Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/M3KJXsjqIPVIXxYev2SfgVojrU4.roa
File: M3KJXsjqIPVIXxYev2SfgVojrU4.roa (raw, json)
Hash identifier: Gvsx8H9toLZ4v4VpdY9JPnhwGvrW2p7tLKUQ/kP8+Nc=
Subject key identifier: 33:72:89:5E:C8:EA:20:F5:48:5F:16:1E:BF:64:9F:81:5A:23:AD:4E
Certificate issuer: /CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Certificate serial: 019420D665CFD09E85D40D2570E52B25965C
Authority key identifier: 8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/M3KJXsjqIPVIXxYev2SfgVojrU4.roa
Signing time: Wed 01 Jan 2025 07:48:29 +0000
ROA not before: Wed 01 Jan 2025 07:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 46.174.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:65:cf:d0:9e:85:d4:0d:25:70:e5:2b:25:96:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Validity
Not Before: Jan 1 07:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3372895ec8ea20f5485f161ebf649f815a23ad4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d3:87:34:75:b8:c1:75:0b:af:13:07:ab:b6:
be:55:97:ed:ec:88:81:d0:b2:84:34:ea:3f:7f:de:
31:49:c6:1b:39:5e:08:1f:9c:7c:62:84:ce:8c:be:
92:9d:0f:a3:0b:e4:4f:46:f9:34:ee:37:4c:13:20:
40:43:47:69:b9:aa:74:58:83:0a:85:4f:82:15:ef:
5f:34:13:65:a3:4c:7a:59:be:fd:f5:76:4b:79:c8:
a9:9c:7e:15:3c:62:fd:fb:fe:07:60:78:0b:02:28:
b6:dd:59:29:8c:2b:25:64:22:1d:45:f5:fd:d0:04:
92:8c:37:90:b9:ed:1d:7e:58:0f:79:d1:b9:82:a9:
b4:ad:d5:28:3d:64:e5:98:ce:a4:e6:24:46:3d:ba:
a2:6c:0a:24:1d:58:3c:c0:54:13:c6:3e:05:ae:37:
27:fb:a9:a9:10:53:c5:e6:2e:d3:cc:8f:97:c1:b3:
4c:40:ab:e8:67:0a:c7:ca:22:3b:fc:b5:82:b8:e1:
bb:16:8c:7b:4c:52:7e:43:63:5a:bc:29:e4:21:ce:
fa:fa:80:8c:e0:50:f9:9d:e2:f0:85:41:68:6e:6c:
1a:5d:1f:ee:1b:62:1a:3d:e1:0d:3d:fd:48:ea:57:
c4:9e:66:bc:00:7d:5d:67:8f:cd:52:5c:10:f8:27:
42:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:72:89:5E:C8:EA:20:F5:48:5F:16:1E:BF:64:9F:81:5A:23:AD:4E
X509v3 Authority Key Identifier:
keyid:8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/M3KJXsjqIPVIXxYev2SfgVojrU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.139.0/24
Signature Algorithm: sha256WithRSAEncryption
81:07:aa:56:9d:48:ce:17:c7:bd:e9:29:88:77:ff:3a:ff:fa:
02:1d:94:87:4b:76:62:03:60:63:a7:cc:90:8f:70:29:fe:85:
d6:2e:47:22:eb:fa:30:1d:55:66:03:ff:f2:a7:59:91:b5:12:
5b:be:ef:f0:68:ce:96:18:78:9d:35:df:41:b5:85:cb:e4:a4:
7d:40:09:79:c2:18:7f:10:4a:58:ea:ce:e7:19:a9:9e:4b:e1:
b4:8c:97:dc:ee:9d:88:01:b7:04:2b:e4:53:fd:73:5e:68:94:
6c:64:a0:3d:c7:08:d1:b0:f8:9c:2b:80:58:ac:49:1b:86:1f:
b0:9e:2a:f1:2c:7c:30:be:fa:71:aa:6e:43:94:4f:07:8c:bf:
26:73:e9:9a:95:e5:22:2e:34:29:a9:72:f9:3d:8e:3c:db:9a:
62:62:6d:7e:31:bd:12:d5:8b:e9:54:0b:a1:17:39:f8:c0:dc:
cb:ea:bb:7e:19:6f:05:3a:c3:18:b0:c5:50:42:0e:f1:85:34:
c3:79:c1:00:64:cb:89:f3:87:b0:1b:81:3d:95:07:6f:75:1f:
95:32:60:00:66:d5:37:a5:e3:86:09:1f:61:c2:45:22:47:14:
0e:1d:ae:2f:26:7d:82:13:62:81:17:3b:b5:73:4b:c1:1c:06:
1b:37:d8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:50:19 2025 by rpki-client