46.8.219.0/24 maxlen: 24
109.248.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d5:47:d3:b9:b2:0c:18:78:a1:d3:2e:14:b5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a0bc8ebc3e696703b37052ea3ff33e69ffece45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:0a:64:85:6f:02:38:b0:65:80:a2:b3:a5:
73:8f:da:c9:62:fb:15:e7:a4:33:10:eb:ad:e6:cf:
73:a5:b9:c8:de:c4:a6:cc:81:dd:1d:d3:5d:06:a0:
43:dd:ad:10:de:f1:df:31:84:45:5f:78:e0:d6:cf:
f4:16:44:ac:4e:f1:4e:77:44:49:c3:5c:70:98:01:
e0:4e:57:d4:a2:91:8c:bc:f5:ba:80:62:54:40:5b:
dd:74:f7:f3:75:9f:27:fe:1c:d5:4f:6c:9a:68:a5:
fb:a4:c2:6a:e8:29:bf:ef:40:18:ab:02:10:77:e6:
e7:ad:8e:6d:59:b0:0d:a2:01:65:40:db:28:8d:f8:
48:04:b2:e7:ea:96:07:f4:a7:76:38:3c:3a:2f:8d:
0c:ea:b2:88:46:d4:9e:a8:bf:53:1b:08:86:81:31:
77:ec:44:57:66:5c:03:47:85:ac:40:bb:01:dd:6c:
7e:f8:de:e6:b3:57:1b:22:b9:ef:26:ef:1b:95:5c:
13:7c:22:b6:9a:83:7d:91:ff:1b:1e:1b:e8:75:2a:
57:c3:44:1d:c6:13:0a:c6:30:a8:1e:90:aa:27:57:
14:45:77:90:c4:f4:4b:f3:0f:bd:51:c4:eb:55:61:
da:b0:ba:ad:0d:97:91:41:cc:d5:0d:9c:21:52:50:
7f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0B:C8:EB:C3:E6:96:70:3B:37:05:2E:A3:FF:33:E6:9F:FE:CE:45
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/SgvI68PmlnA7NwUuo_8z5p_-zkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.219.0/24
109.248.61.0/24
Signature Algorithm: sha256WithRSAEncryption
91:20:b0:74:67:b3:fd:84:91:d1:4e:5b:77:42:bb:33:ed:41:
69:1f:d8:1e:ae:da:3d:a8:12:37:01:89:7e:54:bc:f1:53:44:
10:77:10:ae:2c:05:1a:b4:ba:50:8a:1e:63:14:fa:6f:ce:f5:
31:7f:b6:56:65:73:74:58:17:8e:46:66:16:7e:eb:26:79:38:
c4:36:5b:be:52:e2:97:c5:51:9f:c5:40:5d:c6:0d:f0:4d:7d:
5f:66:73:99:de:62:3c:8a:9b:47:31:ca:24:c4:e8:a6:af:5b:
6b:5e:cd:42:d2:43:96:8a:ac:bc:0a:82:27:d6:70:21:8d:e6:
0c:3d:53:8c:ac:dd:7e:e2:33:7b:cd:f1:d5:71:cd:83:05:60:
ed:3a:33:97:23:59:48:7b:b3:72:3a:3d:27:24:23:2a:7a:80:
4d:ba:7d:ee:d0:5d:d5:95:d4:95:4f:f8:cb:c4:ea:f9:6b:8c:
ed:f2:6e:1c:0f:28:5e:2f:e3:10:25:b6:82:20:ce:65:5d:4a:
6f:50:6d:b8:2c:e0:95:39:d0:6f:e9:61:cc:0c:90:94:a1:34:
ee:41:8f:0d:43:e7:bb:41:af:33:b8:39:95:40:4e:1a:19:37:
f8:91:ef:20:17:d6:01:f3:80:b1:7f:a2:11:2f:29:35:33:2f:
a1:35:2f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:24:19 2025 by rpki-client