Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/ant41ZKD96l4WAVLo9wrXso0aLA.roa
File: ant41ZKD96l4WAVLo9wrXso0aLA.roa (raw, json)
Hash identifier: 4K6WUz90Jye7WV1VDdQMdxKlwlzmRn7OIrbr4mY6WUc=
Subject key identifier: 6A:7B:78:D5:92:83:F7:A9:78:58:05:4B:A3:DC:2B:5E:CA:34:68:B0
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 019423699EEFEBB949CA9EA8EAC33160EDE1
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/ant41ZKD96l4WAVLo9wrXso0aLA.roa
Signing time: Wed 01 Jan 2025 19:48:32 +0000
ROA not before: Wed 01 Jan 2025 19:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 185.5.146.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:9e:ef:eb:b9:49:ca:9e:a8:ea:c3:31:60:ed:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Jan 1 19:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a7b78d59283f7a97858054ba3dc2b5eca3468b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:73:38:a8:6d:5b:9a:af:89:72:b0:19:70:21:
f8:8d:61:63:3b:cb:2e:d0:32:d4:77:2b:e1:65:71:
0f:ac:28:b0:f5:cc:2a:d8:5a:0a:f6:48:12:94:fd:
62:dc:4e:d7:e8:7c:b0:da:4f:f0:5c:77:27:c3:1d:
58:8a:7f:18:50:8a:53:dc:25:db:51:e0:67:2b:e8:
4f:36:31:9f:71:6d:8d:c6:d4:e4:28:3f:9b:a9:ac:
a5:a8:59:b8:13:1b:11:6c:b8:cc:cc:b7:30:a0:6d:
dc:a5:7a:bc:1a:c1:60:0a:0d:e5:f1:78:87:5d:dd:
fe:4d:da:0f:3d:dd:34:5d:c9:3f:25:d4:a1:60:2c:
4e:0d:a8:da:16:c6:05:70:c0:0a:7a:8c:66:29:39:
3e:d0:6f:53:86:c7:15:6b:4a:53:9e:03:24:eb:46:
5f:8e:04:ee:81:45:09:94:7d:a5:42:c0:e7:fa:3e:
82:09:49:e4:51:fd:3b:d8:3c:04:ad:4f:34:29:86:
ff:ba:c0:69:c4:03:72:0d:ee:7f:a7:2a:d8:6b:dd:
b8:99:1f:ba:93:e2:9b:9b:f9:49:fc:dc:23:aa:bb:
bf:33:25:53:58:97:d1:0b:10:3e:88:15:4d:2e:40:
35:d3:db:83:be:b0:10:0a:cf:87:fe:63:ca:81:cb:
13:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7B:78:D5:92:83:F7:A9:78:58:05:4B:A3:DC:2B:5E:CA:34:68:B0
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/ant41ZKD96l4WAVLo9wrXso0aLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.146.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:1a:90:91:d0:f2:31:ab:95:12:78:7c:3e:b6:5e:c7:af:51:
ca:aa:66:dd:7c:d4:55:c1:35:65:01:94:ad:0b:a1:06:ee:de:
36:56:4c:96:6d:d4:a8:2b:1c:24:25:3c:f6:43:62:0e:c2:0b:
77:83:21:c3:27:ff:6d:66:a9:96:b9:d0:f2:7a:fd:2f:1b:43:
09:5f:48:cd:e3:f4:ad:64:f6:c5:8d:fd:c8:9c:1e:bd:51:03:
a9:1f:00:a3:6e:86:58:17:07:36:59:95:28:a5:29:e4:bd:5e:
72:76:68:f1:d8:73:65:b7:38:21:f8:21:db:eb:a7:f5:af:51:
3a:7b:eb:14:0d:d0:a0:23:e5:af:4d:b1:55:54:55:63:d5:48:
24:fb:66:36:e8:72:49:74:5c:42:0f:fd:f2:6e:6d:8b:01:66:
f5:1d:a9:a1:c6:84:41:0d:23:a0:6f:7b:fc:86:f4:8a:1b:6f:
98:58:e7:a8:35:3a:53:f0:f2:dc:36:9c:0a:c9:2f:8c:54:1e:
1b:2b:a4:f3:3c:9d:cd:23:b5:d7:40:f6:58:3e:96:ea:bb:9d:
31:70:c5:d4:9e:2c:39:ca:53:e7:1f:40:52:ae:17:b6:e2:b1:
8b:7b:51:b7:9d:d3:d3:89:cc:0d:c5:26:9d:04:1c:86:70:8a:
a5:c4:76:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:46:12 2025 by rpki-client