Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/ihgaKZRhXXqYYZxiR5z5DfKMcAo.roa
File: ihgaKZRhXXqYYZxiR5z5DfKMcAo.roa (raw, json)
Hash identifier: F3cv1Y7tYXZNMkOk4CynP5ia6K663k4g2QoOaTbO8mA=
Subject key identifier: 8A:18:1A:29:94:61:5D:7A:98:61:9C:62:47:9C:F9:0D:F2:8C:70:0A
Certificate issuer: /CN=7699c189027e25ecc53f98b52ea65ae725d2a730
Certificate serial: 019425FD9BDEA8F23091289609D8715EE273
Authority key identifier: 76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/ihgaKZRhXXqYYZxiR5z5DfKMcAo.roa
Signing time: Thu 02 Jan 2025 07:49:24 +0000
ROA not before: Thu 02 Jan 2025 07:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 185.46.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:9b:de:a8:f2:30:91:28:96:09:d8:71:5e:e2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7699c189027e25ecc53f98b52ea65ae725d2a730
Validity
Not Before: Jan 2 07:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a181a2994615d7a98619c62479cf90df28c700a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:2e:8e:72:8e:f6:a3:99:41:ce:4e:20:88:
05:36:56:10:ed:22:b9:fa:7c:2f:63:a2:fb:29:92:
64:57:b7:47:67:db:04:f0:da:c4:73:0c:c6:7e:b4:
f2:a0:2a:71:d7:8f:36:f7:09:42:56:d6:31:16:8d:
ed:5f:e6:d0:48:d2:ef:c2:81:03:75:90:03:fd:7a:
7c:dc:0a:7d:07:21:8c:5e:8b:17:b5:73:01:8d:5e:
3f:eb:10:aa:59:7b:6c:83:30:f6:16:22:f2:cb:56:
a5:7a:e5:bd:18:f9:0d:fa:0d:d7:d5:31:0b:6b:94:
e0:0f:20:7d:97:0e:18:d9:93:5f:c5:ca:3a:0d:1c:
74:c4:f3:34:f2:7f:9a:50:90:f0:e3:ba:5a:d5:8a:
de:7f:aa:4a:3e:79:41:ad:d5:21:58:e1:de:a6:29:
b4:b6:81:43:2d:72:de:0c:e7:5f:54:83:73:88:76:
8e:76:73:b8:d6:20:09:61:68:1b:6e:56:25:7a:3d:
5f:cb:89:72:3a:ad:1e:18:5e:fd:b0:89:bc:59:9b:
c8:7d:9c:9b:02:fc:2b:12:11:cc:f6:d5:22:c3:d7:
c5:85:a7:cb:cf:43:6f:1f:d7:fd:03:90:03:7b:7c:
7a:48:02:ea:2d:fb:d7:30:cf:25:2b:76:10:03:b1:
4e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:18:1A:29:94:61:5D:7A:98:61:9C:62:47:9C:F9:0D:F2:8C:70:0A
X509v3 Authority Key Identifier:
keyid:76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/ihgaKZRhXXqYYZxiR5z5DfKMcAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.233.0/24
Signature Algorithm: sha256WithRSAEncryption
09:2f:f2:7e:fe:11:98:9e:14:39:06:2c:22:40:88:34:1c:c1:
78:7f:3c:b4:00:23:fa:91:2c:2e:93:e2:95:e3:8c:56:55:4e:
75:e3:da:cf:bb:de:82:58:64:c1:0d:3d:9d:8c:a8:52:7c:95:
34:57:23:d6:19:8d:ec:d7:d4:a6:20:1d:b9:58:5d:d8:f7:2b:
e6:27:d2:e9:ce:e8:28:a0:b9:99:06:b2:c2:3d:59:6c:78:27:
47:f3:7d:12:8f:8b:7a:42:b6:0d:50:80:37:73:46:32:c1:a5:
43:66:f9:7a:9b:c5:a8:2f:2f:78:28:b0:96:c7:6e:c1:6a:b8:
d9:19:0d:d7:f5:a7:21:af:cf:cd:85:dc:59:e7:73:1a:5c:5f:
77:4b:a6:6c:1e:53:79:a2:65:84:96:9a:62:8d:14:53:d4:8f:
bb:ee:3d:27:98:6e:5f:73:4a:a7:ff:b1:d9:3b:ed:0e:54:4b:
52:41:f2:6e:e4:71:15:b9:3e:5c:1d:29:07:11:67:86:34:67:
95:7d:88:72:9c:ca:f4:95:a3:65:c2:94:b5:49:c1:ef:22:93:
95:a0:3f:c5:27:9c:09:dd:d2:ba:5f:38:b1:3d:17:cd:86:a4:
25:a1:eb:49:1e:51:fb:45:e0:41:92:f1:68:d9:d1:97:fc:6f:
da:95:fc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:52 2025 by rpki-client